$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/E94D73BE291D11EF86792873C4F9AE02.roa File: E94D73BE291D11EF86792873C4F9AE02.roa (raw, json) Hash identifier: Nk9mhanru5g2yS6K5scFfGyVEobIACzYFiQALyb+bZE= Subject key identifier: BE:A2:8C:17:71:22:3A:5D:47:53:85:18:E5:9F:38:73:D6:18:A9:1D Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1 Certificate serial: 094C Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/E94D73BE291D11EF86792873C4F9AE02.roa Signing time: Thu 13 Jun 2024 00:43:12 +0000 ROA not before: Thu 13 Jun 2024 00:43:12 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 10143 IP address blocks: 58.96.0.0/17 maxlen: 24 103.237.16.0/22 maxlen: 22 115.70.0.0/16 maxlen: 20 115.70.0.0/18 maxlen: 24 115.70.64.0/22 maxlen: 23 115.70.65.0/24 maxlen: 24 115.70.66.0/23 maxlen: 24 115.70.68.0/22 maxlen: 24 115.70.72.0/21 maxlen: 24 115.70.80.0/20 maxlen: 24 115.70.96.0/19 maxlen: 24 115.70.128.0/17 maxlen: 24 163.53.144.0/22 maxlen: 22 220.233.0.0/16 maxlen: 24 2406:3400::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Jul 2024 21:41:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2380 (0x94c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1 Validity Not Before: Jun 13 00:43:12 2024 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=666a409f-b207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:94:12:ec:73:68:85:fb:a2:84:4c:4c:9e:d1: 7d:a9:4b:06:28:e8:5c:81:27:9c:73:d6:66:f8:79: a2:4c:54:27:b6:22:19:cf:4a:81:0d:9a:a9:bc:b3: 11:d0:f9:c7:a7:bc:38:fc:2c:3f:ae:cf:aa:4d:8e: c9:a9:29:19:88:f7:f7:ad:c9:71:0c:a6:e0:21:ef: 2b:73:04:d9:d2:39:93:79:f3:7c:a6:23:d5:63:10: 7d:a1:81:4e:ac:9c:68:e5:f5:20:85:16:03:77:a8: 0c:c5:35:cd:54:d3:1e:1e:c8:1d:c1:f9:61:17:53: 50:7e:af:2a:92:e7:52:c1:7b:86:8b:bb:69:7b:03: d9:60:38:a6:ab:18:b6:32:e1:09:ef:17:ea:c2:e3: 67:c1:49:f3:df:36:a7:5a:81:92:81:54:ee:f8:c7: 9c:73:e6:82:98:c0:cd:c9:46:30:01:dc:1e:3a:a2: bb:bd:19:a9:22:03:60:f6:eb:05:6c:ef:98:4c:e0: 8b:2b:4c:41:45:d2:d4:b1:ac:6a:b8:bb:eb:24:b1: 1c:4d:33:60:49:fb:37:8e:13:35:9a:51:3e:02:ee: b4:26:4a:12:a2:70:a3:dc:7d:91:a4:7e:17:b6:be: 35:aa:4b:04:32:0b:50:7c:04:ab:1b:0d:e4:91:eb: 6c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A2:8C:17:71:22:3A:5D:47:53:85:18:E5:9F:38:73:D6:18:A9:1D X509v3 Authority Key Identifier: keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/E94D73BE291D11EF86792873C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.96.0.0/17 103.237.16.0/22 115.70.0.0/16 163.53.144.0/22 220.233.0.0/16 IPv6: 2406:3400::/32 Signature Algorithm: sha256WithRSAEncryption 32:c4:6d:ef:cb:99:27:2e:bf:fa:43:b5:e9:dc:cf:69:2c:7a: 27:f0:db:ec:f0:1e:58:67:32:41:3a:98:05:ee:ba:43:84:a7: ae:d0:68:2a:7e:4d:70:de:54:59:9d:d7:c6:9d:f5:52:0b:f3: 8d:cc:4f:06:31:c5:f0:80:5a:82:e7:f9:b9:12:ef:18:8f:3a: 22:2c:6c:6d:e4:62:1e:b0:ab:ea:8e:5d:8b:b1:ff:51:17:c7: b2:f6:8e:5d:33:7e:94:9e:e5:8a:d1:04:85:7e:4d:30:e8:a4: 8d:65:84:87:9a:91:15:07:c2:3e:2f:af:46:a6:3b:e3:1b:27: 15:5e:8c:37:d0:1d:40:58:44:f6:9f:56:27:cd:53:ce:8a:42: f9:84:58:d8:e9:aa:ba:10:50:33:73:ed:a5:1d:fa:87:83:6e: 42:0d:3c:b2:7f:22:51:a1:16:a9:88:18:ee:5c:47:af:2e:9b: 90:cf:ab:f1:f5:aa:7b:cd:f6:2d:8b:e5:21:85:12:82:f3:0e: 54:71:66:31:39:c5:e9:01:a1:1c:b3:09:93:49:28:97:50:59: f7:be:11:8f:f3:ba:d9:d9:47:79:a4:59:98:f2:a0:b9:d7:03: 81:57:9f:64:90:6a:f9:52:4f:8c:41:9f:cd:3c:5f:bc:ab:9b: ec:b7:2e:28 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICCUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU0NzUxMTAvBgNVBAUTKDc0NUZGNEYwNjNBQjVEMTcxRTA1MjUxQjMxRTI5NEE0 QkM3OTczQjEwHhcNMjQwNjEzMDA0MzEyWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjZhNDA5Zi1iMjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0JQS7HNohfuihExMntF9qUsGKOhcgSecc9Zm+HmiTFQntiIZz0qBDZqpvLMR 0PnHp7w4/Cw/rs+qTY7JqSkZiPf3rclxDKbgIe8rcwTZ0jmTefN8piPVYxB9oYFO rJxo5fUghRYDd6gMxTXNVNMeHsgdwflhF1NQfq8qkudSwXuGi7tpewPZYDimqxi2 MuEJ7xfqwuNnwUnz3zanWoGSgVTu+Mecc+aCmMDNyUYwAdweOqK7vRmpIgNg9usF bO+YTOCLK0xBRdLUsaxquLvrJLEcTTNgSfs3jhM1mlE+Au60JkoSonCj3H2RpH4X tr41qksEMgtQfASrGw3kketsZwIDAQABo4ICujCCArYwHQYDVR0OBBYEFL6ijBdx IjpdR1OFGOWfOHPWGKkdMB8GA1UdIwQYMBaAFHRf9PBjq10XHgUlGzHilKS8eXOx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTQ3NS9EQTgzQUE3QUNB MTExMUVBQTQ3OUM3MzRDNEY5QUUwMi9kRl8wOEdPclhSY2VCU1ViTWVLVXBMeDVj N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RGXzA4R09yWFJjZUJTVWJNZUtVcEx4NWM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUU0NzUvREE4M0FBN0FDQTExMTFFQUE0NzlDNzM0QzRGOUFFMDIvRTk0RDczQkUy OTFEMTFFRjg2NzkyODczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRAYIKwYBBQUHAQcBAf8E NTAzMCIEAgABMBwDBAc6YAADBAJn7RADAwBzRgMEAqM1kAMDANzpMA0EAgACMAcD BQAkBjQAMA0GCSqGSIb3DQEBCwUAA4IBAQAyxG3vy5knLr/6Q7Xp3M9pLHon8Nvs 8B5YZzJBOpgF7rpDhKeu0Ggqfk1w3lRZndfGnfVSC/ONzE8GMcXwgFqC5/m5Eu8Y jzoiLGxt5GIesKvqjl2Lsf9RF8ey9o5dM36UnuWK0QSFfk0w6KSNZYSHmpEVB8I+ L69GpjvjGycVXow30B1AWET2n1YnzVPOikL5hFjY6aq6EFAzc+2lHfqHg25CDTyy fyJRoRapiBjuXEevLpuQz6vx9ap7zfYti+UhhRKC8w5UcWYxOcXpAaEcswmTSSiX UFn3vhGP87rZ2Ud5pFmY8qC51wOBV59kkGr5Uk+MQZ/NPF+8q5vsty4o -----END CERTIFICATE-----Generated at Tue Jun 25 00:55:08 2024 by rpki-client on console-ams.rpki-client.org