$ rpki-client -vvf rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/C99952B88F0511ECB2497B14C4F9AE02.roa File: C99952B88F0511ECB2497B14C4F9AE02.roa (raw, json) Hash identifier: rsVTsLLajNF40hbwHBajJlxkytqJ8aqbnJpNWJXFGeE= Subject key identifier: 96:BC:8C:15:57:86:D4:A8:8D:D1:DB:26:95:2A:29:F4:82:F6:D4:46 Certificate issuer: /CN=A917F247/serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Certificate serial: 02C0 Authority key identifier: 90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/C99952B88F0511ECB2497B14C4F9AE02.roa Signing time: Thu 07 Dec 2023 02:54:04 +0000 ROA not before: Thu 07 Dec 2023 02:54:04 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 4755 IP address blocks: 14.137.32.0/19 maxlen: 24 103.70.64.0/22 maxlen: 24 103.103.60.0/22 maxlen: 24 182.54.144.0/22 maxlen: 24 182.255.28.0/22 maxlen: 24 202.5.112.0/20 maxlen: 24 203.2.130.0/23 maxlen: 24 203.8.206.0/23 maxlen: 24 203.21.140.0/22 maxlen: 24 203.24.104.0/22 maxlen: 24 203.27.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 04:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 704 (0x2c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F247/serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Validity Not Before: Dec 7 02:54:04 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=657133cc-b090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9d:ad:d2:47:19:cd:c9:37:5a:00:4b:cf:6e: b8:6d:d4:ef:71:f9:4d:93:0c:56:d9:4d:a1:04:da: 11:c1:21:d9:6d:71:9d:ac:06:22:11:fc:72:45:f8: 37:80:a1:5a:45:85:c6:6e:92:4d:1a:7c:07:17:a5: 6e:e7:82:63:e1:b3:16:c7:5c:49:0b:7e:6a:e0:51: b6:f9:11:77:f0:36:23:63:1a:97:88:4c:9e:f4:88: ff:a2:2c:5b:36:56:00:9a:c3:0b:44:14:b2:54:ef: a3:f8:72:e7:d7:73:7c:2e:7d:47:60:37:cf:30:1d: b3:47:5f:4b:4f:88:a2:b4:86:d5:76:4b:98:1c:db: 75:f0:d5:43:cc:e6:33:8e:44:bc:15:06:aa:2e:e8: 6d:07:1f:47:bd:3e:f2:69:c6:4d:11:11:1c:e5:58: c8:1b:a7:80:13:6b:66:87:09:e7:5e:c7:6e:02:84: 84:d5:a3:8e:27:e6:fe:6e:f2:fb:10:b0:2a:e1:38: 91:fb:bd:dc:55:ac:39:9e:61:79:10:4c:32:21:1b: f5:3b:2c:d3:eb:7d:ff:0e:05:56:a6:76:ae:c9:c5: 58:12:e6:7d:35:75:f7:6a:ad:70:ca:96:5b:db:67: 81:ae:07:00:05:2c:16:44:bf:2b:65:11:fe:46:ba: 5d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BC:8C:15:57:86:D4:A8:8D:D1:DB:26:95:2A:29:F4:82:F6:D4:46 X509v3 Authority Key Identifier: keyid:90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/C99952B88F0511ECB2497B14C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.137.32.0/19 103.70.64.0/22 103.103.60.0/22 182.54.144.0/22 182.255.28.0/22 202.5.112.0/20 203.2.130.0/23 203.8.206.0/23 203.21.140.0/22 203.24.104.0/22 203.27.96.0/23 Signature Algorithm: sha256WithRSAEncryption cd:50:e3:17:90:0d:a1:15:52:c3:8f:6e:4b:25:76:5a:6c:cd: 19:ce:2a:1a:b5:84:a3:f7:f8:4c:d9:7f:4d:e1:05:e3:05:b9: e1:e7:cd:3e:d1:ea:14:34:fe:7c:db:2b:b7:05:6a:25:c4:46: 88:0c:40:fe:ad:86:88:e9:38:3e:e2:9a:c3:e9:fb:80:10:8f: c7:14:a6:07:1e:81:d5:72:fe:55:ac:39:19:fa:4e:25:ab:96: 60:d5:cb:af:71:42:18:96:fc:03:65:40:7c:5e:2c:5f:31:e9: 8f:05:d4:7e:2c:00:25:42:b9:c8:d2:9c:51:c2:fd:9b:9c:12: 74:53:80:ed:08:6f:bc:a8:a5:58:dc:ab:49:58:bf:19:f1:d2: 86:dd:55:d9:fc:42:1b:05:44:9a:26:e9:43:2c:23:35:40:75: d6:3d:82:91:9a:21:79:9b:a0:a9:8d:71:61:97:25:ae:23:27: 3d:0f:af:37:90:49:26:ae:65:3d:b9:4c:a3:94:01:f1:94:c0: 1a:20:b9:dd:b5:f2:e3:fe:c0:8b:0a:75:46:11:25:9e:69:f0: 1e:91:b8:2e:22:c4:75:7e:3a:ae:a1:3e:c9:ff:d7:f7:70:69: b8:61:cf:e7:e4:09:c8:56:3d:b0:9a:3e:9a:82:f0:e6:51:23: 7e:1d:1e:f3 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgICAsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNDcxMTAvBgNVBAUTKDkwNEEyMzVDQjQ3NDdFMDg2MDBGQzFEMjZCOTNGNTFD NDY3NEVCQUEwHhcNMjMxMjA3MDI1NDA0WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTcxMzNjYy1iMDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJ2t0kcZzck3WgBLz264bdTvcflNkwxW2U2hBNoRwSHZbXGdrAYiEfxyRfg3 gKFaRYXGbpJNGnwHF6Vu54Jj4bMWx1xJC35q4FG2+RF38DYjYxqXiEye9Ij/oixb NlYAmsMLRBSyVO+j+HLn13N8Ln1HYDfPMB2zR19LT4iitIbVdkuYHNt18NVDzOYz jkS8FQaqLuhtBx9HvT7yacZNEREc5VjIG6eAE2tmhwnnXsduAoSE1aOOJ+b+bvL7 ELAq4TiR+73cVaw5nmF5EEwyIRv1OyzT633/DgVWpnauycVYEuZ9NXX3aq1wypZb 22eBrgcABSwWRL8rZRH+RrpdyQIDAQABo4IC0TCCAs0wHQYDVR0OBBYEFJa8jBVX htSojdHbJpUqKfSC9tRGMB8GA1UdIwQYMBaAFJBKI1y0dH4IYA/B0muT9RxGdOuq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0Ny82RDIyRUFGMDhG MDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZnaGdEOEhTYTVQMUhFWjA2 Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tFb2pYTFIwZmdoZ0Q4SFNhNVAxSEVaMDY2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0YyNDcvNkQyMkVBRjA4RjAzMTFFQ0E1QzlGRTEyQzRGOUFFMDIvQzk5OTUyQjg4 RjA1MTFFQ0IyNDk3QjE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwWwYIKwYBBQUHAQcBAf8E TDBKMEgEAgABMEIDBAUOiSADBAJnRkADBAJnZzwDBAK2NpADBAK2/xwDBATKBXAD BAHLAoIDBAHLCM4DBALLFYwDBALLGGgDBAHLG2AwDQYJKoZIhvcNAQELBQADggEB AM1Q4xeQDaEVUsOPbksldlpszRnOKhq1hKP3+EzZf03hBeMFueHnzT7R6hQ0/nzb K7cFaiXERogMQP6thojpOD7imsPp+4AQj8cUpgcegdVy/lWsORn6TiWrlmDVy69x QhiW/ANlQHxeLF8x6Y8F1H4sACVCucjSnFHC/ZucEnRTgO0Ib7yopVjcq0lYvxnx 0obdVdn8QhsFRJom6UMsIzVAddY9gpGaIXmboKmNcWGXJa4jJz0PrzeQSSauZT25 TKOUAfGUwBogud218uP+wIsKdUYRJZ5p8B6RuC4ixHV+Oq6hPsn/1/dwabhhz+fk CchWPbCaPpqC8OZRI34dHvM= -----END CERTIFICATE-----Generated at Sat Jun 1 04:59:03 2024 by rpki-client on console-fra.rpki-client.org