$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/23331070F9FB11EB8CFF5E7DC4F9AE02.roa File: 23331070F9FB11EB8CFF5E7DC4F9AE02.roa (raw, json) Hash identifier: P7UGqQ1deBslma8ATn7v/QA04pUXLiOR7SWtpJUAbVI= Subject key identifier: 7F:46:D7:70:1B:A9:DE:83:69:FD:B2:9F:D3:CD:D1:1F:4F:7F:67:CD Certificate issuer: /CN=A9185D6E/serialNumber=1EDD79D56581635F7F3297C6D270C73749789E3D Certificate serial: 0442 Authority key identifier: 1E:DD:79:D5:65:81:63:5F:7F:32:97:C6:D2:70:C7:37:49:78:9E:3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht151WWBY19_MpfG0nDHN0l4nj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/23331070F9FB11EB8CFF5E7DC4F9AE02.roa Signing time: Wed 13 Sep 2023 00:42:31 +0000 ROA not before: Wed 13 Sep 2023 00:42:31 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 14340 IP address blocks: 101.53.160.0/19 maxlen: 24 182.50.76.0/22 maxlen: 24 202.129.242.0/23 maxlen: 24 2401:ce80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.crl rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht151WWBY19_MpfG0nDHN0l4nj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 02:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1090 (0x442) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D6E/serialNumber=1EDD79D56581635F7F3297C6D270C73749789E3D Validity Not Before: Sep 13 00:42:31 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=65010576-2f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bd:3c:ad:d8:36:7d:5b:66:c0:4d:78:02:7f: 8d:a7:74:c2:51:d4:60:e7:00:46:ed:50:a3:c3:4c: 47:c5:d0:ef:1b:6e:ad:f3:e7:64:81:e4:bb:47:8d: 08:d4:ac:cb:1b:8e:80:db:9f:f3:27:26:c2:4b:15: 34:7d:aa:37:ee:2c:f8:b1:a9:1b:52:e5:25:fb:ae: 42:21:37:c8:06:f3:bc:00:0d:da:90:a5:ee:0e:5a: 4e:87:fb:fa:a2:7a:76:80:16:4b:34:8b:11:9a:70: 3f:9b:11:0e:18:64:50:01:a2:26:af:fa:9b:fc:73: b6:16:ca:62:8f:5f:d6:f1:fd:fd:01:b5:dc:26:1b: 35:e6:97:02:df:46:eb:5b:45:8c:23:e7:32:d6:2c: 49:ef:8c:13:8d:1a:88:bc:bf:1c:a4:b0:7d:d3:71: e5:cb:42:1a:bc:41:11:0f:ae:42:65:b3:0c:a9:cc: 76:61:54:32:75:59:ec:27:ba:a0:64:fa:6f:8e:78: 07:74:9d:ec:90:ad:5d:2f:e2:79:82:b5:4b:f2:88: 5e:90:46:63:8b:71:2a:62:5e:ec:d1:1b:21:94:4e: 79:1b:82:43:40:5e:6e:8c:7b:f3:9f:6a:7d:75:fe: 31:07:e0:a3:5a:33:2c:3e:7c:8f:6d:dd:22:2e:4d: 69:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:46:D7:70:1B:A9:DE:83:69:FD:B2:9F:D3:CD:D1:1F:4F:7F:67:CD X509v3 Authority Key Identifier: keyid:1E:DD:79:D5:65:81:63:5F:7F:32:97:C6:D2:70:C7:37:49:78:9E:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht151WWBY19_MpfG0nDHN0l4nj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/23331070F9FB11EB8CFF5E7DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 101.53.160.0/19 182.50.76.0/22 202.129.242.0/23 IPv6: 2401:ce80::/32 Signature Algorithm: sha256WithRSAEncryption 30:10:f1:f5:e3:d6:71:14:13:a0:5d:c1:1c:b6:e3:90:f6:27: 5a:a8:55:56:38:55:1b:cf:5f:6c:66:eb:55:a4:21:10:c7:1c: 46:e8:78:8e:84:73:be:37:a7:9c:c1:29:ad:19:7e:67:f2:80: f1:a3:33:03:9b:ea:53:20:be:b4:9a:ea:9c:e2:95:c2:35:bd: 8b:7c:03:7c:15:0b:54:fe:96:09:00:59:c9:79:01:4f:43:f5: cf:29:75:00:b8:48:44:a9:cd:26:5d:63:8c:26:bb:f1:e2:f0: 99:33:a9:6b:7e:f1:c9:f1:be:63:33:c8:13:fe:d5:30:aa:c9: 13:84:b8:ff:ac:30:69:36:7f:73:1f:c0:99:7d:05:a9:a7:55: ef:af:2c:f9:3c:c1:2d:83:c0:b2:56:41:b7:42:35:82:00:37: 64:b4:24:c4:87:80:1a:f8:d0:18:46:bb:cf:f4:33:6b:ff:b8: c0:51:04:75:7f:29:ea:4c:5f:cf:cf:19:79:5b:af:e3:bd:27: 3c:b6:ed:2c:23:77:d3:b6:b1:77:38:b7:0d:de:ed:c2:49:94: 16:15:c8:ad:e4:a1:59:9c:99:f2:a6:01:f1:f9:8a:6f:2e:2f: 13:45:fe:14:19:22:8c:87:83:93:a7:37:1f:77:15:7a:f6:55: db:5d:0b:3a -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICBEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENkUxMTAvBgNVBAUTKDFFREQ3OUQ1NjU4MTYzNUY3RjMyOTdDNkQyNzBDNzM3 NDk3ODlFM0QwHhcNMjMwOTEzMDA0MjMxWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTAxMDU3Ni0yZjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwb08rdg2fVtmwE14An+Np3TCUdRg5wBG7VCjw0xHxdDvG26t8+dkgeS7R40I 1KzLG46A25/zJybCSxU0fao37iz4sakbUuUl+65CITfIBvO8AA3akKXuDlpOh/v6 onp2gBZLNIsRmnA/mxEOGGRQAaImr/qb/HO2Fspij1/W8f39AbXcJhs15pcC30br W0WMI+cy1ixJ74wTjRqIvL8cpLB903Hly0IavEERD65CZbMMqcx2YVQydVnsJ7qg ZPpvjngHdJ3skK1dL+J5grVL8ohekEZji3EqYl7s0RshlE55G4JDQF5ujHvzn2p9 df4xB+CjWjMsPnyPbd0iLk1pCwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFH9G13Ab qd6Daf2yn9PN0R9Pf2fNMB8GA1UdIwQYMBaAFB7dedVlgWNffzKXxtJwxzdJeJ49 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ2RS81NkU5QTdBNERG RjExMUVCODk0RjMwNjdDNEY5QUUwMi9IdDE1MVdXQlkxOV9NcGZHMG5ESE4wbDRu ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0MTUxV1dCWTE5X01wZkcwbkRITjBsNG5qMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODVENkUvNTZFOUE3QTRERkYxMTFFQjg5NEYzMDY3QzRGOUFFMDIvMjMzMzEwNzBG OUZCMTFFQjhDRkY1RTdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAVlNaADBAK2MkwDBAHKgfIwDQQCAAIwBwMFACQBzoAwDQYJ KoZIhvcNAQELBQADggEBADAQ8fXj1nEUE6BdwRy245D2J1qoVVY4VRvPX2xm61Wk IRDHHEboeI6Ec743p5zBKa0ZfmfygPGjMwOb6lMgvrSa6pzilcI1vYt8A3wVC1T+ lgkAWcl5AU9D9c8pdQC4SESpzSZdY4wmu/Hi8JkzqWt+8cnxvmMzyBP+1TCqyROE uP+sMGk2f3MfwJl9BamnVe+vLPk8wS2DwLJWQbdCNYIAN2S0JMSHgBr40BhGu8/0 M2v/uMBRBHV/KepMX8/PGXlbr+O9Jzy27Swjd9O2sXc4tw3e7cJJlBYVyK3koVmc mfKmAfH5im8uLxNF/hQZIoyHg5OnNx93FXr2VdtdCzo= -----END CERTIFICATE-----Generated at Sat Jun 1 02:55:17 2024 by rpki-client on console-fra.rpki-client.org