$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/DEBF5A241D8911EA8ECDAA75C4F9AE02.roa File: DEBF5A241D8911EA8ECDAA75C4F9AE02.roa (raw, json) Hash identifier: IxEsTibKINm3cQnHcOgiOcb5rBfAzUJGUFKNxFkA9Ss= Subject key identifier: C9:A0:E3:FF:7F:C4:F9:11:E8:17:EF:40:19:FC:E6:72:C5:64:F2:69 Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 3364 Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/DEBF5A241D8911EA8ECDAA75C4F9AE02.roa Signing time: Tue 30 Jan 2024 16:12:52 +0000 ROA not before: Tue 30 Jan 2024 16:12:52 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 45312 IP address blocks: 43.247.32.0/22 maxlen: 22 103.14.44.0/23 maxlen: 23 103.18.32.0/23 maxlen: 23 202.81.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 15:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13156 (0x3364) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Jan 30 16:12:52 2024 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=65b92004-a2dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2d:b7:c8:14:a6:3b:7b:8a:aa:cd:8e:ff:eb: 25:9f:fe:61:36:0c:b5:74:14:41:f7:51:b0:35:fb: 6d:13:44:e4:2a:b9:6b:32:a6:ca:ba:13:69:05:d7: e3:0a:63:80:a0:ce:d9:a1:ec:89:af:23:ec:28:ca: 8e:cd:73:44:b1:d6:8b:38:cf:84:d2:b0:0c:e4:7f: 90:82:8c:e0:5e:27:29:59:0e:16:25:d5:ea:21:49: cf:1c:2d:d8:60:b5:52:c7:35:dd:5b:3e:64:6f:01: 6e:fd:e7:f3:3e:46:bd:6e:c6:94:69:ed:33:27:e1: d4:c7:aa:20:9e:1d:08:b5:7a:ec:22:e9:3a:c0:92: e9:c5:54:79:a9:4a:19:7d:72:da:3c:c5:7e:de:47: c5:02:69:e4:c8:93:7d:5b:78:12:2c:89:19:8e:c3: 94:ec:36:e6:4e:59:7a:2d:75:b9:97:68:d8:f5:76: d9:56:d5:a8:d7:7c:a8:8b:36:2f:ab:0f:b6:e7:98: 00:40:58:93:97:a5:6c:35:f2:f0:c3:8c:ee:2f:f5: de:1b:62:18:03:b2:5e:fc:55:44:5d:c8:85:a5:5b: 2d:94:01:f3:b8:35:f0:0e:3b:dd:80:39:c8:17:9a: 9e:d6:d2:cd:64:3b:68:4f:a7:63:e1:63:b2:a3:fa: 7e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A0:E3:FF:7F:C4:F9:11:E8:17:EF:40:19:FC:E6:72:C5:64:F2:69 X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/DEBF5A241D8911EA8ECDAA75C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.247.32.0/22 103.14.44.0/23 103.18.32.0/23 202.81.48.0/20 Signature Algorithm: sha256WithRSAEncryption 13:3d:c4:af:3d:38:bb:43:df:8f:5f:eb:28:38:69:6b:d1:47: b0:13:33:ed:34:70:92:02:af:87:77:ea:c6:69:ef:5f:11:a6: 02:3f:1b:8d:7a:0b:f4:fa:6e:ad:e5:60:06:49:10:43:08:e4: 33:eb:0f:40:56:d4:eb:9b:7c:21:e1:19:0d:c8:9c:47:a4:fb: 46:1f:ca:fa:b8:3c:cd:d5:bc:3e:65:fe:ca:cf:8f:1f:b5:9a: 16:cf:0e:37:20:5e:5e:00:0a:3c:ae:ac:06:6b:b9:cc:43:ae: a2:52:32:f8:53:f6:f0:f4:4b:95:15:bd:7c:e8:64:8c:e1:b4: 00:40:4e:b2:21:ea:df:74:d7:3a:21:cf:09:d6:a7:c0:f9:bb: 4c:e1:30:16:79:c9:65:94:a6:da:10:18:f3:46:60:7f:a0:aa: c7:20:1e:03:28:72:6b:e1:f2:75:bb:09:7c:3d:87:4e:59:29: 40:8f:28:6e:6b:78:38:fe:e9:5a:26:02:9d:e1:b4:c3:7c:f0: c1:4b:98:7b:7e:6d:13:8e:c9:e8:91:19:da:12:b0:c4:37:a0: 78:7f:63:5e:b8:b4:2f:07:f6:0b:98:74:b0:3d:66:fa:1c:30: 75:b8:4f:c9:e6:23:c5:0a:9f:bf:58:27:62:be:0b:5f:43:de: 09:c1:ec:f0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICM2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjQwMTMwMTYxMjUyWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWI5MjAwNC1hMmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzi23yBSmO3uKqs2O/+sln/5hNgy1dBRB91GwNfttE0TkKrlrMqbKuhNpBdfj CmOAoM7ZoeyJryPsKMqOzXNEsdaLOM+E0rAM5H+QgozgXicpWQ4WJdXqIUnPHC3Y YLVSxzXdWz5kbwFu/efzPka9bsaUae0zJ+HUx6ognh0ItXrsIuk6wJLpxVR5qUoZ fXLaPMV+3kfFAmnkyJN9W3gSLIkZjsOU7DbmTll6LXW5l2jY9XbZVtWo13yoizYv qw+255gAQFiTl6VsNfLww4zuL/XeG2IYA7Je/FVEXciFpVstlAHzuDXwDjvdgDnI F5qe1tLNZDtoT6dj4WOyo/p+xwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFMmg4/9/ xPkR6BfvQBn85nLFZPJpMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvREVCRjVBMjQx RDg5MTFFQThFQ0RBQTc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAIr9yADBAFnDiwDBAFnEiADBATKUTAwDQYJKoZIhvcNAQEL BQADggEBABM9xK89OLtD349f6yg4aWvRR7ATM+00cJICr4d36sZp718RpgI/G416 C/T6bq3lYAZJEEMI5DPrD0BW1OubfCHhGQ3InEek+0Yfyvq4PM3VvD5l/srPjx+1 mhbPDjcgXl4ACjyurAZrucxDrqJSMvhT9vD0S5UVvXzoZIzhtABATrIh6t901zoh zwnWp8D5u0zhMBZ5yWWUptoQGPNGYH+gqscgHgMocmvh8nW7CXw9h05ZKUCPKG5r eDj+6VomAp3htMN88MFLmHt+bROOyeiRGdoSsMQ3oHh/Y164tC8H9guYdLA9Zvoc MHW4T8nmI8UKn79YJ2K+C19D3gnB7PA= -----END CERTIFICATE-----Generated at Wed Apr 24 16:35:47 2024 by rpki-client on console-fra.rpki-client.org