$ rpki-client -vvf rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/D2E2417A2F7211EB80969C22C4F9AE02.roa File: D2E2417A2F7211EB80969C22C4F9AE02.roa (raw, json) Hash identifier: 5hXuw5V++QagpBJ1Df5xzXXy68/h9f8Vvx58YBpkE8s= Subject key identifier: 77:77:DC:01:C2:DD:10:1C:0A:F2:BB:74:83:46:80:9D:81:E8:38:96 Certificate issuer: /CN=A918B591/serialNumber=E3B8EAB1AE916DF95A2D55AE7BB7BB79A50B4AE7 Certificate serial: 05C6 Authority key identifier: E3:B8:EA:B1:AE:91:6D:F9:5A:2D:55:AE:7B:B7:BB:79:A5:0B:4A:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47jqsa6RbflaLVWue7e7eaULSuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/D2E2417A2F7211EB80969C22C4F9AE02.roa Signing time: Fri 09 Jun 2023 00:36:41 +0000 ROA not before: Fri 09 Jun 2023 00:36:41 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 140710 IP address blocks: 103.152.12.0/23 maxlen: 23 2001:df3:ec80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.crl rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47jqsa6RbflaLVWue7e7eaULSuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 23:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1478 (0x5c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B591/serialNumber=E3B8EAB1AE916DF95A2D55AE7BB7BB79A50B4AE7 Validity Not Before: Jun 9 00:36:41 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64827419-2c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:22:a1:e9:2e:7d:2b:08:35:83:dd:dc:a5:d9: d4:88:9e:a2:a3:42:1b:d0:89:5c:02:b7:17:f3:20: c5:69:3d:88:f4:aa:c7:24:81:b3:b0:d5:a4:08:e1: ec:93:06:f5:24:ec:aa:cc:b5:60:2d:cd:f3:db:7c: 6c:37:5a:16:6a:10:74:ab:71:fa:2b:20:d9:98:c9: 98:8d:7b:c2:50:56:5c:99:36:a6:5a:fd:12:8d:f1: cf:56:35:cc:80:46:6b:6f:d5:f0:92:58:09:af:ce: c0:90:be:76:1a:63:21:fb:3a:a6:51:41:fa:7c:a2: 4e:b1:10:9b:3e:1b:0f:b5:dd:40:3b:58:1c:d9:09: c4:84:73:2b:f3:b8:91:f1:a4:1a:7f:1c:ed:85:1e: 7e:d9:4c:6a:1d:6c:a6:04:54:6a:97:e7:3f:87:ee: 78:28:fe:75:ed:93:a2:15:31:16:33:40:61:5b:76: 53:86:95:aa:2b:7f:e5:f0:c4:42:c5:80:39:2e:6e: 52:28:ec:ea:95:21:17:92:0f:e1:83:ab:c3:74:6b: 67:c7:d2:a7:85:78:4f:84:b3:1a:11:d6:d7:aa:ff: 17:ac:2c:a8:16:10:7f:51:28:d2:13:a6:5d:95:67: 49:8c:63:c8:12:be:35:69:26:5e:6b:68:3d:4c:b0: 91:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:77:DC:01:C2:DD:10:1C:0A:F2:BB:74:83:46:80:9D:81:E8:38:96 X509v3 Authority Key Identifier: keyid:E3:B8:EA:B1:AE:91:6D:F9:5A:2D:55:AE:7B:B7:BB:79:A5:0B:4A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47jqsa6RbflaLVWue7e7eaULSuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/D2E2417A2F7211EB80969C22C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.12.0/23 IPv6: 2001:df3:ec80::/48 Signature Algorithm: sha256WithRSAEncryption ba:55:37:f0:c0:ac:41:db:ae:dd:bd:eb:f1:4d:11:59:06:0d: ac:50:36:2f:10:87:62:a1:d4:8d:c0:1d:db:40:e5:06:67:d8: ad:5c:1d:81:f0:2a:4c:fa:46:e3:a5:de:15:f6:35:29:aa:12: 8d:bb:9d:a1:d0:3f:eb:20:61:88:06:89:30:83:65:fd:06:4d: f7:ab:d9:98:fd:a7:3a:1a:ea:78:db:80:34:bb:02:6f:b7:c0: cc:69:25:39:53:43:df:77:48:fe:fe:49:67:f2:23:84:f7:d9: 6e:f5:f3:39:e1:c0:d5:f1:d5:89:d7:00:52:b6:87:d9:59:7e: 35:40:12:a2:44:69:62:bf:45:39:8f:fb:5f:b2:a7:31:07:28: ef:14:df:cf:19:bf:09:69:a3:6c:9a:0d:b3:e8:7e:45:52:a0: 5f:8c:c4:f5:e9:1b:f6:f8:46:08:1b:ed:aa:72:f7:82:83:6d: 30:e7:59:5c:b2:ec:c6:51:68:c0:8b:a5:e7:17:62:d0:7a:00: 8c:60:bf:6c:d7:d4:92:34:87:6b:a9:62:bc:8c:4f:1c:33:6f: 7e:50:ea:e8:8b:23:a8:b8:38:58:53:17:b4:cf:f9:98:4b:b5: 16:75:d7:61:4a:93:30:d7:0c:07:39:76:14:bd:5f:b5:6c:85: aa:79:74:5b -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI1OTExMTAvBgNVBAUTKEUzQjhFQUIxQUU5MTZERjk1QTJENTVBRTdCQjdCQjc5 QTUwQjRBRTcwHhcNMjMwNjA5MDAzNjQxWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDgyNzQxOS0yYzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCKh6S59Kwg1g93cpdnUiJ6io0Ib0IlcArcX8yDFaT2I9KrHJIGzsNWkCOHs kwb1JOyqzLVgLc3z23xsN1oWahB0q3H6KyDZmMmYjXvCUFZcmTamWv0SjfHPVjXM gEZrb9XwklgJr87AkL52GmMh+zqmUUH6fKJOsRCbPhsPtd1AO1gc2QnEhHMr87iR 8aQafxzthR5+2UxqHWymBFRql+c/h+54KP517ZOiFTEWM0BhW3ZThpWqK3/l8MRC xYA5Lm5SKOzqlSEXkg/hg6vDdGtnx9KnhXhPhLMaEdbXqv8XrCyoFhB/USjSE6Zd lWdJjGPIEr41aSZea2g9TLCRjwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHd33AHC 3RAcCvK7dINGgJ2B6DiWMB8GA1UdIwQYMBaAFOO46rGukW35Wi1Vrnu3u3mlC0rn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjU5MS9EMjMzQzY0NjJG NzExMUVCQjZFRDNFMjJDNEY5QUUwMi80N2pxc2E2UmJmbGFMVld1ZTdlN2VhVUxT dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ3anFzYTZSYmZsYUxWV3VlN2U3ZWFVTFN1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEI1OTEvRDIzM0M2NDYyRjcxMTFFQkI2RUQzRTIyQzRGOUFFMDIvRDJFMjQxN0Ey RjcyMTFFQjgwOTY5QzIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnmAwwDwQCAAIwCQMHACABDfPsgDANBgkqhkiG9w0BAQsF AAOCAQEAulU38MCsQduu3b3r8U0RWQYNrFA2LxCHYqHUjcAd20DlBmfYrVwdgfAq TPpG46XeFfY1KaoSjbudodA/6yBhiAaJMINl/QZN96vZmP2nOhrqeNuANLsCb7fA zGklOVND33dI/v5JZ/IjhPfZbvXzOeHA1fHVidcAUraH2Vl+NUASokRpYr9FOY/7 X7KnMQco7xTfzxm/CWmjbJoNs+h+RVKgX4zE9ekb9vhGCBvtqnL3goNtMOdZXLLs xlFowIul5xdi0HoAjGC/bNfUkjSHa6livIxPHDNvflDq6IsjqLg4WFMXtM/5mEu1 FnXXYUqTMNcMBzl2FL1ftWyFqnl0Ww== -----END CERTIFICATE-----Generated at Fri Jun 7 03:18:24 2024 by rpki-client on console-ams.rpki-client.org