$ rpki-client -vvf rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/64720824EF6611EB9A7EFE0EC4F9AE02.roa File: 64720824EF6611EB9A7EFE0EC4F9AE02.roa (raw, json) Hash identifier: MyHmiwwY24R3d4+DAEzEEtmCaqIzuusdXM6O63ht/lY= Subject key identifier: 46:7E:2B:B2:31:3E:12:C0:60:15:67:3B:EA:34:18:A3:AD:5A:BB:86 Certificate issuer: /CN=A918E0B2/serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A Certificate serial: 0442 Authority key identifier: 0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/64720824EF6611EB9A7EFE0EC4F9AE02.roa Signing time: Fri 15 Dec 2023 01:13:28 +0000 ROA not before: Fri 15 Dec 2023 01:13:28 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 9790 IP address blocks: 103.252.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 02:34:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1090 (0x442) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E0B2/serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A Validity Not Before: Dec 15 01:13:28 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=657ba838-4190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:91:ae:4d:c0:89:95:91:34:4c:91:07:57:f1: 85:2e:73:aa:24:f0:96:fa:76:15:3c:ac:c4:ee:88: bf:92:90:4e:3d:c9:84:9e:e0:8a:93:e0:2a:28:29: 50:5a:74:ff:7a:cd:aa:17:32:87:03:87:75:37:27: a6:01:c7:83:e3:48:2a:09:67:4e:9c:ae:be:8e:17: f2:8f:94:69:9c:0e:55:62:c2:b3:07:b4:10:61:4e: 7f:42:42:5b:44:9d:1a:83:d8:a8:94:a4:6c:ac:30: 7f:ad:20:96:40:a4:77:5f:00:a4:af:6a:15:08:28: 07:97:30:83:48:af:01:d0:36:0e:aa:c0:15:6f:57: 76:29:7d:15:88:5e:d7:96:15:62:d8:e3:9c:86:59: c6:51:31:e9:98:ba:13:36:5a:e0:c3:ee:6d:46:aa: b1:8c:26:c9:0a:39:24:2c:73:7c:21:97:8f:39:e0: 8b:c6:24:ee:d6:a6:bd:61:02:92:1b:36:48:6d:34: e8:1b:f6:8b:26:80:b6:c6:55:1f:33:f7:fe:cd:3a: b3:ce:84:d2:9a:33:03:e6:05:0d:61:ec:e7:1d:22: 15:da:d5:38:64:cc:cd:45:cb:64:3f:d2:6b:2c:47: 82:65:1f:23:43:46:db:7b:7e:9c:a7:34:51:a3:83: 47:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:7E:2B:B2:31:3E:12:C0:60:15:67:3B:EA:34:18:A3:AD:5A:BB:86 X509v3 Authority Key Identifier: keyid:0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/64720824EF6611EB9A7EFE0EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.252.247.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:b5:20:21:9d:d1:83:5b:fb:58:84:1f:9b:53:47:8e:a2:e7: 16:b7:fa:e2:a9:ba:85:45:15:60:ed:b1:21:23:e7:22:31:a6: 27:f7:c6:53:e1:af:3e:cb:e9:91:56:25:95:9e:46:50:49:c0: c0:23:78:f3:0f:ed:8a:4f:e9:3e:35:90:8e:85:82:f1:cc:bf: 2e:49:44:39:43:db:cb:4c:97:3a:c1:6c:a3:8c:e3:dc:e3:e5: b6:88:f8:f1:85:5c:57:b1:17:3c:ce:ba:88:c2:70:16:17:ba: 34:0f:e7:f9:64:ef:15:1b:5c:c8:7f:d8:d4:ee:73:b7:5c:11: 87:75:45:cc:df:7f:41:51:83:f8:cb:a7:be:df:0b:69:c8:f6: 10:30:97:5b:a9:ce:ff:0a:25:cf:4d:b7:72:98:fe:98:18:b5: 09:d6:8d:fc:c6:72:5a:09:ab:a5:22:7b:56:99:9d:9f:6a:88: e5:da:61:05:eb:77:a1:19:dd:e1:44:a1:04:ed:e4:b0:c2:d5: 69:d3:21:e5:52:52:dd:41:93:79:47:b7:13:bb:b1:44:ba:4b: f9:26:c7:b0:0d:33:63:b1:ba:70:b9:95:44:1b:fa:bf:c0:a6: a0:b2:d1:7e:4f:23:7f:49:b7:71:73:9a:7c:b2:4c:0c:0f:c1: 39:63:44:a1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUwQjIxMTAvBgNVBAUTKDBCM0VCQTg4RjFBREExQTFCNTA4OTFCMjY1MzFBM0U3 MDlCRjY1OUEwHhcNMjMxMjE1MDExMzI4WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTdiYTgzOC00MTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0JGuTcCJlZE0TJEHV/GFLnOqJPCW+nYVPKzE7oi/kpBOPcmEnuCKk+AqKClQ WnT/es2qFzKHA4d1NyemAceD40gqCWdOnK6+jhfyj5RpnA5VYsKzB7QQYU5/QkJb RJ0ag9iolKRsrDB/rSCWQKR3XwCkr2oVCCgHlzCDSK8B0DYOqsAVb1d2KX0ViF7X lhVi2OOchlnGUTHpmLoTNlrgw+5tRqqxjCbJCjkkLHN8IZePOeCLxiTu1qa9YQKS GzZIbTToG/aLJoC2xlUfM/f+zTqzzoTSmjMD5gUNYeznHSIV2tU4ZMzNRctkP9Jr LEeCZR8jQ0bbe36cpzRRo4NHNQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEZ+K7Ix PhLAYBVnO+o0GKOtWruGMB8GA1UdIwQYMBaAFAs+uojxraGhtQiRsmUxo+cJv2Wa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTBCMi82NzA0MkMxOEVG NjQxMUVCODMzRkM4MERDNEY5QUUwMi9DejY2aVBHdG9hRzFDSkd5WlRHajV3bV9a Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N6NjZpUEd0b2FHMUNKR3laVEdqNXdtX1paby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEUwQjIvNjcwNDJDMThFRjY0MTFFQjgzM0ZDODBEQzRGOUFFMDIvNjQ3MjA4MjRF RjY2MTFFQjlBN0VGRTBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn/PcwDQYJKoZIhvcNAQELBQADggEBABy1ICGd0YNb+1iE H5tTR46i5xa3+uKpuoVFFWDtsSEj5yIxpif3xlPhrz7L6ZFWJZWeRlBJwMAjePMP 7YpP6T41kI6FgvHMvy5JRDlD28tMlzrBbKOM49zj5baI+PGFXFexFzzOuojCcBYX ujQP5/lk7xUbXMh/2NTuc7dcEYd1Rczff0FRg/jLp77fC2nI9hAwl1upzv8KJc9N t3KY/pgYtQnWjfzGcloJq6Uie1aZnZ9qiOXaYQXrd6EZ3eFEoQTt5LDC1WnTIeVS Ut1Bk3lHtxO7sUS6S/kmx7ANM2OxunC5lUQb+r/ApqCy0X5PI39Jt3FzmnyyTAwP wTljRKE= -----END CERTIFICATE-----Generated at Sat Jun 1 04:07:29 2024 by rpki-client on console-ams.rpki-client.org