$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/BAA2B2A83D9611EA916B582DC4F9AE02.roa File: BAA2B2A83D9611EA916B582DC4F9AE02.roa (raw, json) Hash identifier: hrw9I317xbyiaARzveTD/6FExMIFjTT9axzHYhvr61M= Subject key identifier: 92:76:CD:86:53:08:0F:17:D9:A3:C4:D8:3D:1A:E0:6F:40:20:06:7D Certificate issuer: /CN=A919EF51/serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417 Certificate serial: 09F1 Authority key identifier: 80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/BAA2B2A83D9611EA916B582DC4F9AE02.roa Signing time: Tue 12 Sep 2023 19:57:41 +0000 ROA not before: Tue 12 Sep 2023 19:57:41 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 10084 IP address blocks: 43.250.232.0/23 maxlen: 24 43.250.234.0/24 maxlen: 24 103.2.116.0/24 maxlen: 24 103.2.117.0/24 maxlen: 24 103.2.118.0/24 maxlen: 24 103.2.119.0/24 maxlen: 24 103.79.72.0/24 maxlen: 24 218.100.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 20:25:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2545 (0x9f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EF51/serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417 Validity Not Before: Sep 12 19:57:41 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=6500c2b5-ea98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a4:39:52:e9:6c:c3:5c:2f:3c:e2:5a:ea:e7: 45:a7:58:8e:f7:b1:9f:73:71:4a:42:a6:a8:bc:b2: 56:06:23:23:ba:31:bd:23:3e:ad:f3:4f:af:75:22: 94:87:0e:03:9d:9d:f5:09:25:bc:c5:4f:8c:5b:71: 3e:50:57:91:2a:5e:aa:77:ad:70:f8:0a:91:66:38: b9:16:7d:33:d5:14:93:b9:7f:5a:db:72:34:70:a3: ac:4b:57:57:7c:58:99:ee:4a:46:09:ed:16:20:02: e0:dd:83:0e:4a:a2:68:b5:19:ea:d3:d2:96:b6:1a: 44:ba:2f:f1:18:f7:38:fa:58:9b:cd:52:d8:83:55: 74:25:9a:92:67:24:54:cc:78:c1:d3:d3:1a:20:7e: 8a:85:dd:7e:1f:bc:97:66:db:25:96:88:ec:e5:1d: cb:e0:f9:20:ad:bd:35:a1:e5:bc:f7:16:45:04:38: 1b:53:9a:63:f1:31:8a:23:2d:d9:2f:11:63:ae:0d: 31:b1:23:ef:6d:51:80:1d:4d:a9:11:ad:60:4b:d9: f6:5b:8e:79:f3:6c:3d:32:80:b8:a3:16:6a:09:b6: 73:35:da:ff:88:2c:86:6e:a4:35:c6:c3:2b:b0:ea: df:28:36:da:47:ae:06:73:b7:03:08:03:f1:36:b2: b9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:76:CD:86:53:08:0F:17:D9:A3:C4:D8:3D:1A:E0:6F:40:20:06:7D X509v3 Authority Key Identifier: keyid:80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/BAA2B2A83D9611EA916B582DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.250.232.0-43.250.234.255 103.2.116.0/22 103.79.72.0/24 218.100.43.0/24 Signature Algorithm: sha256WithRSAEncryption 74:0a:6d:4d:88:2c:4b:1e:0b:83:b4:28:93:be:52:3e:cb:30: 87:80:6b:ef:f7:89:f5:33:40:9a:ea:f5:d8:2e:14:1d:f0:55: c0:99:05:4d:7a:20:f5:69:7f:ce:2d:d3:4d:75:fd:a3:d5:1a: d4:36:7c:1a:1c:2c:5a:05:8b:79:a8:7f:a3:6d:9c:48:ff:34: 5e:7b:20:45:36:09:50:1c:2c:31:20:9a:a1:99:65:f0:60:bb: b0:fa:fb:f4:b6:c2:2f:af:57:14:d5:83:96:66:2c:aa:5a:37: c7:cd:e7:b0:7f:c6:98:f3:50:44:38:cc:3f:36:92:c5:af:46: e8:e6:67:a1:5c:26:26:2c:70:0c:8f:cb:71:35:78:4a:3a:08: 96:16:78:09:a7:00:3f:ac:2a:ae:ad:17:69:d2:15:db:af:b5: 67:76:a0:0b:7f:8c:7e:94:50:f1:aa:f4:c3:86:b3:66:10:8b: 40:e2:9d:ff:85:85:d5:2a:89:95:d4:24:19:57:42:d2:ae:82: 7d:ba:0d:21:9e:93:2d:7d:35:14:43:91:c0:08:d7:f4:a7:de: b6:b0:fe:13:c1:75:00:2f:90:3a:87:b7:95:3a:c6:e1:84:ec: 90:fb:9f:8d:7b:33:15:98:77:1c:0d:c5:c1:82:94:c6:b7:c1: 51:62:6a:a6 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICCfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGNTExMTAvBgNVBAUTKDgwNjcwNjYzNzk1MEVGOERBRTdCRUJEMUM5QTc0QkIx RjI2NUQ0MTcwHhcNMjMwOTEyMTk1NzQxWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTAwYzJiNS1lYTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzaQ5Uulsw1wvPOJa6udFp1iO97Gfc3FKQqaovLJWBiMjujG9Iz6t80+vdSKU hw4DnZ31CSW8xU+MW3E+UFeRKl6qd61w+AqRZji5Fn0z1RSTuX9a23I0cKOsS1dX fFiZ7kpGCe0WIALg3YMOSqJotRnq09KWthpEui/xGPc4+libzVLYg1V0JZqSZyRU zHjB09MaIH6Khd1+H7yXZtsllojs5R3L4Pkgrb01oeW89xZFBDgbU5pj8TGKIy3Z LxFjrg0xsSPvbVGAHU2pEa1gS9n2W45582w9MoC4oxZqCbZzNdr/iCyGbqQ1xsMr sOrfKDbaR64Gc7cDCAPxNrK5kQIDAQABo4ICrzCCAqswHQYDVR0OBBYEFJJ2zYZT CA8X2aPE2D0a4G9AIAZ9MB8GA1UdIwQYMBaAFIBnBmN5UO+Nrnvr0cmnS7HyZdQX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY1MS9BODgzRTgxQzNE ODIxMUVBOUYyNjczNzBDNEY5QUUwMi9nR2NHWTNsUTc0MnVlLXZSeWFkTHNmSmwx QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dHY0dZM2xRNzQydWUtdlJ5YWRMc2ZKbDFCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUVGNTEvQTg4M0U4MUMzRDgyMTFFQTlGMjY3MzcwQzRGOUFFMDIvQkFBMkIyQTgz RDk2MTFFQTkxNkI1ODJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMCYEAgABMCAwDAMEAyv66AMEACv66gMEAmcCdAMEAGdPSAMEANpkKzANBgkq hkiG9w0BAQsFAAOCAQEAdAptTYgsSx4Lg7Qok75SPsswh4Br7/eJ9TNAmur12C4U HfBVwJkFTXog9Wl/zi3TTXX9o9Ua1DZ8GhwsWgWLeah/o22cSP80XnsgRTYJUBws MSCaoZll8GC7sPr79LbCL69XFNWDlmYsqlo3x83nsH/GmPNQRDjMPzaSxa9G6OZn oVwmJixwDI/LcTV4SjoIlhZ4CacAP6wqrq0XadIV26+1Z3agC3+MfpRQ8ar0w4az ZhCLQOKd/4WF1SqJldQkGVdC0q6CfboNIZ6TLX01FEORwAjX9KfetrD+E8F1AC+Q Ooe3lTrG4YTskPufjXszFZh3HA3FwYKUxrfBUWJqpg== -----END CERTIFICATE-----Generated at Sun May 26 23:05:36 2024 by rpki-client on console-ams.rpki-client.org