$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/66BEBEDE83CB11E796105342C4F9AE02.roa File: 66BEBEDE83CB11E796105342C4F9AE02.roa (raw, json) Hash identifier: B440WbdvKbjd1VY/h7WWP2ns/DY0sOenjaoST0N8qSQ= Subject key identifier: 48:3F:5C:30:E8:BC:E3:D9:49:A4:95:B4:67:7A:EE:2E:27:20:5D:35 Certificate issuer: /CN=A91D1306/serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A Certificate serial: 184F Authority key identifier: E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/66BEBEDE83CB11E796105342C4F9AE02.roa Signing time: Wed 22 May 2024 17:24:55 +0000 ROA not before: Wed 22 May 2024 17:24:55 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 17882 IP address blocks: 43.228.128.0/24 maxlen: 24 43.228.129.0/24 maxlen: 24 43.228.130.0/24 maxlen: 24 43.228.131.0/24 maxlen: 24 103.229.120.0/24 maxlen: 24 103.229.121.0/24 maxlen: 24 103.229.122.0/24 maxlen: 24 103.229.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 17:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6223 (0x184f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1306/serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A Validity Not Before: May 22 17:24:55 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=664e2a67-bcab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:16:df:55:db:0d:67:7f:f5:be:d9:88:00:5c: 5d:ca:d3:19:5a:b4:e6:b4:e3:f1:09:1b:45:06:88: 5a:d7:7b:6c:a8:ec:ba:f7:c6:a0:8c:72:a9:18:aa: 29:b2:70:46:d4:9a:6b:f4:4e:5d:17:a5:8e:33:50: 6e:1b:44:22:ea:34:31:52:e3:68:49:c5:08:8d:89: d6:92:75:b1:87:f3:83:51:33:c2:76:6d:29:08:62: e5:b2:0b:2f:c1:26:3b:c6:bc:62:21:55:3c:0f:81: 62:89:99:e8:6d:8f:f5:62:99:4f:ec:f6:b2:9f:a9: 26:c4:35:b6:8d:03:45:a9:c0:9e:42:b4:dc:1a:16: a0:5e:b1:11:cf:c4:6e:f7:fd:3e:f2:ea:7a:bd:2c: 96:40:3d:82:ef:b6:42:6f:b9:93:dc:55:a3:13:b9: 34:e3:47:da:84:b7:64:49:74:c3:5b:51:98:2a:6b: fe:12:c3:05:94:53:9f:4c:da:29:a9:0d:08:74:33: ad:17:41:e0:49:96:1d:e6:93:86:28:17:f9:a1:c5: ef:80:df:a9:cb:8d:21:aa:0a:9e:23:d5:4c:50:c8: 22:dc:fc:9d:f6:57:d1:a2:59:55:c9:7c:2c:4d:26: 5d:d4:47:1d:49:fb:03:7f:e2:53:ac:7c:65:87:7b: b0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:3F:5C:30:E8:BC:E3:D9:49:A4:95:B4:67:7A:EE:2E:27:20:5D:35 X509v3 Authority Key Identifier: keyid:E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/66BEBEDE83CB11E796105342C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.228.128.0/22 103.229.120.0/22 Signature Algorithm: sha256WithRSAEncryption 34:ad:c6:80:1e:1e:14:b1:5b:80:e7:ce:47:aa:47:73:32:95: c8:b6:e9:d9:aa:b2:41:cc:2c:9f:19:7f:36:f7:f9:24:d9:bd: 99:83:d3:78:b5:5f:63:e7:e8:a3:06:e6:04:8d:30:04:ce:5a: 02:f4:98:89:0f:3a:55:f0:9b:9f:29:dd:a5:87:14:64:cb:e5: 03:90:37:6c:93:b6:1a:c9:ed:3c:77:60:5a:9f:58:a8:be:80: 78:2f:3e:ab:ef:9e:9b:e0:e2:c7:40:61:6e:b2:eb:1d:66:7d: bc:44:cc:f5:da:04:50:b0:19:54:84:1e:55:bc:00:58:17:5a: 98:33:95:03:1a:8e:18:a3:c1:39:a8:f3:8f:fd:93:c5:86:0a: 6c:71:21:7f:28:da:91:95:ef:97:fd:9f:b8:a3:5a:14:f6:22: 14:81:54:7b:be:84:9a:ec:a1:76:de:04:d8:50:a8:79:3a:73: ab:bc:c9:28:6c:03:bc:07:88:cb:24:43:9b:cb:03:ad:fa:3a: 8c:7f:05:9b:e0:97:2b:0c:03:e5:9e:54:82:04:c1:c6:d5:c6: 96:3a:1d:2f:14:b8:49:67:2d:3d:3d:4f:0a:ef:7a:11:1d:85: b8:d6:af:a8:2e:7f:bf:4c:d4:44:ef:4f:0c:ad:9f:98:15:55: 35:23:e2:9d -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICGE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEzMDYxMTAvBgNVBAUTKEUwNEZCMkFBNjI3RDk3Qjk4OUFFQ0ZFODY5NzRFM0M1 RjMwMzEyMUEwHhcNMjQwNTIyMTcyNDU1WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjRlMmE2Ny1iY2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhbfVdsNZ3/1vtmIAFxdytMZWrTmtOPxCRtFBoha13tsqOy698agjHKpGKop snBG1Jpr9E5dF6WOM1BuG0Qi6jQxUuNoScUIjYnWknWxh/ODUTPCdm0pCGLlsgsv wSY7xrxiIVU8D4FiiZnobY/1YplP7Payn6kmxDW2jQNFqcCeQrTcGhagXrERz8Ru 9/0+8up6vSyWQD2C77ZCb7mT3FWjE7k040fahLdkSXTDW1GYKmv+EsMFlFOfTNop qQ0IdDOtF0HgSZYd5pOGKBf5ocXvgN+py40hqgqeI9VMUMgi3Pyd9lfRollVyXws TSZd1EcdSfsDf+JTrHxlh3uwmwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEg/XDDo vOPZSaSVtGd67i4nIF01MB8GA1UdIwQYMBaAFOBPsqpifZe5ia7P6Gl048XzAxIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTMwNi9GRTQ5NzQ5ODgz Q0ExMUU3QjgyNDBBNDJDNEY5QUUwMi80RS15cW1KOWw3bUpyc19vYVhUanhmTURF aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRFLXlxbUo5bDdtSnJzX29hWFRqeGZNREVoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDEzMDYvRkU0OTc0OTg4M0NBMTFFN0I4MjQwQTQyQzRGOUFFMDIvNjZCRUJFREU4 M0NCMTFFNzk2MTA1MzQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr5IADBAJn5XgwDQYJKoZIhvcNAQELBQADggEBADStxoAe HhSxW4DnzkeqR3Mylci26dmqskHMLJ8Zfzb3+STZvZmD03i1X2Pn6KMG5gSNMATO WgL0mIkPOlXwm58p3aWHFGTL5QOQN2yTthrJ7Tx3YFqfWKi+gHgvPqvvnpvg4sdA YW6y6x1mfbxEzPXaBFCwGVSEHlW8AFgXWpgzlQMajhijwTmo84/9k8WGCmxxIX8o 2pGV75f9n7ijWhT2IhSBVHu+hJrsoXbeBNhQqHk6c6u8yShsA7wHiMskQ5vLA636 Oox/BZvglysMA+WeVIIEwcbVxpY6HS8UuElnLT09TwrvehEdhbjWr6guf79M1ETv Twytn5gVVTUj4p0= -----END CERTIFICATE-----Generated at Thu Jun 6 18:48:20 2024 by rpki-client on console-fra.rpki-client.org