$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/2B07FA82EADC11EBBE430B5EC4F9AE02.roa File: 2B07FA82EADC11EBBE430B5EC4F9AE02.roa (raw, json) Hash identifier: tglvnraOKLhDlwg3ok6ZNO34EJEOJeyX625ohOQmYAw= Subject key identifier: 0E:25:78:20:F3:8E:3C:1D:8D:6B:1A:71:43:6F:F0:E2:2E:F0:CC:29 Certificate issuer: /CN=A91D28BC/serialNumber=C48A0E40FB7FE3975B12C23E030AC54C52057163 Certificate serial: 04A2 Authority key identifier: C4:8A:0E:40:FB:7F:E3:97:5B:12:C2:3E:03:0A:C5:4C:52:05:71:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/2B07FA82EADC11EBBE430B5EC4F9AE02.roa Signing time: Wed 05 Jun 2024 01:57:04 +0000 ROA not before: Wed 05 Jun 2024 01:57:04 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 133613 IP address blocks: 43.247.24.0/22 maxlen: 22 43.247.24.0/24 maxlen: 24 43.247.25.0/24 maxlen: 24 43.247.26.0/24 maxlen: 24 43.247.27.0/24 maxlen: 24 103.237.124.0/24 maxlen: 24 103.237.125.0/24 maxlen: 24 103.237.126.0/24 maxlen: 24 103.237.127.0/24 maxlen: 24 2401:3280:1000::/36 maxlen: 36 2401:3280:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.crl rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Jun 2024 02:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1186 (0x4a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28BC/serialNumber=C48A0E40FB7FE3975B12C23E030AC54C52057163 Validity Not Before: Jun 5 01:57:04 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=665fc5f0-33bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:77:f6:31:9d:56:f2:5c:87:f9:50:5c:7a:8e: 5a:e9:e0:4f:7b:46:7f:0a:57:e8:58:8a:dd:25:65: 31:41:9f:5d:7e:71:f4:8a:9d:a2:29:47:20:dc:6d: b1:76:bb:7b:95:4b:71:96:6a:ae:86:2b:a9:9d:5b: 09:a1:d6:c9:f2:32:7e:a0:16:1d:78:3d:91:23:79: 6a:79:8b:87:3d:c8:9a:18:e5:c9:29:74:3c:08:2d: 52:20:a3:bf:42:11:cc:0f:a8:5b:2e:82:2c:f1:51: 48:30:44:7f:3f:bc:31:7b:a0:22:0a:f1:34:1a:08: 05:19:86:c8:2e:11:4c:cd:b4:2f:4c:60:7f:df:e6: c2:5e:c7:4e:7b:e6:ac:62:28:60:80:da:6d:e1:3d: ce:74:ae:7f:fa:4c:76:37:c8:e0:e3:46:76:d7:08: 31:b9:2c:38:82:49:ee:14:46:82:d3:c2:e7:92:d0: aa:97:f1:07:a9:c3:52:a7:af:35:93:e3:67:2f:06: dc:12:5b:45:e7:1c:81:49:2e:6d:d6:4f:4a:01:58: a1:57:6a:10:aa:dd:f5:7a:4e:e0:c3:fd:58:68:e0: 2c:49:a0:48:6c:6c:96:3a:2b:50:a5:04:96:37:90: 5b:35:06:ee:32:1c:46:fa:9b:97:85:9c:31:6a:98: 63:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:25:78:20:F3:8E:3C:1D:8D:6B:1A:71:43:6F:F0:E2:2E:F0:CC:29 X509v3 Authority Key Identifier: keyid:C4:8A:0E:40:FB:7F:E3:97:5B:12:C2:3E:03:0A:C5:4C:52:05:71:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/2B07FA82EADC11EBBE430B5EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.247.24.0/22 103.237.124.0/22 IPv6: 2401:3280:1000::-2401:3280:2fff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 84:1a:92:66:30:f6:bb:c8:47:ec:a6:76:a3:be:d5:5b:5d:97: 95:16:91:9d:5f:58:91:a6:cc:d5:e3:76:71:cc:74:46:b3:a9: 90:1b:da:fb:e3:e6:a3:30:09:2f:c3:07:b3:0e:29:d0:8a:df: 5d:a8:1c:86:b1:e6:59:98:b6:a8:7a:f9:df:bc:28:03:08:14: c4:3c:1a:fa:a6:a3:85:f1:b3:3c:17:9f:9b:df:21:2e:8b:09: d8:de:be:fc:d1:be:65:cd:8e:61:ce:6f:b6:3d:93:21:a8:f4: ea:02:f5:aa:a4:e1:c9:ef:50:25:d0:57:dc:ac:ad:2c:0d:0b: 8a:23:9d:54:96:ff:59:b9:e7:8f:ed:01:2d:34:99:b8:02:aa: 9b:81:76:bb:15:3c:ee:14:c3:6f:4d:88:fa:e9:f4:41:74:5c: 56:71:d1:86:07:6a:fc:7c:bc:8f:b7:19:39:c4:94:1a:79:a8: 20:2a:f3:5a:1c:9a:fb:38:8f:c4:0d:6a:ce:5a:05:4d:55:bc: c9:94:e5:9f:2e:ad:d7:d5:98:50:c0:5c:78:80:de:47:36:62: 00:4e:73:2c:91:19:a5:4c:a7:a4:43:00:cd:99:53:36:8d:29: 9a:60:df:c7:14:ae:75:5d:63:f0:0e:f1:8e:50:40:16:d0:67: ed:2d:ad:2a -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICBKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4QkMxMTAvBgNVBAUTKEM0OEEwRTQwRkI3RkUzOTc1QjEyQzIzRTAzMEFDNTRD NTIwNTcxNjMwHhcNMjQwNjA1MDE1NzA0WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjVmYzVmMC0zM2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXf2MZ1W8lyH+VBceo5a6eBPe0Z/ClfoWIrdJWUxQZ9dfnH0ip2iKUcg3G2x drt7lUtxlmquhiupnVsJodbJ8jJ+oBYdeD2RI3lqeYuHPciaGOXJKXQ8CC1SIKO/ QhHMD6hbLoIs8VFIMER/P7wxe6AiCvE0GggFGYbILhFMzbQvTGB/3+bCXsdOe+as YihggNpt4T3OdK5/+kx2N8jg40Z21wgxuSw4gknuFEaC08LnktCql/EHqcNSp681 k+NnLwbcEltF5xyBSS5t1k9KAVihV2oQqt31ek7gw/1YaOAsSaBIbGyWOitQpQSW N5BbNQbuMhxG+puXhZwxaphjCwIDAQABo4ICtTCCArEwHQYDVR0OBBYEFA4leCDz jjwdjWsacUNv8OIu8MwpMB8GA1UdIwQYMBaAFMSKDkD7f+OXWxLCPgMKxUxSBXFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhCQy85MjA5MjM5MEVB RDgxMUVCQkQyQ0M3NThDNEY5QUUwMi94SW9PUVB0XzQ1ZGJFc0ktQXdyRlRGSUZj V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJb09RUHRfNDVkYkVzSS1Bd3JGVEZJRmNXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDI4QkMvOTIwOTIzOTBFQUQ4MTFFQkJEMkNDNzU4QzRGOUFFMDIvMkIwN0ZBODJF QURDMTFFQkJFNDMwQjVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E MDAuMBIEAgABMAwDBAIr9xgDBAJn7XwwGAQCAAIwEjAQAwYEJAEygBADBgQkATKA IDANBgkqhkiG9w0BAQsFAAOCAQEAhBqSZjD2u8hH7KZ2o77VW12XlRaRnV9YkabM 1eN2ccx0RrOpkBva++PmozAJL8MHsw4p0IrfXagchrHmWZi2qHr537woAwgUxDwa +qajhfGzPBefm98hLosJ2N6+/NG+Zc2OYc5vtj2TIaj06gL1qqThye9QJdBX3Kyt LA0LiiOdVJb/Wbnnj+0BLTSZuAKqm4F2uxU87hTDb02I+un0QXRcVnHRhgdq/Hy8 j7cZOcSUGnmoICrzWhya+ziPxA1qzloFTVW8yZTlny6t19WYUMBceIDeRzZiAE5z LJEZpUynpEMAzZlTNo0pmmDfxxSudV1j8A7xjlBAFtBn7S2tKg== -----END CERTIFICATE-----Generated at Sat Jun 15 04:18:16 2024 by rpki-client on console-ams.rpki-client.org