$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/AF95E6D8F2B711EAA1C01744C4F9AE02.roa File: AF95E6D8F2B711EAA1C01744C4F9AE02.roa (raw, json) Hash identifier: MKiDsu5ueGdBa9te8oknBkNBnhRi0o532gSyxE3s1JA= Subject key identifier: D1:C1:45:25:1E:BD:7A:5D:00:3E:29:17:22:D2:48:0E:B3:B4:60:E2 Certificate issuer: /CN=A91F17F6/serialNumber=52D5D6FFBDA88F545E51BAF99F7DACE193C06E57 Certificate serial: 0716 Authority key identifier: 52:D5:D6:FF:BD:A8:8F:54:5E:51:BA:F9:9F:7D:AC:E1:93:C0:6E:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/AF95E6D8F2B711EAA1C01744C4F9AE02.roa Signing time: Mon 20 May 2024 23:01:57 +0000 ROA not before: Mon 20 May 2024 23:01:57 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 56229 IP address blocks: 43.231.72.0/24 maxlen: 24 43.231.73.0/24 maxlen: 24 43.231.74.0/24 maxlen: 24 43.231.75.0/24 maxlen: 24 103.3.72.0/24 maxlen: 24 103.3.73.0/24 maxlen: 24 103.3.74.0/24 maxlen: 24 103.3.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.crl rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 23:16:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1814 (0x716) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17F6/serialNumber=52D5D6FFBDA88F545E51BAF99F7DACE193C06E57 Validity Not Before: May 20 23:01:57 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=664bd665-a23a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b7:86:65:1c:fb:f0:1e:42:eb:8d:66:9a:fd: 17:f8:4b:22:42:73:77:c6:60:0b:27:aa:3f:19:d6: 78:0e:2e:0c:24:da:17:b7:32:53:e2:db:3d:18:82: 41:af:f9:c1:7b:5d:3c:97:d6:ba:e0:5c:71:ba:cd: 29:2c:b7:8f:da:2f:5f:0c:8b:11:15:be:26:cb:2e: 77:09:27:8d:5e:b4:ae:dc:c0:54:36:44:13:e9:43: 73:3d:62:c1:e7:2a:1d:1d:9c:70:f4:28:81:af:06: eb:4e:67:e4:5b:ab:c8:ba:d5:17:45:9b:20:b6:56: 9c:3e:78:4d:1a:04:bc:86:e4:34:83:c0:23:dd:56: e3:4f:c5:e4:91:fb:69:8d:e0:d8:b4:c6:da:94:ff: f7:36:0f:09:39:f5:40:f0:88:61:e0:0e:23:1a:68: 4c:52:97:58:ee:c8:72:21:4a:86:6d:0d:35:cd:49: 64:1a:00:b0:bb:4b:b6:89:08:fe:be:9b:00:73:a8: 8f:c1:d1:28:00:ac:67:20:fb:b7:b7:5d:ff:54:ef: 03:15:0d:f2:3e:c0:26:43:31:bf:61:e2:f9:65:18: cc:0d:43:b4:a4:35:e0:f2:54:b8:1c:02:2e:4d:b4: cb:fc:7e:e2:84:af:a1:75:4c:3f:65:07:64:a2:07: 7a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C1:45:25:1E:BD:7A:5D:00:3E:29:17:22:D2:48:0E:B3:B4:60:E2 X509v3 Authority Key Identifier: keyid:52:D5:D6:FF:BD:A8:8F:54:5E:51:BA:F9:9F:7D:AC:E1:93:C0:6E:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/AF95E6D8F2B711EAA1C01744C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.231.72.0/22 103.3.72.0/22 Signature Algorithm: sha256WithRSAEncryption 81:a9:a4:a4:47:5e:df:a0:1d:8a:b3:01:12:d0:c6:03:9b:95: fa:f5:29:c4:ad:e4:ab:99:85:d4:d4:02:51:a7:92:e6:f6:69: 64:c6:9f:5d:7e:41:33:33:66:98:e0:bc:fd:21:b5:4e:6d:94: 84:42:92:fa:a8:02:a4:60:d0:a0:6a:6f:99:45:c5:51:ab:62: 6e:ff:0f:a2:a1:db:9c:49:53:09:75:60:51:60:b2:41:46:e5: fe:31:1b:dc:a8:5c:9c:26:85:bc:76:52:11:d5:f0:12:52:a2: a1:bb:ce:87:3c:c1:f3:ac:6a:df:99:5e:4a:0d:c7:45:48:9f: d9:5a:48:97:5f:cb:69:36:f2:06:e0:66:82:f8:bb:ba:37:d8: a6:9a:77:8e:35:9e:14:5d:1c:11:51:9a:17:75:74:59:b3:44: 77:eb:03:cc:a3:85:e2:c5:7e:51:61:67:c0:50:f4:55:91:65: 21:7c:9c:84:70:14:be:2a:fd:f0:2a:c2:72:20:e3:47:f8:3a: 34:10:62:2a:64:5a:68:95:26:be:15:64:86:c2:0d:25:e2:09: 64:dd:6e:34:13:26:74:ff:83:1e:69:fb:00:bd:8b:21:1a:0e: c2:a7:80:df:27:04:94:c5:90:50:21:5e:35:e2:19:da:07:a4: 2e:7c:d7:39 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3RjYxMTAvBgNVBAUTKDUyRDVENkZGQkRBODhGNTQ1RTUxQkFGOTlGN0RBQ0Ux OTNDMDZFNTcwHhcNMjQwNTIwMjMwMTU3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjRiZDY2NS1hMjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmbeGZRz78B5C641mmv0X+EsiQnN3xmALJ6o/GdZ4Di4MJNoXtzJT4ts9GIJB r/nBe108l9a64Fxxus0pLLeP2i9fDIsRFb4myy53CSeNXrSu3MBUNkQT6UNzPWLB 5yodHZxw9CiBrwbrTmfkW6vIutUXRZsgtlacPnhNGgS8huQ0g8Aj3VbjT8Xkkftp jeDYtMbalP/3Ng8JOfVA8Ihh4A4jGmhMUpdY7shyIUqGbQ01zUlkGgCwu0u2iQj+ vpsAc6iPwdEoAKxnIPu3t13/VO8DFQ3yPsAmQzG/YeL5ZRjMDUO0pDXg8lS4HAIu TbTL/H7ihK+hdUw/ZQdkogd6cQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNHBRSUe vXpdAD4pFyLSSA6ztGDiMB8GA1UdIwQYMBaAFFLV1v+9qI9UXlG6+Z99rOGTwG5X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdGNi9FRDkzQ0VFOEYy QjUxMUVBOUEzRjYzNDFDNEY5QUUwMi9VdFhXXzcyb2oxUmVVYnI1bjMyczRaUEFi bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V0WFdfNzJvajFSZVVicjVuMzJzNFpQQWJsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjE3RjYvRUQ5M0NFRThGMkI1MTFFQTlBM0Y2MzQxQzRGOUFFMDIvQUY5NUU2RDhG MkI3MTFFQUExQzAxNzQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr50gDBAJnA0gwDQYJKoZIhvcNAQELBQADggEBAIGppKRH Xt+gHYqzARLQxgOblfr1KcSt5KuZhdTUAlGnkub2aWTGn11+QTMzZpjgvP0htU5t lIRCkvqoAqRg0KBqb5lFxVGrYm7/D6Kh25xJUwl1YFFgskFG5f4xG9yoXJwmhbx2 UhHV8BJSoqG7zoc8wfOsat+ZXkoNx0VIn9laSJdfy2k28gbgZoL4u7o32Kaad441 nhRdHBFRmhd1dFmzRHfrA8yjheLFflFhZ8BQ9FWRZSF8nIRwFL4q/fAqwnIg40f4 OjQQYipkWmiVJr4VZIbCDSXiCWTdbjQTJnT/gx5p+wC9iyEaDsKngN8nBJTFkFAh XjXiGdoHpC581zk= -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:32 2024 by rpki-client on console-ams.rpki-client.org