$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/F8D520505D0E11EA89C55D65C4F9AE02.roa File: F8D520505D0E11EA89C55D65C4F9AE02.roa (raw, json) Hash identifier: AKz9fqerHC9EKDI8dZROHn4hncGG5UoQFRAUeWGmd80= Subject key identifier: 05:C2:C7:07:15:FD:AB:B1:AC:B3:3E:AF:0C:12:8F:EE:C1:15:63:4F Certificate issuer: /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Certificate serial: 1017 Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/F8D520505D0E11EA89C55D65C4F9AE02.roa Signing time: Sun 04 Jun 2023 18:27:59 +0000 ROA not before: Sun 04 Jun 2023 18:27:59 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 13444 IP address blocks: 45.119.6.0/24 maxlen: 24 45.119.7.0/24 maxlen: 24 103.49.92.0/22 maxlen: 24 103.84.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4119 (0x1017) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Validity Not Before: Jun 4 18:27:59 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=647cd7af-6065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dc:3f:0d:d0:fd:df:97:e3:24:29:4b:6b:df: be:f5:02:00:3a:da:0b:0f:2f:66:4c:c2:4f:b2:1a: 0d:9d:c9:29:d4:2c:ea:b1:e7:5b:d4:f1:2e:7d:a8: 55:c3:45:49:c2:1e:1f:4e:a8:e6:8c:c9:92:bd:48: 50:1a:47:8f:5d:ad:c8:1d:57:fb:39:1c:6d:2c:97: e3:9c:0e:50:43:53:18:3a:43:12:aa:d9:99:e9:4a: e2:7e:2a:f7:bd:2d:df:e9:1d:7b:df:d5:50:4b:d5: 19:0c:48:f7:a7:38:db:be:17:1f:77:66:81:61:a2: d2:4c:9a:d2:0c:e2:27:d8:59:8a:52:9d:c0:06:9c: 39:b0:3c:e3:be:6f:e7:37:4a:2a:af:58:17:a7:7a: 47:96:36:57:46:3a:47:f7:74:be:1d:58:9f:8e:1c: 3d:16:10:8a:43:38:ab:3a:c8:a7:f1:39:a4:36:9e: 8f:75:2b:ab:79:43:07:81:bb:5f:e1:9e:3a:a7:89: 31:0c:a2:bb:c0:51:b5:94:a8:a5:e3:b8:f3:19:06: 13:72:0c:9d:f6:ad:9e:70:14:c2:1e:74:8f:1d:63: b3:67:0c:47:e4:d5:4f:3f:51:7a:08:83:52:43:c2: a2:bc:f7:c0:04:0d:d8:28:69:d5:68:50:32:7f:e3: 58:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C2:C7:07:15:FD:AB:B1:AC:B3:3E:AF:0C:12:8F:EE:C1:15:63:4F X509v3 Authority Key Identifier: keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/F8D520505D0E11EA89C55D65C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.119.6.0/23 103.49.92.0/22 103.84.92.0/22 Signature Algorithm: sha256WithRSAEncryption 68:92:a1:9a:95:55:ce:f4:b9:c3:c3:ab:77:c1:e4:1a:f7:7a: aa:7f:a4:6c:52:fa:17:ae:ae:da:05:ca:30:24:f6:b9:7c:49: 72:c8:f0:d3:ea:8f:51:a9:8f:92:67:a7:ea:b4:82:0e:e5:53: 25:1f:9c:06:05:e6:4b:b1:ec:c0:5f:85:ca:bd:8d:4f:be:2e: 1f:6a:38:7e:4a:0a:32:4f:cb:ab:0b:23:29:e5:32:09:2c:a0: 4f:73:6e:77:a9:fe:a8:cc:fd:71:97:65:d8:89:63:b1:e8:ca: 04:94:6f:8b:8c:1c:db:bb:4f:65:8b:8f:e0:b9:03:54:91:c0: 6d:a0:cf:e1:63:30:d7:43:fc:26:a6:fb:f8:83:4d:c4:2f:ce: 4b:e0:57:92:cd:2c:a2:c0:b9:12:52:df:13:ab:87:3d:15:58: 4d:00:37:da:d5:d5:5e:11:d3:60:f4:59:c1:3f:52:de:5c:b9: f0:d8:07:3e:18:39:d9:af:b8:bd:6f:6c:c1:7d:e1:e5:c4:46: 4f:18:b6:e2:03:d8:45:14:38:3a:5b:ae:6d:b5:c0:d2:4d:4d: 93:0c:f1:1a:34:a5:a0:8d:aa:11:aa:9d:f6:09:dc:fa:93:57: bb:0f:1c:58:3c:b7:b1:17:11:b8:db:79:f3:c6:bb:27:12:04: 47:17:a1:ac -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICEBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQkMxMTAvBgNVBAUTKDZGRjMxQjA2NTlBNkFFMTZDN0EwQTRFRTBFRTZBMjI5 MTBFQzJFMDAwHhcNMjMwNjA0MTgyNzU5WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDdjZDdhZi02MDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxNw/DdD935fjJClLa9++9QIAOtoLDy9mTMJPshoNnckp1Czqsedb1PEufahV w0VJwh4fTqjmjMmSvUhQGkePXa3IHVf7ORxtLJfjnA5QQ1MYOkMSqtmZ6Urifir3 vS3f6R1739VQS9UZDEj3pzjbvhcfd2aBYaLSTJrSDOIn2FmKUp3ABpw5sDzjvm/n N0oqr1gXp3pHljZXRjpH93S+HVifjhw9FhCKQzirOsin8TmkNp6PdSureUMHgbtf 4Z46p4kxDKK7wFG1lKil47jzGQYTcgyd9q2ecBTCHnSPHWOzZwxH5NVPP1F6CINS Q8KivPfABA3YKGnVaFAyf+NYawIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFAXCxwcV /auxrLM+rwwSj+7BFWNPMB8GA1UdIwQYMBaAFG/zGwZZpq4Wx6Ck7g7moikQ7C4A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJCQy9FQkNGMTY4MjA0 RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJoYkhvS1R1RHVhaUtSRHNM Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfTWJCbG1tcmhiSG9LVHVEdWFpS1JEc0xnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTEyQkMvRUJDRjE2ODIwNEY4MTFFOUJBNTAyNDMxQzRGOUFFMDIvRjhENTIwNTA1 RDBFMTFFQTg5QzU1RDY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAEtdwYDBAJnMVwDBAJnVFwwDQYJKoZIhvcNAQELBQADggEB AGiSoZqVVc70ucPDq3fB5Br3eqp/pGxS+heurtoFyjAk9rl8SXLI8NPqj1Gpj5Jn p+q0gg7lUyUfnAYF5kux7MBfhcq9jU++Lh9qOH5KCjJPy6sLIynlMgksoE9zbnep /qjM/XGXZdiJY7HoygSUb4uMHNu7T2WLj+C5A1SRwG2gz+FjMNdD/Cam+/iDTcQv zkvgV5LNLKLAuRJS3xOrhz0VWE0AN9rV1V4R02D0WcE/Ut5cufDYBz4YOdmvuL1v bMF94eXERk8YtuID2EUUODpbrm21wNJNTZMM8Ro0paCNqhGqnfYJ3PqTV7sPHFg8 t7EXEbjbefPGuycSBEcXoaw= -----END CERTIFICATE-----Generated at Fri May 31 19:47:46 2024 by rpki-client on console-fra.rpki-client.org