$ rpki-client -vvf rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/04A96D3ADB0511EBB30F6E2EC4F9AE02.roa File: 04A96D3ADB0511EBB30F6E2EC4F9AE02.roa (raw, json) Hash identifier: BvSF1KISeLQonHgGxpv9+3zQZ6iOm2kjFjjTT/81iP4= Subject key identifier: F4:DD:31:C6:28:D5:EA:BD:CA:D2:CF:42:E9:22:C2:A8:5F:61:B2:8C Certificate issuer: /CN=A911E008/serialNumber=248F5588EA8FC7DD0A3B4DA1E1558031C0D927E4 Certificate serial: 160C Authority key identifier: 24:8F:55:88:EA:8F:C7:DD:0A:3B:4D:A1:E1:55:80:31:C0:D9:27:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/04A96D3ADB0511EBB30F6E2EC4F9AE02.roa Signing time: Tue 16 Apr 2024 17:25:16 +0000 ROA not before: Tue 16 Apr 2024 17:25:16 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 23749 IP address blocks: 112.213.72.0/24 maxlen: 24 112.213.73.0/24 maxlen: 24 112.213.74.0/24 maxlen: 24 112.213.75.0/24 maxlen: 24 2401:3c60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5644 (0x160c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E008/serialNumber=248F5588EA8FC7DD0A3B4DA1E1558031C0D927E4 Validity Not Before: Apr 16 17:25:16 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=661eb47b-412a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0a:26:82:6a:ed:78:18:61:90:75:54:c8:d3: d4:7b:3b:d4:4b:58:c7:dd:36:40:b8:58:7b:a4:38: 02:86:d4:50:1b:f6:43:9c:02:92:8f:a4:d7:55:c8: a7:75:92:09:09:fe:ce:d1:de:3d:59:84:f4:e9:04: 53:10:33:ed:fa:91:c9:72:ca:c2:02:cd:32:a4:82: be:f1:35:06:da:15:7a:d7:03:4f:22:cf:87:4c:b6: 1d:c0:6d:30:72:0e:dd:c9:37:ff:7e:9b:94:0f:32: 40:3d:d8:b1:e6:86:95:15:1b:e7:a6:40:ff:db:a0: d8:c5:18:f1:00:79:99:31:5c:c2:b0:19:72:c6:c6: 24:27:8e:f6:53:17:8d:ce:be:a7:16:b2:0c:92:23: 74:83:85:43:9b:4c:37:e2:e5:d4:2f:e7:03:5a:ab: 8d:8c:d7:97:8a:8c:7e:25:0e:70:77:ba:c6:a3:19: a9:ac:67:46:08:df:d5:a1:7c:ab:51:c6:1b:c2:0a: ed:3d:bc:4a:18:96:ff:b7:ac:4d:7d:cd:3e:57:37: 41:ff:1b:ee:19:da:78:fd:70:93:03:e0:e6:24:54: de:03:d7:ba:cb:1c:7c:24:93:82:bc:2c:64:f0:82: 1b:23:b3:25:d3:62:38:e7:4b:74:6f:c0:3a:f3:94: 33:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:DD:31:C6:28:D5:EA:BD:CA:D2:CF:42:E9:22:C2:A8:5F:61:B2:8C X509v3 Authority Key Identifier: keyid:24:8F:55:88:EA:8F:C7:DD:0A:3B:4D:A1:E1:55:80:31:C0:D9:27:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/04A96D3ADB0511EBB30F6E2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 112.213.72.0/22 IPv6: 2401:3c60::/32 Signature Algorithm: sha256WithRSAEncryption 82:df:c5:72:da:88:91:af:6f:e5:7b:39:92:94:6d:9f:aa:ce: e3:1e:62:19:62:ac:ae:34:ad:ea:54:c8:1b:0c:73:23:90:b6: 39:94:0a:2c:23:ad:27:a5:c6:a5:d1:0b:cf:80:43:47:f6:66: 69:04:19:6e:b6:a5:d2:92:94:64:f8:a1:a9:2d:e5:62:7d:ec: 28:8b:b8:ae:dc:18:30:06:0d:e4:46:70:1d:3e:e3:88:79:67: d2:e3:76:80:56:90:2e:70:40:fd:9d:6d:76:1b:8e:a8:75:b4: fe:36:f1:9b:35:c0:27:4e:dd:82:66:c4:69:73:74:14:64:71: d6:d7:db:9f:8a:7d:f3:be:50:9d:76:e9:e0:94:10:18:40:9e: be:9a:ca:4d:0e:06:24:32:00:52:b2:06:78:61:29:02:60:7c: 82:b8:fa:85:eb:fe:e0:5d:12:fa:7d:a0:9f:b9:fe:a7:5b:f1: 80:96:24:68:66:21:39:47:4a:b1:66:16:f5:84:1c:23:0f:f3: 8e:78:4a:bd:3f:ce:95:f3:7e:e4:b0:7e:0e:a7:f9:91:c0:a0: bf:d2:9f:fe:e0:11:7a:46:f9:bf:19:3d:fc:9a:7f:93:40:91: 5e:bf:e5:3d:40:c6:89:13:66:dd:5f:46:62:32:f6:95:77:97: 0c:51:da:91 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICFgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUwMDgxMTAvBgNVBAUTKDI0OEY1NTg4RUE4RkM3REQwQTNCNERBMUUxNTU4MDMx QzBEOTI3RTQwHhcNMjQwNDE2MTcyNTE2WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjFlYjQ3Yi00MTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6womgmrteBhhkHVUyNPUezvUS1jH3TZAuFh7pDgChtRQG/ZDnAKSj6TXVcin dZIJCf7O0d49WYT06QRTEDPt+pHJcsrCAs0ypIK+8TUG2hV61wNPIs+HTLYdwG0w cg7dyTf/fpuUDzJAPdix5oaVFRvnpkD/26DYxRjxAHmZMVzCsBlyxsYkJ472UxeN zr6nFrIMkiN0g4VDm0w34uXUL+cDWquNjNeXiox+JQ5wd7rGoxmprGdGCN/VoXyr UcYbwgrtPbxKGJb/t6xNfc0+VzdB/xvuGdp4/XCTA+DmJFTeA9e6yxx8JJOCvCxk 8IIbI7Ml02I450t0b8A685QzfwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFPTdMcYo 1eq9ytLPQukiwqhfYbKMMB8GA1UdIwQYMBaAFCSPVYjqj8fdCjtNoeFVgDHA2Sfk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTAwOC9ERDg4QzNBRUYx RDMxMUU3OTdFRDQyNDBDNEY5QUUwMi9KSTlWaU9xUHg5MEtPMDJoNFZXQU1jRFpK LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pJOVZpT3FQeDkwS08wMmg0VldBTWNEWkotUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUUwMDgvREQ4OEMzQUVGMUQzMTFFNzk3RUQ0MjQwQzRGOUFFMDIvMDRBOTZEM0FE QjA1MTFFQkIzMEY2RTJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJw1UgwDQQCAAIwBwMFACQBPGAwDQYJKoZIhvcNAQELBQAD ggEBAILfxXLaiJGvb+V7OZKUbZ+qzuMeYhlirK40repUyBsMcyOQtjmUCiwjrSel xqXRC8+AQ0f2ZmkEGW62pdKSlGT4oakt5WJ97CiLuK7cGDAGDeRGcB0+44h5Z9Lj doBWkC5wQP2dbXYbjqh1tP428Zs1wCdO3YJmxGlzdBRkcdbX25+KffO+UJ126eCU EBhAnr6ayk0OBiQyAFKyBnhhKQJgfIK4+oXr/uBdEvp9oJ+5/qdb8YCWJGhmITlH SrFmFvWEHCMP8454Sr0/zpXzfuSwfg6n+ZHAoL/Sn/7gEXpG+b8ZPfyaf5NAkV6/ 5T1AxokTZt1fRmIy9pV3lwxR2pE= -----END CERTIFICATE-----Generated at Sat May 18 18:21:35 2024 by rpki-client on console-ams.rpki-client.org