$ rpki-client -vvf rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/2F9D268C76B211ECABA1A612C4F9AE02.roa File: 2F9D268C76B211ECABA1A612C4F9AE02.roa (raw, json) Hash identifier: G60xcvS2Pyu4NkNwFSM5MoKiZ33tU2Bz3RM2bfV5OH0= Subject key identifier: 9D:60:02:6A:37:84:E3:0D:37:49:AD:6F:60:50:73:77:60:93:C3:C5 Certificate issuer: /CN=A91238EC/serialNumber=04832FBE70C7B8859CA1A0E3E05A296BB09C5D3D Certificate serial: 1639 Authority key identifier: 04:83:2F:BE:70:C7:B8:85:9C:A1:A0:E3:E0:5A:29:6B:B0:9C:5D:3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIMvvnDHuIWcoaDj4Fopa7CcXT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/2F9D268C76B211ECABA1A612C4F9AE02.roa Signing time: Thu 28 Dec 2023 17:14:35 +0000 ROA not before: Thu 28 Dec 2023 17:14:35 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 58736 IP address blocks: 43.229.208.0/22 maxlen: 24 103.30.188.0/22 maxlen: 24 2401:3580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.crl rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIMvvnDHuIWcoaDj4Fopa7CcXT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5689 (0x1639) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91238EC/serialNumber=04832FBE70C7B8859CA1A0E3E05A296BB09C5D3D Validity Not Before: Dec 28 17:14:35 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=658dacfb-9f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:41:a3:cd:d4:af:f0:83:3e:99:3b:82:07:9b: f9:17:49:60:9a:a0:12:a3:d8:7c:bb:2b:53:f8:d7: 02:7e:c5:0e:f6:89:e2:55:21:fc:6b:e0:f9:fb:f2: f6:a3:15:0b:0d:5c:9e:81:1c:f7:2b:7a:43:51:87: 24:ea:70:f5:d9:07:8c:92:a0:3f:b8:aa:81:fd:ff: 45:66:30:f6:b3:76:4b:1c:d5:35:81:da:9e:53:10: cf:e3:2a:d4:0b:a5:07:6e:3d:e3:fd:97:ba:7e:e1: 5b:11:ed:90:c2:a6:4d:a3:1a:ab:d8:14:61:bd:d2: ce:b2:52:bf:3f:4e:cb:90:2f:2d:ce:06:d3:4d:ac: f3:81:35:a7:95:5b:fc:8f:fc:bf:a3:2c:34:81:75: 32:c7:ca:d4:a6:35:a8:5a:d2:e6:5b:45:2b:4a:e4: 7b:d2:56:c5:e5:08:5f:28:66:26:5d:1e:50:a5:fe: ac:7b:a6:f5:ca:fc:7f:2e:76:b5:1d:24:ec:ec:35: 5a:f7:ee:2f:cb:70:10:1b:3d:59:16:59:86:80:e7: f6:b2:d2:b9:af:4d:f8:7f:8a:5f:21:17:9a:70:93: d0:bd:c7:42:d8:ff:2d:61:9c:82:c4:a9:ff:09:65: ff:09:d8:7c:0d:a5:37:2a:58:e7:9c:dc:c7:bf:b1: b0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:60:02:6A:37:84:E3:0D:37:49:AD:6F:60:50:73:77:60:93:C3:C5 X509v3 Authority Key Identifier: keyid:04:83:2F:BE:70:C7:B8:85:9C:A1:A0:E3:E0:5A:29:6B:B0:9C:5D:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIMvvnDHuIWcoaDj4Fopa7CcXT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/2F9D268C76B211ECABA1A612C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.229.208.0/22 103.30.188.0/22 IPv6: 2401:3580::/32 Signature Algorithm: sha256WithRSAEncryption 0f:ff:4d:cd:f4:58:f2:bc:fc:7d:35:b7:79:7f:54:06:ce:07: b1:1d:4f:55:02:fc:38:b3:25:53:b7:f4:fe:7f:99:f2:7e:30: 84:e6:18:27:11:d5:25:0f:69:43:74:77:c4:28:45:25:a0:0a: d4:55:f7:b4:55:6b:3d:6e:c8:fb:70:be:e6:d0:9f:bf:bf:db: 6e:c4:00:1b:27:be:46:1a:ba:81:e2:ba:c8:97:0f:e2:50:01: b0:95:9c:c5:0a:42:50:6d:f2:f5:10:e3:41:94:6d:e1:d5:c7: 83:79:3b:6c:5b:17:b3:29:45:25:6c:30:16:0c:e1:90:20:31: 13:90:1f:80:0f:51:43:25:73:50:5e:70:a6:9d:15:1b:04:d1: a9:05:bb:9a:8d:2e:d8:f2:71:1a:4a:a8:40:28:42:52:ad:cd: 9a:4b:65:ea:f6:c8:7c:b6:d5:bb:c9:d9:f0:34:cc:fc:6f:41: 61:39:04:25:74:9e:78:4a:19:d6:47:c0:5f:0b:2c:38:0e:f5: 83:f4:e3:74:bd:9a:d1:a0:86:80:fb:89:1f:3c:3d:0f:6b:53: 8f:0a:20:3a:2a:2a:ef:f4:3e:55:b2:a0:c5:88:2d:b6:61:84: 26:7d:24:b2:4f:bb:b0:e4:34:45:7f:3c:34:c5:ec:ef:de:57: 8f:57:bc:9c -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICFjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4RUMxMTAvBgNVBAUTKDA0ODMyRkJFNzBDN0I4ODU5Q0ExQTBFM0UwNUEyOTZC QjA5QzVEM0QwHhcNMjMxMjI4MTcxNDM1WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NThkYWNmYi05ZjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00GjzdSv8IM+mTuCB5v5F0lgmqASo9h8uytT+NcCfsUO9oniVSH8a+D5+/L2 oxULDVyegRz3K3pDUYck6nD12QeMkqA/uKqB/f9FZjD2s3ZLHNU1gdqeUxDP4yrU C6UHbj3j/Ze6fuFbEe2QwqZNoxqr2BRhvdLOslK/P07LkC8tzgbTTazzgTWnlVv8 j/y/oyw0gXUyx8rUpjWoWtLmW0UrSuR70lbF5QhfKGYmXR5Qpf6se6b1yvx/Lna1 HSTs7DVa9+4vy3AQGz1ZFlmGgOf2stK5r034f4pfIReacJPQvcdC2P8tYZyCxKn/ CWX/Cdh8DaU3KljnnNzHv7Gw7QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFJ1gAmo3 hOMNN0mtb2BQc3dgk8PFMB8GA1UdIwQYMBaAFASDL75wx7iFnKGg4+BaKWuwnF09 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzhFQy82MUQ0RjQ4QUUz RTYxMUU3QUYyRjYxNUVDNEY5QUUwMi9CSU12dm5ESHVJV2NvYURqNEZvcGE3Q2NY VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JJTXZ2bkRIdUlXY29hRGo0Rm9wYTdDY1hUMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjM4RUMvNjFENEY0OEFFM0U2MTFFN0FGMkY2MTVFQzRGOUFFMDIvMkY5RDI2OEM3 NkIyMTFFQ0FCQTFBNjEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIr5dADBAJnHrwwDQQCAAIwBwMFACQBNYAwDQYJKoZIhvcN AQELBQADggEBAA//Tc30WPK8/H01t3l/VAbOB7EdT1UC/DizJVO39P5/mfJ+MITm GCcR1SUPaUN0d8QoRSWgCtRV97RVaz1uyPtwvubQn7+/227EABsnvkYauoHiusiX D+JQAbCVnMUKQlBt8vUQ40GUbeHVx4N5O2xbF7MpRSVsMBYM4ZAgMROQH4APUUMl c1BecKadFRsE0akFu5qNLtjycRpKqEAoQlKtzZpLZer2yHy21bvJ2fA0zPxvQWE5 BCV0nnhKGdZHwF8LLDgO9YP043S9mtGghoD7iR88PQ9rU48KIDoqKu/0PlWyoMWI LbZhhCZ9JLJPu7DkNEV/PDTF7O/eV49XvJw= -----END CERTIFICATE-----Generated at Sat May 18 18:21:35 2024 by rpki-client on console-ams.rpki-client.org