$ rpki-client -vvf rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/5FF4FD52704C11ED97935E7DC4F9AE02.roa File: 5FF4FD52704C11ED97935E7DC4F9AE02.roa (raw, json) Hash identifier: YUVp3qWVkxU1C4l/jL7nJncbv6O1MZagBu3nKdafcnE= Subject key identifier: C7:47:72:F5:6E:82:E5:2E:7C:10:B5:F5:EF:FB:A8:49:D4:2C:09:3A Certificate issuer: /CN=A912E5CB/serialNumber=E1733B970FDDF767FF195428437E1242A3769277 Certificate serial: CB Authority key identifier: E1:73:3B:97:0F:DD:F7:67:FF:19:54:28:43:7E:12:42:A3:76:92:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/5FF4FD52704C11ED97935E7DC4F9AE02.roa Signing time: Fri 29 Dec 2023 04:45:40 +0000 ROA not before: Fri 29 Dec 2023 04:45:40 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 7600 IP address blocks: 203.20.226.0/23 maxlen: 23 203.20.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.crl rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E5CB/serialNumber=E1733B970FDDF767FF195428437E1242A3769277 Validity Not Before: Dec 29 04:45:40 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=658e4ef4-e6ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0f:49:cc:83:3d:f0:c6:1f:a9:a5:23:c3:e4: bd:c8:f8:72:ec:66:70:e8:bf:77:40:28:2c:9f:ce: 69:a5:44:11:d2:65:f8:7f:ef:65:bb:b0:1d:3f:d7: 0a:7e:3e:8d:aa:c8:ba:82:09:eb:ae:b2:06:c3:c3: fb:29:3a:0e:b6:0a:93:8f:a6:49:9e:3d:e2:ee:a1: 95:8c:0c:b1:61:5f:da:dc:e0:c3:9c:a6:b2:7d:70: 4e:4e:ee:ff:f9:53:db:63:11:48:10:eb:d3:04:89: ca:08:8d:b9:e6:21:19:18:fb:b0:57:d8:b9:f0:91: 4a:36:90:d0:fa:58:82:fb:a0:e3:a8:60:da:16:45: 36:43:c5:d0:b0:e5:61:8d:ed:7d:5c:8b:ad:8b:e1: 23:e1:18:09:4b:34:c1:da:1c:31:46:dc:e7:2b:e7: 96:51:fb:50:95:db:14:6d:05:f2:cc:e0:63:ce:b5: 45:06:10:bc:05:c2:7f:fa:cc:99:a8:23:14:15:a9: ee:15:fc:26:99:11:b1:84:8b:3e:a0:71:67:28:3d: 22:05:5c:dc:21:3b:19:d2:00:35:85:89:57:91:7e: 87:ea:84:bb:b8:2e:42:35:bf:ef:31:da:64:ad:b7: 1e:6c:d5:da:71:d5:d9:19:7a:02:66:27:90:ea:51: 39:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:47:72:F5:6E:82:E5:2E:7C:10:B5:F5:EF:FB:A8:49:D4:2C:09:3A X509v3 Authority Key Identifier: keyid:E1:73:3B:97:0F:DD:F7:67:FF:19:54:28:43:7E:12:42:A3:76:92:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/5FF4FD52704C11ED97935E7DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.20.226.0/23 203.20.247.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:53:96:76:27:31:95:1e:93:18:72:1e:18:81:9a:4c:db:c9: 35:63:a2:7f:bd:ae:f8:e3:d0:ba:68:69:1b:a7:d4:db:bd:c8: 69:07:e3:14:57:36:d5:fb:d7:6f:b2:44:3e:f4:e5:0a:e3:0e: b0:1e:c2:00:23:63:5a:22:0c:99:7a:f9:e4:71:9c:20:99:35: cc:4b:5e:94:8c:a3:a3:1c:40:70:be:ce:9a:c8:3c:88:50:14: 2b:a7:40:11:7f:9b:74:65:ca:7a:2c:a4:55:47:f6:4a:c7:47: 23:cc:65:02:03:8b:cd:30:5e:97:39:8a:d1:b7:13:0e:52:21: 47:21:5e:5b:3a:5b:75:2a:5c:57:a1:71:df:c9:43:71:00:e1: bb:29:3e:d9:b2:00:f4:31:bf:87:76:33:46:21:38:e8:50:43: 2e:ad:68:f4:7c:d9:c6:76:a5:8e:94:b0:ce:1d:c1:95:b7:59: 8b:1c:a3:e2:33:7f:de:c8:1d:66:86:f3:5b:b1:c8:56:15:a8: 29:e8:ba:42:41:ae:d6:77:ce:73:a6:4d:b6:61:f6:4f:b7:61: 96:8d:85:53:aa:3b:ae:3b:84:5f:84:3d:25:25:bd:5d:62:9f: 1e:25:e8:83:46:42:6f:6c:1b:da:d6:5a:29:40:a2:7b:1f:4d: fe:8d:29:77 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU1Q0IxMTAvBgNVBAUTKEUxNzMzQjk3MEZEREY3NjdGRjE5NTQyODQzN0UxMjQy QTM3NjkyNzcwHhcNMjMxMjI5MDQ0NTQwWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NThlNGVmNC1lNmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Q9JzIM98MYfqaUjw+S9yPhy7GZw6L93QCgsn85ppUQR0mX4f+9lu7AdP9cK fj6Nqsi6ggnrrrIGw8P7KToOtgqTj6ZJnj3i7qGVjAyxYV/a3ODDnKayfXBOTu7/ +VPbYxFIEOvTBInKCI255iEZGPuwV9i58JFKNpDQ+liC+6DjqGDaFkU2Q8XQsOVh je19XIuti+Ej4RgJSzTB2hwxRtznK+eWUftQldsUbQXyzOBjzrVFBhC8BcJ/+syZ qCMUFanuFfwmmRGxhIs+oHFnKD0iBVzcITsZ0gA1hYlXkX6H6oS7uC5CNb/vMdpk rbcebNXacdXZGXoCZieQ6lE5CQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMdHcvVu guUufBC19e/7qEnULAk6MB8GA1UdIwQYMBaAFOFzO5cP3fdn/xlUKEN+EkKjdpJ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTVDQi81Mjg4RENFMDcw NDkxMUVEQjZFMUZCNzhDNEY5QUUwMi80WE03bHdfZDkyZl9HVlFvUTM0U1FxTjJr bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYTTdsd19kOTJmX0dWUW9RMzRTUXFOMmtuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkU1Q0IvNTI4OERDRTA3MDQ5MTFFREI2RTFGQjc4QzRGOUFFMDIvNUZGNEZENTI3 MDRDMTFFRDk3OTM1RTdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAHLFOIDBADLFPcwDQYJKoZIhvcNAQELBQADggEBAE5TlnYn MZUekxhyHhiBmkzbyTVjon+9rvjj0LpoaRun1Nu9yGkH4xRXNtX712+yRD705Qrj DrAewgAjY1oiDJl6+eRxnCCZNcxLXpSMo6McQHC+zprIPIhQFCunQBF/m3Rlynos pFVH9krHRyPMZQIDi80wXpc5itG3Ew5SIUchXls6W3UqXFehcd/JQ3EA4bspPtmy APQxv4d2M0YhOOhQQy6taPR82cZ2pY6UsM4dwZW3WYsco+Izf97IHWaG81uxyFYV qCnoukJBrtZ3znOmTbZh9k+3YZaNhVOqO647hF+EPSUlvV1inx4l6INGQm9sG9rW WilAonsfTf6NKXc= -----END CERTIFICATE-----Generated at Sat May 11 08:03:36 2024 by rpki-client on console-fra.rpki-client.org