$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/CB5012460F6311EABC47D53EC4F9AE02.roa File: CB5012460F6311EABC47D53EC4F9AE02.roa (raw, json) Hash identifier: 2uhaFp2nWFeo3Y3jnekedFo/w13cWaAn7I9VwpKEhvs= Subject key identifier: 35:C7:68:D5:DE:46:45:BB:72:C9:4E:6D:DA:52:CF:FE:9D:B0:CE:F8 Certificate issuer: /CN=A912F1D5/serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663 Certificate serial: 0AAE Authority key identifier: FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/CB5012460F6311EABC47D53EC4F9AE02.roa Signing time: Fri 16 Jun 2023 20:20:37 +0000 ROA not before: Fri 16 Jun 2023 20:20:37 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 38026 IP address blocks: 43.240.100.0/22 maxlen: 24 103.36.100.0/22 maxlen: 22 103.36.100.0/24 maxlen: 24 103.36.101.0/24 maxlen: 24 103.36.102.0/24 maxlen: 24 103.36.103.0/24 maxlen: 24 116.193.216.0/21 maxlen: 24 202.164.208.0/21 maxlen: 24 2404:af80::/32 maxlen: 32 2404:af80::/48 maxlen: 48 2404:af80:1::/48 maxlen: 48 2404:af80:2::/48 maxlen: 48 2404:af80:3::/48 maxlen: 48 2404:af80:4::/48 maxlen: 48 2404:af80:10::/48 maxlen: 48 2404:af80:11::/48 maxlen: 48 2404:af80:12::/48 maxlen: 48 2404:af80:13::/48 maxlen: 48 2404:af80:14::/48 maxlen: 48 2404:af80:15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 19:46:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2734 (0xaae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F1D5/serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663 Validity Not Before: Jun 16 20:20:37 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=648cc414-1177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b4:d5:cc:2b:9a:9f:14:52:15:19:bd:89:f7: 1e:48:c2:d4:35:26:8a:3a:88:db:02:ec:19:35:01: 45:7d:8b:29:0a:d5:14:45:e9:b3:dd:4b:f6:7c:63: 24:ed:fc:85:73:a6:7d:6c:dd:28:89:04:d9:b9:5e: 84:f8:b6:f0:f5:b7:94:66:58:c1:3c:e0:27:eb:c6: 8e:7f:15:84:65:4c:ac:79:a7:b8:f8:2c:2e:fc:c7: e5:24:99:64:6c:6b:7d:88:71:ed:1e:92:02:2f:31: 7d:1e:bf:10:3c:23:ad:4e:8f:32:55:c7:a0:05:d5: c0:1c:d7:24:d4:43:0f:2a:9b:db:29:db:b5:fb:05: d2:40:8b:8e:b9:6f:83:ec:e1:79:53:bc:94:a3:44: d7:fc:63:f9:2a:29:d4:5d:b8:74:5c:f6:41:f3:85: 51:40:e5:04:c7:0a:2c:fd:44:fe:a5:db:b3:c3:46: 6e:44:eb:79:c4:5f:74:26:0d:81:e7:40:60:03:e3: f4:5f:7b:c8:43:a1:b5:a4:ad:41:ac:1d:77:1e:16: 6a:4a:a7:eb:58:9a:30:24:0c:c3:64:9d:78:e6:5a: 51:72:a6:00:14:44:62:9e:9c:3a:da:25:fa:66:cd: 5f:d9:2a:7d:38:36:a6:e5:cb:48:ee:77:d0:5b:69: 60:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C7:68:D5:DE:46:45:BB:72:C9:4E:6D:DA:52:CF:FE:9D:B0:CE:F8 X509v3 Authority Key Identifier: keyid:FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/CB5012460F6311EABC47D53EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.240.100.0/22 103.36.100.0/22 116.193.216.0/21 202.164.208.0/21 IPv6: 2404:af80::/32 Signature Algorithm: sha256WithRSAEncryption 87:26:18:c9:94:fb:bd:b4:ed:36:32:a7:26:f6:64:d5:dc:5f: 27:81:39:8e:26:32:77:ae:a7:87:4a:a8:d3:e4:61:bd:84:06: 4a:79:cd:b8:5c:f7:0f:d9:73:1a:f3:c4:a1:1b:7d:00:16:af: a2:be:18:2e:8e:55:94:36:16:d7:c9:0c:5d:90:28:c5:db:43: c9:49:1b:f9:ca:68:37:fd:3d:53:4e:ac:f1:52:d2:30:90:e4: ce:7d:06:6d:a0:7b:c4:40:0b:df:e0:6e:a9:7d:5e:d7:56:a8: b3:7d:56:6f:b2:58:ef:5a:ef:9b:87:ae:d9:5c:28:27:30:f0: 07:53:be:83:df:2d:77:47:b2:4c:37:fc:cc:30:a5:52:08:77: 0d:d4:d1:23:d0:a3:94:fd:cb:78:74:b3:b3:a7:ed:c9:33:b2: 5e:ab:b3:f4:c8:10:93:af:3c:7c:46:de:d3:31:d9:f3:c5:d0: d9:f6:ae:e2:5d:aa:16:22:86:c0:9e:76:a1:eb:bb:9b:e3:37: 7e:48:ac:04:5a:0a:fc:0a:9e:b1:6b:6f:54:7a:71:ea:5d:3b: 1f:e0:1d:36:53:f1:ce:cb:59:eb:eb:d8:84:9f:0d:58:21:70: 7f:02:4c:d9:30:23:f3:b8:a9:4e:40:6e:3c:dc:44:56:33:0a: 11:a3:4a:e4 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICCq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxRDUxMTAvBgNVBAUTKEZCQkE0QTk2MDlCNDE3NEU2Q0I0N0I5NTgzNEUyQTlD M0Q5Njg2NjMwHhcNMjMwNjE2MjAyMDM3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDhjYzQxNC0xMTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbTVzCuanxRSFRm9ifceSMLUNSaKOojbAuwZNQFFfYspCtUURemz3Uv2fGMk 7fyFc6Z9bN0oiQTZuV6E+Lbw9beUZljBPOAn68aOfxWEZUyseae4+Cwu/MflJJlk bGt9iHHtHpICLzF9Hr8QPCOtTo8yVcegBdXAHNck1EMPKpvbKdu1+wXSQIuOuW+D 7OF5U7yUo0TX/GP5KinUXbh0XPZB84VRQOUExwos/UT+pduzw0ZuROt5xF90Jg2B 50BgA+P0X3vIQ6G1pK1BrB13HhZqSqfrWJowJAzDZJ145lpRcqYAFERinpw62iX6 Zs1f2Sp9ODam5ctI7nfQW2lgTwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFDXHaNXe RkW7cslObdpSz/6dsM74MB8GA1UdIwQYMBaAFPu6SpYJtBdObLR7lYNOKpw9loZj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjFENS9FRTAxODA3ODBG NjIxMUVBQTcwNkFGM0RDNEY5QUUwMi8tN3BLbGdtMEYwNXN0SHVWZzA0cW5EMldo bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03cEtsZ20wRjA1c3RIdVZnMDRxbkQyV2htTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkYxRDUvRUUwMTgwNzgwRjYyMTFFQUE3MDZBRjNEQzRGOUFFMDIvQ0I1MDEyNDYw RjYzMTFFQUJDNDdENTNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAIr8GQDBAJnJGQDBAN0wdgDBAPKpNAwDQQCAAIwBwMFACQE r4AwDQYJKoZIhvcNAQELBQADggEBAIcmGMmU+7207TYypyb2ZNXcXyeBOY4mMneu p4dKqNPkYb2EBkp5zbhc9w/ZcxrzxKEbfQAWr6K+GC6OVZQ2FtfJDF2QKMXbQ8lJ G/nKaDf9PVNOrPFS0jCQ5M59Bm2ge8RAC9/gbql9XtdWqLN9Vm+yWO9a75uHrtlc KCcw8AdTvoPfLXdHskw3/MwwpVIIdw3U0SPQo5T9y3h0s7On7ckzsl6rs/TIEJOv PHxG3tMx2fPF0Nn2ruJdqhYihsCedqHru5vjN35IrARaCvwKnrFrb1R6cepdOx/g HTZT8c7LWevr2ISfDVghcH8CTNkwI/O4qU5AbjzcRFYzChGjSuQ= -----END CERTIFICATE-----Generated at Tue May 14 21:48:28 2024 by rpki-client on console-ams.rpki-client.org