$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/0A6FBB5C152811EE8E31B969C4F9AE02.roa File: 0A6FBB5C152811EE8E31B969C4F9AE02.roa (raw, json) Hash identifier: Q6b6abzdYZWnGB/sX3x2XArbAx5azJJuahj/vTgAAy8= Subject key identifier: 56:E8:B6:FE:B2:F8:A9:07:0D:A5:8C:4C:27:CC:53:7C:9A:83:47:77 Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Certificate serial: 02B1 Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/0A6FBB5C152811EE8E31B969C4F9AE02.roa Signing time: Wed 01 Nov 2023 03:34:27 +0000 ROA not before: Wed 01 Nov 2023 03:34:27 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 45461 IP address blocks: 113.20.32.0/21 maxlen: 24 113.20.47.0/24 maxlen: 24 223.29.160.0/21 maxlen: 24 2403:200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 689 (0x2b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Validity Not Before: Nov 1 03:34:27 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=6541c743-0832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:de:4d:20:c5:ec:56:d3:46:2e:6a:d3:66:80: bb:4a:e8:ca:7f:76:62:86:b7:09:17:de:2b:31:fe: 71:48:eb:48:24:f2:aa:67:b4:ac:75:ca:49:98:13: 25:35:d6:51:de:be:ab:2f:69:33:55:1b:26:1b:a0: 3e:95:b8:9e:d9:e1:35:3f:3a:af:d9:a1:67:f7:d4: 95:2e:bd:93:aa:2f:32:73:07:ac:58:97:7b:15:d3: 34:e6:d3:47:c6:00:84:a3:1c:b2:27:31:59:43:74: 17:4f:32:11:89:58:04:e9:67:38:d8:56:0c:85:23: e5:6f:a7:1f:78:ee:44:94:38:4b:f5:64:b0:b9:dd: d5:11:5f:0c:07:22:a2:a8:a0:f5:e3:e3:fb:35:16: 8f:8e:be:ae:9f:df:c6:63:86:5f:17:52:31:9b:6a: cb:52:93:b1:a2:84:d9:88:08:7e:1d:00:1b:54:f4: f7:b9:e9:79:4f:a7:09:48:ba:59:4a:53:05:ee:5b: b4:8b:27:1c:36:ce:21:fd:31:52:6f:87:d7:38:79: fb:db:40:b9:b0:06:ac:67:37:85:6c:0c:9d:2d:17: 5e:3a:c6:cd:44:4c:57:12:d5:c8:b1:44:23:14:81: bc:52:42:6f:b1:00:e3:f0:fc:ed:cb:01:22:eb:fe: 54:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E8:B6:FE:B2:F8:A9:07:0D:A5:8C:4C:27:CC:53:7C:9A:83:47:77 X509v3 Authority Key Identifier: keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/0A6FBB5C152811EE8E31B969C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.20.32.0/21 113.20.47.0/24 223.29.160.0/21 IPv6: 2403:200::/32 Signature Algorithm: sha256WithRSAEncryption a2:21:63:b9:f7:d5:5f:67:f7:c0:4e:fe:b3:f2:5c:62:eb:60: 8a:89:e3:f9:ea:b3:34:31:43:da:d8:7f:4a:aa:72:16:7c:06: ea:09:26:2c:a0:36:f4:bf:b6:98:2a:aa:be:92:1d:a7:4f:9c: 92:73:a0:1b:ff:f1:46:f0:0d:1d:6d:58:e0:95:ee:bd:22:31: e0:dd:37:de:bc:b4:88:3f:de:af:61:23:ca:5e:a1:f6:41:c4: 18:cd:4f:d9:30:20:eb:13:ce:75:80:87:48:7e:ec:1a:56:f7: f2:d9:46:0c:33:7e:b3:5b:6f:33:a4:05:f6:72:18:87:ef:ea: 16:9a:4e:46:ee:95:c9:bc:ac:4e:8c:10:fc:70:a1:54:14:67: b0:9c:9a:9d:df:f2:27:3c:d4:be:c5:87:6e:4f:07:fe:0b:96: d1:01:63:c2:74:2b:80:c4:53:32:97:02:4f:3b:56:00:1c:77: ed:01:e0:e9:fd:04:13:f0:1a:ad:30:b4:b5:c6:82:a2:5c:2e: b4:cb:00:e8:e9:36:ae:ef:2a:20:be:aa:da:1e:7c:af:c4:49: 44:6f:c3:4f:1d:db:4d:b3:d6:57:05:4f:02:d3:d3:f2:82:9c: d8:4c:c0:e5:27:da:d1:bb:11:d3:6b:a6:1b:aa:b8:c5:c9:23: dd:b9:bd:f4 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICArEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD RUZBRjVBQkMwHhcNMjMxMTAxMDMzNDI3WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTQxYzc0My0wODMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy95NIMXsVtNGLmrTZoC7SujKf3ZihrcJF94rMf5xSOtIJPKqZ7SsdcpJmBMl NdZR3r6rL2kzVRsmG6A+lbie2eE1Pzqv2aFn99SVLr2Tqi8ycwesWJd7FdM05tNH xgCEoxyyJzFZQ3QXTzIRiVgE6Wc42FYMhSPlb6cfeO5ElDhL9WSwud3VEV8MByKi qKD14+P7NRaPjr6un9/GY4ZfF1Ixm2rLUpOxooTZiAh+HQAbVPT3uel5T6cJSLpZ SlMF7lu0iyccNs4h/TFSb4fXOHn720C5sAasZzeFbAydLRdeOsbNRExXEtXIsUQj FIG8UkJvsQDj8PztywEi6/5UewIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFFbotv6y +KkHDaWMTCfMU3yag0d3MB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZDNzMvMDE0NENERjg5RjM0MTFFQzlDRUJDNjcwQzRGOUFFMDIvMEE2RkJCNUMx NTI4MTFFRThFMzFCOTY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBANxFCADBABxFC8DBAPfHaAwDQQCAAIwBwMFACQDAgAwDQYJ KoZIhvcNAQELBQADggEBAKIhY7n31V9n98BO/rPyXGLrYIqJ4/nqszQxQ9rYf0qq chZ8BuoJJiygNvS/tpgqqr6SHadPnJJzoBv/8UbwDR1tWOCV7r0iMeDdN968tIg/ 3q9hI8peofZBxBjNT9kwIOsTznWAh0h+7BpW9/LZRgwzfrNbbzOkBfZyGIfv6haa Tkbulcm8rE6MEPxwoVQUZ7Ccmp3f8ic81L7Fh25PB/4LltEBY8J0K4DEUzKXAk87 VgAcd+0B4On9BBPwGq0wtLXGgqJcLrTLAOjpNq7vKiC+qtoefK/ESURvw08d202z 1lcFTwLT0/KCnNhMwOUn2tG7EdNrphuquMXJI925vfQ= -----END CERTIFICATE-----Generated at Fri May 17 04:26:38 2024 by rpki-client on console-fra.rpki-client.org