$ rpki-client -vvf rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/E2ADBF4E022F11EDA851B357C4F9AE02.roa File: E2ADBF4E022F11EDA851B357C4F9AE02.roa (raw, json) Hash identifier: DJ9fAitzYrXHF3IunSSLVjEaj/9g7JqpjpFtVblvC94= Subject key identifier: B8:8A:9B:4B:19:AB:FB:08:F0:59:B4:0C:9F:F4:80:09:2D:8B:16:F6 Certificate issuer: /CN=A9139555/serialNumber=4365D179D5B73E8A97EDE0505F29EF00C2D63EF9 Certificate serial: 01C5 Authority key identifier: 43:65:D1:79:D5:B7:3E:8A:97:ED:E0:50:5F:29:EF:00:C2:D6:3E:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2XRedW3PoqX7eBQXynvAMLWPvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/E2ADBF4E022F11EDA851B357C4F9AE02.roa Signing time: Thu 11 Apr 2024 03:29:36 +0000 ROA not before: Thu 11 Apr 2024 03:29:36 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 45269 IP address blocks: 43.225.144.0/22 maxlen: 22 43.225.144.0/24 maxlen: 24 43.225.147.0/24 maxlen: 24 103.31.112.0/22 maxlen: 22 103.31.114.0/24 maxlen: 24 180.148.176.0/22 maxlen: 22 202.14.147.0/24 maxlen: 24 203.176.184.0/22 maxlen: 22 2406:c200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.crl rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2XRedW3PoqX7eBQXynvAMLWPvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139555/serialNumber=4365D179D5B73E8A97EDE0505F29EF00C2D63EF9 Validity Not Before: Apr 11 03:29:36 2024 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=6617591f-026f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ea:d7:20:29:f1:e8:ba:66:b2:26:00:e7:82: cd:fd:d7:25:0f:89:ba:20:7c:5a:61:46:82:fb:d7: 1f:84:cd:71:83:18:e2:fc:4c:3e:a0:53:ca:02:5b: 93:49:06:f9:ea:0a:31:a9:80:1a:1e:6a:5b:c4:99: 7b:2e:74:61:6b:d1:f9:ae:18:11:24:76:93:e7:ac: 3b:ff:d3:b0:eb:68:d1:35:5a:54:5c:15:e3:18:ba: 8c:a2:78:0d:92:0e:ce:06:f9:4e:9d:ba:20:5c:0f: 6f:8b:6d:20:24:ce:1b:b2:83:4b:f0:18:fd:94:eb: e1:b0:bb:34:ec:f9:b9:4a:a5:48:da:82:42:7f:ad: 45:b2:4d:5f:00:4a:2c:aa:5b:d5:1f:f4:18:35:e2: ab:4e:34:4d:27:21:1d:08:f0:34:d9:11:be:cc:7e: 5c:c9:ef:e6:55:8e:99:93:43:17:0b:26:f5:69:64: 43:1f:8c:c6:73:87:4a:8c:ca:2d:f4:e4:78:bd:02: 5f:c9:66:32:cf:74:7b:c7:5e:61:79:c7:90:9d:b1: 4d:54:6e:d4:38:24:21:22:72:d6:5c:33:2e:64:b2: 64:ff:11:71:60:c1:48:52:fd:e7:4b:69:3e:d2:a8: ca:d0:a3:3b:b7:e1:78:27:14:2e:59:7e:1b:de:15: be:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8A:9B:4B:19:AB:FB:08:F0:59:B4:0C:9F:F4:80:09:2D:8B:16:F6 X509v3 Authority Key Identifier: keyid:43:65:D1:79:D5:B7:3E:8A:97:ED:E0:50:5F:29:EF:00:C2:D6:3E:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2XRedW3PoqX7eBQXynvAMLWPvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/E2ADBF4E022F11EDA851B357C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.225.144.0/22 103.31.112.0/22 180.148.176.0/22 202.14.147.0/24 203.176.184.0/22 IPv6: 2406:c200::/32 Signature Algorithm: sha256WithRSAEncryption 57:c7:58:44:ec:66:25:bf:42:79:fd:7b:ad:3e:36:ca:fc:a7: 66:83:88:a7:ff:6e:35:8f:ba:04:97:e0:4a:19:a2:17:44:ea: 50:4e:26:9d:73:10:cd:3c:42:31:29:e5:5c:aa:c7:4e:1b:19: 4f:2d:39:fc:55:d9:20:f3:20:f4:df:cc:b6:e0:9e:9c:f3:4c: 0b:e8:d5:19:95:e3:82:aa:ab:0f:45:56:9d:32:b4:41:47:57: 08:b1:16:f0:f4:5d:0b:b6:31:a2:3e:cf:03:f6:bc:e3:09:d3: 20:a1:02:40:d2:58:d5:fd:a6:1a:81:bb:07:de:ea:63:b1:03: 4c:83:c2:93:75:ae:a7:9f:ea:61:56:f8:33:8d:cb:d8:f8:bf: 8e:db:ff:7f:0b:e9:9a:d3:92:fc:72:55:29:d4:6a:53:6b:b4: 41:44:26:40:6f:35:ea:ae:62:25:16:ea:99:3e:df:a2:f7:fd: 10:9b:ed:e5:7b:50:41:b5:4d:50:e6:a2:91:78:c8:1f:b4:cf: 11:68:91:87:11:ed:66:37:51:d7:e3:72:61:a0:6a:eb:03:86: ba:25:3d:93:53:1e:b2:48:bc:26:e9:6c:dc:1b:8c:49:f6:aa: e5:5f:a6:94:32:f5:a9:85:40:c8:50:7b:24:ac:b4:03:19:50: 1f:34:d4:6a -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk1NTUxMTAvBgNVBAUTKDQzNjVEMTc5RDVCNzNFOEE5N0VERTA1MDVGMjlFRjAw QzJENjNFRjkwHhcNMjQwNDExMDMyOTM2WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjE3NTkxZi0wMjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsurXICnx6LpmsiYA54LN/dclD4m6IHxaYUaC+9cfhM1xgxji/Ew+oFPKAluT SQb56goxqYAaHmpbxJl7LnRha9H5rhgRJHaT56w7/9Ow62jRNVpUXBXjGLqMongN kg7OBvlOnbogXA9vi20gJM4bsoNL8Bj9lOvhsLs07Pm5SqVI2oJCf61Fsk1fAEos qlvVH/QYNeKrTjRNJyEdCPA02RG+zH5cye/mVY6Zk0MXCyb1aWRDH4zGc4dKjMot 9OR4vQJfyWYyz3R7x15heceQnbFNVG7UOCQhInLWXDMuZLJk/xFxYMFIUv3nS2k+ 0qjK0KM7t+F4JxQuWX4b3hW+RwIDAQABo4ICvDCCArgwHQYDVR0OBBYEFLiKm0sZ q/sI8Fm0DJ/0gAktixb2MB8GA1UdIwQYMBaAFENl0XnVtz6Kl+3gUF8p7wDC1j75 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTU1NS9EQzdEMTQ1QTAy MkQxMUVEOUQ2NDZCNTdDNEY5QUUwMi9RMlhSZWRXM1BvcVg3ZUJRWHludkFNTFdQ dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EyWFJlZFczUG9xWDdlQlFYeW52QU1MV1B2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mzk1NTUvREM3RDE0NUEwMjJEMTFFRDlENjQ2QjU3QzRGOUFFMDIvRTJBREJGNEUw MjJGMTFFREE4NTFCMzU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E NzA1MCQEAgABMB4DBAIr4ZADBAJnH3ADBAK0lLADBADKDpMDBALLsLgwDQQCAAIw BwMFACQGwgAwDQYJKoZIhvcNAQELBQADggEBAFfHWETsZiW/Qnn9e60+Nsr8p2aD iKf/bjWPugSX4EoZohdE6lBOJp1zEM08QjEp5Vyqx04bGU8tOfxV2SDzIPTfzLbg npzzTAvo1RmV44Kqqw9FVp0ytEFHVwixFvD0XQu2MaI+zwP2vOMJ0yChAkDSWNX9 phqBuwfe6mOxA0yDwpN1rqef6mFW+DONy9j4v47b/38L6ZrTkvxyVSnUalNrtEFE JkBvNequYiUW6pk+36L3/RCb7eV7UEG1TVDmopF4yB+0zxFokYcR7WY3UdfjcmGg ausDhrolPZNTHrJIvCbpbNwbjEn2quVfppQy9amFQMhQeySstAMZUB801Go= -----END CERTIFICATE-----Generated at Wed May 15 05:22:33 2024 by rpki-client on console-fra.rpki-client.org