$ rpki-client -vvf rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/7CEF82123BD011ECBCB98F83C4F9AE02.roa File: 7CEF82123BD011ECBCB98F83C4F9AE02.roa (raw, json) Hash identifier: yTK6xsjADSJoG3FEkguF1yyNSNbFFfBdjMG/DMP1n/g= Subject key identifier: DB:3E:D4:CC:F7:6A:A0:80:21:61:66:A3:B4:15:16:4E:66:4A:63:B4 Certificate issuer: /CN=A913C40D/serialNumber=8C3814723FC755E9A9BA1BC335664A519BBC1CEE Certificate serial: 038B Authority key identifier: 8C:38:14:72:3F:C7:55:E9:A9:BA:1B:C3:35:66:4A:51:9B:BC:1C:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/7CEF82123BD011ECBCB98F83C4F9AE02.roa Signing time: Sat 09 Dec 2023 01:53:27 +0000 ROA not before: Sat 09 Dec 2023 01:53:27 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 40065 IP address blocks: 43.251.224.0/22 maxlen: 24 103.43.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.crl rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 907 (0x38b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C40D/serialNumber=8C3814723FC755E9A9BA1BC335664A519BBC1CEE Validity Not Before: Dec 9 01:53:27 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6573c897-9849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:46:24:09:da:ee:a9:27:3c:3b:8c:c8:e0:6d: eb:ac:66:4e:59:3c:88:74:99:48:0d:c0:4a:b6:50: 98:d0:20:57:8b:ff:b9:fe:9d:d5:66:ef:9e:9c:2d: cb:35:d5:4e:95:59:db:46:10:4f:5f:e0:55:e1:3e: 0a:26:e3:02:48:bf:d7:4e:d8:68:3e:66:7e:48:79: 84:bc:2e:bd:92:56:da:f5:0b:a7:74:52:4d:43:f9: 69:e5:f5:53:9b:d9:e5:d0:d3:c4:c9:25:83:74:f5: 25:91:d4:78:6d:8c:a5:cb:e8:62:b0:23:1b:8f:9a: ae:7e:5a:8c:1d:90:b6:e0:2b:f7:95:a3:42:a8:0a: 61:4f:c7:36:a6:3a:12:ad:9f:31:63:91:d6:a4:0f: 33:78:8f:41:a6:79:d9:a9:21:3f:30:0e:3d:d7:18: 64:f8:0e:41:29:46:5d:bb:3d:4d:b0:8e:a6:5a:64: 13:38:bb:5e:70:8d:8a:e1:75:a0:a6:bd:4e:24:89: 47:ac:f1:3a:06:0a:9e:71:6a:e7:33:52:33:ae:1f: c1:aa:12:e8:4e:02:ec:8b:73:27:56:4a:37:25:eb: e9:ad:5d:3b:8b:82:e9:01:94:61:de:0d:c3:17:2c: 0e:1f:3b:da:54:22:a9:5e:e2:39:4e:d1:43:f7:39: 47:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:3E:D4:CC:F7:6A:A0:80:21:61:66:A3:B4:15:16:4E:66:4A:63:B4 X509v3 Authority Key Identifier: keyid:8C:38:14:72:3F:C7:55:E9:A9:BA:1B:C3:35:66:4A:51:9B:BC:1C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/7CEF82123BD011ECBCB98F83C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.251.224.0/22 103.43.8.0/22 Signature Algorithm: sha256WithRSAEncryption 04:e0:f0:cb:46:00:37:ab:7b:49:a6:e2:ec:03:87:e1:1a:08: 95:09:b2:12:4e:6a:1e:0c:f8:b8:a6:6f:3f:4b:0f:c6:ce:4f: 73:12:e7:19:80:29:4d:a0:55:0c:16:7c:f4:68:f8:39:3a:2c: 91:1a:ac:15:e0:80:78:f3:2b:c4:60:40:4d:ea:61:93:fc:b3: 37:e0:3e:e6:b1:be:d2:b9:1f:41:ca:7d:61:4c:84:90:7a:4f: bc:c8:2d:0d:88:d1:a9:2e:f0:6d:af:3b:89:ae:6b:40:41:7b: b7:cf:e7:9f:3b:d0:df:32:f4:f9:12:da:b4:13:b5:af:86:6a: 28:b1:f8:9a:29:0a:a9:dc:4a:8c:a4:1e:ea:96:f4:2b:3f:48: 7a:de:ac:79:52:aa:ff:90:6e:89:72:af:fd:55:eb:bd:72:60: df:c1:63:e3:60:60:d0:35:c9:13:c8:1a:d1:f6:7e:f9:87:a9: a0:3f:f0:33:f3:d2:b6:c5:f0:84:0d:ab:97:2f:60:20:dc:54: 89:d7:cf:37:1e:10:bf:e1:4e:33:5d:72:be:d0:7e:a6:f5:d3: be:24:c4:d4:5d:95:60:0c:fb:1c:02:a3:c3:40:ef:69:46:21: eb:ec:5d:4b:bc:f0:a9:1d:97:37:68:9c:59:6b:45:7f:f6:5f: f2:b1:e5:5b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICA4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M0MEQxMTAvBgNVBAUTKDhDMzgxNDcyM0ZDNzU1RTlBOUJBMUJDMzM1NjY0QTUx OUJCQzFDRUUwHhcNMjMxMjA5MDE1MzI3WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTczYzg5Ny05ODQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7kYkCdruqSc8O4zI4G3rrGZOWTyIdJlIDcBKtlCY0CBXi/+5/p3VZu+enC3L NdVOlVnbRhBPX+BV4T4KJuMCSL/XTthoPmZ+SHmEvC69klba9QundFJNQ/lp5fVT m9nl0NPEySWDdPUlkdR4bYyly+hisCMbj5quflqMHZC24Cv3laNCqAphT8c2pjoS rZ8xY5HWpA8zeI9BpnnZqSE/MA491xhk+A5BKUZduz1NsI6mWmQTOLtecI2K4XWg pr1OJIlHrPE6BgqecWrnM1Izrh/BqhLoTgLsi3MnVko3JevprV07i4LpAZRh3g3D FywOHzvaVCKpXuI5TtFD9zlHYQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNs+1Mz3 aqCAIWFmo7QVFk5mSmO0MB8GA1UdIwQYMBaAFIw4FHI/x1XpqbobwzVmSlGbvBzu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzQwRC81MEY3NzVBNjNC Q0MxMUVDQTc5MUYyNURDNEY5QUUwMi9qRGdVY2pfSFZlbXB1aHZETldaS1VadThI TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pEZ1Vjal9IVmVtcHVodkROV1pLVVp1OEhPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0M0MEQvNTBGNzc1QTYzQkNDMTFFQ0E3OTFGMjVEQzRGOUFFMDIvN0NFRjgyMTIz QkQwMTFFQ0JDQjk4RjgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr++ADBAJnKwgwDQYJKoZIhvcNAQELBQADggEBAATg8MtG ADere0mm4uwDh+EaCJUJshJOah4M+Limbz9LD8bOT3MS5xmAKU2gVQwWfPRo+Dk6 LJEarBXggHjzK8RgQE3qYZP8szfgPuaxvtK5H0HKfWFMhJB6T7zILQ2I0aku8G2v O4mua0BBe7fP55870N8y9PkS2rQTta+Gaiix+JopCqncSoykHuqW9Cs/SHrerHlS qv+Qbolyr/1V671yYN/BY+NgYNA1yRPIGtH2fvmHqaA/8DPz0rbF8IQNq5cvYCDc VInXzzceEL/hTjNdcr7Qfqb1074kxNRdlWAM+xwCo8NA72lGIevsXUu88Kkdlzdo nFlrRX/2X/Kx5Vs= -----END CERTIFICATE-----Generated at Fri May 3 03:10:47 2024 by rpki-client on console-ams.rpki-client.org