$ rpki-client -vvf rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/B523DAE68C9211EABC682867C4F9AE02.roa File: B523DAE68C9211EABC682867C4F9AE02.roa (raw, json) Hash identifier: keB3hVG0s+/wuVaM04tge7cSFc9OBrWQF6/GwgTgVas= Subject key identifier: 56:97:7E:77:67:71:5A:A3:55:BF:1F:A8:3C:0F:D6:EB:1D:E9:A5:5D Certificate issuer: /CN=A9140EE2/serialNumber=475250E6A055478F4AC1EAF1ED32D5672C3CD1B3 Certificate serial: 0BB0 Authority key identifier: 47:52:50:E6:A0:55:47:8F:4A:C1:EA:F1:ED:32:D5:67:2C:3C:D1:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/B523DAE68C9211EABC682867C4F9AE02.roa Signing time: Wed 28 Jun 2023 18:37:59 +0000 ROA not before: Wed 28 Jun 2023 18:37:59 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 63991 IP address blocks: 103.58.144.0/23 maxlen: 24 103.127.62.0/23 maxlen: 24 2405:55c0::/32 maxlen: 32 2405:55c0::/48 maxlen: 48 2405:55c0:3c::/48 maxlen: 48 2405:55c0:3f::/48 maxlen: 48 2405:55c0:54::/48 maxlen: 48 2405:55c0:55::/48 maxlen: 48 2405:55c0:80::/48 maxlen: 48 2405:55c0:81::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.crl rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2992 (0xbb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140EE2/serialNumber=475250E6A055478F4AC1EAF1ED32D5672C3CD1B3 Validity Not Before: Jun 28 18:37:59 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=649c7e06-f62c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a8:2a:31:07:f9:70:1f:f9:63:e5:e1:2e:9c: 70:4f:3a:29:0d:b8:b9:20:bc:f7:e3:b0:96:2a:02: 19:19:b0:63:02:53:67:7c:86:61:9e:fa:dd:8e:a4: da:9f:a6:5a:0a:5c:16:d9:9c:ad:b2:82:62:2d:21: ef:08:1c:1b:66:0c:67:8d:9a:f6:0d:2c:d3:ca:83: c2:cf:76:08:fe:ae:98:5a:c5:a9:99:38:c8:e4:2b: fa:97:a2:88:a4:ce:b0:e2:16:52:4c:6d:2f:07:ab: dd:8e:2c:ca:37:dc:12:c7:15:3d:55:7b:6d:45:ca: 01:0e:d0:34:87:f0:83:c9:2c:08:5c:37:fe:7d:8d: 26:f6:20:7f:73:f8:8a:3e:65:31:7a:21:01:81:5d: 5b:f8:6a:41:63:b3:74:fc:49:fe:5f:13:22:2e:fd: 4c:f9:45:a3:4d:77:13:8e:c6:7c:50:be:8a:fe:2e: c2:ea:06:98:b8:6d:07:43:bd:3e:5c:d2:d1:01:5e: ab:88:97:52:69:42:5e:e8:65:3a:21:7e:02:b8:17: a8:c6:97:0e:20:b5:20:30:39:f3:38:84:61:0b:ff: 83:5c:e5:18:04:1a:d4:5b:f5:14:b1:4b:13:01:b5: 18:ad:8a:93:64:f7:8a:de:1d:5f:5d:e9:cd:14:ea: 43:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:97:7E:77:67:71:5A:A3:55:BF:1F:A8:3C:0F:D6:EB:1D:E9:A5:5D X509v3 Authority Key Identifier: keyid:47:52:50:E6:A0:55:47:8F:4A:C1:EA:F1:ED:32:D5:67:2C:3C:D1:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/B523DAE68C9211EABC682867C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.58.144.0/23 103.127.62.0/23 IPv6: 2405:55c0::/32 Signature Algorithm: sha256WithRSAEncryption 38:fb:dc:26:4b:c6:73:73:f2:f9:8e:b2:8b:dc:ba:d1:2b:00: aa:bb:73:88:c1:4a:29:59:d3:7f:27:ec:29:8e:2a:25:e4:dd: 84:1f:03:a2:eb:75:64:e0:6d:ae:61:ab:c5:9c:b4:ed:c7:f8: 6d:aa:71:79:e6:3d:2a:06:72:6d:84:4f:2f:87:73:cb:d9:93: 5a:bc:c9:1c:b2:5b:d2:cf:02:4b:00:5a:10:44:a0:d9:75:91: 12:b2:26:73:42:04:63:97:86:74:67:84:93:27:b0:b8:01:54: 50:77:31:23:8b:80:fc:78:06:90:64:22:90:5f:42:77:61:7a: 02:3c:6e:fb:6a:2a:0c:53:ed:3a:e2:4a:77:f6:da:1f:7f:11: db:02:85:6d:06:a3:ca:c9:8f:9e:2f:d4:b7:10:b3:ed:02:fb: 80:d9:7e:55:fd:ff:18:73:c1:bf:45:c2:05:15:b6:36:0e:40: 72:fa:a8:85:de:14:b6:f4:4d:5d:af:c1:bd:33:f0:0d:e6:ea: c9:3a:38:94:f4:06:95:63:b8:d7:49:96:ac:01:e6:85:47:68: 99:e6:ed:49:8f:ff:eb:2d:56:84:88:c2:e7:8e:09:19:bb:f2: 78:eb:cf:53:9b:17:d9:a8:ed:8f:36:fc:30:a3:64:ca:78:27: e7:13:eb:85 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICC7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBFRTIxMTAvBgNVBAUTKDQ3NTI1MEU2QTA1NTQ3OEY0QUMxRUFGMUVEMzJENTY3 MkMzQ0QxQjMwHhcNMjMwNjI4MTgzNzU5WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDljN2UwNi1mNjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6gqMQf5cB/5Y+XhLpxwTzopDbi5ILz347CWKgIZGbBjAlNnfIZhnvrdjqTa n6ZaClwW2ZytsoJiLSHvCBwbZgxnjZr2DSzTyoPCz3YI/q6YWsWpmTjI5Cv6l6KI pM6w4hZSTG0vB6vdjizKN9wSxxU9VXttRcoBDtA0h/CDySwIXDf+fY0m9iB/c/iK PmUxeiEBgV1b+GpBY7N0/En+XxMiLv1M+UWjTXcTjsZ8UL6K/i7C6gaYuG0HQ70+ XNLRAV6riJdSaUJe6GU6IX4CuBeoxpcOILUgMDnzOIRhC/+DXOUYBBrUW/UUsUsT AbUYrYqTZPeK3h1fXenNFOpDTwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFFaXfndn cVqjVb8fqDwP1usd6aVdMB8GA1UdIwQYMBaAFEdSUOagVUePSsHq8e0y1WcsPNGz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEVFMi9FQTAxRDU1QURG NzMxMUU5QUJFQkQ0M0JDNEY5QUUwMi9SMUpRNXFCVlI0OUt3ZXJ4N1RMVlp5dzgw Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IxSlE1cUJWUjQ5S3dlcng3VExWWnl3ODBiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDBFRTIvRUEwMUQ1NUFERjczMTFFOUFCRUJENDNCQzRGOUFFMDIvQjUyM0RBRTY4 QzkyMTFFQUJDNjgyODY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAFnOpADBAFnfz4wDQQCAAIwBwMFACQFVcAwDQYJKoZIhvcN AQELBQADggEBADj73CZLxnNz8vmOsovcutErAKq7c4jBSilZ038n7CmOKiXk3YQf A6LrdWTgba5hq8WctO3H+G2qcXnmPSoGcm2ETy+Hc8vZk1q8yRyyW9LPAksAWhBE oNl1kRKyJnNCBGOXhnRnhJMnsLgBVFB3MSOLgPx4BpBkIpBfQndhegI8bvtqKgxT 7TriSnf22h9/EdsChW0Go8rJj54v1LcQs+0C+4DZflX9/xhzwb9FwgUVtjYOQHL6 qIXeFLb0TV2vwb0z8A3m6sk6OJT0BpVjuNdJlqwB5oVHaJnm7UmP/+stVoSIwueO CRm78njrz1ObF9mo7Y82/DCjZMp4J+cT64U= -----END CERTIFICATE-----Generated at Sat May 18 19:21:03 2024 by rpki-client on console-fra.rpki-client.org