$ rpki-client -vvf rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/F100A1207F9911EBAFB6C91BC4F9AE02.roa File: F100A1207F9911EBAFB6C91BC4F9AE02.roa (raw, json) Hash identifier: jFnYqzGhAcOoCv3LrTnwAcNObZ+rFp5+5bu5sVza2zU= Subject key identifier: D5:B0:E4:2A:5D:26:9B:3F:24:9F:AA:AC:80:69:28:E0:E5:B8:2A:55 Certificate issuer: /CN=A9147DCA/serialNumber=2C3A2A8121CCF8A9BFC7CB6691854AF5E4D219F9 Certificate serial: 0520 Authority key identifier: 2C:3A:2A:81:21:CC:F8:A9:BF:C7:CB:66:91:85:4A:F5:E4:D2:19:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/F100A1207F9911EBAFB6C91BC4F9AE02.roa Signing time: Wed 02 Aug 2023 23:40:16 +0000 ROA not before: Wed 02 Aug 2023 23:40:16 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 131476 IP address blocks: 43.245.168.0/22 maxlen: 22 43.245.169.0/24 maxlen: 24 43.245.170.0/24 maxlen: 24 43.245.171.0/24 maxlen: 24 103.4.236.0/24 maxlen: 24 103.4.237.0/24 maxlen: 24 103.4.238.0/24 maxlen: 24 103.4.239.0/24 maxlen: 24 202.81.4.0/22 maxlen: 22 202.81.4.0/24 maxlen: 24 202.81.5.0/24 maxlen: 24 202.81.6.0/24 maxlen: 24 202.81.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1312 (0x520) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147DCA/serialNumber=2C3A2A8121CCF8A9BFC7CB6691854AF5E4D219F9 Validity Not Before: Aug 2 23:40:16 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64cae960-c6b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:83:f1:0d:00:66:49:97:1f:e0:53:2d:dc:a2: 8f:6e:a6:f1:ca:cd:a1:ce:5d:f6:c7:12:c3:0a:20: 99:45:96:84:42:e2:07:ec:aa:c3:f8:56:9b:d1:9b: 35:d7:d8:dd:17:c3:2a:59:a3:6b:ce:9e:fc:96:18: 07:f6:10:ff:2b:aa:ec:f0:b9:dc:72:55:41:a9:7c: 9f:6b:2f:33:8a:f0:3e:48:66:b5:eb:52:64:d1:2a: e4:cf:3b:c4:89:76:58:75:8e:1b:cb:76:0d:e1:69: c0:84:86:16:fb:94:61:b6:67:a1:3b:10:c9:6a:fc: f0:a1:0c:1d:7f:55:4f:2d:9b:80:b5:64:7c:55:d3: c1:1a:f6:8c:6c:59:14:0f:5b:db:ef:28:bc:aa:a7: 4c:6f:af:06:72:20:70:19:ea:c8:51:98:fd:cf:2f: 06:bb:45:c4:8c:c1:38:46:f2:79:c7:f1:95:fe:56: 70:60:7b:18:b0:37:ad:78:bc:28:4c:da:56:af:7d: cf:29:96:d9:71:01:d6:52:14:79:cf:35:a5:87:43: b6:ba:c9:12:c6:71:e8:0f:81:3e:22:84:c1:5a:a5: cc:5b:7c:a9:ba:34:77:73:a9:c3:9f:cf:bd:f0:22: 84:9d:cc:f4:64:04:28:67:e1:4a:c6:9b:51:39:31: 9b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B0:E4:2A:5D:26:9B:3F:24:9F:AA:AC:80:69:28:E0:E5:B8:2A:55 X509v3 Authority Key Identifier: keyid:2C:3A:2A:81:21:CC:F8:A9:BF:C7:CB:66:91:85:4A:F5:E4:D2:19:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/F100A1207F9911EBAFB6C91BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.245.168.0/22 103.4.236.0/22 202.81.4.0/22 Signature Algorithm: sha256WithRSAEncryption 94:9f:7f:60:9f:5b:1c:96:90:47:4c:6a:c2:01:8c:e9:8f:a4: ec:cb:ed:2a:23:07:21:77:26:c7:3d:2b:78:c9:1b:05:95:44: 80:87:7a:b7:e8:9c:bf:05:c3:89:74:1e:73:91:80:97:c2:c6: e6:57:0c:0b:32:54:96:a3:2c:81:b6:ef:b8:b6:39:f4:93:65: 1e:6c:db:ec:a4:78:b8:72:15:31:72:38:76:91:46:82:56:b6: 65:29:5c:d9:af:e0:71:4b:fb:41:d9:c3:04:9f:2f:88:55:22: 46:af:9f:45:9b:15:91:55:d0:0b:35:fe:a2:ea:e5:cc:ab:44: 02:a2:02:5c:76:6f:99:df:cc:57:0b:08:83:e2:9f:5c:c5:4c: 12:8a:ad:30:ed:4f:c9:e2:9a:69:3d:09:69:b2:fb:43:ae:a3: 96:ef:b4:e4:a0:14:ea:fb:fc:d2:d9:71:89:56:6d:0d:08:81: 61:a0:31:db:c8:58:e3:36:2e:18:43:23:4b:9c:81:b9:1a:59: e6:dd:87:4f:69:dd:fc:ea:1b:80:ef:db:b5:76:b6:d8:d4:de: 9f:d0:ac:20:55:a6:3a:de:43:66:d1:53:ad:d6:da:88:3e:33: 13:db:44:14:d8:ac:f3:b6:38:1d:53:93:40:9f:f1:4b:77:d1: b3:ca:dd:b7 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdEQ0ExMTAvBgNVBAUTKDJDM0EyQTgxMjFDQ0Y4QTlCRkM3Q0I2NjkxODU0QUY1 RTREMjE5RjkwHhcNMjMwODAyMjM0MDE2WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGNhZTk2MC1jNmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5IPxDQBmSZcf4FMt3KKPbqbxys2hzl32xxLDCiCZRZaEQuIH7KrD+Fab0Zs1 19jdF8MqWaNrzp78lhgH9hD/K6rs8LncclVBqXyfay8zivA+SGa161Jk0SrkzzvE iXZYdY4by3YN4WnAhIYW+5RhtmehOxDJavzwoQwdf1VPLZuAtWR8VdPBGvaMbFkU D1vb7yi8qqdMb68GciBwGerIUZj9zy8Gu0XEjME4RvJ5x/GV/lZwYHsYsDeteLwo TNpWr33PKZbZcQHWUhR5zzWlh0O2uskSxnHoD4E+IoTBWqXMW3ypujR3c6nDn8+9 8CKEncz0ZAQoZ+FKxptROTGbIwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFNWw5Cpd Jps/JJ+qrIBpKODluCpVMB8GA1UdIwQYMBaAFCw6KoEhzPipv8fLZpGFSvXk0hn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0RDQS8xQzc1RURBNjdE NkExMUVCQTRBNTk4MENDNEY5QUUwMi9MRG9xZ1NITS1LbV94OHRta1lWSzllVFNH ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xEb3FnU0hNLUttX3g4dG1rWVZLOWVUU0dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDdEQ0EvMUM3NUVEQTY3RDZBMTFFQkE0QTU5ODBDQzRGOUFFMDIvRjEwMEExMjA3 Rjk5MTFFQkFGQjZDOTFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAIr9agDBAJnBOwDBALKUQQwDQYJKoZIhvcNAQELBQADggEB AJSff2CfWxyWkEdMasIBjOmPpOzL7SojByF3Jsc9K3jJGwWVRICHerfonL8Fw4l0 HnORgJfCxuZXDAsyVJajLIG277i2OfSTZR5s2+ykeLhyFTFyOHaRRoJWtmUpXNmv 4HFL+0HZwwSfL4hVIkavn0WbFZFV0As1/qLq5cyrRAKiAlx2b5nfzFcLCIPin1zF TBKKrTDtT8nimmk9CWmy+0Ouo5bvtOSgFOr7/NLZcYlWbQ0IgWGgMdvIWOM2LhhD I0ucgbkaWebdh09p3fzqG4Dv27V2ttjU3p/QrCBVpjreQ2bRU63W2og+MxPbRBTY rPO2OB1Tk0Cf8Ut30bPK3bc= -----END CERTIFICATE-----Generated at Fri May 17 01:06:59 2024 by rpki-client on console-fra.rpki-client.org