$ rpki-client -vvf rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/7E847B60998D11EEB9881356C4F9AE02.roa File: 7E847B60998D11EEB9881356C4F9AE02.roa (raw, json) Hash identifier: 3EQ+GWZ6TshCx/o1t1gNvssWYw5RPFGNckJJqXShino= Subject key identifier: BB:2D:DC:50:B9:33:E6:22:75:DC:B1:75:DC:EA:A4:6A:32:7A:18:A3 Certificate issuer: /CN=A914B5BD/serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E Certificate serial: 173A Authority key identifier: 22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/7E847B60998D11EEB9881356C4F9AE02.roa Signing time: Wed 13 Dec 2023 07:59:09 +0000 ROA not before: Wed 13 Dec 2023 07:59:09 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 134512 IP address blocks: 43.239.140.0/22 maxlen: 22 43.239.140.0/24 maxlen: 24 43.239.141.0/24 maxlen: 24 43.239.142.0/24 maxlen: 24 43.239.143.0/24 maxlen: 24 103.71.172.0/22 maxlen: 22 103.71.172.0/24 maxlen: 24 103.71.173.0/24 maxlen: 24 103.71.174.0/24 maxlen: 24 103.71.175.0/24 maxlen: 24 103.194.168.0/24 maxlen: 24 103.194.169.0/24 maxlen: 24 103.194.170.0/24 maxlen: 24 103.194.171.0/24 maxlen: 24 103.248.52.0/24 maxlen: 24 103.248.53.0/24 maxlen: 24 103.248.55.0/24 maxlen: 24 103.252.220.0/22 maxlen: 22 103.252.220.0/24 maxlen: 24 103.252.221.0/24 maxlen: 24 103.252.222.0/24 maxlen: 24 103.252.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 16:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5946 (0x173a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B5BD/serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E Validity Not Before: Dec 13 07:59:09 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=6579644c-d82f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:50:a5:12:70:33:01:53:d7:60:c3:d8:64:85: 4e:ae:b6:86:dd:cf:7b:19:0c:89:08:ac:f7:54:db: 0a:f9:ed:7e:be:a0:cc:a4:62:9e:69:24:e5:7c:26: 4a:3f:29:37:9e:7e:7b:3c:4f:55:7e:c2:c5:7e:7c: 90:5f:fd:7b:6a:7f:37:cf:18:72:3c:ca:3d:ab:0e: ca:7d:ba:93:7b:bc:2f:68:63:bf:e6:b3:f0:b5:ee: 79:b1:d6:b6:5a:e2:4d:01:c4:d3:24:63:b9:40:68: be:a2:60:79:94:fd:69:2b:d2:e1:1a:be:a7:5c:af: 48:c7:d0:17:02:09:26:25:0d:2d:d1:77:63:de:c1: 14:97:d4:d2:b1:aa:73:f8:1b:f2:dc:3b:da:ba:9d: 8e:9c:8a:ef:38:6a:62:57:3b:43:47:86:4b:f0:8a: 5b:39:66:59:9c:d4:c0:0e:ef:f5:1b:be:c3:f5:64: d1:ef:df:13:1a:fa:ee:2a:03:78:d6:66:aa:de:ff: a7:24:d6:e7:cc:cf:ce:d9:1d:86:2c:25:2b:2d:c8: 29:f9:2d:e1:09:d9:a6:4a:5f:dd:94:b0:c5:cb:07: 5e:56:a5:7b:5f:ad:60:70:24:91:4a:19:b5:6e:a7: ae:78:3a:e0:5e:7e:56:43:1f:65:4b:b8:bc:d9:c0: 87:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:2D:DC:50:B9:33:E6:22:75:DC:B1:75:DC:EA:A4:6A:32:7A:18:A3 X509v3 Authority Key Identifier: keyid:22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/7E847B60998D11EEB9881356C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.239.140.0/22 103.71.172.0/22 103.194.168.0/22 103.248.52.0/23 103.248.55.0/24 103.252.220.0/22 Signature Algorithm: sha256WithRSAEncryption b0:8e:35:4d:ad:bd:76:7a:b2:2e:28:bf:e9:be:b7:51:44:8e: a7:91:3a:f9:dd:84:50:90:27:f4:bc:74:e2:45:e8:bc:ed:30: b9:ee:0c:0c:12:d3:c9:31:1d:f1:ad:a4:88:dd:99:e3:28:e8: c5:a8:ab:20:d5:28:93:b2:b7:e0:05:b8:81:df:7a:34:25:3b: 56:d3:a0:d8:3d:0a:92:f5:90:43:53:fe:0e:8f:ff:98:39:53: 5c:53:2b:b4:4c:9d:0c:7b:4f:6f:8a:d4:da:e5:76:03:8e:77: 9f:f1:da:24:f8:bf:2f:90:be:c1:64:d2:14:6b:de:1f:0f:d8: 15:f3:fb:87:3f:60:f2:2d:d2:c0:b5:29:40:5b:7b:6d:ff:02: 64:a2:a3:16:6b:84:41:4f:0b:47:63:68:c9:e0:da:b6:d6:71: 38:80:cd:db:34:1c:8b:a0:b6:55:5b:0d:9b:c1:14:b4:c6:df: 98:e9:73:2e:1d:35:c9:17:6b:96:8b:23:11:db:db:1e:08:59: 9f:21:84:b3:d5:ff:41:25:98:a9:ce:2f:e8:5e:9c:0e:f5:25: b6:e4:75:b3:46:77:86:35:88:03:b4:85:08:97:6d:64:e2:ae: bf:b7:91:b7:6e:05:1d:54:c6:30:c3:0a:df:4a:ee:65:5d:ff: 3a:63:bb:81 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICFzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI1QkQxMTAvBgNVBAUTKDIyRTgxQjMyN0NCMUZCMzUwMUUwNUFGQUI5NDEyMTkx OEZEQjVCNUUwHhcNMjMxMjEzMDc1OTA5WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTc5NjQ0Yy1kODJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlClEnAzAVPXYMPYZIVOrraG3c97GQyJCKz3VNsK+e1+vqDMpGKeaSTlfCZK Pyk3nn57PE9VfsLFfnyQX/17an83zxhyPMo9qw7KfbqTe7wvaGO/5rPwte55sda2 WuJNAcTTJGO5QGi+omB5lP1pK9LhGr6nXK9Ix9AXAgkmJQ0t0Xdj3sEUl9TSsapz +Bvy3Dvaup2OnIrvOGpiVztDR4ZL8IpbOWZZnNTADu/1G77D9WTR798TGvruKgN4 1maq3v+nJNbnzM/O2R2GLCUrLcgp+S3hCdmmSl/dlLDFywdeVqV7X61gcCSRShm1 bqeueDrgXn5WQx9lS7i82cCHPQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFLst3FC5 M+YiddyxddzqpGoyehijMB8GA1UdIwQYMBaAFCLoGzJ8sfs1AeBa+rlBIZGP21te MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjVCRC8zM0NCMTE3QUI1 QTkxMUU3OUM3NENCNzJDNEY5QUUwMi9JdWdiTW55eC16VUI0RnI2dVVFaGtZX2JX MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l1Z2JNbnl4LXpVQjRGcjZ1VUVoa1lfYlcxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEI1QkQvMzNDQjExN0FCNUE5MTFFNzlDNzRDQjcyQzRGOUFFMDIvN0U4NDdCNjA5 OThEMTFFRUI5ODgxMzU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgABMCQDBAIr74wDBAJnR6wDBAJnwqgDBAFn+DQDBABn+DcDBAJn/Nww DQYJKoZIhvcNAQELBQADggEBALCONU2tvXZ6si4ov+m+t1FEjqeROvndhFCQJ/S8 dOJF6LztMLnuDAwS08kxHfGtpIjdmeMo6MWoqyDVKJOyt+AFuIHfejQlO1bToNg9 CpL1kENT/g6P/5g5U1xTK7RMnQx7T2+K1NrldgOOd5/x2iT4vy+QvsFk0hRr3h8P 2BXz+4c/YPIt0sC1KUBbe23/AmSioxZrhEFPC0djaMng2rbWcTiAzds0HIugtlVb DZvBFLTG35jpcy4dNckXa5aLIxHb2x4IWZ8hhLPV/0ElmKnOL+henA71JbbkdbNG d4Y1iAO0hQiXbWTirr+3kbduBR1UxjDDCt9K7mVd/zpju4E= -----END CERTIFICATE-----Generated at Thu May 16 17:51:19 2024 by rpki-client on console-ams.rpki-client.org