$ rpki-client -vvf rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/9E48E9821FB011EAAD480012C4F9AE02.roa File: 9E48E9821FB011EAAD480012C4F9AE02.roa (raw, json) Hash identifier: CB5IE4ksCyHI1WtHUE34hn1yLuHmZuwQKKrDnjirwUA= Subject key identifier: 71:FE:A3:1D:25:98:2F:83:C9:E6:82:2D:07:02:79:A5:95:38:AD:1E Certificate issuer: /CN=A914BBEF/serialNumber=33A3B2A5303B5117B32E7E4586ACA94408918742 Certificate serial: 0A87 Authority key identifier: 33:A3:B2:A5:30:3B:51:17:B3:2E:7E:45:86:AC:A9:44:08:91:87:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/9E48E9821FB011EAAD480012C4F9AE02.roa Signing time: Fri 22 Sep 2023 19:36:48 +0000 ROA not before: Fri 22 Sep 2023 19:36:48 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 45938 IP address blocks: 180.222.128.0/21 maxlen: 21 180.222.128.0/24 maxlen: 24 180.222.129.0/24 maxlen: 24 180.222.130.0/24 maxlen: 24 180.222.131.0/24 maxlen: 24 180.222.132.0/24 maxlen: 24 180.222.133.0/24 maxlen: 24 180.222.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.crl rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2695 (0xa87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BBEF/serialNumber=33A3B2A5303B5117B32E7E4586ACA94408918742 Validity Not Before: Sep 22 19:36:48 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=650deccf-d491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f8:20:2f:91:5d:ea:0a:54:d7:32:82:cd:29: 82:3d:6e:e0:fb:cd:54:93:5b:ef:fc:5f:f5:ba:3c: c8:94:58:70:dd:af:d2:f8:a5:5a:0f:3b:c1:f8:c7: 83:a1:d5:c7:f1:5b:80:0c:ee:c2:1e:c8:fb:10:1a: 9c:4e:a8:0e:8d:27:91:b4:06:b6:ba:ae:e0:19:e4: 2e:f1:c7:c0:69:f9:db:79:0a:61:26:97:e4:42:47: a8:5d:9e:37:51:4e:4e:6b:44:1a:8d:58:ed:52:28: 4b:b2:6a:5f:55:e0:85:d5:6c:2d:d9:1b:09:48:65: d9:03:75:1a:42:e5:2f:55:10:e7:72:45:2b:65:b7: 74:1c:67:2c:d4:79:67:2d:fa:fe:bb:d9:80:c3:64: 44:ba:fe:e5:12:3f:a6:bf:0d:c2:20:71:da:10:1d: 46:89:d0:e5:54:93:c3:bc:35:76:8c:b2:29:c3:09: a4:98:f6:87:50:87:d6:30:1f:48:72:d6:d2:77:9f: de:1a:d2:26:6e:34:f3:67:f6:e5:ad:66:a9:45:a8: 7a:87:cf:5a:ee:bd:33:e7:06:57:8f:22:78:57:b2: 67:35:e6:05:42:a9:93:37:fd:f2:62:a8:90:25:4c: 1f:5a:9a:df:e9:a7:4b:27:ba:43:8d:b3:67:6b:d9: 6f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:FE:A3:1D:25:98:2F:83:C9:E6:82:2D:07:02:79:A5:95:38:AD:1E X509v3 Authority Key Identifier: keyid:33:A3:B2:A5:30:3B:51:17:B3:2E:7E:45:86:AC:A9:44:08:91:87:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/9E48E9821FB011EAAD480012C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.222.128.0/21 Signature Algorithm: sha256WithRSAEncryption 53:29:0d:40:60:5f:9e:06:6a:b6:02:28:89:b6:bf:03:ba:d4: a0:1a:99:54:17:91:51:19:49:1a:26:6f:d6:19:41:f6:3c:1f: 4c:4b:78:0b:00:8d:6b:28:c3:da:8c:7c:f7:2a:5a:29:03:c4: a1:66:2b:af:20:85:13:da:43:e9:d7:17:0b:19:f4:ac:10:ed: 23:01:8e:12:e6:d6:d1:1d:0f:86:31:a8:58:b4:0c:0f:6b:24: 97:c1:7a:b0:55:1e:56:fa:c1:a3:74:a4:f1:cc:67:6d:5a:8a: 9d:07:4a:a8:3b:6e:8b:5f:b3:40:0b:d1:38:e1:bc:1a:e1:9c: 1f:8d:43:dc:5b:87:b4:fd:7e:3f:41:70:c0:34:ac:94:e2:2a: 8c:bc:45:56:c3:25:41:99:f7:1f:3a:f0:2b:8b:c4:7d:55:f0: 26:d9:d1:72:67:b9:96:67:20:cf:d1:64:d8:30:b4:c8:91:2d: 23:57:d1:a0:08:ce:08:b5:89:f5:66:86:43:1d:ee:4f:3d:3f: 0f:bd:49:bd:71:6a:5f:39:cd:58:4f:7c:23:b7:3f:45:e1:fa: c0:8c:04:1d:d7:41:00:f9:8d:04:0d:5d:54:1a:9a:d6:36:91: 35:b0:f9:c2:0a:36:f9:9b:76:76:a5:c8:e0:6d:3b:24:83:8c: ed:09:eb:87 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJCRUYxMTAvBgNVBAUTKDMzQTNCMkE1MzAzQjUxMTdCMzJFN0U0NTg2QUNBOTQ0 MDg5MTg3NDIwHhcNMjMwOTIyMTkzNjQ4WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTBkZWNjZi1kNDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PggL5Fd6gpU1zKCzSmCPW7g+81Uk1vv/F/1ujzIlFhw3a/S+KVaDzvB+MeD odXH8VuADO7CHsj7EBqcTqgOjSeRtAa2uq7gGeQu8cfAafnbeQphJpfkQkeoXZ43 UU5Oa0QajVjtUihLsmpfVeCF1Wwt2RsJSGXZA3UaQuUvVRDnckUrZbd0HGcs1Hln Lfr+u9mAw2REuv7lEj+mvw3CIHHaEB1GidDlVJPDvDV2jLIpwwmkmPaHUIfWMB9I ctbSd5/eGtImbjTzZ/blrWapRah6h89a7r0z5wZXjyJ4V7JnNeYFQqmTN/3yYqiQ JUwfWprf6adLJ7pDjbNna9lvRwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHH+ox0l mC+DyeaCLQcCeaWVOK0eMB8GA1UdIwQYMBaAFDOjsqUwO1EXsy5+RYasqUQIkYdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkJFRi9GOTAzMDI2MDFG QUUxMUVBOTM2MEZGMEVDNEY5QUUwMi9NNk95cFRBN1VSZXpMbjVGaHF5cFJBaVJo MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL002T3lwVEE3VVJlekxuNUZocXlwUkFpUmgwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEJCRUYvRjkwMzAyNjAxRkFFMTFFQTkzNjBGRjBFQzRGOUFFMDIvOUU0OEU5ODIx RkIwMTFFQUFENDgwMDEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAO03oAwDQYJKoZIhvcNAQELBQADggEBAFMpDUBgX54GarYC KIm2vwO61KAamVQXkVEZSRomb9YZQfY8H0xLeAsAjWsow9qMfPcqWikDxKFmK68g hRPaQ+nXFwsZ9KwQ7SMBjhLm1tEdD4YxqFi0DA9rJJfBerBVHlb6waN0pPHMZ21a ip0HSqg7botfs0AL0TjhvBrhnB+NQ9xbh7T9fj9BcMA0rJTiKoy8RVbDJUGZ9x86 8CuLxH1V8CbZ0XJnuZZnIM/RZNgwtMiRLSNX0aAIzgi1ifVmhkMd7k89Pw+9Sb1x al85zVhPfCO3P0Xh+sCMBB3XQQD5jQQNXVQamtY2kTWw+cIKNvmbdnalyOBtOySD jO0J64c= -----END CERTIFICATE-----Generated at Fri May 10 21:16:10 2024 by rpki-client on console-fra.rpki-client.org