$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/9CE444808F2811ECA311FF19C4F9AE02.roa File: 9CE444808F2811ECA311FF19C4F9AE02.roa (raw, json) Hash identifier: s74RqywlkpPNZd/k54OkOPZY0zBYS0LcSwqRFyhZCaQ= Subject key identifier: AD:D5:C2:95:75:70:ED:EB:CB:C1:8A:E3:D7:1B:B7:88:DF:7E:1C:24 Certificate issuer: /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85 Certificate serial: 30F4 Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/9CE444808F2811ECA311FF19C4F9AE02.roa Signing time: Tue 30 Apr 2024 15:52:33 +0000 ROA not before: Tue 30 Apr 2024 15:52:33 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 45820 IP address blocks: 59.161.160.0/24 maxlen: 24 115.117.191.0/24 maxlen: 24 115.118.66.0/24 maxlen: 24 121.242.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 15:45:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12532 (0x30f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85 Validity Not Before: Apr 30 15:52:33 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=663113c1-29d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:e3:64:04:cc:9e:5c:4d:21:3e:15:df:51:e0: d2:73:cc:8c:9c:9b:a0:7f:ac:c4:dd:16:4e:e8:74: ad:8b:8c:c3:a0:81:02:83:da:b1:b2:8e:27:12:46: 24:b5:b8:41:41:8e:34:2b:54:84:6b:37:83:97:15: 03:b1:9e:88:d5:67:3b:51:c2:46:55:51:87:98:ce: 19:cf:54:de:04:8d:cb:e6:32:e8:6b:f3:ce:ff:e9: d4:1a:88:95:bf:2f:bb:05:92:03:4c:c7:ef:0a:a2: 15:74:c0:99:c7:f6:8a:21:9d:0f:ea:0b:1c:c5:30: ca:48:30:c7:c1:98:a2:2d:b3:05:fe:1d:f9:f2:a7: 55:d3:d7:28:31:0a:06:88:da:f6:30:59:0b:b7:2f: 77:88:92:45:4e:07:b5:ef:a6:81:05:84:0c:35:e1: 93:c0:ce:48:18:d3:a3:b4:34:45:78:5e:c5:c2:59: ad:a1:a9:a5:56:24:77:62:7f:82:14:65:b2:9b:77: 2c:a9:d7:ae:ee:58:b9:60:41:ed:52:91:18:c7:2c: 85:27:ba:60:64:b8:bf:8a:d0:7c:d3:b0:54:f2:5a: 2e:87:04:1a:0b:61:7e:1a:67:5e:10:7b:8c:c2:50: 58:9a:46:e0:0d:38:18:85:9e:cb:5f:a3:05:8b:35: 38:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D5:C2:95:75:70:ED:EB:CB:C1:8A:E3:D7:1B:B7:88:DF:7E:1C:24 X509v3 Authority Key Identifier: keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/9CE444808F2811ECA311FF19C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.161.160.0/24 115.117.191.0/24 115.118.66.0/24 121.242.21.0/24 Signature Algorithm: sha256WithRSAEncryption 34:6b:90:60:32:bc:ed:05:7d:05:b1:95:cc:d9:3c:d8:3c:53: 01:f2:e7:7b:c2:dc:a8:f9:49:4c:97:35:4f:3c:55:65:dd:83: 39:7d:3f:60:ec:fb:4b:7a:81:21:a2:76:13:2f:34:58:33:c5: 13:85:2d:7a:da:eb:2f:97:a0:a2:66:fc:33:bd:ce:c8:ea:68: 47:5c:81:09:74:6b:d4:3e:d7:62:8d:22:5b:df:f0:6e:59:d8: 08:0a:0c:14:f5:dc:d5:45:71:7a:e6:91:f7:63:99:99:d8:fa: 52:66:f0:f8:89:c3:29:46:0a:7e:1d:82:da:88:a2:b2:8f:f2: 87:64:30:9d:8b:dd:5e:be:8b:88:56:7a:73:ec:a5:5e:53:a6: 20:f3:11:b9:77:bd:74:03:26:23:d9:d2:ab:3a:fc:2c:a2:2a: 20:a6:32:57:6e:5c:4b:8f:5e:64:1b:51:35:7c:70:8c:d7:0a: 40:30:cd:5c:85:85:bb:cb:86:a8:e0:68:7c:30:27:ae:23:19: c7:f6:a1:ce:e7:38:e1:e7:6f:d9:d6:d3:f5:03:07:0c:b3:22: 55:da:1c:7a:93:10:63:8d:32:6f:bb:cc:3c:f6:60:e9:72:04: 06:f2:cf:05:74:3c:7b:ff:7c:f3:f0:44:4c:a1:46:be:ac:aa: b6:5e:26:95 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICMPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENFNzUxMTAvBgNVBAUTKDQ5ODkyNTM3RDhCMkMwMzI1QjdCRTA4MUZEOTI4NkM3 OUJFQTZBODUwHhcNMjQwNDMwMTU1MjMzWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMxMTNjMS0yOWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9eNkBMyeXE0hPhXfUeDSc8yMnJugf6zE3RZO6HSti4zDoIECg9qxso4nEkYk tbhBQY40K1SEazeDlxUDsZ6I1Wc7UcJGVVGHmM4Zz1TeBI3L5jLoa/PO/+nUGoiV vy+7BZIDTMfvCqIVdMCZx/aKIZ0P6gscxTDKSDDHwZiiLbMF/h358qdV09coMQoG iNr2MFkLty93iJJFTge176aBBYQMNeGTwM5IGNOjtDRFeF7FwlmtoamlViR3Yn+C FGWym3csqdeu7li5YEHtUpEYxyyFJ7pgZLi/itB807BU8louhwQaC2F+GmdeEHuM wlBYmkbgDTgYhZ7LX6MFizU4kwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFK3VwpV1 cO3ry8GK49cbt4jffhwkMB8GA1UdIwQYMBaAFEmJJTfYssAyW3vggf2Shseb6mqF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0U3NS9EMjJFRjNENkZG NEIxMUUyODFCRTA2NjI1OTExRUEzMi9TWWtsTjlpeXdESmJlLUNCX1pLR3g1dnFh b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NZa2xOOWl5d0RKYmUtQ0JfWktHeDV2cWFvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NENFNzUvRDIyRUYzRDZGRjRCMTFFMjgxQkUwNjYyNTkxMUVBMzIvOUNFNDQ0ODA4 RjI4MTFFQ0EzMTFGRjE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAA7oaADBABzdb8DBABzdkIDBAB58hUwDQYJKoZIhvcNAQEL BQADggEBADRrkGAyvO0FfQWxlczZPNg8UwHy53vC3Kj5SUyXNU88VWXdgzl9P2Ds +0t6gSGidhMvNFgzxROFLXra6y+XoKJm/DO9zsjqaEdcgQl0a9Q+12KNIlvf8G5Z 2AgKDBT13NVFcXrmkfdjmZnY+lJm8PiJwylGCn4dgtqIorKP8odkMJ2L3V6+i4hW enPspV5TpiDzEbl3vXQDJiPZ0qs6/CyiKiCmMlduXEuPXmQbUTV8cIzXCkAwzVyF hbvLhqjgaHwwJ64jGcf2oc7nOOHnb9nW0/UDBwyzIlXaHHqTEGONMm+7zDz2YOly BAbyzwV0PHv/fPPwREyhRr6sqrZeJpU= -----END CERTIFICATE-----Generated at Mon May 20 17:22:05 2024 by rpki-client on console-fra.rpki-client.org