$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/B4D9927A014E11EB9E13483FC4F9AE02.roa File: B4D9927A014E11EB9E13483FC4F9AE02.roa (raw, json) Hash identifier: QBgYyEawhn1JXFywm9CFNs+9U5jAgMIpTHNoQrJwCB0= Subject key identifier: C9:CB:78:CC:A4:90:43:0D:13:B7:29:77:44:D3:9F:3B:05:58:36:C1 Certificate issuer: /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85 Certificate serial: 30F9 Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/B4D9927A014E11EB9E13483FC4F9AE02.roa Signing time: Tue 30 Apr 2024 15:52:41 +0000 ROA not before: Tue 30 Apr 2024 15:52:41 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 6453 IP address blocks: 59.163.231.0/24 maxlen: 24 115.108.48.0/20 maxlen: 24 115.112.168.0/23 maxlen: 23 203.199.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 15:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12537 (0x30f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85 Validity Not Before: Apr 30 15:52:41 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=663113c9-f025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:33:43:41:04:94:54:6b:93:0f:b5:f9:e1:36: 96:76:64:91:ea:8a:e0:7e:3f:10:df:81:4a:b0:2d: bb:7d:bd:90:35:62:c5:70:91:b1:fb:39:c9:a6:0d: 42:61:ed:65:3d:17:f3:27:65:05:1e:d9:09:95:ec: a1:c7:f7:ec:25:4d:89:5d:bf:3b:77:42:41:a2:ad: 0f:75:66:85:1d:61:b7:aa:8e:7c:29:4a:1c:a9:58: 0a:2c:14:81:6d:45:8a:bd:25:76:5e:3a:76:af:49: 47:0b:cc:53:17:f9:2b:15:a6:e9:db:65:a6:8e:0b: 3f:00:09:08:39:54:24:e2:96:ed:c0:fb:12:03:2a: 06:e0:b8:d5:94:7e:96:90:38:9f:bb:8e:2f:ff:3a: a3:b3:96:40:9e:54:9c:59:dc:56:ac:3d:5d:01:12: 65:c3:1b:fc:3e:c4:d6:b3:23:0d:22:9d:ab:0e:1d: 0c:80:9e:02:3d:33:ff:35:b5:e2:a4:4e:70:01:35: c3:0a:d3:5a:3e:df:95:19:22:e5:d1:a2:02:22:e3: c6:0e:11:47:15:de:3c:00:9c:dc:af:02:ca:aa:3f: 72:56:34:61:75:a8:30:a6:d7:16:48:e9:a5:7d:3d: 0f:c7:e5:fb:89:96:1c:31:a2:f5:7c:46:e5:17:34: 30:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:CB:78:CC:A4:90:43:0D:13:B7:29:77:44:D3:9F:3B:05:58:36:C1 X509v3 Authority Key Identifier: keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/B4D9927A014E11EB9E13483FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.163.231.0/24 115.108.48.0/20 115.112.168.0/23 203.199.243.0/24 Signature Algorithm: sha256WithRSAEncryption 02:7c:1c:e0:67:27:fe:30:cf:a2:cd:13:9f:e7:c6:cc:a7:9c: 3c:ca:ca:41:95:94:61:98:af:d5:2e:da:17:c6:42:7d:73:ac: cd:31:e4:84:f1:4e:30:c2:9c:6b:19:ad:10:b2:5f:29:3a:84: 0a:5c:8c:7a:c5:25:1d:b0:f5:54:79:95:92:91:0d:bc:bd:71: 2e:b1:65:f0:dd:5f:6b:93:ed:cb:f1:08:73:21:1e:87:33:19: b0:a8:fc:62:2f:bd:e2:ad:b8:41:68:f4:e5:62:3f:d5:76:6e: 47:f4:1a:1f:59:06:f1:bd:9b:39:62:14:1e:45:d7:3d:fc:13: b5:b2:82:5d:1c:cf:a5:9f:3d:f7:c7:bb:97:5c:49:ff:07:88: bc:7b:3e:7c:b2:f5:29:f0:7d:8c:ce:08:eb:6d:2d:25:37:0e: d2:f8:34:94:99:d1:eb:74:c1:17:0a:29:85:50:d0:83:8a:61: a7:99:d6:81:3f:9b:a7:4a:c6:6f:00:11:38:5c:d4:14:aa:74: f9:02:1a:9f:31:75:d5:fb:1a:ef:a3:7d:b0:b1:18:ed:61:49: 93:ae:21:dc:cd:79:d7:46:12:8a:f3:0e:35:5a:1b:98:e9:dd: 00:6c:00:cc:ac:31:07:f7:18:59:7c:b2:e7:a3:1d:fb:3b:b1: 80:54:99:27 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICMPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENFNzUxMTAvBgNVBAUTKDQ5ODkyNTM3RDhCMkMwMzI1QjdCRTA4MUZEOTI4NkM3 OUJFQTZBODUwHhcNMjQwNDMwMTU1MjQxWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMxMTNjOS1mMDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DNDQQSUVGuTD7X54TaWdmSR6orgfj8Q34FKsC27fb2QNWLFcJGx+znJpg1C Ye1lPRfzJ2UFHtkJleyhx/fsJU2JXb87d0JBoq0PdWaFHWG3qo58KUocqVgKLBSB bUWKvSV2Xjp2r0lHC8xTF/krFabp22Wmjgs/AAkIOVQk4pbtwPsSAyoG4LjVlH6W kDifu44v/zqjs5ZAnlScWdxWrD1dARJlwxv8PsTWsyMNIp2rDh0MgJ4CPTP/NbXi pE5wATXDCtNaPt+VGSLl0aICIuPGDhFHFd48AJzcrwLKqj9yVjRhdagwptcWSOml fT0Px+X7iZYcMaL1fEblFzQwVwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFMnLeMyk kEMNE7cpd0TTnzsFWDbBMB8GA1UdIwQYMBaAFEmJJTfYssAyW3vggf2Shseb6mqF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0U3NS9EMjJFRjNENkZG NEIxMUUyODFCRTA2NjI1OTExRUEzMi9TWWtsTjlpeXdESmJlLUNCX1pLR3g1dnFh b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NZa2xOOWl5d0RKYmUtQ0JfWktHeDV2cWFvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NENFNzUvRDIyRUYzRDZGRjRCMTFFMjgxQkUwNjYyNTkxMUVBMzIvQjREOTkyN0Ew MTRFMTFFQjlFMTM0ODNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAA7o+cDBARzbDADBAFzcKgDBADLx/MwDQYJKoZIhvcNAQEL BQADggEBAAJ8HOBnJ/4wz6LNE5/nxsynnDzKykGVlGGYr9Uu2hfGQn1zrM0x5ITx TjDCnGsZrRCyXyk6hApcjHrFJR2w9VR5lZKRDby9cS6xZfDdX2uT7cvxCHMhHocz GbCo/GIvveKtuEFo9OViP9V2bkf0Gh9ZBvG9mzliFB5F1z38E7Wygl0cz6WfPffH u5dcSf8HiLx7Pnyy9SnwfYzOCOttLSU3DtL4NJSZ0et0wRcKKYVQ0IOKYaeZ1oE/ m6dKxm8AEThc1BSqdPkCGp8xddX7Gu+jfbCxGO1hSZOuIdzNeddGEorzDjVaG5jp 3QBsAMysMQf3GFl8suejHfs7sYBUmSc= -----END CERTIFICATE-----Generated at Fri May 31 16:40:56 2024 by rpki-client on console-ams.rpki-client.org