$ rpki-client -vvf rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/7CEC0182B10C11E5BB6B2A16C4F9AE02.roa File: 7CEC0182B10C11E5BB6B2A16C4F9AE02.roa (raw, json) Hash identifier: v59KDUhh58OVJHG3KXNm3s11s6PHTCbDBKRWT/77Fak= Subject key identifier: D8:D5:00:64:63:F6:8B:0D:51:21:81:20:9B:0D:9E:82:9B:2E:04:A6 Certificate issuer: /CN=A914EE0C/serialNumber=3E2B58437E86244139AE4CD03D97F40342850736 Certificate serial: 2581 Authority key identifier: 3E:2B:58:43:7E:86:24:41:39:AE:4C:D0:3D:97:F4:03:42:85:07:36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PitYQ36GJEE5rkzQPZf0A0KFBzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/7CEC0182B10C11E5BB6B2A16C4F9AE02.roa Signing time: Wed 26 Jul 2023 15:52:16 +0000 ROA not before: Wed 26 Jul 2023 15:52:16 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 132917 IP address blocks: 43.226.8.0/24 maxlen: 24 43.226.9.0/24 maxlen: 24 43.226.10.0/24 maxlen: 24 43.226.11.0/24 maxlen: 24 103.250.48.0/24 maxlen: 24 103.250.49.0/24 maxlen: 24 103.250.50.0/24 maxlen: 24 103.250.51.0/24 maxlen: 24 2407:8300::/36 maxlen: 36 2407:8300:1000::/36 maxlen: 36 2407:8300:2000::/36 maxlen: 36 2407:8300:3000::/36 maxlen: 36 2407:8300:4000::/36 maxlen: 36 2407:8300:5000::/36 maxlen: 36 2407:8300:6000::/36 maxlen: 36 2407:8300:7000::/36 maxlen: 36 2407:8300:8000::/36 maxlen: 36 2407:8300:9000::/36 maxlen: 36 2407:8300:a000::/36 maxlen: 36 2407:8300:b000::/36 maxlen: 36 2407:8300:c000::/36 maxlen: 36 2407:8300:d000::/36 maxlen: 36 2407:8300:e000::/36 maxlen: 36 2407:8300:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.crl rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PitYQ36GJEE5rkzQPZf0A0KFBzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 16:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9601 (0x2581) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EE0C/serialNumber=3E2B58437E86244139AE4CD03D97F40342850736 Validity Not Before: Jul 26 15:52:16 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64c14130-00e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0f:be:51:87:c2:d3:1a:97:13:4b:a8:b9:0f: ef:af:cb:e3:9a:72:f3:60:1c:95:02:86:57:f1:3e: 48:54:a7:7d:29:b1:8f:ce:5d:7c:de:90:d4:2d:03: 56:5b:4b:97:c5:df:55:1e:25:15:22:a1:aa:db:9e: af:e7:62:4d:7b:f1:f8:68:ce:80:be:7e:e0:98:c4: 68:1d:5b:bc:fe:8a:e0:36:56:45:29:1d:d8:69:22: 1b:a8:c6:27:f8:de:98:6f:2d:ff:1f:de:82:98:09: 61:98:ae:4b:41:41:85:fb:2f:d0:20:3e:61:b1:2f: 7b:cb:c1:83:e6:c4:c1:88:b0:df:77:b2:3a:43:dc: 44:ab:62:c4:c5:a9:75:3a:43:ea:9b:ac:f8:c5:2f: 19:3d:76:16:c2:1d:20:cc:f9:a8:18:f9:0d:cc:98: 65:89:31:18:a7:9f:e1:40:7c:47:4e:72:dc:b1:af: 74:25:08:12:ad:b4:a8:66:06:0d:78:12:dd:30:e1: f1:c1:b5:73:45:01:1c:7d:14:4f:87:68:84:42:e8: 7b:76:92:3b:6d:b4:92:f2:45:c3:df:28:ea:6c:5b: 12:51:9f:4a:c3:a4:ba:de:34:14:57:50:7c:c5:64: fd:68:e5:ff:30:54:0a:7e:31:bc:3b:f8:df:85:a2: e5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D5:00:64:63:F6:8B:0D:51:21:81:20:9B:0D:9E:82:9B:2E:04:A6 X509v3 Authority Key Identifier: keyid:3E:2B:58:43:7E:86:24:41:39:AE:4C:D0:3D:97:F4:03:42:85:07:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PitYQ36GJEE5rkzQPZf0A0KFBzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/7CEC0182B10C11E5BB6B2A16C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.226.8.0/22 103.250.48.0/22 IPv6: 2407:8300::/32 Signature Algorithm: sha256WithRSAEncryption 82:50:9d:0b:2c:35:c6:87:64:80:bf:bb:21:47:d6:03:1f:52: bc:aa:05:53:bc:43:49:df:3b:51:cc:03:bb:44:f5:a7:7d:b0: 42:1a:fb:e2:ad:d2:ef:58:a7:97:97:37:40:c1:6b:28:a1:25: 73:87:5d:08:b2:3f:72:be:be:21:ba:ed:13:3c:f5:15:ee:cb: fe:c1:ae:2a:50:e2:8c:b7:52:5c:8a:e8:88:cf:02:e9:ee:c0: 46:4a:2c:34:2e:54:3e:17:85:03:1e:c9:0f:2d:70:54:1f:bb: cc:2b:c5:cd:0d:88:4c:09:b7:97:fa:1c:1b:63:c2:ed:ee:e6: a1:84:62:0f:d9:89:c5:cf:e2:1d:2d:a8:41:83:18:d1:6d:55: 53:98:f0:49:37:a5:80:62:1c:e1:27:88:37:ea:fd:f6:e7:1f: ca:b8:fc:06:e8:46:0f:6b:8e:de:62:e6:a2:dc:fd:23:51:74: cc:9e:b6:dd:44:18:74:cd:e7:24:cf:59:9d:70:b1:9b:40:e7: 31:5d:eb:9a:14:2f:38:e5:21:aa:9d:43:1d:48:d2:a9:02:ee: be:3d:63:92:57:be:49:fe:87:78:43:12:b7:22:2c:a5:79:64: 28:a0:36:67:7d:0c:70:72:75:09:82:42:bb:0b:64:fb:a1:4c: 3e:9c:76:dc -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICJYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVFMEMxMTAvBgNVBAUTKDNFMkI1ODQzN0U4NjI0NDEzOUFFNENEMDNEOTdGNDAz NDI4NTA3MzYwHhcNMjMwNzI2MTU1MjE2WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGMxNDEzMC0wMGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwA++UYfC0xqXE0uouQ/vr8vjmnLzYByVAoZX8T5IVKd9KbGPzl183pDULQNW W0uXxd9VHiUVIqGq256v52JNe/H4aM6Avn7gmMRoHVu8/orgNlZFKR3YaSIbqMYn +N6Yby3/H96CmAlhmK5LQUGF+y/QID5hsS97y8GD5sTBiLDfd7I6Q9xEq2LExal1 OkPqm6z4xS8ZPXYWwh0gzPmoGPkNzJhliTEYp5/hQHxHTnLcsa90JQgSrbSoZgYN eBLdMOHxwbVzRQEcfRRPh2iEQuh7dpI7bbSS8kXD3yjqbFsSUZ9Kw6S63jQUV1B8 xWT9aOX/MFQKfjG8O/jfhaLlhQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFNjVAGRj 9osNUSGBIJsNnoKbLgSmMB8GA1UdIwQYMBaAFD4rWEN+hiRBOa5M0D2X9ANChQc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUUwQy8yMkQ1MzY1MkQ2 NzIxMUU0QTIxMjIzNTFDNEY5QUUwMi9QaXRZUTM2R0pFRTVya3pRUFpmMEEwS0ZC elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BpdFlRMzZHSkVFNXJrelFQWmYwQTBLRkJ6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVFMEMvMjJENTM2NTJENjcyMTFFNEEyMTIyMzUxQzRGOUFFMDIvN0NFQzAxODJC MTBDMTFFNUJCNkIyQTE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIr4ggDBAJn+jAwDQQCAAIwBwMFACQHgwAwDQYJKoZIhvcN AQELBQADggEBAIJQnQssNcaHZIC/uyFH1gMfUryqBVO8Q0nfO1HMA7tE9ad9sEIa ++Kt0u9Yp5eXN0DBayihJXOHXQiyP3K+viG67RM89RXuy/7BripQ4oy3UlyK6IjP AunuwEZKLDQuVD4XhQMeyQ8tcFQfu8wrxc0NiEwJt5f6HBtjwu3u5qGEYg/ZicXP 4h0tqEGDGNFtVVOY8Ek3pYBiHOEniDfq/fbnH8q4/AboRg9rjt5i5qLc/SNRdMye tt1EGHTN5yTPWZ1wsZtA5zFd65oULzjlIaqdQx1I0qkC7r49Y5JXvkn+h3hDErci LKV5ZCigNmd9DHBydQmCQrsLZPuhTD6cdtw= -----END CERTIFICATE-----Generated at Thu May 16 18:26:04 2024 by rpki-client on console-fra.rpki-client.org