$ rpki-client -vvf rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/F2826A504FCF11EB88444467C4F9AE02.roa File: F2826A504FCF11EB88444467C4F9AE02.roa (raw, json) Hash identifier: ylMYLzY/O00/kxSVjte6bmxUwkqtmUX09lis2sR8hOs= Subject key identifier: 8A:C5:65:98:E0:E2:5B:A2:4A:06:4E:F6:63:31:C7:2B:D4:58:25:CD Certificate issuer: /CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Certificate serial: 0C0C Authority key identifier: 1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/F2826A504FCF11EB88444467C4F9AE02.roa Signing time: Fri 02 Jun 2023 20:00:00 +0000 ROA not before: Fri 02 Jun 2023 19:59:59 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 55933 IP address blocks: 43.243.168.0/23 maxlen: 23 43.243.168.0/24 maxlen: 24 43.243.169.0/24 maxlen: 24 103.38.255.0/24 maxlen: 24 103.90.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3084 (0xc0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Validity Not Before: Jun 2 19:59:59 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=647a4a3f-543b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1b:65:94:7b:42:74:d9:20:b9:14:e6:3d:60: e9:54:b9:b1:f5:3a:e1:f5:ae:15:a2:13:88:af:d0: f3:0e:f7:2e:3f:c1:4a:b2:2f:4b:43:9e:ba:fb:0d: ed:2e:1d:52:df:1a:00:1d:f7:2f:9f:3b:75:08:5d: 50:5b:a7:a1:9b:fb:7c:05:83:7a:23:b1:9a:84:d7: de:64:5a:af:a9:2b:92:ab:54:66:03:70:8d:56:d4: 04:62:65:f4:09:55:6f:00:70:80:aa:c1:78:ef:78: 7a:d3:62:d6:c0:0d:6a:48:c4:0c:c3:4b:96:66:67: 14:17:ce:ff:3b:65:c5:9b:3f:95:62:ca:82:dd:02: 91:07:e1:ec:c0:61:a3:69:97:20:46:8c:86:0e:5a: 18:23:87:7a:26:06:25:57:64:b0:c3:30:b8:37:5d: 99:4a:ee:b2:d9:69:22:39:e1:70:23:28:58:93:f0: 2c:0c:33:ae:af:2d:bb:f5:04:32:17:b3:67:f4:99: b2:bc:3f:9f:fe:26:e8:13:2d:ff:3e:02:df:a5:0a: c9:1c:23:95:76:d3:55:b6:38:0f:13:ae:4b:59:50: 7a:d1:77:95:16:f4:0f:4c:a6:db:c6:f7:19:1f:c7: ec:a0:85:aa:e8:4b:ee:a9:f6:4c:bd:7f:48:27:bb: 96:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C5:65:98:E0:E2:5B:A2:4A:06:4E:F6:63:31:C7:2B:D4:58:25:CD X509v3 Authority Key Identifier: keyid:1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/F2826A504FCF11EB88444467C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.168.0/23 103.38.255.0/24 103.90.203.0/24 Signature Algorithm: sha256WithRSAEncryption a6:6d:e4:1d:85:b9:f0:9f:62:fa:ae:ca:b4:aa:8b:ae:4d:f5: 6a:1f:c6:cd:80:b7:c8:8a:3d:62:62:c1:cb:0c:5a:26:a3:23: f8:bc:8e:da:4e:96:bb:fe:a3:37:55:2f:ef:5d:b8:3a:04:72: 5c:30:6d:35:84:6a:2b:97:d4:48:0c:a4:44:04:0a:2f:82:7b: 85:f9:2a:5c:48:29:53:53:7d:f9:9d:57:ef:dc:f7:ec:db:a7: 8b:e3:99:00:06:45:de:a3:9d:02:59:d9:ce:0e:96:da:45:07: 38:a1:46:c0:5d:31:31:1e:cc:83:6f:96:3d:01:b5:d3:2e:8f: 05:8a:0d:34:32:25:74:9b:50:80:0d:f0:c9:c3:9a:b2:09:9c: 2f:95:50:2a:b6:f2:ae:b7:e7:12:db:99:44:09:c5:b1:19:67: 1a:7a:85:7d:74:aa:71:12:3b:8b:26:8b:52:d6:40:31:fe:26: 8e:fc:20:55:cc:32:aa:db:30:68:f8:0c:81:7e:b8:18:37:55: db:4e:40:0f:b6:18:d5:d7:ce:4d:2f:79:89:2d:66:36:0c:bf: 40:7a:66:0e:cb:72:40:9e:5f:a9:02:59:0f:c4:8b:78:11:35: 5f:d9:e2:ee:62:e8:61:45:80:66:c8:f6:b1:ee:a3:d5:f0:90: 2c:ee:c0:23 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICDAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY4RjYxMTAvBgNVBAUTKDFFMzI5RTk4RjY3NjkyRTlCNTc2MDIzQTJGQkM1NTdE NTdERDU1NkMwHhcNMjMwNjAyMTk1OTU5WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDdhNGEzZi01NDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1xtllHtCdNkguRTmPWDpVLmx9Trh9a4VohOIr9DzDvcuP8FKsi9LQ566+w3t Lh1S3xoAHfcvnzt1CF1QW6ehm/t8BYN6I7GahNfeZFqvqSuSq1RmA3CNVtQEYmX0 CVVvAHCAqsF473h602LWwA1qSMQMw0uWZmcUF87/O2XFmz+VYsqC3QKRB+HswGGj aZcgRoyGDloYI4d6JgYlV2SwwzC4N12ZSu6y2WkiOeFwIyhYk/AsDDOury279QQy F7Nn9JmyvD+f/iboEy3/PgLfpQrJHCOVdtNVtjgPE65LWVB60XeVFvQPTKbbxvcZ H8fsoIWq6EvuqfZMvX9IJ7uW1QIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFIrFZZjg 4luiSgZO9mMxxyvUWCXNMB8GA1UdIwQYMBaAFB4ynpj2dpLptXYCOi+8VX1X3VVs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjhGNi8zN0QwM0RGNkNF MjgxMUU5QTZCNkMxN0JDNEY5QUUwMi9IaktlbVBaMmt1bTFkZ0k2TDd4VmZWZmRW V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hqS2VtUFoya3VtMWRnSTZMN3hWZlZmZFZXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTY4RjYvMzdEMDNERjZDRTI4MTFFOUE2QjZDMTdCQzRGOUFFMDIvRjI4MjZBNTA0 RkNGMTFFQjg4NDQ0NDY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAEr86gDBABnJv8DBABnWsswDQYJKoZIhvcNAQELBQADggEB AKZt5B2FufCfYvquyrSqi65N9Wofxs2At8iKPWJiwcsMWiajI/i8jtpOlrv+ozdV L+9duDoEclwwbTWEaiuX1EgMpEQECi+Ce4X5KlxIKVNTffmdV+/c9+zbp4vjmQAG Rd6jnQJZ2c4OltpFBzihRsBdMTEezINvlj0BtdMujwWKDTQyJXSbUIAN8MnDmrIJ nC+VUCq28q635xLbmUQJxbEZZxp6hX10qnESO4smi1LWQDH+Jo78IFXMMqrbMGj4 DIF+uBg3VdtOQA+2GNXXzk0veYktZjYMv0B6Zg7LckCeX6kCWQ/Ei3gRNV/Z4u5i 6GFFgGbI9rHuo9XwkCzuwCM= -----END CERTIFICATE-----Generated at Fri May 10 20:45:22 2024 by rpki-client on console-ams.rpki-client.org