$ rpki-client -vvf rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/F2826A504FCF11EB88444467C4F9AE02.roa File: F2826A504FCF11EB88444467C4F9AE02.roa (raw, json) Hash identifier: fD4ExFVU3zuArt3Xhftg8Dy8YqVccg0NtHG1ZHrBEJ4= Subject key identifier: 0A:29:70:E7:C2:AF:7D:FE:0B:5C:1D:43:09:85:61:8C:BE:00:DD:5E Certificate issuer: /CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Certificate serial: 0CDB Authority key identifier: 1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/F2826A504FCF11EB88444467C4F9AE02.roa Signing time: Thu 06 Jun 2024 19:33:23 +0000 ROA not before: Thu 06 Jun 2024 19:33:23 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 55933 IP address blocks: 43.243.168.0/23 maxlen: 23 43.243.168.0/24 maxlen: 24 43.243.169.0/24 maxlen: 24 103.38.255.0/24 maxlen: 24 103.90.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3291 (0xcdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Validity Not Before: Jun 6 19:33:23 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66620f03-3378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9c:f3:c8:05:ec:22:1b:5e:72:fb:84:c0:12: c1:73:33:64:ee:6e:58:74:e4:62:ab:43:16:a5:5d: a5:06:df:22:a4:0e:e6:83:8b:24:a6:93:52:c8:cf: 58:28:95:6f:c0:ab:47:ae:4e:31:25:ec:b0:4f:b2: 87:20:bf:f8:5b:ef:6c:e7:41:b0:09:16:e8:f0:74: 40:4c:81:d2:71:54:cc:c7:04:76:55:78:5f:86:8f: f4:5b:c9:03:96:7e:47:b6:1f:c8:c6:f5:52:dd:77: 3f:6a:df:e6:dc:b3:da:ea:b6:48:1e:9c:34:8b:32: 2c:16:5f:cd:e2:17:81:02:be:28:97:00:6f:6c:62: c8:05:3a:58:b9:86:64:00:9d:89:5a:c7:b0:15:eb: 3a:c7:e7:fc:a9:75:02:5c:34:4d:d8:e4:e9:d7:93: 72:62:f6:16:3f:5b:09:f7:61:86:3a:74:68:42:be: d0:ce:53:14:15:37:bc:cd:07:ff:68:ce:0e:e1:a5: 68:3c:a2:1d:b3:92:c8:46:46:3c:be:b1:d1:51:7a: e7:ec:db:16:ac:73:91:c5:e3:fe:dd:d6:4d:bd:48: f2:d8:dc:61:65:49:34:fc:c7:a4:f6:c8:06:9f:d8: 41:22:89:71:cd:d1:94:96:8f:58:b0:43:56:19:39: 7b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:29:70:E7:C2:AF:7D:FE:0B:5C:1D:43:09:85:61:8C:BE:00:DD:5E X509v3 Authority Key Identifier: keyid:1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/F2826A504FCF11EB88444467C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.168.0/23 103.38.255.0/24 103.90.203.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:ef:2d:cd:60:99:8a:a9:f1:73:a3:15:9e:82:84:0c:0c:10: b9:41:10:4d:dd:76:e3:5a:6a:68:c9:4f:30:f8:7f:0f:42:3a: d6:f3:5e:e1:d9:17:c9:46:90:6c:cc:47:c8:e3:71:0d:97:d2: 2d:6e:31:5e:ba:d8:33:30:05:ce:24:fa:d8:e8:62:82:d7:47: 7b:c6:bb:33:67:18:f1:de:5e:a4:cd:a8:04:49:13:f2:eb:b8: 80:99:42:cf:32:59:c2:e7:d6:9a:69:71:9c:58:62:61:eb:da: fb:11:5f:84:5d:c6:d8:83:00:86:c8:09:76:8d:11:ff:8c:c7: ac:03:f4:a8:94:79:4e:69:ca:97:86:08:28:da:bf:98:a3:c0: d4:11:2d:35:70:17:28:aa:2a:76:92:82:d4:0f:0e:3a:dc:ec: 72:d2:16:46:8b:bf:99:b3:f0:1e:fd:14:6b:9c:7c:83:9e:b6: 7f:6b:ac:90:8b:9f:39:23:b7:3a:5d:ca:04:85:b1:f6:cb:f2: d1:c9:0f:4d:c4:7e:a1:98:64:53:4f:12:c9:6f:09:cd:49:16: e9:b6:67:dc:b1:97:7c:0c:2f:0b:ba:d0:b0:14:9f:76:8e:c7: 44:2a:15:26:1a:e7:88:d9:98:5c:94:29:03:c8:30:5a:a7:a4: 97:33:a8:01 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICDNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY4RjYxMTAvBgNVBAUTKDFFMzI5RTk4RjY3NjkyRTlCNTc2MDIzQTJGQkM1NTdE NTdERDU1NkMwHhcNMjQwNjA2MTkzMzIzWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjYyMGYwMy0zMzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZzzyAXsIhtecvuEwBLBczNk7m5YdORiq0MWpV2lBt8ipA7mg4skppNSyM9Y KJVvwKtHrk4xJeywT7KHIL/4W+9s50GwCRbo8HRATIHScVTMxwR2VXhfho/0W8kD ln5Hth/IxvVS3Xc/at/m3LPa6rZIHpw0izIsFl/N4heBAr4olwBvbGLIBTpYuYZk AJ2JWsewFes6x+f8qXUCXDRN2OTp15NyYvYWP1sJ92GGOnRoQr7QzlMUFTe8zQf/ aM4O4aVoPKIds5LIRkY8vrHRUXrn7NsWrHORxeP+3dZNvUjy2NxhZUk0/Mek9sgG n9hBIolxzdGUlo9YsENWGTl7kwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFAopcOfC r33+C1wdQwmFYYy+AN1eMB8GA1UdIwQYMBaAFB4ynpj2dpLptXYCOi+8VX1X3VVs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjhGNi8zN0QwM0RGNkNF MjgxMUU5QTZCNkMxN0JDNEY5QUUwMi9IaktlbVBaMmt1bTFkZ0k2TDd4VmZWZmRW V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hqS2VtUFoya3VtMWRnSTZMN3hWZlZmZFZXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTY4RjYvMzdEMDNERjZDRTI4MTFFOUE2QjZDMTdCQzRGOUFFMDIvRjI4MjZBNTA0 RkNGMTFFQjg4NDQ0NDY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAEr86gDBABnJv8DBABnWsswDQYJKoZIhvcNAQELBQADggEB AGvvLc1gmYqp8XOjFZ6ChAwMELlBEE3dduNaamjJTzD4fw9COtbzXuHZF8lGkGzM R8jjcQ2X0i1uMV662DMwBc4k+tjoYoLXR3vGuzNnGPHeXqTNqARJE/LruICZQs8y WcLn1pppcZxYYmHr2vsRX4RdxtiDAIbICXaNEf+Mx6wD9KiUeU5pypeGCCjav5ij wNQRLTVwFyiqKnaSgtQPDjrc7HLSFkaLv5mz8B79FGucfIOetn9rrJCLnzkjtzpd ygSFsfbL8tHJD03EfqGYZFNPEslvCc1JFum2Z9yxl3wMLwu60LAUn3aOx0QqFSYa 54jZmFyUKQPIMFqnpJczqAE= -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:18 2024 by rpki-client on console-ams.rpki-client.org