$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/DC4BD210A17B11EAB16F4954C4F9AE02.roa File: DC4BD210A17B11EAB16F4954C4F9AE02.roa (raw, json) Hash identifier: lb8koNH0tsfODiSJbApq4LMiIBQ5IJ6YLtZVYxbBVPw= Subject key identifier: 51:8A:FF:8E:24:D0:AB:12:6A:FF:A8:8E:A1:A1:93:3B:17:D4:DE:E6 Certificate issuer: /CN=A9158F08/serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Certificate serial: 085E Authority key identifier: B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/DC4BD210A17B11EAB16F4954C4F9AE02.roa Signing time: Thu 04 Apr 2024 19:58:26 +0000 ROA not before: Thu 04 Apr 2024 19:58:26 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 14618 IP address blocks: 45.250.72.0/22 maxlen: 24 103.226.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 18:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2142 (0x85e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F08/serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Validity Not Before: Apr 4 19:58:26 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660f0662-3560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:90:a3:88:b4:df:0b:b3:9d:aa:9e:c0:c1:8a: ec:8d:5b:6f:46:9b:a8:7d:08:1f:0e:c9:b4:0a:92: 09:48:d0:3d:db:97:b8:4a:58:bd:41:13:b3:92:39: 23:83:a0:47:e6:4e:06:00:b3:98:40:7e:b2:11:16: 7f:61:83:7b:fc:12:e2:3c:6a:11:91:d1:bc:f6:cc: 39:6f:01:8f:92:94:a8:3d:19:b6:b6:df:51:8b:36: e2:1c:0f:78:ef:4f:78:2f:80:e2:a1:0a:34:38:b1: cd:01:64:bf:8e:31:a4:44:dc:c9:44:e6:1d:e2:f6: 34:12:2f:3c:66:2c:ba:6d:e1:49:eb:e8:b6:ce:33: a9:4d:ac:e9:63:f6:58:d1:ba:5b:56:53:33:25:77: 2d:15:91:49:17:84:9e:8b:bc:70:b0:3f:a9:e0:c3: f8:a7:2d:82:e9:1d:58:90:f8:93:98:5c:79:2c:aa: 62:93:ef:6e:26:35:78:0a:b1:97:9d:bd:c0:7a:79: f1:5a:e6:b6:82:b2:b2:99:64:7e:4d:9e:4c:9b:e6: 7d:2d:24:74:44:53:cd:52:b5:c4:c7:55:aa:ad:d8: 94:57:f2:5f:de:73:f0:b2:eb:82:ad:64:c7:27:d1: 74:37:cf:0e:61:b5:2c:98:c4:9d:2e:9e:27:bc:28: 70:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:8A:FF:8E:24:D0:AB:12:6A:FF:A8:8E:A1:A1:93:3B:17:D4:DE:E6 X509v3 Authority Key Identifier: keyid:B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/DC4BD210A17B11EAB16F4954C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.250.72.0/22 103.226.68.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:b9:55:0b:76:11:93:13:22:ed:a2:b6:40:93:50:0e:bd:f2: e0:18:90:9b:73:0f:37:98:54:a9:6b:34:8d:3c:f7:93:8c:a7: 38:03:3b:ae:ea:2c:cc:d1:d7:58:93:68:3e:29:73:b4:67:bf: a6:2c:81:24:51:13:5b:5c:e4:53:6e:fa:ee:21:59:a4:28:28: e2:52:c7:4c:01:a9:8c:6e:ae:9e:2f:16:36:a5:3b:24:29:b0: 12:93:92:91:89:a0:b5:e2:4a:95:9b:df:07:42:91:10:19:2b: a5:71:7c:77:94:bc:1a:02:cf:86:d7:29:a9:d9:4d:06:d1:66: bb:25:ca:fb:2e:0d:86:23:57:ec:a0:63:ef:d7:7a:5d:a2:0c: fb:a2:59:01:c4:b7:3c:22:fc:b1:36:e5:c1:4b:4b:b9:df:1e: b3:3e:c6:ca:df:2a:94:18:a8:6b:59:89:9b:e1:dc:fc:ac:0a: 6f:89:24:86:08:84:5e:3b:7e:fa:13:ca:4c:8e:38:ea:15:d0: 90:f0:5b:98:31:9b:6a:ac:a4:9e:43:3c:64:09:a7:76:fe:d1: e6:bf:a6:e2:d8:7c:60:f3:cf:0d:7a:63:41:e2:57:fc:19:da: 6c:3f:d8:ed:4b:53:d9:ea:b9:bd:57:86:c1:71:fe:7d:c6:72: 26:98:09:5a -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThGMDgxMTAvBgNVBAUTKEIyQTc4NEVFODVGNTUzODM2NzI5N0I1MUMwODY4RjhG MUMwMkY5MTEwHhcNMjQwNDA0MTk1ODI2WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjBmMDY2Mi0zNTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7ZCjiLTfC7Odqp7AwYrsjVtvRpuofQgfDsm0CpIJSNA925e4Sli9QROzkjkj g6BH5k4GALOYQH6yERZ/YYN7/BLiPGoRkdG89sw5bwGPkpSoPRm2tt9RizbiHA94 7094L4DioQo0OLHNAWS/jjGkRNzJROYd4vY0Ei88Ziy6beFJ6+i2zjOpTazpY/ZY 0bpbVlMzJXctFZFJF4Sei7xwsD+p4MP4py2C6R1YkPiTmFx5LKpik+9uJjV4CrGX nb3AennxWua2grKymWR+TZ5Mm+Z9LSR0RFPNUrXEx1WqrdiUV/Jf3nPwsuuCrWTH J9F0N88OYbUsmMSdLp4nvChwWwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFGK/44k 0KsSav+ojqGhkzsX1N7mMB8GA1UdIwQYMBaAFLKnhO6F9VODZyl7UcCGj48cAvkR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEYwOC81QjE3RjZEMjA3 RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9zcWVFN29YMVU0Tm5LWHRSd0lhUGp4d0Mt UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxZUU3b1gxVTRObktYdFJ3SWFQanh3Qy1SRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NThGMDgvNUIxN0Y2RDIwN0QwMTFFQUE0ODQ4NjQ0QzRGOUFFMDIvREM0QkQyMTBB MTdCMTFFQUIxNkY0OTU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIt+kgDBAJn4kQwDQYJKoZIhvcNAQELBQADggEBAG65VQt2 EZMTIu2itkCTUA698uAYkJtzDzeYVKlrNI0895OMpzgDO67qLMzR11iTaD4pc7Rn v6YsgSRRE1tc5FNu+u4hWaQoKOJSx0wBqYxurp4vFjalOyQpsBKTkpGJoLXiSpWb 3wdCkRAZK6VxfHeUvBoCz4bXKanZTQbRZrslyvsuDYYjV+ygY+/Xel2iDPuiWQHE tzwi/LE25cFLS7nfHrM+xsrfKpQYqGtZiZvh3PysCm+JJIYIhF47fvoTykyOOOoV 0JDwW5gxm2qspJ5DPGQJp3b+0ea/puLYfGDzzw16Y0HiV/wZ2mw/2O1LU9nqub1X hsFx/n3GciaYCVo= -----END CERTIFICATE-----Generated at Wed Apr 24 20:29:48 2024 by rpki-client on console-fra.rpki-client.org