$ rpki-client -vvf rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/75AB676E747811EDA48E0D52C4F9AE02.roa File: 75AB676E747811EDA48E0D52C4F9AE02.roa (raw, json) Hash identifier: Qn1WM06chi02gzUwTVrnXfMikD/uGjvyaRc+4AnXcGQ= Subject key identifier: 59:57:29:5C:32:A2:F3:E8:AB:4E:46:03:A8:16:E1:9C:02:34:80:E6 Certificate issuer: /CN=A915D99A/serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27 Certificate serial: 33EE Authority key identifier: D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/75AB676E747811EDA48E0D52C4F9AE02.roa Signing time: Sat 02 Mar 2024 14:30:28 +0000 ROA not before: Sat 02 Mar 2024 14:30:28 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 17660 IP address blocks: 45.64.248.0/22 maxlen: 22 103.245.240.0/22 maxlen: 22 103.245.242.0/23 maxlen: 23 119.2.96.0/19 maxlen: 19 202.144.128.0/19 maxlen: 19 202.144.128.0/19 maxlen: 24 202.144.128.0/20 maxlen: 20 202.144.144.0/20 maxlen: 20 2405:d000::/32 maxlen: 32 2405:d000::/32 maxlen: 48 2405:d000:7000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 14:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13294 (0x33ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D99A/serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27 Validity Not Before: Mar 2 14:30:28 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65e33803-0ff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f8:81:1f:ed:a1:5d:6d:18:66:77:6b:53:15: 74:ce:5f:4c:18:0f:d5:11:6c:0e:4c:f2:e7:07:f3: eb:84:aa:2c:44:34:7d:89:6c:f4:b6:f1:4e:76:1e: 66:ba:42:1c:39:58:1d:cd:4b:85:44:4d:73:f6:62: 7d:6c:6c:2a:f5:78:0b:40:9e:dd:bb:b1:60:39:98: f1:33:85:2d:16:e6:c2:9d:7f:a1:2e:b2:7e:52:aa: 07:c6:2b:33:19:f2:fb:3a:ee:25:c5:c4:b7:9d:ee: f5:13:b6:b9:82:b9:c5:16:e3:ba:ae:22:87:83:88: 3b:6b:c1:ab:26:dc:bc:1e:39:17:31:03:cb:fe:df: 94:3a:51:b7:09:52:38:f8:fc:fa:25:b1:db:67:ff: 38:7f:d9:59:7c:24:47:ad:af:e9:ba:2b:2b:fc:2d: 40:3d:d4:5e:09:a9:e6:c5:db:c1:f2:48:66:19:7e: 5c:33:ad:3b:53:89:e9:60:4b:42:09:12:7b:f8:15: c1:3c:fd:7e:2b:20:aa:ef:ec:57:53:b6:a2:6f:d8: 39:c3:b7:9c:09:75:24:96:b8:14:c5:10:3b:53:6f: 57:8e:82:89:7f:56:ab:7b:b5:ee:ae:bb:52:8f:ba: a5:a3:2f:46:8b:f8:4e:a2:fb:6a:bb:d8:3f:72:85: a6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:57:29:5C:32:A2:F3:E8:AB:4E:46:03:A8:16:E1:9C:02:34:80:E6 X509v3 Authority Key Identifier: keyid:D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/75AB676E747811EDA48E0D52C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.64.248.0/22 103.245.240.0/22 119.2.96.0/19 202.144.128.0/19 IPv6: 2405:d000::/32 Signature Algorithm: sha256WithRSAEncryption ae:c4:6f:db:50:d7:92:27:7c:98:dd:f4:9b:02:82:81:8a:ee: d5:8e:18:20:69:a4:e4:da:f7:8e:63:bf:ba:81:b8:dd:48:a3: 5c:6e:a6:82:98:f7:44:db:6a:45:90:b1:97:e0:6a:7b:fc:8f: c5:56:f8:46:81:0c:5d:e2:80:2b:83:6b:09:37:5f:29:07:ad: 6a:c4:6d:ac:56:3a:b6:14:0a:c8:8c:3a:02:0d:26:e4:46:bb: 4e:ad:66:bc:f3:04:b9:a6:ae:8e:3c:a2:7c:ba:08:d0:66:98: 75:17:a3:b4:53:2f:0c:53:48:5e:14:ca:da:f7:12:c8:fb:db: ff:58:a8:00:bd:04:1d:c4:3c:08:71:3d:03:0d:79:a0:1c:ad: 00:85:4e:ad:e8:02:a6:df:c9:32:64:05:8a:30:50:2c:68:42: bd:33:4c:15:3b:3e:1a:ce:45:59:c5:40:b2:14:1e:1c:3f:58: fd:81:a1:29:36:aa:90:2b:39:83:47:9c:c1:00:1c:e8:47:8f: 85:15:93:96:ab:37:01:5c:57:3e:5e:9e:e9:0c:9e:96:cc:55: b9:74:ff:11:0a:b6:8e:58:57:d7:8c:1f:27:27:34:74:91:23: a7:86:b2:60:bc:07:6b:84:fa:6c:56:08:51:47:8e:82:b1:25: 45:56:14:40 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICM+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ5OUExMTAvBgNVBAUTKEQxN0Q3N0NCMEM4OUI5OTRDRERBQ0JBMjc1MjcwQTFF NzREQ0FBMjcwHhcNMjQwMzAyMTQzMDI4WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWUzMzgwMy0wZmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPiBH+2hXW0YZndrUxV0zl9MGA/VEWwOTPLnB/PrhKosRDR9iWz0tvFOdh5m ukIcOVgdzUuFRE1z9mJ9bGwq9XgLQJ7du7FgOZjxM4UtFubCnX+hLrJ+UqoHxisz GfL7Ou4lxcS3ne71E7a5grnFFuO6riKHg4g7a8GrJty8HjkXMQPL/t+UOlG3CVI4 +Pz6JbHbZ/84f9lZfCRHra/puisr/C1APdReCanmxdvB8khmGX5cM607U4npYEtC CRJ7+BXBPP1+KyCq7+xXU7aib9g5w7ecCXUklrgUxRA7U29XjoKJf1are7XurrtS j7qloy9Gi/hOovtqu9g/coWm0wIDAQABo4ICtjCCArIwHQYDVR0OBBYEFFlXKVwy ovPoq05GA6gW4ZwCNIDmMB8GA1UdIwQYMBaAFNF9d8sMibmUzdrLonUnCh503Kon MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDk5QS8xNzg4MjJEQTFE ODUxMUUyQTgyQTdDREIwOEIwMkNEMi8wWDEzeXd5SnVaVE4yc3VpZFNjS0huVGNx aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBYMTN5d3lKdVpUTjJzdWlkU2NLSG5UY3FpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQ5OUEvMTc4ODIyREExRDg1MTFFMkE4MkE3Q0RCMDhCMDJDRDIvNzVBQjY3NkU3 NDc4MTFFREE0OEUwRDUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAItQPgDBAJn9fADBAV3AmADBAXKkIAwDQQCAAIwBwMFACQF 0AAwDQYJKoZIhvcNAQELBQADggEBAK7Eb9tQ15InfJjd9JsCgoGK7tWOGCBppOTa 945jv7qBuN1Io1xupoKY90TbakWQsZfganv8j8VW+EaBDF3igCuDawk3XykHrWrE baxWOrYUCsiMOgINJuRGu06tZrzzBLmmro48ony6CNBmmHUXo7RTLwxTSF4Uytr3 Esj72/9YqAC9BB3EPAhxPQMNeaAcrQCFTq3oAqbfyTJkBYowUCxoQr0zTBU7PhrO RVnFQLIUHhw/WP2BoSk2qpArOYNHnMEAHOhHj4UVk5arNwFcVz5enukMnpbMVbl0 /xEKto5YV9eMHycnNHSRI6eGsmC8B2uE+mxWCFFHjoKxJUVWFEA= -----END CERTIFICATE-----Generated at Mon May 20 15:11:14 2024 by rpki-client on console-fra.rpki-client.org