$ rpki-client -vvf rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/BE4852941C2E11EE9A9A9940C4F9AE02.roa File: BE4852941C2E11EE9A9A9940C4F9AE02.roa (raw, json) Hash identifier: kbRGxh+eHT4yaX3DIe1fJAJpI0Ll4+Ql3O+or3Gu5JU= Subject key identifier: EE:0C:E1:08:8D:95:F0:D7:D3:F8:2A:C4:31:F4:CE:01:07:06:47:D4 Certificate issuer: /CN=A9168336/serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A Certificate serial: 0B58 Authority key identifier: E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/BE4852941C2E11EE9A9A9940C4F9AE02.roa Signing time: Wed 22 Nov 2023 19:27:18 +0000 ROA not before: Wed 22 Nov 2023 19:27:18 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 139735 IP address blocks: 103.111.14.0/23 maxlen: 23 103.111.14.0/24 maxlen: 24 103.111.15.0/24 maxlen: 24 103.144.89.0/24 maxlen: 24 103.160.137.0/24 maxlen: 24 2001:df1:ba80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 19:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2904 (0xb58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168336/serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A Validity Not Before: Nov 22 19:27:18 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=655e5615-2427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dd:aa:19:1e:a3:b5:f3:de:f0:7d:cd:8a:7b: 08:85:11:9e:e3:88:18:d4:3d:f7:8c:f8:1b:6f:74: ba:df:cb:c6:08:b8:66:8a:d0:4c:38:03:24:43:25: 4b:0a:39:06:c6:40:b1:33:9e:5e:07:9c:a1:89:73: 46:ae:c1:cd:25:5b:33:ec:98:0f:2c:36:aa:59:74: e7:8a:a0:2d:30:69:71:da:df:33:61:bf:91:b5:ee: 06:50:df:0b:f9:ed:cf:45:82:d0:09:d2:a6:08:22: bf:82:3b:a3:c0:d2:3f:2f:a2:21:63:c8:25:c3:34: 5c:64:db:24:1f:2b:d6:a5:a8:d9:8c:a0:60:2f:0f: 2c:75:fc:45:3f:f7:dc:68:16:f5:c2:a2:a2:57:fe: 99:cb:d5:20:6d:96:f9:e6:35:43:9c:26:65:c7:4a: 19:c2:8c:c8:7b:ba:9b:f7:98:3e:93:f3:b0:a1:6b: 85:34:bf:80:54:c2:b4:ba:6f:d9:df:77:19:a1:4b: ca:83:fc:e4:17:a0:f0:f9:3c:81:ef:a9:a7:59:e5: 94:db:ee:09:02:dc:bc:1c:e1:0f:d4:07:d2:d2:e1: ac:52:9b:cc:a8:40:a6:ff:b8:67:61:2a:0c:28:47: 8e:c0:8a:10:5e:d7:af:93:81:fc:47:f1:8b:81:ae: c4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:0C:E1:08:8D:95:F0:D7:D3:F8:2A:C4:31:F4:CE:01:07:06:47:D4 X509v3 Authority Key Identifier: keyid:E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/BE4852941C2E11EE9A9A9940C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.111.14.0/23 103.144.89.0/24 103.160.137.0/24 IPv6: 2001:df1:ba80::/48 Signature Algorithm: sha256WithRSAEncryption 9f:50:28:e8:aa:e2:e1:f7:40:4f:af:00:7d:45:05:fb:26:af: 8e:3a:60:8c:92:99:d8:55:53:e7:a1:4b:f6:08:15:58:53:86: 81:9b:a8:57:a6:1a:af:bd:10:d3:98:6d:71:06:8d:18:0a:da: 44:7f:41:0e:cf:e1:d7:d8:3e:49:a9:d9:7f:6c:3c:d1:0b:b8: 26:24:e0:e8:46:02:e3:06:3c:5e:37:e0:70:38:f9:4c:12:eb: fa:81:c4:e2:d1:2a:17:bf:03:2c:7d:ea:44:bb:e9:8c:0a:40: b3:35:d4:36:70:53:57:e1:71:05:02:02:01:46:3d:80:58:81: e5:1d:b1:cb:b4:be:f2:09:d0:94:b8:1e:a0:32:7d:05:9f:c0: b2:ce:01:68:db:d8:f0:d2:0d:3c:72:22:b1:8a:76:f5:d9:8e: 49:45:35:6d:74:5b:24:df:59:71:85:c6:7a:26:8a:05:d4:9c: aa:13:a0:7f:75:c8:a3:dc:25:38:a9:da:fb:c3:26:b1:fe:86: 45:f1:a6:5f:e6:ee:df:2d:93:da:b9:4d:d6:4a:b2:b9:40:4c: d8:9f:2b:b4:19:61:be:3a:a3:1a:08:e9:05:c6:26:a9:18:c7: 1f:87:1a:51:87:6f:f8:69:9c:de:fd:65:8d:f8:0e:0a:e4:c9: 98:06:3f:7c -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICC1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzMzYxMTAvBgNVBAUTKEU2MjQ0MTJBNDI3OTU4OUI5RUMyRkFCMzIyMkJBQjA2 MjZEMzEyNUEwHhcNMjMxMTIyMTkyNzE4WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTVlNTYxNS0yNDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAst2qGR6jtfPe8H3NinsIhRGe44gY1D33jPgbb3S638vGCLhmitBMOAMkQyVL CjkGxkCxM55eB5yhiXNGrsHNJVsz7JgPLDaqWXTniqAtMGlx2t8zYb+Rte4GUN8L +e3PRYLQCdKmCCK/gjujwNI/L6IhY8glwzRcZNskHyvWpajZjKBgLw8sdfxFP/fc aBb1wqKiV/6Zy9UgbZb55jVDnCZlx0oZwozIe7qb95g+k/OwoWuFNL+AVMK0um/Z 33cZoUvKg/zkF6Dw+TyB76mnWeWU2+4JAty8HOEP1AfS0uGsUpvMqECm/7hnYSoM KEeOwIoQXtevk4H8R/GLga7E/QIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFO4M4QiN lfDX0/gqxDH0zgEHBkfUMB8GA1UdIwQYMBaAFOYkQSpCeVibnsL6syIrqwYm0xJa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODMzNi8xOUY3NUE2NjAx Q0QxMUVBQjg2NUVBMjJDNEY5QUUwMi81aVJCS2tKNVdKdWV3dnF6SWl1ckJpYlRF bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpUkJLa0o1V0p1ZXd2cXpJaXVyQmliVEVsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjgzMzYvMTlGNzVBNjYwMUNEMTFFQUI4NjVFQTIyQzRGOUFFMDIvQkU0ODUyOTQx QzJFMTFFRTlBOUE5OTQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBAFnbw4DBABnkFkDBABnoIkwDwQCAAIwCQMHACABDfG6gDAN BgkqhkiG9w0BAQsFAAOCAQEAn1Ao6Kri4fdAT68AfUUF+yavjjpgjJKZ2FVT56FL 9ggVWFOGgZuoV6Yar70Q05htcQaNGAraRH9BDs/h19g+SanZf2w80Qu4JiTg6EYC 4wY8XjfgcDj5TBLr+oHE4tEqF78DLH3qRLvpjApAszXUNnBTV+FxBQICAUY9gFiB 5R2xy7S+8gnQlLgeoDJ9BZ/Ass4BaNvY8NINPHIisYp29dmOSUU1bXRbJN9ZcYXG eiaKBdScqhOgf3XIo9wlOKna+8Mmsf6GRfGmX+bu3y2T2rlN1kqyuUBM2J8rtBlh vjqjGgjpBcYmqRjHH4caUYdv+Gmc3v1ljfgOCuTJmAY/fA== -----END CERTIFICATE-----Generated at Thu May 16 19:49:59 2024 by rpki-client on console-fra.rpki-client.org