$ rpki-client -vvf rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/E265728A877911EA9E28DF0BC4F9AE02.roa File: E265728A877911EA9E28DF0BC4F9AE02.roa (raw, json) Hash identifier: IXdOLb5XGDPUV+uNEtH6HzYSX48p5a2jXIDxz5vqGBA= Subject key identifier: 54:1F:C3:25:69:43:57:58:B4:07:65:7D:55:2F:88:7D:F6:4B:72:77 Certificate issuer: /CN=A916D23A/serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786 Certificate serial: 0986 Authority key identifier: F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/E265728A877911EA9E28DF0BC4F9AE02.roa Signing time: Wed 14 Jun 2023 20:51:56 +0000 ROA not before: Wed 14 Jun 2023 20:51:56 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 59362 IP address blocks: 45.251.228.0/22 maxlen: 22 45.251.228.0/23 maxlen: 24 45.251.230.0/23 maxlen: 24 103.220.204.0/22 maxlen: 24 2407:5c80::/32 maxlen: 35 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2438 (0x986) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D23A/serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786 Validity Not Before: Jun 14 20:51:56 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=648a286b-6447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bb:d4:6d:ef:1c:e2:b0:ee:aa:8e:e8:c8:26: 5b:15:d4:5f:71:85:80:1f:86:1d:7a:c2:25:cd:17: c1:ba:47:dc:95:77:d6:d1:c3:5f:d7:f1:e0:f5:89: 95:ba:71:7b:dc:fd:35:b4:40:43:12:86:2c:c1:a3: 4a:b2:b0:e9:b1:3b:66:a6:26:91:c9:4f:29:aa:71: a3:a9:7d:58:07:94:dd:40:96:74:e0:b1:38:b2:b1: 28:fa:5e:80:96:f1:de:07:ac:0e:71:7d:a0:74:03: 8c:10:f3:61:01:fe:95:62:40:4a:fb:ff:aa:50:b0: 46:48:9a:6e:d5:ed:c5:db:f8:56:7c:04:7b:c3:df: 73:6c:10:3a:4b:33:1e:a7:d8:e8:05:2a:b2:47:45: 66:c6:cf:38:f8:34:6e:21:3b:74:0c:85:66:7e:16: 01:de:a1:0e:85:63:eb:02:65:c7:bf:d5:c3:60:5f: 18:42:84:44:f6:56:27:ef:06:75:0f:c8:99:1c:2e: fb:a6:0e:05:0e:a2:77:7b:5f:da:7a:30:00:26:10: a3:38:03:bb:c7:0b:94:87:d9:f3:34:e8:0d:c3:d8: ac:36:3d:14:16:c0:47:55:89:35:18:3f:25:f0:47: 3d:24:09:8f:8d:84:0b:3c:4a:70:6a:3f:e4:b4:f9: 8f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:1F:C3:25:69:43:57:58:B4:07:65:7D:55:2F:88:7D:F6:4B:72:77 X509v3 Authority Key Identifier: keyid:F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/E265728A877911EA9E28DF0BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.251.228.0/22 103.220.204.0/22 IPv6: 2407:5c80::/32 Signature Algorithm: sha256WithRSAEncryption 03:8f:e7:7d:97:cb:49:e2:cb:82:c0:44:73:11:91:bf:de:aa: 06:fc:d6:d8:8b:59:70:32:88:c7:44:13:69:be:f2:3c:cc:e8: e9:6f:e0:34:fb:12:15:23:1e:8d:c0:30:61:49:72:4c:27:f7: de:90:6f:00:91:1b:e7:f1:6b:84:27:2a:8f:90:82:e4:2a:88: b9:fa:1d:08:a3:1b:f8:8a:d3:62:c1:c4:ee:29:a1:f3:dd:a3: 1e:05:8b:b0:2e:7b:62:cf:18:e2:bd:ab:21:95:2a:91:fe:42: 97:0e:4d:3f:a3:97:b3:ff:b8:f2:36:0a:bc:00:c2:95:81:31: 13:bb:05:05:1c:27:2a:04:b8:c7:f8:7d:04:38:02:3a:ec:6c: 52:58:91:e0:f1:4d:46:3c:ac:d7:d1:18:79:46:c0:95:5b:e8: 80:e5:38:bd:38:c8:cd:54:ae:2f:73:6c:56:c3:f5:62:7c:8b: 34:96:30:21:ab:04:b7:51:ae:39:7e:b2:d6:76:4f:84:e8:9d: 26:91:9f:02:aa:60:55:e9:86:0b:b0:c6:76:c6:89:35:ee:84: 40:65:1e:2c:f1:29:0d:ed:41:55:46:c0:63:23:81:e3:4b:74: 37:e7:a2:fa:7f:c2:4e:6a:8a:da:d8:8d:8b:5f:58:9d:06:8b: d1:53:75:3c -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQyM0ExMTAvBgNVBAUTKEY4NzIyN0M2NjUzRDY5QkFFRTJFOTk0ODg0MkNFQjBC NDA0OUU3ODYwHhcNMjMwNjE0MjA1MTU2WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDhhMjg2Yi02NDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1LvUbe8c4rDuqo7oyCZbFdRfcYWAH4YdesIlzRfBukfclXfW0cNf1/Hg9YmV unF73P01tEBDEoYswaNKsrDpsTtmpiaRyU8pqnGjqX1YB5TdQJZ04LE4srEo+l6A lvHeB6wOcX2gdAOMEPNhAf6VYkBK+/+qULBGSJpu1e3F2/hWfAR7w99zbBA6SzMe p9joBSqyR0Vmxs84+DRuITt0DIVmfhYB3qEOhWPrAmXHv9XDYF8YQoRE9lYn7wZ1 D8iZHC77pg4FDqJ3e1/aejAAJhCjOAO7xwuUh9nzNOgNw9isNj0UFsBHVYk1GD8l 8Ec9JAmPjYQLPEpwaj/ktPmPqQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFFQfwyVp Q1dYtAdlfVUviH32S3J3MB8GA1UdIwQYMBaAFPhyJ8ZlPWm67i6ZSIQs6wtASeeG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDIzQS84RTNDMTIxRTQ4 RDUxMUVBODMzNTE3NzFDNEY5QUUwMi8tSElueG1VOWFicnVMcGxJaEN6ckMwQko1 NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ISW54bVU5YWJydUxwbEloQ3pyQzBCSjU0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkQyM0EvOEUzQzEyMUU0OEQ1MTFFQTgzMzUxNzcxQzRGOUFFMDIvRTI2NTcyOEE4 Nzc5MTFFQTlFMjhERjBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIt++QDBAJn3MwwDQQCAAIwBwMFACQHXIAwDQYJKoZIhvcN AQELBQADggEBAAOP532Xy0niy4LARHMRkb/eqgb81tiLWXAyiMdEE2m+8jzM6Olv 4DT7EhUjHo3AMGFJckwn996QbwCRG+fxa4QnKo+QguQqiLn6HQijG/iK02LBxO4p ofPdox4Fi7Aue2LPGOK9qyGVKpH+QpcOTT+jl7P/uPI2CrwAwpWBMRO7BQUcJyoE uMf4fQQ4AjrsbFJYkeDxTUY8rNfRGHlGwJVb6IDlOL04yM1Uri9zbFbD9WJ8izSW MCGrBLdRrjl+stZ2T4TonSaRnwKqYFXphguwxnbGiTXuhEBlHizxKQ3tQVVGwGMj geNLdDfnovp/wk5qitrYjYtfWJ0Gi9FTdTw= -----END CERTIFICATE-----Generated at Thu May 16 21:45:28 2024 by rpki-client on console-fra.rpki-client.org