$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/1B72273C5C2311EDA3D17465C4F9AE02.roa File: 1B72273C5C2311EDA3D17465C4F9AE02.roa (raw, json) Hash identifier: mDw0kbJm/iTDRcernzDRE+RgGH524TQRk+/OLJTymJ8= Subject key identifier: 35:8B:FC:E2:66:5A:AB:C8:96:70:6D:A4:09:E7:89:5A:F7:54:E5:E0 Certificate issuer: /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Certificate serial: 06C2 Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/1B72273C5C2311EDA3D17465C4F9AE02.roa Signing time: Sun 24 Sep 2023 14:21:30 +0000 ROA not before: Sun 24 Sep 2023 14:21:30 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 55933 IP address blocks: 43.249.8.0/23 maxlen: 24 111.92.240.0/22 maxlen: 24 114.134.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1730 (0x6c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Validity Not Before: Sep 24 14:21:30 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=651045ea-dd3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fa:ba:70:5f:0b:8b:b7:96:b3:55:3e:37:06: 32:53:14:77:d4:68:41:14:7f:55:da:3f:34:e0:4e: 80:a8:76:8e:2c:26:14:7e:af:ba:dc:51:dd:21:fa: 7d:88:2b:c3:4a:71:ec:9f:5d:78:b2:46:14:dd:3a: 0f:45:99:f6:d4:1d:7d:c2:2c:d1:32:cc:80:84:3e: ed:65:d7:07:ec:ba:0c:b1:21:40:6c:28:c4:ac:ec: 72:c6:20:af:a6:d7:59:33:7e:55:10:17:79:4c:a2: f9:cf:8a:22:97:e0:f2:37:97:5a:e9:84:d4:79:43: ce:75:97:ac:18:91:9b:c2:50:08:bc:17:36:94:71: 7e:dc:1e:70:22:87:d9:cd:75:4d:53:f6:38:6a:88: 1a:ed:6a:ec:50:10:4c:27:11:11:e8:f3:83:07:73: 17:a4:37:f7:d1:fb:56:f1:6f:34:3b:8e:2e:68:ae: 79:0e:9f:48:06:bc:2c:cb:8d:06:c9:7e:57:8d:5f: 83:13:30:d3:62:0f:b1:cf:7a:1f:38:9c:5a:4b:0d: 85:17:c1:fe:c4:96:a7:6e:91:16:1d:5f:34:e9:2e: b0:9f:5f:3c:de:a6:09:16:43:af:0d:05:98:a4:80: fb:3e:a4:c5:6a:5a:41:52:87:6d:ed:38:59:c5:16: 4a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:8B:FC:E2:66:5A:AB:C8:96:70:6D:A4:09:E7:89:5A:F7:54:E5:E0 X509v3 Authority Key Identifier: keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/1B72273C5C2311EDA3D17465C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.8.0/23 111.92.240.0/22 114.134.188.0/24 Signature Algorithm: sha256WithRSAEncryption 09:d3:10:bf:03:c5:41:c2:21:0c:18:29:b3:1d:21:40:43:4b: a4:14:f9:ed:88:80:11:bf:3a:3c:35:7a:e8:89:a9:7a:f4:11: 09:27:93:f4:be:3c:65:a6:da:b1:fb:50:95:31:73:e0:37:70: 5a:21:c0:24:ea:87:c4:5f:27:2d:c8:63:01:92:5c:b9:a3:94: 39:9b:1d:4f:1f:e9:85:b8:16:ac:59:21:e5:8f:01:ea:6e:68: b5:ac:23:db:e2:21:99:67:75:88:35:e1:5e:3c:e0:30:47:14: 8c:5d:14:c6:22:43:27:51:bf:6a:2f:45:30:9b:a1:3e:7c:ff: 9c:bc:e1:62:ff:0c:11:0a:49:ad:8b:7c:37:80:6e:9c:e9:6d: f2:e7:66:cb:d3:d3:f6:68:cd:84:e8:77:5e:98:35:07:41:56: 21:c9:5c:b7:93:e7:cb:86:be:76:38:e1:51:eb:20:13:60:89: ff:48:9b:6f:fe:d6:b0:94:d5:86:89:c4:c2:14:88:55:e1:6c: 8d:c5:06:94:bd:01:5d:2f:2e:f8:d6:9c:1a:36:0b:3b:a5:bc: 29:e1:90:e2:cf:51:e0:56:36:63:0c:46:50:e1:bc:87:71:9e: 32:72:ae:e4:64:43:ff:d3:37:01:6b:fc:c7:d4:b6:9f:a2:42: d0:a0:bc:e0 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5MEYxMTAvBgNVBAUTKDlEMDc0NDZFRjk5RjNDNTdDMjlDNTgyRDZCN0FDQTQ3 MzVGNEU0NzAwHhcNMjMwOTI0MTQyMTMwWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTEwNDVlYS1kZDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/q6cF8Li7eWs1U+NwYyUxR31GhBFH9V2j804E6AqHaOLCYUfq+63FHdIfp9 iCvDSnHsn114skYU3ToPRZn21B19wizRMsyAhD7tZdcH7LoMsSFAbCjErOxyxiCv ptdZM35VEBd5TKL5z4oil+DyN5da6YTUeUPOdZesGJGbwlAIvBc2lHF+3B5wIofZ zXVNU/Y4aoga7WrsUBBMJxER6PODB3MXpDf30ftW8W80O44uaK55Dp9IBrwsy40G yX5XjV+DEzDTYg+xz3ofOJxaSw2FF8H+xJanbpEWHV806S6wn1883qYJFkOvDQWY pID7PqTFalpBUodt7ThZxRZKoQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFDWL/OJm WqvIlnBtpAnniVr3VOXgMB8GA1UdIwQYMBaAFJ0HRG75nzxXwpxYLWt6ykc19ORw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTkwRi9CM0NBNzZDMEZB MzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBGZkNuRmd0YTNyS1J6WDA1 SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RZEVidm1mUEZmQ25GZ3RhM3JLUnpYMDVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzE5MEYvQjNDQTc2QzBGQTMxMTFFQUJEMjQ5RTdBQzRGOUFFMDIvMUI3MjI3M0M1 QzIzMTFFREEzRDE3NDY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAEr+QgDBAJvXPADBAByhrwwDQYJKoZIhvcNAQELBQADggEB AAnTEL8DxUHCIQwYKbMdIUBDS6QU+e2IgBG/Ojw1euiJqXr0EQknk/S+PGWm2rH7 UJUxc+A3cFohwCTqh8RfJy3IYwGSXLmjlDmbHU8f6YW4FqxZIeWPAepuaLWsI9vi IZlndYg14V484DBHFIxdFMYiQydRv2ovRTCboT58/5y84WL/DBEKSa2LfDeAbpzp bfLnZsvT0/ZozYTod16YNQdBViHJXLeT58uGvnY44VHrIBNgif9Im2/+1rCU1YaJ xMIUiFXhbI3FBpS9AV0vLvjWnBo2CzulvCnhkOLPUeBWNmMMRlDhvIdxnjJyruRk Q//TNwFr/MfUtp+iQtCgvOA= -----END CERTIFICATE-----Generated at Sun May 19 00:30:17 2024 by rpki-client on console-ams.rpki-client.org