$ rpki-client -vvf rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/E05FE99AB0D511E5B4F68B09C4F9AE02.roa File: E05FE99AB0D511E5B4F68B09C4F9AE02.roa (raw, json) Hash identifier: r/uWPxWKwu+kO1HevrlCc4sI8N+zLGmuIoKjh8em6gs= Subject key identifier: 4F:33:CA:AA:36:E6:F6:3F:F1:13:B0:80:EF:70:F0:DE:C2:1C:AD:FA Certificate issuer: /CN=A917201D/serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C Certificate serial: 335A Authority key identifier: 68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/E05FE99AB0D511E5B4F68B09C4F9AE02.roa Signing time: Fri 04 Aug 2023 14:50:42 +0000 ROA not before: Fri 04 Aug 2023 14:50:42 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 38227 IP address blocks: 123.176.72.0/21 maxlen: 21 123.176.72.0/22 maxlen: 22 123.176.76.0/22 maxlen: 22 182.50.72.0/22 maxlen: 22 182.50.72.0/23 maxlen: 23 2407:2800::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13146 (0x335a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917201D/serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C Validity Not Before: Aug 4 14:50:42 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64cd1042-0c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1f:d8:02:d6:67:b2:45:b3:d4:68:1f:10:9f: dd:7f:90:2d:c3:4d:d2:90:e4:de:0a:ac:e9:83:f8: 3c:99:37:90:db:92:32:e9:5a:f4:a2:40:4a:2a:04: 35:97:07:8d:84:6b:68:2a:d0:00:36:e2:86:47:22: 66:bb:0e:c4:c1:86:a9:ef:2a:24:c4:cf:06:50:51: f5:71:63:70:3a:16:eb:8b:5b:8c:9e:cc:13:f7:1a: 7d:e0:b3:45:92:68:9f:e1:7f:cb:4c:7c:eb:90:c8: d8:97:c5:07:70:63:c6:a1:44:bf:9e:5d:98:50:3e: c1:9d:03:ec:96:93:b4:be:89:3e:dd:93:d9:42:77: 41:6c:14:79:ca:99:48:60:c7:14:09:9f:7c:ea:09: e0:2f:14:8c:dc:ec:03:05:ba:f5:70:76:d8:ab:98: 58:3d:05:04:5f:4d:a1:8a:57:03:1e:9a:68:e9:71: 03:8b:c5:43:fd:48:30:75:8a:16:03:f5:a7:96:0f: ec:ef:62:55:8d:07:8b:cf:63:12:78:c7:f0:b0:19: 6f:03:25:32:be:24:e7:71:67:8d:9b:00:31:91:92: b2:31:36:9f:3d:58:b5:8f:72:c7:b0:29:e4:c6:6d: 0c:e2:71:e7:21:ed:04:18:45:8d:27:2e:82:e2:0e: 74:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:33:CA:AA:36:E6:F6:3F:F1:13:B0:80:EF:70:F0:DE:C2:1C:AD:FA X509v3 Authority Key Identifier: keyid:68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/E05FE99AB0D511E5B4F68B09C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.176.72.0/21 182.50.72.0/22 IPv6: 2407:2800::/32 Signature Algorithm: sha256WithRSAEncryption af:c3:71:bb:5e:91:3e:3e:57:e4:7b:d0:da:9b:35:32:fd:d7: 4b:f2:16:e0:48:04:44:af:53:2f:6a:bb:52:ed:e2:4c:9c:b8: f9:da:d6:eb:37:31:d4:e2:c7:4f:8a:92:2c:c1:70:70:06:48: 49:62:4a:70:1b:6e:e4:3e:b2:15:de:d2:22:89:62:55:c6:3c: 94:7c:69:96:35:90:1a:4b:e6:1a:a4:5c:86:0b:80:2a:d9:de: c4:60:04:cd:d3:da:8b:57:16:3c:ae:74:40:ba:34:be:35:5b: 24:74:66:e8:13:40:c0:9c:c1:7a:10:4c:2d:61:23:2e:63:39: 93:93:c6:c9:73:12:a4:96:e4:5a:78:d8:ea:97:4e:c2:1e:6d: 19:e8:9b:33:03:1e:ea:43:a8:1c:10:73:78:95:ad:6d:8c:bf: 9d:28:a2:15:ae:47:a2:b7:43:5d:e7:a6:a0:e6:49:02:ad:0c: 3a:98:24:0e:ec:17:2b:0c:1e:72:1e:05:c7:4f:21:69:9c:67: 3c:6d:6a:12:60:2b:39:6a:12:c9:f4:99:0f:47:19:dc:9b:6d: 0a:12:58:8f:a4:f8:ef:09:2d:d1:17:ef:6c:50:c4:eb:16:0e: 81:8e:a1:cd:9b:50:0c:0d:4e:ff:05:51:b1:db:dd:2d:b0:12: ad:cf:41:eb -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICM1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzIwMUQxMTAvBgNVBAUTKDY4QzVCQUJERkMxMjM5NjZEMDVGODBDM0ZBNDIzNzk0 NDJDNDIyMEMwHhcNMjMwODA0MTQ1MDQyWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGNkMTA0Mi0wYzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2B/YAtZnskWz1GgfEJ/df5Atw03SkOTeCqzpg/g8mTeQ25Iy6Vr0okBKKgQ1 lweNhGtoKtAANuKGRyJmuw7EwYap7yokxM8GUFH1cWNwOhbri1uMnswT9xp94LNF kmif4X/LTHzrkMjYl8UHcGPGoUS/nl2YUD7BnQPslpO0vok+3ZPZQndBbBR5yplI YMcUCZ986gngLxSM3OwDBbr1cHbYq5hYPQUEX02hilcDHppo6XEDi8VD/UgwdYoW A/Wnlg/s72JVjQeLz2MSeMfwsBlvAyUyviTncWeNmwAxkZKyMTafPVi1j3LHsCnk xm0M4nHnIe0EGEWNJy6C4g503wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFE8zyqo2 5vY/8ROwgO9w8N7CHK36MB8GA1UdIwQYMBaAFGjFur38Ejlm0F+Aw/pCN5RCxCIM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjAxRC9DRDFFMjk0ODFE OTIxMUUyQTNCMUY0RjUwOEIwMkNEMi9hTVc2dmZ3U09XYlFYNERELWtJM2xFTEVJ Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FNVzZ2ZndTT1diUVg0REQta0kzbEVMRUlndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzIwMUQvQ0QxRTI5NDgxRDkyMTFFMkEzQjFGNEY1MDhCMDJDRDIvRTA1RkU5OUFC MEQ1MTFFNUI0RjY4QjA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAN7sEgDBAK2MkgwDQQCAAIwBwMFACQHKAAwDQYJKoZIhvcN AQELBQADggEBAK/DcbtekT4+V+R70NqbNTL910vyFuBIBESvUy9qu1Lt4kycuPna 1us3MdTix0+KkizBcHAGSEliSnAbbuQ+shXe0iKJYlXGPJR8aZY1kBpL5hqkXIYL gCrZ3sRgBM3T2otXFjyudEC6NL41WyR0ZugTQMCcwXoQTC1hIy5jOZOTxslzEqSW 5Fp42OqXTsIebRnomzMDHupDqBwQc3iVrW2Mv50oohWuR6K3Q13npqDmSQKtDDqY JA7sFysMHnIeBcdPIWmcZzxtahJgKzlqEsn0mQ9HGdybbQoSWI+k+O8JLdEX72xQ xOsWDoGOoc2bUAwNTv8FUbHb3S2wEq3PQes= -----END CERTIFICATE-----Generated at Sat May 18 15:58:22 2024 by rpki-client on console-ams.rpki-client.org