$ rpki-client -vvf rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/2E9087A831D811ECA3C4CE3EC4F9AE02.roa File: 2E9087A831D811ECA3C4CE3EC4F9AE02.roa (raw, json) Hash identifier: peX1Vn1tpvxKT5ffW5rW/7Y8G0QyNA6fOUj8BiUa72c= Subject key identifier: B9:DB:F7:95:5C:89:10:78:39:86:18:4D:55:7F:FA:B7:54:8D:BA:E9 Certificate issuer: /CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Certificate serial: 2C82 Authority key identifier: 64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/2E9087A831D811ECA3C4CE3EC4F9AE02.roa Signing time: Thu 08 Feb 2024 16:02:13 +0000 ROA not before: Thu 08 Feb 2024 16:02:13 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 131227 IP address blocks: 58.84.48.0/22 maxlen: 22 58.84.48.0/24 maxlen: 24 58.84.49.0/24 maxlen: 24 58.84.50.0/24 maxlen: 24 58.84.51.0/24 maxlen: 24 103.240.152.0/22 maxlen: 22 103.240.152.0/24 maxlen: 24 103.240.153.0/24 maxlen: 24 103.240.154.0/24 maxlen: 24 103.240.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 15:49:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11394 (0x2c82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Validity Not Before: Feb 8 16:02:13 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65c4fb04-0c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f1:81:74:2d:95:25:4c:20:0e:72:88:b4:8e: 7f:59:89:a6:21:af:4f:ec:6e:fa:c1:ed:64:a5:6c: 82:4f:63:79:bd:61:4b:08:0b:10:7e:e6:19:10:7c: b9:02:9d:18:f3:1f:4b:01:66:ae:ec:01:0f:e4:1a: 3e:a9:29:f5:32:8d:1e:a3:72:45:ad:77:9c:fd:6d: e8:3b:2e:0d:7c:e3:bc:db:f8:fc:56:61:86:d2:0e: cd:e8:1a:f8:06:1e:be:db:f3:02:6b:00:22:f1:f7: 74:b5:61:ad:fa:aa:68:d6:97:5c:4b:b8:c1:d1:65: 8a:24:fc:11:4d:82:99:f4:eb:ed:a9:4a:80:c2:6c: e1:01:c3:35:fd:53:d7:05:cc:b4:62:35:f1:96:21: bf:fb:17:65:83:c8:da:7c:cb:88:74:0e:23:80:6e: 3c:14:f5:f8:d7:a9:e5:fe:3c:8f:a0:a9:28:b0:f2: 25:d2:e6:02:27:ca:a0:e1:e6:8f:71:25:4b:8c:f8: 49:72:d1:6f:ca:4e:8b:5e:ad:e6:ce:c9:41:0f:14: d2:02:01:14:c7:65:4a:00:0b:63:51:74:0e:93:98: 38:66:36:ea:5c:6d:d9:d6:95:c7:4e:34:aa:ad:47: 46:a8:98:e8:4c:a8:3a:aa:3c:c8:76:b0:fb:97:b2: e1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:DB:F7:95:5C:89:10:78:39:86:18:4D:55:7F:FA:B7:54:8D:BA:E9 X509v3 Authority Key Identifier: keyid:64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/2E9087A831D811ECA3C4CE3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.84.48.0/22 103.240.152.0/22 Signature Algorithm: sha256WithRSAEncryption 27:37:58:a1:d7:81:62:68:b0:54:6f:06:6e:33:3c:bf:a0:f8: 40:bf:c0:cc:5a:71:a6:9f:a2:1d:ad:8f:e3:e0:fa:e0:52:c9: 15:65:3b:55:4d:e3:a7:e3:6e:5c:b5:19:3e:ab:f2:db:07:a3: c0:c8:8b:d0:98:26:06:a6:fe:93:5e:4b:7b:86:9b:85:3a:ac: 1e:1b:aa:16:1c:99:30:64:0b:30:a6:00:56:04:ac:6f:b9:e4: 44:28:65:59:3e:91:5e:c1:1c:de:ee:39:a3:4e:26:d8:15:29: 39:47:e4:cf:59:f8:d8:29:0e:0f:6d:31:53:22:b9:d4:c3:fa: eb:0d:cb:18:ca:cb:f6:77:dd:eb:e4:73:b5:2b:ae:4e:90:cb: 46:49:14:6d:54:5c:2e:21:e3:9c:35:5e:41:54:9b:a2:f6:0f: 13:8a:52:20:e2:8e:ed:6a:64:e0:6c:54:b7:fe:57:46:29:29: 04:18:87:33:7b:12:59:0b:78:e8:9f:d0:81:31:33:44:d5:25: 81:11:9c:5d:96:df:14:b8:00:31:02:d9:3a:69:17:5c:95:04: 7f:f6:1f:f4:dc:98:b6:6a:70:59:66:7a:a5:9d:14:e6:db:1b: 5e:46:76:e5:23:a7:cb:48:56:a2:2c:d9:fc:89:4f:30:09:e4: ed:f2:29:ca -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICLIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NjgxMTAvBgNVBAUTKDY0MzUxNjA4RUUyQUVBMDc0QzlFRkZBRTkwOEM2MTJB RTdEQ0QzNjkwHhcNMjQwMjA4MTYwMjEzWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWM0ZmIwNC0wYzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfGBdC2VJUwgDnKItI5/WYmmIa9P7G76we1kpWyCT2N5vWFLCAsQfuYZEHy5 Ap0Y8x9LAWau7AEP5Bo+qSn1Mo0eo3JFrXec/W3oOy4NfOO82/j8VmGG0g7N6Br4 Bh6+2/MCawAi8fd0tWGt+qpo1pdcS7jB0WWKJPwRTYKZ9OvtqUqAwmzhAcM1/VPX Bcy0YjXxliG/+xdlg8jafMuIdA4jgG48FPX416nl/jyPoKkosPIl0uYCJ8qg4eaP cSVLjPhJctFvyk6LXq3mzslBDxTSAgEUx2VKAAtjUXQOk5g4ZjbqXG3Z1pXHTjSq rUdGqJjoTKg6qjzIdrD7l7LhJwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLnb95Vc iRB4OYYYTVV/+rdUjbrpMB8GA1UdIwQYMBaAFGQ1FgjuKuoHTJ7/rpCMYSrn3NNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ2OC9DRTQ5NDM3NjhD M0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZnZE1udi11a0l4aEt1ZmMw MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEVVdDTzRxNmdkTW52LXVrSXhoS3VmYzAyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E0NjgvQ0U0OTQzNzY4QzNBMTFFM0JBMEVBRDJDNTkxMUVBMzIvMkU5MDg3QTgz MUQ4MTFFQ0EzQzRDRTNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAI6VDADBAJn8JgwDQYJKoZIhvcNAQELBQADggEBACc3WKHX gWJosFRvBm4zPL+g+EC/wMxacaafoh2tj+Pg+uBSyRVlO1VN46fjbly1GT6r8tsH o8DIi9CYJgam/pNeS3uGm4U6rB4bqhYcmTBkCzCmAFYErG+55EQoZVk+kV7BHN7u OaNOJtgVKTlH5M9Z+NgpDg9tMVMiudTD+usNyxjKy/Z33evkc7Urrk6Qy0ZJFG1U XC4h45w1XkFUm6L2DxOKUiDiju1qZOBsVLf+V0YpKQQYhzN7ElkLeOif0IExM0TV JYERnF2W3xS4ADEC2TppF1yVBH/2H/TcmLZqcFlmeqWdFObbG15GduUjp8tIVqIs 2fyJTzAJ5O3yKco= -----END CERTIFICATE-----Generated at Thu May 16 17:51:22 2024 by rpki-client on console-ams.rpki-client.org