$ rpki-client -vvf rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/7C48D49CFFBE11EBB443B639C4F9AE02.roa File: 7C48D49CFFBE11EBB443B639C4F9AE02.roa (raw, json) Hash identifier: /kSK+t6Uui5gY+E46gDVyS5fJCRJ3UL5yOuwfJ+DnWw= Subject key identifier: D9:3A:BF:F4:F1:36:92:D8:51:17:60:66:88:EB:E9:AB:93:35:BC:93 Certificate issuer: /CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Certificate serial: 2C83 Authority key identifier: 64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/7C48D49CFFBE11EBB443B639C4F9AE02.roa Signing time: Thu 08 Feb 2024 16:02:14 +0000 ROA not before: Thu 08 Feb 2024 16:02:14 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 132588 IP address blocks: 58.84.48.0/22 maxlen: 22 58.84.48.0/24 maxlen: 24 58.84.49.0/24 maxlen: 24 58.84.50.0/24 maxlen: 24 58.84.51.0/24 maxlen: 24 103.240.152.0/22 maxlen: 22 103.240.152.0/24 maxlen: 24 103.240.153.0/24 maxlen: 24 103.240.154.0/24 maxlen: 24 103.240.155.0/24 maxlen: 24 103.254.0.0/24 maxlen: 24 103.254.1.0/24 maxlen: 24 103.254.2.0/24 maxlen: 24 103.254.3.0/24 maxlen: 24 116.204.136.0/22 maxlen: 22 116.204.136.0/24 maxlen: 24 116.204.137.0/24 maxlen: 24 116.204.138.0/24 maxlen: 24 116.204.139.0/24 maxlen: 24 2406:2300::/32 maxlen: 32 2407:c100::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 15:49:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11395 (0x2c83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Validity Not Before: Feb 8 16:02:14 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65c4fb05-8a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a2:c9:5d:94:d3:7a:74:6c:2f:bf:ca:fd:8b: 3d:83:a5:e6:42:d3:97:00:33:09:7a:25:db:83:96: a0:b4:6c:c4:f3:b0:e8:49:75:ec:68:93:b0:5a:b9: 15:34:99:85:38:5d:89:a7:e9:e8:b9:db:4c:98:22: 7f:24:66:ca:57:5e:5f:3e:18:f4:d4:eb:56:1e:85: a3:60:ac:b8:de:0f:49:9e:66:0e:7c:59:cc:19:56: 2f:9f:fa:25:5e:88:0e:cb:3b:72:ae:6a:7a:66:6f: 34:83:b9:0d:70:14:0a:09:19:28:2b:3a:72:a4:2b: 97:ac:a7:7c:21:e5:44:89:d4:ba:5a:4d:45:3f:04: 29:e3:60:9b:c5:c9:09:b5:c1:5b:a6:5f:d9:15:5f: a0:c7:d6:e2:ca:d5:70:75:44:55:59:25:8d:5a:74: 92:4b:6a:ad:ae:58:5d:f0:e8:77:d4:d6:85:31:87: c3:db:e5:71:d1:ac:bc:3c:4c:c9:59:c1:b6:45:49: 48:c2:02:7a:6e:51:25:1a:1d:9a:0a:07:fe:c2:42: 37:47:6f:d0:36:c3:89:3f:95:75:c1:63:92:d9:c7: 99:fe:8f:c2:9b:cb:9c:57:bb:97:d4:8a:b2:d1:2e: 5d:c1:a8:a7:3b:db:69:b9:84:6d:f2:54:cf:da:c1: 17:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:3A:BF:F4:F1:36:92:D8:51:17:60:66:88:EB:E9:AB:93:35:BC:93 X509v3 Authority Key Identifier: keyid:64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/7C48D49CFFBE11EBB443B639C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.84.48.0/22 103.240.152.0/22 103.254.0.0/22 116.204.136.0/22 IPv6: 2406:2300::/32 2407:c100::/32 Signature Algorithm: sha256WithRSAEncryption 1b:4e:9a:c0:09:1f:f0:9f:0a:9f:8b:11:ae:98:f4:e2:82:8c: 0b:9a:c8:f4:5e:7c:27:03:72:fb:09:ff:11:8a:03:31:49:20: 24:41:01:ad:a6:1a:f6:94:f4:ad:00:18:c7:2c:13:45:cd:3f: 33:e5:13:81:49:5d:92:05:5b:8b:a9:3d:45:d7:ed:58:0d:e3: 62:52:79:43:a3:24:16:41:c8:6c:d4:d6:6e:5e:f8:a3:c8:83: 96:0c:38:70:56:0b:52:40:b7:8c:9d:cc:64:9b:9d:ac:cb:a4: 43:c2:3b:b7:ea:ac:9a:e6:4c:71:aa:90:42:81:fd:da:d3:dd: 2f:f1:d9:12:be:24:6c:cb:27:9b:b5:82:6a:dc:b3:e3:45:84: 24:c5:19:49:d6:fe:bf:cb:7d:f2:74:07:06:f2:40:01:eb:85: 49:c2:f5:1e:ae:98:bf:51:ed:77:f4:84:de:85:3a:3b:e5:32: 83:ad:34:38:c9:17:2b:61:e2:85:8b:1c:d3:d0:81:5e:61:23: 34:31:13:13:e8:02:96:f8:2c:6b:98:d0:3a:cd:38:3d:06:0a: 7f:df:01:c3:24:32:a8:2d:f4:dd:7b:13:a4:26:e4:d7:36:c5: f2:5c:7a:87:e5:4f:5f:54:30:47:d7:0a:b5:ce:0e:1a:ac:69: 0c:2b:05:1c -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgICLIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NjgxMTAvBgNVBAUTKDY0MzUxNjA4RUUyQUVBMDc0QzlFRkZBRTkwOEM2MTJB RTdEQ0QzNjkwHhcNMjQwMjA4MTYwMjE0WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWM0ZmIwNS04YThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKLJXZTTenRsL7/K/Ys9g6XmQtOXADMJeiXbg5agtGzE87DoSXXsaJOwWrkV NJmFOF2Jp+noudtMmCJ/JGbKV15fPhj01OtWHoWjYKy43g9JnmYOfFnMGVYvn/ol XogOyztyrmp6Zm80g7kNcBQKCRkoKzpypCuXrKd8IeVEidS6Wk1FPwQp42CbxckJ tcFbpl/ZFV+gx9biytVwdURVWSWNWnSSS2qtrlhd8Oh31NaFMYfD2+Vx0ay8PEzJ WcG2RUlIwgJ6blElGh2aCgf+wkI3R2/QNsOJP5V1wWOS2ceZ/o/Cm8ucV7uX1Iqy 0S5dwainO9tpuYRt8lTP2sEXdwIDAQABo4ICvTCCArkwHQYDVR0OBBYEFNk6v/Tx NpLYURdgZojr6auTNbyTMB8GA1UdIwQYMBaAFGQ1FgjuKuoHTJ7/rpCMYSrn3NNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ2OC9DRTQ5NDM3NjhD M0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZnZE1udi11a0l4aEt1ZmMw MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEVVdDTzRxNmdkTW52LXVrSXhoS3VmYzAyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E0NjgvQ0U0OTQzNzY4QzNBMTFFM0JBMEVBRDJDNTkxMUVBMzIvN0M0OEQ0OUNG RkJFMTFFQkI0NDNCNjM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRwYIKwYBBQUHAQcBAf8E ODA2MB4EAgABMBgDBAI6VDADBAJn8JgDBAJn/gADBAJ0zIgwFAQCAAIwDgMFACQG IwADBQAkB8EAMA0GCSqGSIb3DQEBCwUAA4IBAQAbTprACR/wnwqfixGumPTigowL msj0XnwnA3L7Cf8RigMxSSAkQQGtphr2lPStABjHLBNFzT8z5ROBSV2SBVuLqT1F 1+1YDeNiUnlDoyQWQchs1NZuXvijyIOWDDhwVgtSQLeMncxkm52sy6RDwju36qya 5kxxqpBCgf3a090v8dkSviRsyyebtYJq3LPjRYQkxRlJ1v6/y33ydAcG8kAB64VJ wvUerpi/Ue139ITehTo75TKDrTQ4yRcrYeKFixzT0IFeYSM0MRMT6AKW+CxrmNA6 zTg9Bgp/3wHDJDKoLfTdexOkJuTXNsXyXHqH5U9fVDBH1wq1zg4arGkMKwUc -----END CERTIFICATE-----Generated at Thu May 16 18:26:05 2024 by rpki-client on console-fra.rpki-client.org