$ rpki-client -vvf rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/CB42F018F7C311EA8A722484C4F9AE02.roa File: CB42F018F7C311EA8A722484C4F9AE02.roa (raw, json) Hash identifier: kYI3WNDSztfRXZUlgxH0YUCRVyT+2DmftetsgBmSN8Y= Subject key identifier: 2A:9C:DF:90:30:DF:C6:89:3F:7C:26:63:65:51:F7:EF:72:BC:5A:69 Certificate issuer: /CN=A917AAAD/serialNumber=D617D4710482C7F775752057DC8682259B319C78 Certificate serial: 069E Authority key identifier: D6:17:D4:71:04:82:C7:F7:75:75:20:57:DC:86:82:25:9B:31:9C:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hfUcQSCx_d1dSBX3IaCJZsxnHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/CB42F018F7C311EA8A722484C4F9AE02.roa Signing time: Mon 16 Oct 2023 22:10:20 +0000 ROA not before: Mon 16 Oct 2023 22:10:20 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 7473 IP address blocks: 120.72.64.0/20 maxlen: 20 203.173.64.0/20 maxlen: 20 2404:1000::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.crl rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hfUcQSCx_d1dSBX3IaCJZsxnHg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 22:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1694 (0x69e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AAAD/serialNumber=D617D4710482C7F775752057DC8682259B319C78 Validity Not Before: Oct 16 22:10:20 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=652db4cc-5c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:63:6e:53:1b:83:3c:97:82:f8:d8:1f:da:da: b4:a8:dc:49:c5:1e:7e:b3:9a:3b:67:c3:f7:0b:f1: c9:51:ac:f6:93:9e:95:2c:3a:78:f1:9b:eb:d0:2f: 70:46:60:c8:93:29:3a:57:ee:80:ce:0f:5c:0c:33: 0b:2e:03:ff:43:d7:3c:f1:6c:76:87:ad:12:92:02: cc:b5:57:a9:f0:55:b7:c8:df:be:c2:67:03:bc:ae: af:19:ed:37:3c:b2:dd:d1:03:82:5d:c1:28:37:1c: 4a:cc:56:f5:02:8f:34:34:7d:52:49:f6:65:ea:cc: 2c:08:41:2d:52:34:46:cb:c5:d0:9a:43:eb:56:d1: 20:76:8d:d0:58:6f:f4:ae:ee:8a:a2:9d:2a:d0:01: b7:dd:0b:48:af:c3:a3:e0:52:80:eb:ce:b1:3e:2c: f9:23:67:09:c3:87:6b:66:92:b5:54:59:94:39:94: 5b:3f:17:a3:30:70:8b:74:a1:be:54:61:eb:29:fa: 33:30:af:95:1b:9c:74:a3:1f:39:83:79:42:28:a3: 09:4d:bb:22:a2:cd:0f:2d:45:f0:76:84:3e:07:15: 49:a8:ee:8b:aa:bf:bd:a0:8f:9e:0e:f3:6b:dc:df: 70:dd:55:05:1f:77:0c:4b:e2:8c:19:8b:c5:6a:8e: 9a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9C:DF:90:30:DF:C6:89:3F:7C:26:63:65:51:F7:EF:72:BC:5A:69 X509v3 Authority Key Identifier: keyid:D6:17:D4:71:04:82:C7:F7:75:75:20:57:DC:86:82:25:9B:31:9C:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hfUcQSCx_d1dSBX3IaCJZsxnHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/CB42F018F7C311EA8A722484C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.72.64.0/20 203.173.64.0/20 IPv6: 2404:1000::/32 Signature Algorithm: sha256WithRSAEncryption 53:5a:98:fd:88:d2:24:bb:57:1b:f2:74:5a:c0:01:42:91:7f: 66:9a:bd:f9:64:2f:86:c4:09:66:54:32:dc:c0:6d:92:4a:5f: 95:a3:9e:f1:93:93:9e:8f:62:ce:fc:1d:a4:c3:54:7e:9b:74: da:18:e6:03:62:c4:fc:b0:07:74:2c:3f:d3:74:de:50:b5:4c: 20:cf:9b:f1:ef:eb:f1:e8:55:3b:f1:a4:cf:a8:a1:53:21:a9: 03:b9:12:a4:15:29:a1:b2:e9:ca:9a:e5:fc:6f:bb:c9:64:98: 21:89:ba:5a:f9:99:49:04:63:08:7a:56:d5:9b:ed:c4:2d:1f: 73:86:cf:8c:5d:55:33:ee:b4:a6:19:07:cc:48:3a:65:59:b2: 5c:01:1d:50:0d:db:15:5d:e5:d9:44:d9:77:de:7c:c6:1c:ec: 2e:c6:7d:26:39:47:ba:42:eb:16:1c:26:7b:23:fe:86:54:3a: 12:58:b8:2e:12:b4:d4:4a:f7:69:81:38:1e:46:cc:7f:22:dc: 86:b1:01:1b:54:02:00:13:15:c0:b6:ac:01:58:7c:62:fb:93: 6a:39:4a:e4:e4:fd:ff:3c:d1:be:12:66:55:b2:53:0e:b3:32: 1b:bd:2c:08:ef:b5:4b:bd:29:b0:6b:83:f6:01:af:ee:fd:58: 1e:fb:7f:ff -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICBp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FBQUQxMTAvBgNVBAUTKEQ2MTdENDcxMDQ4MkM3Rjc3NTc1MjA1N0RDODY4MjI1 OUIzMTlDNzgwHhcNMjMxMDE2MjIxMDIwWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTJkYjRjYy01YzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2NuUxuDPJeC+Ngf2tq0qNxJxR5+s5o7Z8P3C/HJUaz2k56VLDp48Zvr0C9w RmDIkyk6V+6Azg9cDDMLLgP/Q9c88Wx2h60SkgLMtVep8FW3yN++wmcDvK6vGe03 PLLd0QOCXcEoNxxKzFb1Ao80NH1SSfZl6swsCEEtUjRGy8XQmkPrVtEgdo3QWG/0 ru6Kop0q0AG33QtIr8Oj4FKA686xPiz5I2cJw4drZpK1VFmUOZRbPxejMHCLdKG+ VGHrKfozMK+VG5x0ox85g3lCKKMJTbsios0PLUXwdoQ+BxVJqO6Lqr+9oI+eDvNr 3N9w3VUFH3cMS+KMGYvFao6axQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFCqc35Aw 38aJP3wmY2VR9+9yvFppMB8GA1UdIwQYMBaAFNYX1HEEgsf3dXUgV9yGgiWbMZx4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUFBRC9FM0IyQjY0NEY3 QzExMUVBODI3NUNCNjZDNEY5QUUwMi8xaGZVY1FTQ3hfZDFkU0JYM0lhQ0pac3hu SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFoZlVjUVNDeF9kMWRTQlgzSWFDSlpzeG5IZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0FBQUQvRTNCMkI2NDRGN0MxMTFFQTgyNzVDQjY2QzRGOUFFMDIvQ0I0MkYwMThG N0MzMTFFQThBNzIyNDg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAR4SEADBATLrUAwDQQCAAIwBwMFACQEEAAwDQYJKoZIhvcN AQELBQADggEBAFNamP2I0iS7VxvydFrAAUKRf2aavflkL4bECWZUMtzAbZJKX5Wj nvGTk56PYs78HaTDVH6bdNoY5gNixPywB3QsP9N03lC1TCDPm/Hv6/HoVTvxpM+o oVMhqQO5EqQVKaGy6cqa5fxvu8lkmCGJulr5mUkEYwh6VtWb7cQtH3OGz4xdVTPu tKYZB8xIOmVZslwBHVAN2xVd5dlE2XfefMYc7C7GfSY5R7pC6xYcJnsj/oZUOhJY uC4StNRK92mBOB5GzH8i3IaxARtUAgATFcC2rAFYfGL7k2o5SuTk/f880b4SZlWy Uw6zMhu9LAjvtUu9KbBrg/YBr+79WB77f/8= -----END CERTIFICATE-----Generated at Wed May 29 00:29:07 2024 by rpki-client on console-fra.rpki-client.org