$ rpki-client -vvf rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/1966C856FB9E11ED8309FC1DC4F9AE02.roa File: 1966C856FB9E11ED8309FC1DC4F9AE02.roa (raw, json) Hash identifier: 0ApTySfWss7BCgDJo5NI3CLB1Q6H4KVApSNhXj+3R8s= Subject key identifier: 09:18:DD:BD:91:A3:3E:6F:6B:0B:1C:7E:5D:C3:21:CC:AD:87:4A:AC Certificate issuer: /CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Certificate serial: 1D Authority key identifier: 70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/1966C856FB9E11ED8309FC1DC4F9AE02.roa Signing time: Sat 01 Jul 2023 05:13:41 +0000 ROA not before: Sat 01 Jul 2023 05:13:41 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 56309 IP address blocks: 43.229.76.0/22 maxlen: 24 103.22.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Validity Not Before: Jul 1 05:13:41 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=649fb605-2188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:90:83:86:6a:03:d0:61:c9:66:93:88:f1:32: 5f:1d:82:70:aa:15:c7:52:bd:47:55:b2:40:72:60: ea:fb:9d:b0:66:66:12:5f:d5:6a:9d:3b:63:e1:e3: 61:6d:f8:5f:7a:1f:1e:52:e0:5e:91:d4:c2:31:c6: c0:37:c5:be:97:31:38:42:57:7a:6e:bb:8d:8c:01: e1:11:13:75:2f:7f:2c:84:63:77:73:ef:91:a5:63: 43:f0:a1:94:4c:e0:0e:6b:b6:21:ec:b4:90:a6:07: b3:1c:d4:dc:2a:88:3b:74:45:a0:89:3b:b6:8e:77: 51:bb:c9:8c:3c:f0:19:91:7e:b3:8c:c4:74:eb:04: 5b:57:61:14:ec:29:9d:c5:a8:1e:f9:b8:9b:55:f0: 40:86:07:a7:f2:ca:dd:5d:04:82:48:e1:9c:4f:2d: 98:8a:35:a0:da:65:e4:d4:8b:a8:47:a3:73:52:ed: eb:fe:86:58:02:b3:73:5f:4b:d4:85:66:a4:4f:cf: 91:26:1d:a9:bd:2e:b8:25:d8:ca:77:93:0c:bc:0e: 64:b0:01:7c:a8:d9:69:c5:23:31:8d:5a:01:11:b3: b7:7a:45:85:00:ac:33:4d:a4:51:f0:03:06:15:16: 73:59:2d:c5:49:e7:43:1e:4b:1f:e6:f1:68:2f:0a: d8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:18:DD:BD:91:A3:3E:6F:6B:0B:1C:7E:5D:C3:21:CC:AD:87:4A:AC X509v3 Authority Key Identifier: keyid:70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/1966C856FB9E11ED8309FC1DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.229.76.0/22 103.22.180.0/22 Signature Algorithm: sha256WithRSAEncryption a0:be:66:b8:02:e1:ee:4c:bf:bf:44:a9:d9:57:85:2f:93:d5: 02:9b:65:94:30:d0:9b:2a:bb:70:64:7c:e3:29:55:16:0a:0a: dd:7b:b3:3b:72:0f:78:33:0e:4b:ee:21:79:16:9c:c9:60:8b: 60:1c:0c:06:17:5a:9c:44:6f:9a:01:f7:96:3b:46:58:eb:ab: dd:fc:e8:8f:de:3d:d7:7d:0b:89:ef:63:4a:8a:57:39:dc:3a: b3:1d:a5:98:99:88:99:14:59:28:8b:c0:82:d5:c5:fe:9a:c4: 9c:1b:32:b3:e1:57:79:bd:6c:11:8b:c6:0a:93:d2:17:92:50: a8:07:8b:bb:11:9b:81:3d:91:e7:de:09:d7:13:1a:c3:dc:6b: 7f:e5:0b:a8:74:c3:5e:44:d7:b8:1a:6f:71:53:6c:07:d7:13: 96:d2:bf:2d:f7:7a:1b:0b:ff:26:8c:36:d1:18:7e:d4:86:5f: 1c:23:5e:87:a6:db:45:1d:b4:01:12:ef:c4:d2:04:26:7f:39: 0d:7b:2e:de:9b:bb:a7:f9:6f:d7:95:fc:58:2e:ab:97:35:2d: 74:85:c5:6a:84:dc:90:d3:0d:63:32:89:7c:19:ec:68:8a:cc: f9:73:7b:ba:e2:cd:21:dd:bb:73:75:97:a9:40:d7:d2:23:ed: ff:71:25:19 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QjU0MDExMC8GA1UEBRMoNzAyRkExQUU5NjgyQjJCMjJFQ0REOUE1MzAxMkYwRTZG MUJBMUI5QzAeFw0yMzA3MDEwNTEzNDFaFw0yNDA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY0OWZiNjA1LTIxODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfkIOGagPQYclmk4jxMl8dgnCqFcdSvUdVskByYOr7nbBmZhJf1WqdO2Ph42Ft +F96Hx5S4F6R1MIxxsA3xb6XMThCV3puu42MAeERE3UvfyyEY3dz75GlY0PwoZRM 4A5rtiHstJCmB7Mc1NwqiDt0RaCJO7aOd1G7yYw88BmRfrOMxHTrBFtXYRTsKZ3F qB75uJtV8ECGB6fyyt1dBIJI4ZxPLZiKNaDaZeTUi6hHo3NS7ev+hlgCs3NfS9SF ZqRPz5EmHam9Lrgl2Mp3kwy8DmSwAXyo2WnFIzGNWgERs7d6RYUArDNNpFHwAwYV FnNZLcVJ50MeSx/m8WgvCth1AgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUCRjdvZGj Pm9rCxx+XcMhzK2HSqwwHwYDVR0jBBgwFoAUcC+hrpaCsrIuzdmlMBLw5vG6G5ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCNTQwL0Q5N0E5NUJDRjg4 MDExRURCOUFCRkM1NkM0RjlBRTAyL2NDLWhycGFDc3JJdXpkbWxNQkx3NXZHNkc1 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY0MtaHJwYUNzckl1emRtbE1CTHc1dkc2RzV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjU0MC9EOTdBOTVCQ0Y4ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi8xOTY2Qzg1NkZC OUUxMUVEODMwOUZDMURDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAivlTAMEAmcWtDANBgkqhkiG9w0BAQsFAAOCAQEAoL5muALh 7ky/v0Sp2VeFL5PVAptllDDQmyq7cGR84ylVFgoK3XuzO3IPeDMOS+4heRacyWCL YBwMBhdanERvmgH3ljtGWOur3fzoj949130Lie9jSopXOdw6sx2lmJmImRRZKIvA gtXF/prEnBsys+FXeb1sEYvGCpPSF5JQqAeLuxGbgT2R594J1xMaw9xrf+ULqHTD XkTXuBpvcVNsB9cTltK/Lfd6Gwv/Jow20Rh+1IZfHCNeh6bbRR20ARLvxNIEJn85 DXsu3pu7p/lv15X8WC6rlzUtdIXFaoTckNMNYzKJfBnsaIrM+XN7uuLNId27c3WX qUDX0iPt/3ElGQ== -----END CERTIFICATE-----Generated at Sun May 19 07:40:40 2024 by rpki-client on console-fra.rpki-client.org