$ rpki-client -vvf rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/1966C856FB9E11ED8309FC1DC4F9AE02.roa File: 1966C856FB9E11ED8309FC1DC4F9AE02.roa (raw, json) Hash identifier: jsmEuKgoeYiJY/PhkO97a7NHRngriTFFOmRBgoLfjbw= Subject key identifier: D6:26:B3:54:8D:3D:94:66:03:50:26:97:E4:F9:87:2E:DB:52:08:F5 Certificate issuer: /CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Certificate serial: DB Authority key identifier: 70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/1966C856FB9E11ED8309FC1DC4F9AE02.roa Signing time: Wed 03 Jul 2024 05:26:19 +0000 ROA not before: Wed 03 Jul 2024 05:26:19 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 56309 IP address blocks: 43.229.76.0/22 maxlen: 24 103.22.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Validity Not Before: Jul 3 05:26:19 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6684e0fb-dd63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7d:55:88:be:55:d3:b1:72:16:51:29:a7:53: 6a:1b:5d:e9:be:b3:0b:9b:e8:c3:1c:60:7b:78:a4: 10:af:93:a3:a8:aa:2b:70:e9:d5:81:b8:67:23:41: 7c:9c:ab:01:c7:b4:c6:9e:11:bb:f7:a8:32:b3:7b: 72:02:e1:71:cf:cf:4d:79:88:56:3f:84:d2:f7:15: 97:5b:98:29:1a:c2:67:cc:d4:b2:cb:ae:4d:45:ca: 4a:01:9a:64:b0:71:ce:6f:b5:1d:cd:4f:9a:57:25: 8d:85:29:de:3b:1e:88:a8:03:a0:24:84:6d:b8:d0: 55:82:24:c9:66:b0:d8:15:61:ae:59:a5:75:0c:89: f6:ef:98:a6:12:16:1b:e5:e1:3d:e0:99:b8:cd:41: 82:da:02:94:6d:ae:9a:92:ec:39:f3:cf:16:6d:26: 2b:9b:ab:d7:70:b2:40:94:dd:0f:e5:6d:27:e7:e1: 9a:4a:d5:26:47:25:58:4e:a0:b5:7f:ac:68:fc:55: d9:15:e3:ce:e7:10:45:84:d4:49:b1:da:fe:e4:37: f4:22:88:94:02:c2:87:98:13:e1:94:b3:30:75:03: ad:28:46:cb:0e:42:c6:c7:c9:a5:31:c2:71:75:c9: b0:8c:96:de:58:c5:20:28:ea:ce:1d:f6:9d:fc:c2: 0c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:26:B3:54:8D:3D:94:66:03:50:26:97:E4:F9:87:2E:DB:52:08:F5 X509v3 Authority Key Identifier: keyid:70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/1966C856FB9E11ED8309FC1DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.229.76.0/22 103.22.180.0/22 Signature Algorithm: sha256WithRSAEncryption 58:7b:b0:fc:a7:25:65:84:19:d0:8b:76:5f:2b:32:41:17:d4: 5c:d2:01:04:82:2e:fb:ab:a1:ee:b1:b3:2c:35:7a:4e:bc:0b: 07:0e:91:c4:9a:0f:c3:cc:f1:6a:6a:5c:b8:0e:4e:09:f9:fb: 28:f2:e3:d8:78:d2:a4:ce:17:b4:1f:ad:e6:2d:6e:94:9d:79: 39:6f:58:b7:06:18:73:3b:13:8e:2e:18:fa:60:72:5c:f1:ab: 37:39:8e:ac:74:b6:b3:fb:9a:57:ab:7d:1b:a9:39:f9:84:f2: 0f:83:56:55:d1:e5:8d:7d:98:c5:92:b3:a9:d5:b9:98:7f:a2: e2:32:90:78:ee:64:d0:13:8a:cf:31:7e:6e:9f:c8:3d:4d:01: 15:18:cc:8b:8c:81:68:dd:ee:78:14:52:b3:02:60:35:cd:aa: 62:ef:bb:fa:fd:51:b8:df:7f:bd:63:17:2e:0e:dc:b4:c3:d4: de:4b:13:b0:6a:ff:5a:98:40:be:cd:8a:a2:d5:30:4a:ae:b0: ba:fe:77:62:71:fe:64:01:d4:d6:4c:ec:5c:8c:b2:21:be:15: 53:3f:78:0f:e6:e4:b9:e2:76:96:12:f2:75:fb:5b:15:ed:0a: 3f:fe:23:97:66:be:b5:0b:ef:ed:a3:28:e9:ee:85:16:23:f6: b3:b1:43:01 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1NDAxMTAvBgNVBAUTKDcwMkZBMUFFOTY4MkIyQjIyRUNERDlBNTMwMTJGMEU2 RjFCQTFCOUMwHhcNMjQwNzAzMDUyNjE5WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njg0ZTBmYi1kZDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs31ViL5V07FyFlEpp1NqG13pvrMLm+jDHGB7eKQQr5OjqKorcOnVgbhnI0F8 nKsBx7TGnhG796gys3tyAuFxz89NeYhWP4TS9xWXW5gpGsJnzNSyy65NRcpKAZpk sHHOb7UdzU+aVyWNhSneOx6IqAOgJIRtuNBVgiTJZrDYFWGuWaV1DIn275imEhYb 5eE94Jm4zUGC2gKUba6akuw5888WbSYrm6vXcLJAlN0P5W0n5+GaStUmRyVYTqC1 f6xo/FXZFePO5xBFhNRJsdr+5Df0IoiUAsKHmBPhlLMwdQOtKEbLDkLGx8mlMcJx dcmwjJbeWMUgKOrOHfad/MIMzQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNYms1SN PZRmA1Aml+T5hy7bUgj1MB8GA1UdIwQYMBaAFHAvoa6WgrKyLs3ZpTAS8Obxuhuc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjU0MC9EOTdBOTVCQ0Y4 ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3NySXV6ZG1sTUJMdzV2RzZH NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NDLWhycGFDc3JJdXpkbWxNQkx3NXZHNkc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0I1NDAvRDk3QTk1QkNGODgwMTFFREI5QUJGQzU2QzRGOUFFMDIvMTk2NkM4NTZG QjlFMTFFRDgzMDlGQzFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr5UwDBAJnFrQwDQYJKoZIhvcNAQELBQADggEBAFh7sPyn JWWEGdCLdl8rMkEX1FzSAQSCLvuroe6xsyw1ek68CwcOkcSaD8PM8WpqXLgOTgn5 +yjy49h40qTOF7QfreYtbpSdeTlvWLcGGHM7E44uGPpgclzxqzc5jqx0trP7mler fRupOfmE8g+DVlXR5Y19mMWSs6nVuZh/ouIykHjuZNATis8xfm6fyD1NARUYzIuM gWjd7ngUUrMCYDXNqmLvu/r9Ubjff71jFy4O3LTD1N5LE7Bq/1qYQL7NiqLVMEqu sLr+d2Jx/mQB1NZM7FyMsiG+FVM/eA/m5LnidpYS8nX7WxXtCj/+I5dmvrUL7+2j KOnuhRYj9rOxQwE= -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:59 2024 by rpki-client on console-fra.rpki-client.org