$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/469D7006D78F11EC91680D49C4F9AE02.roa File: 469D7006D78F11EC91680D49C4F9AE02.roa (raw, json) Hash identifier: CeVbVRddWsBgNnDEXfFTS5YQveYVZPSBhAPnbv4UEiY= Subject key identifier: 4C:75:59:7E:3F:A7:91:C5:30:8C:6F:94:19:0E:BC:28:6B:51:41:90 Certificate issuer: /CN=A9183BBC/serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D Certificate serial: 0574 Authority key identifier: 06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/469D7006D78F11EC91680D49C4F9AE02.roa Signing time: Wed 07 Feb 2024 00:12:54 +0000 ROA not before: Wed 07 Feb 2024 00:12:54 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 4594 IP address blocks: 43.225.100.0/22 maxlen: 22 43.225.100.0/24 maxlen: 24 43.225.101.0/24 maxlen: 24 43.225.102.0/24 maxlen: 24 43.225.103.0/24 maxlen: 24 103.44.60.0/24 maxlen: 24 103.44.61.0/24 maxlen: 24 2407:880::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 01:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1396 (0x574) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183BBC/serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D Validity Not Before: Feb 7 00:12:54 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65c2cb05-bcd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:40:5e:73:5a:11:a6:86:83:1f:28:83:6b:e4: f9:bf:4b:8e:af:07:1e:0e:12:49:29:fb:b8:35:53: d4:c0:02:49:23:db:bb:fc:b5:66:41:f4:17:ae:91: 8a:3d:d8:88:bb:d0:59:de:68:8d:7e:1a:17:37:58: 18:43:d1:b2:8c:82:aa:c9:53:49:0c:e8:87:14:35: 74:5c:fa:78:ff:06:a5:65:54:c1:22:07:d9:df:ce: 3e:89:47:d1:76:ca:ce:cf:47:07:db:fc:4c:a1:07: 93:fe:a2:d3:f3:22:b1:59:03:48:17:37:c8:d4:75: 3c:98:cc:ed:a1:c6:6b:82:e9:1b:8c:1a:14:5a:54: 97:e0:d6:cb:ce:6c:ac:49:ff:9a:73:2c:26:41:3c: 88:dd:3a:da:0d:ba:61:f8:6b:ff:a7:dc:72:2f:0b: d5:be:51:33:a9:38:f8:88:4c:be:6a:3c:a6:d5:0f: 78:fe:36:ac:0c:a0:b0:15:2e:56:3d:8c:31:5f:0c: 1d:05:84:33:48:61:eb:eb:5d:f4:64:39:e3:45:80: d3:4b:11:ef:b0:46:ea:5c:9d:fb:67:92:32:89:f5: 69:5e:c0:3b:4a:46:8f:70:f4:86:ad:1a:c3:9f:bd: aa:d1:dc:9e:78:20:d4:af:a4:69:b3:f6:f4:e6:4c: 4e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:75:59:7E:3F:A7:91:C5:30:8C:6F:94:19:0E:BC:28:6B:51:41:90 X509v3 Authority Key Identifier: keyid:06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/469D7006D78F11EC91680D49C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.225.100.0/22 103.44.60.0/23 IPv6: 2407:880::/32 Signature Algorithm: sha256WithRSAEncryption 9e:56:2c:d1:f3:2b:a3:28:1a:e0:5a:15:0a:ec:f7:ab:a3:2a: 4d:c8:fc:42:0f:f5:39:f8:3d:96:26:59:16:43:f9:13:12:9f: 8c:74:7b:d0:2e:94:c2:53:71:fb:6d:98:d9:2a:f4:fa:70:2e: 3d:64:91:5e:dd:d8:08:43:78:d4:d6:ce:86:1d:ef:62:97:10: 40:ae:66:4f:de:e6:ba:82:1a:05:5e:27:bc:14:eb:7b:53:92: 1d:59:55:6c:52:1a:55:f3:1d:5a:80:b9:3d:9f:68:88:42:f5: 2b:b5:05:68:40:a5:86:eb:43:08:9d:b5:3e:4b:97:06:75:64: ae:8d:15:12:b4:e4:f9:d3:79:02:98:ab:6a:41:56:04:38:2c: 7a:d1:bd:d9:dc:02:6e:28:fe:9a:85:90:60:53:50:a0:f9:a3: 5f:c0:bc:ab:60:c7:0b:4c:c2:5c:68:c9:7c:fc:3f:b2:2a:55: d7:eb:ce:4c:ec:8e:b7:f1:98:e2:5b:a8:14:bf:14:84:ff:00: 72:e1:bc:c8:2c:c2:13:85:65:0c:0a:09:ad:62:1a:5e:06:18: 70:55:25:93:53:43:db:bc:5f:9f:fa:87:08:53:a1:30:ad:9c: 1b:2f:4d:96:55:34:58:e2:1a:ab:ab:24:44:4d:c9:3f:40:54: f4:9f:4c:24 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICBXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCQkMxMTAvBgNVBAUTKDA2MTgxODQ5RTJDNUY5MzEzRUE2MEEzMzk3REM2MTQ3 MkFDMTFCMEQwHhcNMjQwMjA3MDAxMjU0WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWMyY2IwNS1iY2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8EBec1oRpoaDHyiDa+T5v0uOrwceDhJJKfu4NVPUwAJJI9u7/LVmQfQXrpGK PdiIu9BZ3miNfhoXN1gYQ9GyjIKqyVNJDOiHFDV0XPp4/walZVTBIgfZ384+iUfR dsrOz0cH2/xMoQeT/qLT8yKxWQNIFzfI1HU8mMztocZrgukbjBoUWlSX4NbLzmys Sf+acywmQTyI3TraDbph+Gv/p9xyLwvVvlEzqTj4iEy+ajym1Q94/jasDKCwFS5W PYwxXwwdBYQzSGHr6130ZDnjRYDTSxHvsEbqXJ37Z5IyifVpXsA7SkaPcPSGrRrD n72q0dyeeCDUr6Rps/b05kxOkwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFEx1WX4/ p5HFMIxvlBkOvChrUUGQMB8GA1UdIwQYMBaAFAYYGEnixfkxPqYKM5fcYUcqwRsN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0JCQy8xNDBDMTc1Njg2 RDYxMUVCQjdCMzlDNjJDNEY5QUUwMi9CaGdZU2VMRi1URS1wZ296bDl4aFJ5ckJH dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JoZ1lTZUxGLVRFLXBnb3psOXhoUnlyQkd3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODNCQkMvMTQwQzE3NTY4NkQ2MTFFQkI3QjM5QzYyQzRGOUFFMDIvNDY5RDcwMDZE NzhGMTFFQzkxNjgwRDQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIr4WQDBAFnLDwwDQQCAAIwBwMFACQHCIAwDQYJKoZIhvcN AQELBQADggEBAJ5WLNHzK6MoGuBaFQrs96ujKk3I/EIP9Tn4PZYmWRZD+RMSn4x0 e9AulMJTcfttmNkq9PpwLj1kkV7d2AhDeNTWzoYd72KXEECuZk/e5rqCGgVeJ7wU 63tTkh1ZVWxSGlXzHVqAuT2faIhC9Su1BWhApYbrQwidtT5LlwZ1ZK6NFRK05PnT eQKYq2pBVgQ4LHrRvdncAm4o/pqFkGBTUKD5o1/AvKtgxwtMwlxoyXz8P7IqVdfr zkzsjrfxmOJbqBS/FIT/AHLhvMgswhOFZQwKCa1iGl4GGHBVJZNTQ9u8X5/6hwhT oTCtnBsvTZZVNFjiGqurJERNyT9AVPSfTCQ= -----END CERTIFICATE-----Generated at Sat Jun 1 02:55:17 2024 by rpki-client on console-fra.rpki-client.org