$ rpki-client -vvf rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/17679A100BCE11EC85811A0DC4F9AE02.roa File: 17679A100BCE11EC85811A0DC4F9AE02.roa (raw, json) Hash identifier: K4jESE87qttWdzH55euloSsk0IBNZb6PG/YPIPEToao= Subject key identifier: AF:51:C6:E9:F2:0F:A7:E4:6B:51:56:37:21:24:35:D5:8D:D7:EB:2F Certificate issuer: /CN=A91852BA/serialNumber=F66964F99BC88D37761D389815D3C9E9D0A17A4D Certificate serial: 044A Authority key identifier: F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/17679A100BCE11EC85811A0DC4F9AE02.roa Signing time: Fri 17 May 2024 02:06:12 +0000 ROA not before: Fri 17 May 2024 02:06:12 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 53587 IP address blocks: 43.248.168.0/22 maxlen: 22 43.248.168.0/24 maxlen: 24 43.248.169.0/24 maxlen: 24 43.248.170.0/24 maxlen: 24 43.248.171.0/24 maxlen: 24 103.228.92.0/22 maxlen: 22 103.228.92.0/24 maxlen: 24 103.228.93.0/24 maxlen: 24 103.228.94.0/24 maxlen: 24 103.228.95.0/24 maxlen: 24 2401:9d80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1098 (0x44a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91852BA/serialNumber=F66964F99BC88D37761D389815D3C9E9D0A17A4D Validity Not Before: May 17 02:06:12 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6646bb93-3c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0b:8c:df:22:ba:f4:fc:3c:da:85:ef:e9:50: 32:6b:1c:ec:b6:e6:e7:f7:e4:66:48:c8:73:65:6e: 21:b6:b7:13:94:41:6d:4b:a4:c6:21:78:a4:65:ba: 47:cd:3f:3d:f6:94:a2:5a:00:a3:ad:9f:ba:c5:c1: 52:d0:7f:9e:57:bf:65:4b:01:65:ea:df:8e:4e:60: 0e:95:00:70:1a:a8:3f:81:0a:90:45:ed:ab:30:af: ea:52:e9:c0:0b:c6:b0:77:62:64:13:86:63:d0:39: 6f:a2:26:c9:31:4b:24:82:b5:85:3e:f6:14:cb:2b: 7d:3b:15:7b:4c:23:ca:99:3e:c6:07:03:16:b3:65: 2e:04:e8:4c:2a:40:91:b0:7e:d7:9d:12:d9:d3:a0: 9e:85:ee:4c:62:e5:f1:74:e1:39:bb:79:a8:cf:a8: ae:aa:ae:f2:6a:23:89:46:32:c2:66:a5:d7:dd:fd: f3:4a:21:18:56:e9:62:74:9b:80:f8:dc:7d:77:79: 84:79:6e:cf:e2:5b:c3:8a:7d:83:81:16:46:a7:da: db:08:1a:74:f5:41:7c:9b:56:3c:b9:34:a8:40:f8: 9d:3c:d0:2f:1a:fe:62:8e:83:ee:3a:f7:da:05:10: 80:3c:82:58:c5:a5:79:0f:47:4d:cf:78:94:60:62: c6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:51:C6:E9:F2:0F:A7:E4:6B:51:56:37:21:24:35:D5:8D:D7:EB:2F X509v3 Authority Key Identifier: keyid:F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/17679A100BCE11EC85811A0DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.248.168.0/22 103.228.92.0/22 IPv6: 2401:9d80::/32 Signature Algorithm: sha256WithRSAEncryption 65:0d:43:d7:5a:11:ec:5f:22:d0:50:4f:2c:f3:09:c8:07:69: 11:e8:ae:8f:e9:1c:e2:18:89:58:65:8b:c0:55:41:8b:8a:c0: 64:5e:3d:f8:57:45:b3:e5:bb:14:bb:2c:ab:85:4a:4c:29:85: dd:48:c8:fb:c1:f5:3a:f0:0b:69:4b:7c:f4:6b:e9:65:a0:29: 1c:c0:e1:f5:af:e8:f8:53:79:33:92:75:0c:56:b7:dc:b4:13: e7:22:39:24:cb:b1:1d:2b:dc:d1:e3:e8:e6:0d:1f:88:b5:b6: df:60:7d:7e:6a:72:77:b9:68:6c:e3:07:82:c5:1e:eb:12:83: 77:2d:28:0f:65:45:5a:39:d6:13:3d:da:79:c3:06:71:7c:32: ea:47:bc:a4:fc:e4:ea:b1:e8:82:d5:d4:89:b2:50:f4:54:47: 3d:32:f9:6a:2b:2e:85:78:c7:d5:0b:93:a7:8f:9c:66:e7:a3: e8:9c:e2:f2:3f:a1:31:fe:2c:ce:2a:81:e2:f6:99:d2:01:1d: 5a:75:85:69:f6:83:7c:59:75:3d:74:e5:cb:6b:ae:f0:23:cb: 6a:10:61:40:8e:63:1d:83:0b:d0:c0:e9:75:85:ad:4d:3d:bf: d8:cc:5d:3f:12:99:bf:55:2f:8d:3e:15:be:b3:ad:02:3a:66: ec:20:82:d2 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICBEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUyQkExMTAvBgNVBAUTKEY2Njk2NEY5OUJDODhEMzc3NjFEMzg5ODE1RDNDOUU5 RDBBMTdBNEQwHhcNMjQwNTE3MDIwNjEyWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQ2YmI5My0zYzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3wuM3yK69Pw82oXv6VAyaxzstubn9+RmSMhzZW4htrcTlEFtS6TGIXikZbpH zT899pSiWgCjrZ+6xcFS0H+eV79lSwFl6t+OTmAOlQBwGqg/gQqQRe2rMK/qUunA C8awd2JkE4Zj0DlvoibJMUskgrWFPvYUyyt9OxV7TCPKmT7GBwMWs2UuBOhMKkCR sH7XnRLZ06Cehe5MYuXxdOE5u3moz6iuqq7yaiOJRjLCZqXX3f3zSiEYVulidJuA +Nx9d3mEeW7P4lvDin2DgRZGp9rbCBp09UF8m1Y8uTSoQPidPNAvGv5ijoPuOvfa BRCAPIJYxaV5D0dNz3iUYGLGJQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFK9Rxuny D6fka1FWNyEkNdWN1+svMB8GA1UdIwQYMBaAFPZpZPmbyI03dh04mBXTyenQoXpN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTJCQS84NTY1MTdDMDBC Q0IxMUVDQkQ5QzIwMEJDNEY5QUUwMi85bWxrLVp2SWpUZDJIVGlZRmRQSjZkQ2hl azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzltbGstWnZJalRkMkhUaVlGZFBKNmRDaGVrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODUyQkEvODU2NTE3QzAwQkNCMTFFQ0JEOUMyMDBCQzRGOUFFMDIvMTc2NzlBMTAw QkNFMTFFQzg1ODExQTBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIr+KgDBAJn5FwwDQQCAAIwBwMFACQBnYAwDQYJKoZIhvcN AQELBQADggEBAGUNQ9daEexfItBQTyzzCcgHaRHoro/pHOIYiVhli8BVQYuKwGRe PfhXRbPluxS7LKuFSkwphd1IyPvB9TrwC2lLfPRr6WWgKRzA4fWv6PhTeTOSdQxW t9y0E+ciOSTLsR0r3NHj6OYNH4i1tt9gfX5qcne5aGzjB4LFHusSg3ctKA9lRVo5 1hM92nnDBnF8MupHvKT85Oqx6ILV1ImyUPRURz0y+WorLoV4x9ULk6ePnGbno+ic 4vI/oTH+LM4qgeL2mdIBHVp1hWn2g3xZdT105ctrrvAjy2oQYUCOYx2DC9DA6XWF rU09v9jMXT8Smb9VL40+Fb6zrQI6ZuwggtI= -----END CERTIFICATE-----Generated at Sun May 19 02:59:08 2024 by rpki-client on console-ams.rpki-client.org