$ rpki-client -vvf rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/046B33A4431C11EE8DDA391AC4F9AE02.roa File: 046B33A4431C11EE8DDA391AC4F9AE02.roa (raw, json) Hash identifier: wQI5YxsE/Ugf6uses1V+/cxJDgapH749N4ib0nvozl8= Subject key identifier: 8D:4F:D3:FC:4B:8E:42:69:25:8D:DA:FC:C2:E4:0B:87:FD:49:E8:AE Certificate issuer: /CN=A918A996/serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089 Certificate serial: 78 Authority key identifier: 83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/046B33A4431C11EE8DDA391AC4F9AE02.roa Signing time: Thu 21 Dec 2023 06:18:16 +0000 ROA not before: Thu 21 Dec 2023 06:18:16 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 10118 IP address blocks: 117.103.144.0/20 maxlen: 20 117.103.144.0/20 maxlen: 24 117.103.152.0/23 maxlen: 23 117.103.156.0/24 maxlen: 24 117.103.157.0/24 maxlen: 24 117.103.158.0/24 maxlen: 24 117.103.159.0/24 maxlen: 24 124.217.128.0/18 maxlen: 24 180.188.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 06:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A996/serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089 Validity Not Before: Dec 21 06:18:16 2023 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=6583d8a8-fe28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d7:45:11:b6:6b:2c:4f:03:40:d8:60:42:4a: 72:28:0b:9d:98:b9:ab:e7:24:d7:13:58:27:bd:97: 7b:bb:1f:f2:51:b6:16:a3:29:91:cd:a8:88:19:6d: b4:ec:88:ea:4a:74:5b:d9:98:2e:46:30:de:a8:cd: 56:ce:19:af:3a:22:2d:15:11:62:21:f8:15:30:cd: a1:19:44:6d:8f:27:71:bb:98:21:6d:dc:af:75:8b: 92:66:77:66:b7:a9:2c:9e:b9:66:f6:f8:88:71:ea: 6f:a4:96:d6:a4:bd:fc:c8:90:41:38:5c:b8:4c:43: 33:38:27:b8:1b:59:6e:42:6c:ef:99:97:dd:04:40: c7:1c:14:64:ae:95:61:22:49:80:67:e6:c7:3f:7a: ef:0e:83:d2:51:f1:fd:48:79:09:15:31:0b:40:1f: d0:ae:5c:4e:93:43:75:c6:ee:a8:dd:d1:d6:fd:9a: 3a:d2:06:00:80:5c:d2:6a:0c:e9:c4:f2:39:43:a2: 14:f2:6a:17:40:64:ab:7f:da:d3:cb:0b:9e:cd:41: 63:6e:16:e0:0a:cb:a8:f8:a4:49:2d:68:57:52:70: f3:43:04:6b:8b:b1:32:2d:41:e7:07:92:cb:50:ff: f1:fe:cd:30:52:49:8c:05:00:73:16:5a:b2:61:29: bb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4F:D3:FC:4B:8E:42:69:25:8D:DA:FC:C2:E4:0B:87:FD:49:E8:AE X509v3 Authority Key Identifier: keyid:83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/046B33A4431C11EE8DDA391AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.103.144.0/20 124.217.128.0/18 180.188.128.0/18 Signature Algorithm: sha256WithRSAEncryption 2e:91:74:aa:9b:8a:bf:05:d0:5a:bc:80:85:34:27:95:ab:11: cd:24:19:d4:57:4f:d1:6e:50:fc:59:db:03:5e:57:34:dc:00: 8e:7d:21:32:85:0c:0a:d1:7b:7f:f0:cd:e7:db:16:47:c2:25: 37:9c:7a:6d:95:8a:2d:dc:68:fd:75:d8:2f:be:8b:cf:32:ff: 9c:ff:f4:3a:07:fd:1b:ff:27:8a:1c:ae:fa:27:b6:96:66:4f: b2:30:41:c9:60:6e:27:c4:e9:53:37:b7:91:c2:f1:40:c5:80: 4a:90:58:ce:b8:b6:e8:0a:c8:0b:82:7d:cd:00:44:2d:81:82: 42:07:07:fc:2c:7d:3b:ea:f9:e1:5f:0c:eb:7e:64:09:d0:71: 2f:ae:f2:21:8e:76:8a:6d:3c:a5:46:8e:1c:0c:ee:8e:46:76: 9f:4b:36:a9:53:5f:5a:e8:25:97:72:59:68:2f:98:9c:6e:f7: de:5d:e6:d7:76:fe:24:68:d1:ea:b8:80:0a:e4:17:1c:f5:0b: a1:f9:b6:58:34:17:d7:da:5b:82:23:9a:09:89:89:06:95:07: 85:a8:f2:96:52:81:30:f6:07:c5:1d:16:81:4c:ce:e2:22:af: 3a:48:0c:7f:b7:96:c3:da:be:2f:c8:e6:dc:34:2a:f4:e8:51: 14:86:b9:6a -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QTk5NjExMC8GA1UEBRMoODM4NkJFODYxQkRCREI2RDAxNjUwODdEQzA0NEEwN0ZB NEQ0RjA4OTAeFw0yMzEyMjEwNjE4MTZaFw0yNTAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1ODNkOGE4LWZlMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDR10URtmssTwNA2GBCSnIoC52YuavnJNcTWCe9l3u7H/JRthajKZHNqIgZbbTs iOpKdFvZmC5GMN6ozVbOGa86Ii0VEWIh+BUwzaEZRG2PJ3G7mCFt3K91i5Jmd2a3 qSyeuWb2+Ihx6m+kltakvfzIkEE4XLhMQzM4J7gbWW5CbO+Zl90EQMccFGSulWEi SYBn5sc/eu8Og9JR8f1IeQkVMQtAH9CuXE6TQ3XG7qjd0db9mjrSBgCAXNJqDOnE 8jlDohTyahdAZKt/2tPLC57NQWNuFuAKy6j4pEktaFdScPNDBGuLsTItQecHkstQ //H+zTBSSYwFAHMWWrJhKbu1AgMBAAGjggKhMIICnTAdBgNVHQ4EFgQUjU/T/EuO Qmkljdr8wuQLh/1J6K4wHwYDVR0jBBgwFoAUg4a+hhvb220BZQh9wESgf6TU8Ikw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBOTk2LzMyQzY4QTVFMjc5 ODExRUVCRDhEQzU1RkM0RjlBRTAyL2c0YS1oaHZiMjIwQlpRaDl3RVNnZjZUVThJ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZzRhLWhodmIyMjBCWlFoOXdFU2dmNlRVOElrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTk5Ni8zMkM2OEE1RTI3OTgxMUVFQkQ4REM1NUZDNEY5QUUwMi8wNDZCMzNBNDQz MUMxMUVFOEREQTM5MUFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDArBggrBgEFBQcBBwEB/wQc MBowGAQCAAEwEgMEBHVnkAMEBnzZgAMEBrS8gDANBgkqhkiG9w0BAQsFAAOCAQEA LpF0qpuKvwXQWryAhTQnlasRzSQZ1FdP0W5Q/FnbA15XNNwAjn0hMoUMCtF7f/DN 59sWR8IlN5x6bZWKLdxo/XXYL76LzzL/nP/0Ogf9G/8nihyu+ie2lmZPsjBByWBu J8TpUze3kcLxQMWASpBYzri26ArIC4J9zQBELYGCQgcH/Cx9O+r54V8M635kCdBx L67yIY52im08pUaOHAzujkZ2n0s2qVNfWugll3JZaC+YnG733l3m13b+JGjR6riA CuQXHPULofm2WDQX19pbgiOaCYmJBpUHhajyllKBMPYHxR0WgUzO4iKvOkgMf7eW w9q+L8jm3DQq9OhRFIa5ag== -----END CERTIFICATE-----Generated at Wed May 29 09:16:22 2024 by rpki-client on console-fra.rpki-client.org