$ rpki-client -vvf rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/756558C6D19611ECB75A996BC4F9AE02.roa File: 756558C6D19611ECB75A996BC4F9AE02.roa (raw, json) Hash identifier: Es4xWH/MOyfkkc/RYd9IRsc0K3PRc1MXcB8ZFrJBb4Q= Subject key identifier: 85:3C:8D:A2:44:FE:AC:08:20:93:53:20:41:50:15:4D:4E:C9:6A:E8 Certificate issuer: /CN=A918BDA2/serialNumber=DF677D8693477B92A1E9FE7C20422696CEA8609D Certificate serial: 0228 Authority key identifier: DF:67:7D:86:93:47:7B:92:A1:E9:FE:7C:20:42:26:96:CE:A8:60:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/32d9hpNHe5Kh6f58IEImls6oYJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/756558C6D19611ECB75A996BC4F9AE02.roa Signing time: Mon 19 Feb 2024 03:45:06 +0000 ROA not before: Mon 19 Feb 2024 03:45:06 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 59322 IP address blocks: 43.247.16.0/22 maxlen: 24 103.225.36.0/22 maxlen: 22 103.225.36.0/24 maxlen: 24 103.225.37.0/24 maxlen: 24 103.225.38.0/24 maxlen: 24 103.225.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.crl rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/32d9hpNHe5Kh6f58IEImls6oYJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BDA2/serialNumber=DF677D8693477B92A1E9FE7C20422696CEA8609D Validity Not Before: Feb 19 03:45:06 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65d2cec2-5ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:03:25:b3:b5:dc:ea:63:76:5f:77:e8:f8:29: a2:ec:0b:d1:74:fd:51:85:a7:74:c7:04:ea:b1:f4: 8b:e8:2e:06:66:be:ea:d2:8a:2c:c2:ca:bd:77:bd: 6c:7a:f6:95:d0:a4:17:02:66:a5:ef:b3:03:0f:02: 28:52:b9:3b:2d:19:9d:84:44:71:b2:38:dc:d6:48: 26:03:27:d8:61:85:c0:88:4e:40:dc:82:0d:07:f8: 7d:92:ac:fe:de:b9:60:e0:63:88:ea:62:84:51:7d: 09:4b:af:dc:5f:24:ef:5a:e2:de:13:f6:e0:c4:e9: 14:8d:28:aa:a6:e9:fa:54:45:d3:2f:f2:33:61:65: c4:07:6b:9d:a4:23:87:6f:a2:37:88:a3:49:3b:e2: b3:03:5b:35:96:30:83:2c:fc:4c:fe:21:e5:82:c7: df:95:ac:77:99:cd:1e:d3:25:c6:dd:5a:fe:26:30: 58:c6:bf:45:d5:bd:a1:27:36:64:d6:64:4d:eb:12: 90:12:f7:bf:5b:fb:05:47:85:0f:49:6f:1a:bc:5c: ce:64:77:cb:17:fd:e0:42:dd:d2:b0:ef:45:2f:68: 57:ef:86:f8:2b:8f:5a:6a:7f:87:38:24:c1:be:3a: 28:eb:3d:9d:67:94:c3:20:bc:fc:16:f9:cb:ba:b4: f5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3C:8D:A2:44:FE:AC:08:20:93:53:20:41:50:15:4D:4E:C9:6A:E8 X509v3 Authority Key Identifier: keyid:DF:67:7D:86:93:47:7B:92:A1:E9:FE:7C:20:42:26:96:CE:A8:60:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/32d9hpNHe5Kh6f58IEImls6oYJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/756558C6D19611ECB75A996BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.247.16.0/22 103.225.36.0/22 Signature Algorithm: sha256WithRSAEncryption 46:60:0e:92:76:61:f6:87:5f:a1:50:5e:b1:f8:61:bf:49:f0: c0:14:68:b8:24:47:ee:52:6f:d7:22:14:bf:72:f5:f7:56:92: 53:a9:ae:84:2a:81:e8:b2:55:3b:ea:9b:28:9c:43:56:99:06: 62:98:57:85:30:ab:81:13:fe:76:93:0c:87:10:a9:ac:35:2d: ca:f3:fa:5b:f6:90:59:c2:29:1e:bb:8b:00:4e:11:ee:ba:bb: db:8a:0b:44:1c:61:b2:e3:c9:1a:56:04:20:41:b9:77:6f:9e: 7a:af:42:98:4a:13:a7:9d:da:18:a4:3a:0c:a1:69:ca:5f:ee: 77:54:52:12:c6:ab:7b:a6:b2:f6:f7:a2:02:d6:f9:23:64:18: 52:6e:f7:bd:da:7b:f4:6a:68:bb:9f:67:14:9d:1e:32:26:db: d7:b0:42:55:fe:9d:e6:f9:5a:bf:70:2c:9b:43:e6:4e:41:a1: 4b:73:72:d4:75:85:13:fd:bb:8c:f3:36:d4:d4:3d:f6:7f:26: 49:15:75:1b:23:6a:f7:cb:40:36:e8:f1:4d:ef:0a:bc:28:64: 5f:3e:82:e4:f0:49:ef:5e:ab:3b:87:b9:02:4c:bd:c4:89:6a: 16:b5:0d:66:0e:77:5f:05:c6:3b:6b:30:9d:83:4f:35:06:11: 32:c9:6d:cc -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJEQTIxMTAvBgNVBAUTKERGNjc3RDg2OTM0NzdCOTJBMUU5RkU3QzIwNDIyNjk2 Q0VBODYwOUQwHhcNMjQwMjE5MDM0NTA2WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWQyY2VjMi01Y2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgMls7Xc6mN2X3fo+Cmi7AvRdP1Rhad0xwTqsfSL6C4GZr7q0ooswsq9d71s evaV0KQXAmal77MDDwIoUrk7LRmdhERxsjjc1kgmAyfYYYXAiE5A3IINB/h9kqz+ 3rlg4GOI6mKEUX0JS6/cXyTvWuLeE/bgxOkUjSiqpun6VEXTL/IzYWXEB2udpCOH b6I3iKNJO+KzA1s1ljCDLPxM/iHlgsfflax3mc0e0yXG3Vr+JjBYxr9F1b2hJzZk 1mRN6xKQEve/W/sFR4UPSW8avFzOZHfLF/3gQt3SsO9FL2hX74b4K49aan+HOCTB vjoo6z2dZ5TDILz8FvnLurT15wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIU8jaJE /qwIIJNTIEFQFU1OyWroMB8GA1UdIwQYMBaAFN9nfYaTR3uSoen+fCBCJpbOqGCd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkRBMi83MEU2OUMxOEQw RUUxMUVDQkM1QzQ5NzNDNEY5QUUwMi8zMmQ5aHBOSGU1S2g2ZjU4SUVJbWxzNm9Z SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMyZDlocE5IZTVLaDZmNThJRUltbHM2b1lKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEJEQTIvNzBFNjlDMThEMEVFMTFFQ0JDNUM0OTczQzRGOUFFMDIvNzU2NTU4QzZE MTk2MTFFQ0I3NUE5OTZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr9xADBAJn4SQwDQYJKoZIhvcNAQELBQADggEBAEZgDpJ2 YfaHX6FQXrH4Yb9J8MAUaLgkR+5Sb9ciFL9y9fdWklOproQqgeiyVTvqmyicQ1aZ BmKYV4Uwq4ET/naTDIcQqaw1Lcrz+lv2kFnCKR67iwBOEe66u9uKC0QcYbLjyRpW BCBBuXdvnnqvQphKE6ed2hikOgyhacpf7ndUUhLGq3umsvb3ogLW+SNkGFJu973a e/RqaLufZxSdHjIm29ewQlX+neb5Wr9wLJtD5k5BoUtzctR1hRP9u4zzNtTUPfZ/ JkkVdRsjavfLQDbo8U3vCrwoZF8+guTwSe9eqzuHuQJMvcSJaha1DWYOd18Fxjtr MJ2DTzUGETLJbcw= -----END CERTIFICATE-----Generated at Fri May 17 04:44:31 2024 by rpki-client on console-ams.rpki-client.org