$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/F19DA35AC6C211EC87251528C4F9AE02.roa File: F19DA35AC6C211EC87251528C4F9AE02.roa (raw, json) Hash identifier: XeTEM/kK85VXz9OasdtCvvHtbb2Ap9PpH5Bt8UJyVNY= Subject key identifier: E3:D1:85:7F:BD:EC:24:FD:47:8F:E5:15:22:AE:F6:FD:E9:2B:CD:D3 Certificate issuer: /CN=A918D1A4/serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Certificate serial: 01EC Authority key identifier: B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/F19DA35AC6C211EC87251528C4F9AE02.roa Signing time: Sat 09 Sep 2023 02:33:32 +0000 ROA not before: Sat 09 Sep 2023 02:33:32 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 132742 IP address blocks: 43.239.164.0/22 maxlen: 24 103.35.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D1A4/serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Validity Not Before: Sep 9 02:33:32 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=64fbd97c-9659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:74:ce:5c:53:25:bf:96:43:c0:3e:82:7e:6f: 0c:66:e9:88:70:b5:76:b8:00:39:27:b0:8c:89:7e: e8:e1:76:fc:f5:71:ad:00:e2:5a:eb:bd:80:00:32: 5d:53:d1:b4:0d:f8:2d:08:8d:ba:4f:24:e9:c1:cf: ef:2f:1c:07:66:e0:e0:e6:3e:03:b1:0c:8b:4a:41: ae:cd:fb:3a:88:84:ab:47:09:3a:ef:ea:be:bf:0b: 32:21:0e:df:51:93:77:be:c9:d4:4f:2f:ff:87:05: 4f:fb:72:a9:24:ba:8c:af:4d:ed:cc:ff:cd:c5:f5: ea:46:92:a5:f2:aa:8f:6b:bc:93:cd:00:08:e0:17: 04:09:ad:66:5e:3d:c6:8b:7c:c4:e1:99:d0:93:51: ee:63:18:bc:74:a0:5d:c9:8c:ea:25:b8:f3:26:07: a3:76:c6:a5:9f:ee:cd:69:3b:f2:20:29:62:e0:85: 43:c2:2f:3c:62:81:48:c8:b4:e6:d7:f8:08:94:4e: dd:03:49:a4:b5:9e:67:38:72:db:12:18:fe:cc:9c: a0:2d:05:62:4f:d1:73:a8:12:cc:75:86:a2:20:ec: 5e:71:1d:09:4a:19:fc:32:99:22:de:83:68:c7:85: ae:b9:5a:76:e3:2f:87:8d:83:47:3f:02:1f:44:5f: e4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D1:85:7F:BD:EC:24:FD:47:8F:E5:15:22:AE:F6:FD:E9:2B:CD:D3 X509v3 Authority Key Identifier: keyid:B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/F19DA35AC6C211EC87251528C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.239.164.0/22 103.35.84.0/22 Signature Algorithm: sha256WithRSAEncryption 00:37:19:9c:64:f7:af:9d:f8:4b:12:73:6a:e9:58:36:84:09: c0:b1:34:47:ca:1f:11:d6:51:93:d7:03:95:31:65:46:50:21: 42:58:81:1e:5a:de:53:f9:70:00:ff:3a:96:c5:0b:5f:cd:f4: 6d:4c:b0:ca:15:a2:37:ed:74:25:f5:41:92:5e:d6:7f:94:66: 8d:69:3e:27:29:5d:69:b6:33:69:f2:99:a2:31:d8:a1:8d:61: 27:09:ec:38:39:4d:48:ca:df:c1:2f:49:65:68:3c:05:b7:8a: 4e:b2:6f:6d:45:38:cf:eb:82:87:41:c7:b8:27:7b:a3:a8:0f: 72:d6:f4:1e:47:fb:3b:a1:55:91:f1:38:1d:3d:db:a7:7f:25: 2e:4e:5d:24:b5:5d:66:79:54:04:16:b1:bf:18:0f:83:e1:3a: cd:96:20:cc:b6:a7:e5:9e:9b:f4:76:bf:1b:20:c5:58:fa:b9: 09:27:7f:6f:18:3f:42:46:8f:c6:59:54:fe:68:e9:fa:5f:a0: 4b:9a:40:47:94:2a:1d:a6:43:f2:19:0e:3a:b1:b7:70:96:d3: 97:69:32:aa:bb:ba:e2:5e:37:3a:e7:75:2d:47:c1:c2:59:13: 03:d3:1f:57:a0:9e:fa:e3:c4:c1:c1:5d:07:4c:af:79:63:da: 05:6b:fc:e8 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQxQTQxMTAvBgNVBAUTKEIyREJBRDA1QjY5RjQ3OTdFRUY3MUYwM0Q2NUFCRUFE RDI4OTJDODAwHhcNMjMwOTA5MDIzMzMyWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGZiZDk3Yy05NjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnTOXFMlv5ZDwD6Cfm8MZumIcLV2uAA5J7CMiX7o4Xb89XGtAOJa672AADJd U9G0DfgtCI26TyTpwc/vLxwHZuDg5j4DsQyLSkGuzfs6iISrRwk67+q+vwsyIQ7f UZN3vsnUTy//hwVP+3KpJLqMr03tzP/NxfXqRpKl8qqPa7yTzQAI4BcECa1mXj3G i3zE4ZnQk1HuYxi8dKBdyYzqJbjzJgejdsaln+7NaTvyICli4IVDwi88YoFIyLTm 1/gIlE7dA0mktZ5nOHLbEhj+zJygLQViT9FzqBLMdYaiIOxecR0JShn8Mpki3oNo x4WuuVp24y+HjYNHPwIfRF/kSQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOPRhX+9 7CT9R4/lFSKu9v3pK83TMB8GA1UdIwQYMBaAFLLbrQW2n0eX7vcfA9Zavq3SiSyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDFBNC8xRUI5RTNBNkM2 QzAxMUVDOTZDMEREMjNDNEY5QUUwMi9zdHV0QmJhZlI1ZnU5eDhEMWxxLXJkS0pM SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N0dXRCYmFmUjVmdTl4OEQxbHEtcmRLSkxJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEQxQTQvMUVCOUUzQTZDNkMwMTFFQzk2QzBERDIzQzRGOUFFMDIvRjE5REEzNUFD NkMyMTFFQzg3MjUxNTI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr76QDBAJnI1QwDQYJKoZIhvcNAQELBQADggEBAAA3GZxk 96+d+EsSc2rpWDaECcCxNEfKHxHWUZPXA5UxZUZQIUJYgR5a3lP5cAD/OpbFC1/N 9G1MsMoVojftdCX1QZJe1n+UZo1pPicpXWm2M2nymaIx2KGNYScJ7Dg5TUjK38Ev SWVoPAW3ik6yb21FOM/rgodBx7gne6OoD3LW9B5H+zuhVZHxOB0926d/JS5OXSS1 XWZ5VAQWsb8YD4PhOs2WIMy2p+Wem/R2vxsgxVj6uQknf28YP0JGj8ZZVP5o6fpf oEuaQEeUKh2mQ/IZDjqxt3CW05dpMqq7uuJeNzrndS1HwcJZEwPTH1egnvrjxMHB XQdMr3lj2gVr/Og= -----END CERTIFICATE-----Generated at Fri May 17 04:26:39 2024 by rpki-client on console-fra.rpki-client.org