$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/A4B120EE1EAC11ECB7B9E330C4F9AE02.roa File: A4B120EE1EAC11ECB7B9E330C4F9AE02.roa (raw, json) Hash identifier: 5OiO3hnid4AIzh2V/5E5HSxRKiNx2nFYy8PINfQ5Bxo= Subject key identifier: 79:F1:85:4B:74:F1:1F:28:4F:33:45:0D:69:B0:1C:D0:EF:32:37:56 Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Certificate serial: 03D8 Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/A4B120EE1EAC11ECB7B9E330C4F9AE02.roa Signing time: Fri 22 Dec 2023 09:31:03 +0000 ROA not before: Fri 22 Dec 2023 09:31:03 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 64022 IP address blocks: 45.126.124.0/24 maxlen: 24 45.126.125.0/24 maxlen: 24 45.126.126.0/24 maxlen: 24 45.126.127.0/24 maxlen: 24 103.102.44.0/24 maxlen: 24 103.102.45.0/24 maxlen: 24 103.102.47.0/24 maxlen: 24 103.195.4.0/24 maxlen: 24 103.195.5.0/24 maxlen: 24 103.195.6.0/24 maxlen: 24 103.195.7.0/24 maxlen: 24 103.252.116.0/24 maxlen: 24 103.252.117.0/24 maxlen: 24 103.252.118.0/24 maxlen: 24 103.252.119.0/24 maxlen: 24 114.29.236.0/24 maxlen: 24 114.29.237.0/24 maxlen: 24 114.29.238.0/24 maxlen: 24 114.29.239.0/24 maxlen: 24 2401:df40:1::/48 maxlen: 48 2402:da80:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 984 (0x3d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Validity Not Before: Dec 22 09:31:03 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=65855757-d9cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:94:52:e6:a9:10:ff:9a:44:06:93:89:0a:52: 96:56:02:99:94:e5:19:8d:96:00:8e:89:85:bb:18: c7:b8:44:8b:50:65:68:19:af:d8:1d:10:0b:5f:be: 07:b0:18:3d:6c:6e:e5:57:20:f9:94:47:2b:04:aa: 87:e2:12:96:b8:0c:f8:b8:1a:8d:e5:87:53:db:4e: e8:4e:56:4f:90:22:87:5d:2e:7c:85:6e:d8:f1:57: fb:88:2b:c2:92:22:7d:59:39:4f:7b:a7:28:24:24: a9:d8:c7:56:0f:39:e5:c5:78:8a:87:9b:4a:5d:d0: 38:21:5e:7b:5e:53:74:ed:6c:c6:cb:34:9b:4e:1d: 71:14:bb:c5:18:dd:b1:b9:7f:5e:a6:c7:6e:55:63: a2:32:f2:7d:1d:31:ad:2d:04:57:4d:57:aa:06:4e: 35:ea:3f:67:e1:18:21:93:e9:a7:ce:d9:76:fc:41: 08:6f:54:58:24:5c:11:8c:7d:c7:21:7d:4f:89:5d: 44:a9:88:12:d6:9f:3c:9d:f9:f7:30:99:e3:c1:ee: f9:99:ab:a0:fe:5b:dc:fe:99:c6:df:9b:96:6b:c9: 0f:f2:52:a3:20:5d:60:78:8b:88:eb:97:5e:33:fd: 04:15:89:83:f4:49:ef:0b:f0:f0:71:09:c9:3c:13: 24:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F1:85:4B:74:F1:1F:28:4F:33:45:0D:69:B0:1C:D0:EF:32:37:56 X509v3 Authority Key Identifier: keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/A4B120EE1EAC11ECB7B9E330C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.126.124.0/22 103.102.44.0/23 103.102.47.0/24 103.195.4.0/22 103.252.116.0/22 114.29.236.0/22 IPv6: 2401:df40:1::/48 2402:da80:100::/48 Signature Algorithm: sha256WithRSAEncryption 77:c1:e3:1e:09:88:35:c6:a8:8e:f9:4f:d6:c2:cc:c7:44:ba: a7:4c:0e:81:8b:cb:15:fa:41:a4:c8:bf:7c:76:2c:27:dd:ad: 5c:b8:12:98:fa:2f:21:d7:08:63:3e:73:2d:5c:3e:05:45:e8: 39:0f:03:87:e8:84:ae:94:87:20:48:8b:14:a2:7f:28:79:8e: 61:d1:24:2b:d0:b4:39:be:52:8f:9f:ac:de:ec:d7:77:f0:33: 60:6a:63:10:ab:66:51:af:48:ac:65:09:df:b8:58:55:f2:30: 98:2e:fe:f7:bb:36:f3:d9:b8:f5:0a:67:65:87:9f:d3:2f:a5: 17:8e:68:e4:5e:de:ba:5e:13:2f:b3:c4:24:0e:f8:36:7f:df: de:79:94:09:31:88:22:3a:5f:7c:72:04:18:08:d3:1c:4b:e3: 7d:67:7d:e6:27:fb:27:6a:88:20:74:54:a0:95:8c:d7:9a:b8: c9:f9:56:09:9f:f7:9c:88:f8:cd:cf:5a:04:cb:2e:be:cd:9c: a9:7a:be:89:81:0c:a3:f1:37:52:85:ab:0d:e2:6e:69:ea:22: 0c:82:ef:63:06:7f:63:0c:6f:2e:54:ce:0c:58:70:bd:c7:15: 7e:f0:6f:3c:41:fc:4c:1d:74:6d:b7:e8:fa:b1:d8:c5:e1:e5: f1:42:d9:13 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgICA9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKDBBQjZERDI2NTE1QzUzRUNDNUIwNDYyQjRDNDc1RDVB N0U1QTU1MzcwHhcNMjMxMjIyMDkzMTAzWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTg1NTc1Ny1kOWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpRS5qkQ/5pEBpOJClKWVgKZlOUZjZYAjomFuxjHuESLUGVoGa/YHRALX74H sBg9bG7lVyD5lEcrBKqH4hKWuAz4uBqN5YdT207oTlZPkCKHXS58hW7Y8Vf7iCvC kiJ9WTlPe6coJCSp2MdWDznlxXiKh5tKXdA4IV57XlN07WzGyzSbTh1xFLvFGN2x uX9epsduVWOiMvJ9HTGtLQRXTVeqBk416j9n4Rghk+mnztl2/EEIb1RYJFwRjH3H IX1PiV1EqYgS1p88nfn3MJnjwe75maug/lvc/pnG35uWa8kP8lKjIF1geIuI65de M/0EFYmD9EnvC/DwcQnJPBMk+QIDAQABo4ICzTCCAskwHQYDVR0OBBYEFHnxhUt0 8R8oTzNFDWmwHNDvMjdWMB8GA1UdIwQYMBaAFAq23SZRXFPsxbBGK0xHXVp+WlU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy9FQjMxMkYwMjFF QUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1UtekZzRVlyVEVkZFduNWFW VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyYmRKbEZjVS16RnNFWXJURWRkV241YVZUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU0QjcvRUIzMTJGMDIxRUFBMTFFQ0I3NTZCRjMwQzRGOUFFMDIvQTRCMTIwRUUx RUFDMTFFQ0I3QjlFMzMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVwYIKwYBBQUHAQcBAf8E SDBGMCoEAgABMCQDBAItfnwDBAFnZiwDBABnZi8DBAJnwwQDBAJn/HQDBAJyHeww GAQCAAIwEgMHACQB30AAAQMHACQC2oABADANBgkqhkiG9w0BAQsFAAOCAQEAd8Hj HgmINcaojvlP1sLMx0S6p0wOgYvLFfpBpMi/fHYsJ92tXLgSmPovIdcIYz5zLVw+ BUXoOQ8Dh+iErpSHIEiLFKJ/KHmOYdEkK9C0Ob5Sj5+s3uzXd/AzYGpjEKtmUa9I rGUJ37hYVfIwmC7+97s289m49QpnZYef0y+lF45o5F7eul4TL7PEJA74Nn/f3nmU CTGIIjpffHIEGAjTHEvjfWd95if7J2qIIHRUoJWM15q4yflWCZ/3nIj4zc9aBMsu vs2cqXq+iYEMo/E3UoWrDeJuaeoiDILvYwZ/YwxvLlTODFhwvccVfvBvPEH8TB10 bbfo+rHYxeHl8ULZEw== -----END CERTIFICATE-----Generated at Sat May 11 03:51:29 2024 by rpki-client on console-ams.rpki-client.org