$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B442252AB6CF11EB82602650C4F9AE02.roa File: B442252AB6CF11EB82602650C4F9AE02.roa (raw, json) Hash identifier: FfiVU6WoauuwWX1smDqG5dtm0JkVjAL4bBdOdC/AP6U= Subject key identifier: 88:CA:89:26:BE:6C:AA:AF:D2:33:E0:72:3A:BB:83:A3:4D:E5:CE:A2 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 74A0 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B442252AB6CF11EB82602650C4F9AE02.roa Signing time: Wed 28 Jun 2023 11:31:43 +0000 ROA not before: Wed 28 Jun 2023 11:31:43 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 141501 IP address blocks: 43.239.60.0/23 maxlen: 24 45.124.184.0/22 maxlen: 24 103.58.120.0/24 maxlen: 24 103.58.121.0/24 maxlen: 24 103.58.121.0/26 maxlen: 26 103.59.16.0/24 maxlen: 24 103.59.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29856 (0x74a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 28 11:31:43 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=649c1a1f-47ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:01:40:e2:03:83:c1:17:90:0f:ce:4c:96:72: 06:63:fd:69:a0:a9:a1:dd:36:3c:10:16:a7:08:11: 81:2e:4d:17:9b:bc:31:3c:ea:5e:19:a8:38:38:41: 5e:3f:d1:e7:ca:7d:05:d8:8d:da:43:96:c8:bd:fd: cc:40:d0:6a:53:12:6f:70:c1:14:7c:ee:fb:75:74: 2c:93:2a:f3:34:27:6c:ea:4a:6d:eb:ae:5a:9e:fc: 3f:da:11:cf:df:d8:ad:f9:62:1b:43:e4:ca:b3:50: a2:18:bd:22:b3:eb:81:6c:22:f5:10:93:43:4f:5e: 51:6c:d8:2f:fb:ed:2e:86:83:bb:1a:0b:bc:90:bf: b7:16:8c:49:dd:fd:fb:33:48:1c:fc:24:77:7d:a6: 89:a5:90:ab:9e:85:45:ac:ac:e3:46:50:40:4c:b7: 77:4e:2d:51:50:bf:a2:1d:19:df:d4:44:ce:11:12: 66:61:fc:6d:6c:ea:66:e2:43:4f:4b:db:63:d7:74: b1:c2:a7:54:d8:a8:9f:32:6b:b6:0a:fd:24:aa:77: fa:0e:08:18:8b:1f:d0:7c:eb:70:26:c3:1a:15:f0: 25:80:1d:92:6d:14:c3:c7:37:62:57:19:27:7c:0b: 91:fa:e3:5e:a9:0b:bd:78:ed:f5:9e:1e:0f:c8:30: e8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:CA:89:26:BE:6C:AA:AF:D2:33:E0:72:3A:BB:83:A3:4D:E5:CE:A2 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B442252AB6CF11EB82602650C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.239.60.0/23 45.124.184.0/22 103.58.120.0/23 103.59.16.0/24 103.59.64.0/23 Signature Algorithm: sha256WithRSAEncryption 68:c1:fe:ee:4d:54:fa:cd:0a:58:87:9c:71:7c:80:fa:18:43: 9c:0d:12:05:64:4d:a6:09:9a:1e:bd:30:47:7d:01:f3:17:bf: 62:7d:0a:d6:07:bd:55:47:8b:8b:86:59:98:6a:f4:7c:13:1b: e1:a9:0e:74:de:9c:7f:72:62:74:05:c3:e0:45:0f:f8:d7:bb: 5a:82:e8:85:a4:3f:37:9c:c5:94:b7:ef:3c:65:9f:88:f1:7a: 0f:39:29:be:65:d2:6f:96:e8:25:df:04:4d:77:17:96:1e:2c: 2f:63:d5:28:16:cd:f5:dc:dc:59:de:3c:67:28:ac:b8:82:05: 32:e8:91:6a:fa:4c:21:63:ab:c9:65:4a:a3:95:0b:ef:2d:c2: 90:bc:e0:45:f1:23:23:b9:e0:f2:da:8c:c2:0e:4e:47:18:18: e7:c0:4b:aa:da:64:d1:86:d8:cc:87:4b:9f:7d:b4:54:23:c3: a4:ce:90:d1:57:7e:d5:27:29:6e:1d:16:38:a0:0d:ba:29:a2: 3f:8f:93:9a:e7:9c:2e:40:24:5c:e0:87:20:58:c8:e5:ca:73: 9c:6e:d9:01:a8:c4:ba:ef:52:91:3a:41:81:73:c1:07:c6:98: ae:18:d1:97:92:30:7c:a7:ea:03:82:c4:1f:70:30:2a:14:ee: ee:9b:47:27 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICdKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNjI4MTEzMTQzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDljMWExZi00N2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwFA4gODwReQD85MlnIGY/1poKmh3TY8EBanCBGBLk0Xm7wxPOpeGag4OEFe P9Hnyn0F2I3aQ5bIvf3MQNBqUxJvcMEUfO77dXQskyrzNCds6kpt665anvw/2hHP 39it+WIbQ+TKs1CiGL0is+uBbCL1EJNDT15RbNgv++0uhoO7Ggu8kL+3FoxJ3f37 M0gc/CR3faaJpZCrnoVFrKzjRlBATLd3Ti1RUL+iHRnf1ETOERJmYfxtbOpm4kNP S9tj13SxwqdU2KifMmu2Cv0kqnf6DggYix/QfOtwJsMaFfAlgB2SbRTDxzdiVxkn fAuR+uNeqQu9eO31nh4PyDDogQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFIjKiSa+ bKqv0jPgcjq7g6NN5c6iMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjQ0MjI1MkFC NkNGMTFFQjgyNjAyNjUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAEr7zwDBAItfLgDBAFnOngDBABnOxADBAFnO0AwDQYJKoZI hvcNAQELBQADggEBAGjB/u5NVPrNCliHnHF8gPoYQ5wNEgVkTaYJmh69MEd9AfMX v2J9CtYHvVVHi4uGWZhq9HwTG+GpDnTenH9yYnQFw+BFD/jXu1qC6IWkPzecxZS3 7zxln4jxeg85Kb5l0m+W6CXfBE13F5YeLC9j1SgWzfXc3FnePGcorLiCBTLokWr6 TCFjq8llSqOVC+8twpC84EXxIyO54PLajMIOTkcYGOfAS6raZNGG2MyHS599tFQj w6TOkNFXftUnKW4dFjigDbopoj+Pk5rnnC5AJFzghyBYyOXKc5xu2QGoxLrvUpE6 QYFzwQfGmK4Y0ZeSMHyn6gOCxB9wMCoU7u6bRyc= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:42 2024 by rpki-client on console-ams.rpki-client.org