$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B73CE85E8C6E11EBAEA8EF79C4F9AE02.roa File: B73CE85E8C6E11EBAEA8EF79C4F9AE02.roa (raw, json) Hash identifier: JVDE5y4Tzp9AUBFnMkyvs87T1JcyadcxUiloj0jjTw0= Subject key identifier: B9:7A:F6:EE:43:64:8F:D8:B0:72:FC:52:AD:FF:15:B2:E1:7F:3F:F2 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7147 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B73CE85E8C6E11EBAEA8EF79C4F9AE02.roa Signing time: Wed 10 May 2023 16:47:28 +0000 ROA not before: Wed 10 May 2023 16:47:28 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 17426 IP address blocks: 45.112.52.0/22 maxlen: 24 103.51.116.0/22 maxlen: 24 103.91.88.0/24 maxlen: 24 103.91.89.0/24 maxlen: 24 103.91.90.0/24 maxlen: 24 103.91.91.0/24 maxlen: 24 110.173.176.0/20 maxlen: 24 203.115.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28999 (0x7147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:47:28 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bcaa0-5df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7b:ca:b4:b8:d6:a4:f6:32:51:77:46:52:50: 00:2e:ce:b5:48:04:42:99:ed:da:06:5b:02:13:35: bb:ea:3f:34:3e:85:70:ce:af:96:98:50:30:85:d6: 87:7f:b0:52:7f:0e:ec:da:53:68:19:b5:9e:e7:b8: 29:d6:c8:38:f2:c0:0e:c2:40:47:09:d1:1b:7d:fb: e6:57:24:72:47:e2:9c:f5:c3:01:55:98:f1:ff:ce: 8e:fd:15:c7:a6:5e:de:59:56:10:0b:55:d5:01:37: af:dd:b3:e7:eb:9a:e8:de:16:34:3d:e8:70:26:ae: dc:db:15:ac:f1:55:91:17:df:0e:39:f4:8c:e5:48: e8:85:5f:ec:7e:a1:b5:43:c5:3b:69:f9:66:de:f8: 6d:88:37:ca:68:c7:87:b1:10:65:eb:20:84:b7:5d: c5:32:2a:3b:70:0c:3c:9e:56:3a:6f:c4:48:d5:e5: 94:dc:5f:43:ba:b0:11:9f:1a:32:03:00:57:e4:c1: 3a:8d:b2:9b:f4:68:d1:34:c0:24:17:bc:f9:10:fc: 10:40:92:30:60:c3:a7:17:6e:60:7a:9d:b6:a4:b1: a1:f2:05:70:c5:b0:12:b7:16:5f:27:49:95:9f:93: a3:71:6e:a3:24:91:fb:27:37:ab:2d:1a:9a:04:a2: 7f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7A:F6:EE:43:64:8F:D8:B0:72:FC:52:AD:FF:15:B2:E1:7F:3F:F2 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B73CE85E8C6E11EBAEA8EF79C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.112.52.0/22 103.51.116.0/22 103.91.88.0/22 110.173.176.0/20 203.115.96.0/19 Signature Algorithm: sha256WithRSAEncryption 38:bb:d3:a0:d9:e4:cd:4e:8f:81:8e:68:7d:c1:7f:5d:40:be: c0:fc:80:bd:98:b1:80:82:47:ed:7e:91:44:7f:2d:dc:20:63: c2:42:10:e6:64:62:28:b9:ba:fa:93:d2:cb:29:7a:74:a2:2f: 36:fb:64:83:6d:c8:15:01:c6:6a:fd:c5:b3:85:ab:3a:69:de: 08:c4:bc:64:c3:39:48:e1:95:1f:fa:bf:d9:aa:aa:4f:85:1a: e8:d2:8e:23:2e:53:58:f4:65:0a:30:50:ce:ee:5f:8e:84:73: 86:51:34:a1:85:f4:2c:55:cf:97:3c:39:5e:b3:db:95:48:a9: 66:5d:a6:d6:1f:81:d2:13:2e:9d:62:fa:0c:7a:9d:01:09:a8: 16:e5:f1:f0:33:2b:56:b1:39:c8:f6:a0:56:1e:46:d9:07:94: 3a:b3:5f:c2:b4:51:1d:36:fe:d6:e6:de:16:2f:9a:9f:04:1e: 55:48:83:f5:7b:9f:c0:9d:55:fd:46:8d:02:fe:cd:7c:67:50: 40:b2:f9:c5:34:f3:45:ee:13:d3:56:b8:b1:ea:ad:fa:84:34: c5:d5:d0:29:1c:05:e4:d7:03:22:fa:58:6c:7b:63:e7:f7:5f: 37:06:00:15:8e:7c:c2:33:bb:fd:23:ba:88:17:da:4a:0f:11: d9:45:40:e7 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICcUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0NzI4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2FhMC01ZGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAknvKtLjWpPYyUXdGUlAALs61SARCme3aBlsCEzW76j80PoVwzq+WmFAwhdaH f7BSfw7s2lNoGbWe57gp1sg48sAOwkBHCdEbffvmVyRyR+Kc9cMBVZjx/86O/RXH pl7eWVYQC1XVATev3bPn65ro3hY0PehwJq7c2xWs8VWRF98OOfSM5UjohV/sfqG1 Q8U7aflm3vhtiDfKaMeHsRBl6yCEt13FMio7cAw8nlY6b8RI1eWU3F9DurARnxoy AwBX5ME6jbKb9GjRNMAkF7z5EPwQQJIwYMOnF25gep22pLGh8gVwxbAStxZfJ0mV n5OjcW6jJJH7JzerLRqaBKJ/DQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFLl69u5D ZI/YsHL8Uq3/FbLhfz/yMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjczQ0U4NUU4 QzZFMTFFQkFFQThFRjc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAItcDQDBAJnM3QDBAJnW1gDBARurbADBAXLc2AwDQYJKoZI hvcNAQELBQADggEBADi706DZ5M1Oj4GOaH3Bf11AvsD8gL2YsYCCR+1+kUR/Ldwg Y8JCEOZkYii5uvqT0sspenSiLzb7ZINtyBUBxmr9xbOFqzpp3gjEvGTDOUjhlR/6 v9mqqk+FGujSjiMuU1j0ZQowUM7uX46Ec4ZRNKGF9CxVz5c8OV6z25VIqWZdptYf gdITLp1i+gx6nQEJqBbl8fAzK1axOcj2oFYeRtkHlDqzX8K0UR02/tbm3hYvmp8E HlVIg/V7n8CdVf1GjQL+zXxnUECy+cU080XuE9NWuLHqrfqENMXV0CkcBeTXAyL6 WGx7Y+f3XzcGABWOfMIzu/0juogX2koPEdlFQOc= -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:34 2024 by rpki-client on console-fra.rpki-client.org