$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/E63F3CA2E39E11EAAAE0622CC4F9AE02.roa File: E63F3CA2E39E11EAAAE0622CC4F9AE02.roa (raw, json) Hash identifier: RgBGdfHwU/1xzkv+q5ZJIeAMYoOF9aNROEMmy+nAD/E= Subject key identifier: F3:E4:FF:E0:EA:59:71:EE:2D:CD:A6:E5:E9:49:26:78:91:2A:1D:47 Certificate issuer: /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF Certificate serial: 33F0 Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/E63F3CA2E39E11EAAAE0622CC4F9AE02.roa Signing time: Sun 14 Jan 2024 09:03:23 +0000 ROA not before: Sun 14 Jan 2024 09:03:23 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 23647 IP address blocks: 163.53.24.0/22 maxlen: 24 202.51.66.0/24 maxlen: 24 202.51.74.0/23 maxlen: 23 202.51.81.0/24 maxlen: 24 202.51.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 14:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13296 (0x33f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF Validity Not Before: Jan 14 09:03:23 2024 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=65a3a35a-0b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:30:80:0b:c4:f4:56:53:b9:1e:29:ca:13:65: 17:b5:d8:ee:9c:34:d1:09:9e:20:87:41:41:11:c2: b0:7e:9f:6b:3b:5d:3d:33:40:d9:94:8a:43:5c:67: 1e:ba:89:7a:f9:3c:69:e7:d2:93:3e:e1:3d:c3:80: f9:f1:c4:4c:3c:82:a2:ff:f9:9a:7e:ec:0a:c7:d2: c4:4e:52:23:ed:c7:0d:f9:da:a2:00:6b:9f:69:c1: df:12:2b:79:90:12:86:1b:30:93:37:d9:a3:b9:e3: 4e:1c:fd:22:a8:57:76:1b:a0:72:74:43:d5:90:5a: 9d:03:29:ea:cd:07:4b:0a:dd:c6:bd:11:fc:43:fd: 1d:fd:07:39:da:28:ab:d6:05:1f:56:eb:49:a3:29: 63:f8:d4:e2:8e:5c:44:b6:0b:63:76:3f:ad:53:97: d5:5b:27:e9:35:e9:fe:6d:08:95:ad:48:6e:30:99: b8:2b:41:32:62:a0:82:2a:53:42:01:f9:c9:1c:b4: be:8d:6a:1b:06:88:2b:86:92:2b:4e:a9:5e:86:ad: 8f:e7:dc:5c:0f:48:9d:2f:30:89:46:02:ed:1f:01: ac:98:ff:d6:bf:a8:37:58:88:26:8a:ef:64:87:55: af:17:82:05:9e:8e:f1:84:2b:22:91:86:d8:4c:e8: b7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E4:FF:E0:EA:59:71:EE:2D:CD:A6:E5:E9:49:26:78:91:2A:1D:47 X509v3 Authority Key Identifier: keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/E63F3CA2E39E11EAAAE0622CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.53.24.0/22 202.51.66.0/24 202.51.74.0/23 202.51.81.0/24 202.51.95.0/24 Signature Algorithm: sha256WithRSAEncryption 50:74:3a:bf:84:5c:3b:da:35:e3:6c:30:22:3a:c8:84:e5:92: 0b:71:74:d1:bb:dc:5b:a0:c2:c1:e1:2e:b2:09:e8:54:2e:d1: b3:21:46:b6:c3:a2:64:3a:30:37:26:b8:2e:7d:b0:80:eb:b6: 58:ae:09:dd:9e:2d:ff:37:c2:d0:89:30:25:c7:89:79:ea:67: d7:34:24:e0:f5:d8:6d:a8:f7:a7:c8:ef:c0:34:02:f2:da:39: b2:82:bf:a5:a2:16:ad:12:aa:a6:13:13:49:1e:9c:ed:cd:80: 0d:41:7a:22:8b:7e:59:5c:4b:8e:93:6f:84:24:15:1b:05:b5: d7:18:d3:ae:d9:82:b5:e3:4f:c9:92:d6:3c:5c:dc:6f:37:9a: 2d:5a:13:9b:6c:d2:5b:83:da:83:9e:e7:55:d6:70:84:d2:63: 39:8a:e2:46:1a:40:80:85:55:a4:f8:df:70:93:db:d0:7d:e5: b9:38:ca:cf:7f:63:b8:52:a2:d7:93:75:40:dc:b4:61:73:1c: 01:62:52:0e:94:84:ae:40:13:70:a9:2b:a4:ca:1a:33:e4:67: 28:62:c9:aa:9d:57:07:bf:4b:34:df:3e:3f:80:32:5d:63:02: 53:de:9a:c9:ba:82:7d:b0:48:d9:6b:14:f0:fa:36:b1:4a:e0: 15:fc:01:88 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICM/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY1NTAxMTAvBgNVBAUTKEEyNEI2QTYyMDQ0QjcwMDY1RjA1MDYzODg0NjBFNEFG MkYxN0YzRkYwHhcNMjQwMTE0MDkwMzIzWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NWEzYTM1YS0wYjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApjCAC8T0VlO5HinKE2UXtdjunDTRCZ4gh0FBEcKwfp9rO109M0DZlIpDXGce uol6+Txp59KTPuE9w4D58cRMPIKi//mafuwKx9LETlIj7ccN+dqiAGufacHfEit5 kBKGGzCTN9mjueNOHP0iqFd2G6BydEPVkFqdAynqzQdLCt3GvRH8Q/0d/Qc52iir 1gUfVutJoylj+NTijlxEtgtjdj+tU5fVWyfpNen+bQiVrUhuMJm4K0EyYqCCKlNC AfnJHLS+jWobBogrhpIrTqlehq2P59xcD0idLzCJRgLtHwGsmP/Wv6g3WIgmiu9k h1WvF4IFno7xhCsikYbYTOi3WQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFPPk/+Dq WXHuLc2m5elJJniRKh1HMB8GA1UdIwQYMBaAFKJLamIES3AGXwUGOIRg5K8vF/P/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjU1MC84QjlCRDIwMjFE ODUxMUUyQjQxMjMwREMwOEIwMkNEMi9va3RxWWdSTGNBWmZCUVk0aEdEa3J5OFg4 XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29rdHFZZ1JMY0FaZkJRWTRoR0Rrcnk4WDhfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEY1NTAvOEI5QkQyMDIxRDg1MTFFMkI0MTIzMERDMDhCMDJDRDIvRTYzRjNDQTJF MzlFMTFFQUFBRTA2MjJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAKjNRgDBADKM0IDBAHKM0oDBADKM1EDBADKM18wDQYJKoZI hvcNAQELBQADggEBAFB0Or+EXDvaNeNsMCI6yITlkgtxdNG73FugwsHhLrIJ6FQu 0bMhRrbDomQ6MDcmuC59sIDrtliuCd2eLf83wtCJMCXHiXnqZ9c0JOD12G2o96fI 78A0AvLaObKCv6WiFq0SqqYTE0kenO3NgA1BeiKLfllcS46Tb4QkFRsFtdcY067Z grXjT8mS1jxc3G83mi1aE5ts0luD2oOe51XWcITSYzmK4kYaQICFVaT433CT29B9 5bk4ys9/Y7hSoteTdUDctGFzHAFiUg6UhK5AE3CpK6TKGjPkZyhiyaqdVwe/SzTf Pj+AMl1jAlPemsm6gn2wSNlrFPD6NrFK4BX8AYg= -----END CERTIFICATE-----Generated at Thu May 16 16:14:57 2024 by rpki-client on console-fra.rpki-client.org