$ rpki-client -vvf rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/D676DC068A7311EEB46D5B0BC4F9AE02.roa File: D676DC068A7311EEB46D5B0BC4F9AE02.roa (raw, json) Hash identifier: hGe29EgQYapx1TOgOkfl/FVvzXgm0bNaKPHQJdt7Pp0= Subject key identifier: B2:22:23:93:31:B5:48:81:7E:5A:F1:BD:B7:3F:D2:26:75:D4:98:2B Certificate issuer: /CN=A918F7E6/serialNumber=2E5C0CAEA5FAF96ADEA0158AA8FB52FA3467E0E8 Certificate serial: 0593 Authority key identifier: 2E:5C:0C:AE:A5:FA:F9:6A:DE:A0:15:8A:A8:FB:52:FA:34:67:E0:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/D676DC068A7311EEB46D5B0BC4F9AE02.roa Signing time: Tue 12 Mar 2024 00:24:47 +0000 ROA not before: Tue 12 Mar 2024 00:24:47 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 133130 IP address blocks: 43.245.112.0/22 maxlen: 24 103.252.56.0/22 maxlen: 22 103.252.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.crl rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1427 (0x593) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F7E6/serialNumber=2E5C0CAEA5FAF96ADEA0158AA8FB52FA3467E0E8 Validity Not Before: Mar 12 00:24:47 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65efa0ce-9a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5a:58:7c:17:67:12:a3:81:6b:a8:18:d0:e1: f6:15:1a:74:c9:80:8a:a9:c0:d8:40:1e:e2:8e:12: 1d:dd:3e:ae:3e:e2:d8:66:22:92:86:cb:fc:92:81: 8f:fb:26:fb:cd:8f:c9:f9:7d:23:1c:5a:1f:13:8d: e5:29:20:9f:07:4e:5a:ce:e5:8a:20:79:a7:86:c0: 06:67:a5:1d:1e:4e:b1:c0:06:08:0d:ae:4c:c7:c9: d5:ba:e9:e2:49:31:a6:a9:9a:8a:a6:af:4e:73:f8: 87:39:70:08:b2:8f:d1:d0:36:7a:5f:6d:a5:9d:10: 47:c1:33:3f:46:0f:ad:a4:a8:fc:ee:3b:0c:44:f7: 38:c1:a6:14:df:93:47:57:5c:e1:73:ae:73:93:67: 67:00:11:32:05:73:ab:1d:6b:4b:05:b8:f4:c4:5f: 46:4d:11:73:2e:0f:1f:79:a7:d2:83:10:19:8b:c6: de:be:0c:bf:4e:a0:25:d6:4e:d9:8f:9f:88:9f:25: aa:ef:42:9f:61:b5:ad:57:ce:c3:c1:bc:83:d3:8d: af:24:a9:07:d7:42:d6:e1:c9:e2:2a:4a:ef:7b:61: a3:34:c5:64:41:d4:34:fd:2a:bc:d9:45:9e:12:c5: 63:33:7d:b8:9a:54:4b:26:3d:49:bc:25:89:02:97: 09:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:22:23:93:31:B5:48:81:7E:5A:F1:BD:B7:3F:D2:26:75:D4:98:2B X509v3 Authority Key Identifier: keyid:2E:5C:0C:AE:A5:FA:F9:6A:DE:A0:15:8A:A8:FB:52:FA:34:67:E0:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/D676DC068A7311EEB46D5B0BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.245.112.0/22 103.252.56.0/22 Signature Algorithm: sha256WithRSAEncryption 39:39:53:83:88:a9:3a:3b:35:72:86:f3:99:79:5a:0a:10:46: c4:3e:1b:8c:df:dd:5e:b2:67:48:ee:7c:99:b9:0f:40:f8:8b: 99:a3:99:ee:5b:42:fb:63:4f:e6:8b:f7:be:18:af:3f:b8:65: a3:0e:45:67:2d:a1:79:1b:48:27:83:a9:53:65:fe:9c:f4:50: be:3d:9d:8b:7e:98:01:a4:95:ad:e6:61:ff:55:40:c9:b7:f8: 3f:03:33:a6:19:a6:be:29:bb:a5:72:2e:ed:e8:99:55:fd:6d: de:49:f2:d8:4e:ca:a2:d4:1f:65:6d:f7:af:0c:8c:86:72:f7: a4:58:3a:5c:2b:8b:cd:c7:c3:62:f3:45:8f:88:2a:01:eb:7b: c9:b3:d1:d4:e4:dc:a7:47:a5:5f:a6:ff:3b:a3:10:80:02:b8: b2:ff:9b:dd:67:53:ee:62:a0:9d:44:33:23:f0:0b:8d:f1:a4: 45:03:fa:f8:0b:2d:60:4a:b3:10:9b:46:dd:ae:bd:31:0e:b1: 5e:ce:df:f1:72:b2:42:34:e2:a1:3c:80:b9:e1:6d:66:24:52: b8:6b:b4:6d:62:55:b7:21:62:ac:02:33:13:7f:fd:2c:ff:d2: b6:4f:a4:99:f0:b9:61:76:51:1b:84:74:d8:f2:9f:cf:48:19: df:55:1a:f2 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY3RTYxMTAvBgNVBAUTKDJFNUMwQ0FFQTVGQUY5NkFERUEwMTU4QUE4RkI1MkZB MzQ2N0UwRTgwHhcNMjQwMzEyMDAyNDQ3WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWVmYTBjZS05YTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA61pYfBdnEqOBa6gY0OH2FRp0yYCKqcDYQB7ijhId3T6uPuLYZiKShsv8koGP +yb7zY/J+X0jHFofE43lKSCfB05azuWKIHmnhsAGZ6UdHk6xwAYIDa5Mx8nVuuni STGmqZqKpq9Oc/iHOXAIso/R0DZ6X22lnRBHwTM/Rg+tpKj87jsMRPc4waYU35NH V1zhc65zk2dnABEyBXOrHWtLBbj0xF9GTRFzLg8feafSgxAZi8bevgy/TqAl1k7Z j5+InyWq70KfYbWtV87DwbyD042vJKkH10LW4cniKkrve2GjNMVkQdQ0/Sq82UWe EsVjM324mlRLJj1JvCWJApcJ0QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLIiI5Mx tUiBflrxvbc/0iZ11JgrMB8GA1UdIwQYMBaAFC5cDK6l+vlq3qAViqj7Uvo0Z+Do MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjdFNi8wMUM3MkM4MDdE NzUxMUVCOEQ4RjQ4NkRDNEY5QUUwMi9MbHdNcnFYNi1XcmVvQldLcVB0Uy1qUm40 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xsd01ycVg2LVdyZW9CV0txUHRTLWpSbjRPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEY3RTYvMDFDNzJDODA3RDc1MTFFQjhEOEY0ODZEQzRGOUFFMDIvRDY3NkRDMDY4 QTczMTFFRUI0NkQ1QjBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr9XADBAJn/DgwDQYJKoZIhvcNAQELBQADggEBADk5U4OI qTo7NXKG85l5WgoQRsQ+G4zf3V6yZ0jufJm5D0D4i5mjme5bQvtjT+aL974Yrz+4 ZaMORWctoXkbSCeDqVNl/pz0UL49nYt+mAGkla3mYf9VQMm3+D8DM6YZpr4pu6Vy Lu3omVX9bd5J8thOyqLUH2Vt968MjIZy96RYOlwri83Hw2LzRY+IKgHre8mz0dTk 3KdHpV+m/zujEIACuLL/m91nU+5ioJ1EMyPwC43xpEUD+vgLLWBKsxCbRt2uvTEO sV7O3/FyskI04qE8gLnhbWYkUrhrtG1iVbchYqwCMxN//Sz/0rZPpJnwuWF2URuE dNjyn89IGd9VGvI= -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:45 2024 by rpki-client on console-ams.rpki-client.org