$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/A2B5487CD45F11EEAAFF7048C4F9AE02.roa File: A2B5487CD45F11EEAAFF7048C4F9AE02.roa (raw, json) Hash identifier: XBA3WXeLjsi+UEfhTxd9PG2HHdAEDmE90S1tqLTM9xc= Subject key identifier: 46:5B:5E:BD:0A:DA:DA:87:B9:31:3C:92:B7:BC:4A:F7:E2:C1:47:3A Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138 Certificate serial: 016E Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/A2B5487CD45F11EEAAFF7048C4F9AE02.roa Signing time: Mon 26 Feb 2024 04:29:31 +0000 ROA not before: Mon 26 Feb 2024 04:29:31 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 834 IP address blocks: 218.33.104.0/22 maxlen: 24 218.33.108.0/22 maxlen: 24 218.33.112.0/22 maxlen: 24 218.33.116.0/22 maxlen: 24 218.33.120.0/22 maxlen: 24 218.33.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138 Validity Not Before: Feb 26 04:29:31 2024 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=65dc13ab-f023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:13:ed:37:c2:3f:f2:a6:f8:b9:6d:93:ac:ec: 41:41:5b:8c:54:2c:b7:e6:57:cc:69:a1:b3:e0:d2: 10:b6:5a:27:e7:46:13:d2:7d:96:2d:75:23:42:15: 19:66:0d:ca:f5:4b:b6:67:3d:d9:a7:69:56:6f:db: b3:72:c8:0c:f1:b7:b9:b3:1b:1d:23:e2:47:24:bb: 57:6e:d1:2b:3d:58:b9:f1:8a:47:53:77:59:2a:23: 18:bb:24:52:fa:af:3e:b9:29:5b:c4:5a:a4:eb:c2: 59:f6:94:61:45:9a:fa:3e:47:2a:c0:78:2a:ae:e5: dd:6b:1f:65:3b:27:45:03:88:91:36:b3:8e:10:19: 74:3d:e9:ba:7a:78:64:02:48:f7:aa:87:1a:f1:6a: 4c:46:90:a5:09:de:d2:97:6b:90:f7:3b:eb:e1:79: e5:40:46:b5:03:aa:1e:4c:fc:66:44:5a:7c:28:59: 57:df:73:d9:70:6d:55:af:b0:62:d9:55:79:06:3e: 27:90:b4:84:f0:3a:c1:00:03:4e:b4:09:79:5b:98: 36:ba:ec:5f:3b:22:1c:e3:1f:b8:8e:c1:2b:8c:9e: 63:a4:3e:d7:38:3f:f7:82:8f:02:fb:f0:2a:2d:0a: 44:01:cf:b3:37:38:20:04:3c:11:03:2b:ec:e2:b0: f2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5B:5E:BD:0A:DA:DA:87:B9:31:3C:92:B7:BC:4A:F7:E2:C1:47:3A X509v3 Authority Key Identifier: keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/A2B5487CD45F11EEAAFF7048C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.33.104.0-218.33.127.255 Signature Algorithm: sha256WithRSAEncryption 11:bd:9e:e4:6d:ed:71:14:3f:6f:0f:6b:e5:e8:c1:bb:89:95: 36:80:0c:77:ec:64:58:81:eb:b1:41:77:66:c9:28:76:53:2e: 1a:b8:c1:8d:e6:ce:00:97:78:e2:f4:6c:27:a0:74:24:1e:00: 97:91:46:cc:98:69:3c:ff:6b:a5:e8:e9:ec:ef:fc:81:4e:8d: 73:67:57:3b:10:53:18:3b:4b:73:68:80:9e:7c:f0:79:6d:23: 58:37:b2:dd:09:67:59:05:13:99:62:5f:74:fa:37:a7:39:a6: 42:1a:39:9e:8c:fa:eb:13:a0:40:bd:ec:3e:35:2f:5b:8f:a8: 0e:fa:f9:a6:23:80:2d:4a:dc:6b:43:e0:3c:73:08:17:c2:19: 33:20:d3:16:67:f3:8d:ef:70:91:56:96:eb:02:a6:c6:fc:2a: 34:9f:56:e0:ef:fc:e8:b0:de:dd:4a:2e:5d:e9:2c:d7:e3:1e: f8:91:7e:47:44:44:48:8f:30:83:df:71:8a:0e:05:a3:54:79: d9:92:fb:f3:63:9a:7c:90:d6:75:e5:e7:f2:f6:a4:a3:c5:74: de:e9:13:a1:29:b1:3a:2b:28:5f:a0:bd:68:5b:ef:e5:72:a8: 1d:07:74:c5:26:63:6c:6f:01:b1:88:59:d8:48:27:30:98:3f: 52:47:74:b7 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD MDMyOUQxMzgwHhcNMjQwMjI2MDQyOTMxWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWRjMTNhYi1mMDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1BPtN8I/8qb4uW2TrOxBQVuMVCy35lfMaaGz4NIQtlon50YT0n2WLXUjQhUZ Zg3K9Uu2Zz3Zp2lWb9uzcsgM8be5sxsdI+JHJLtXbtErPVi58YpHU3dZKiMYuyRS +q8+uSlbxFqk68JZ9pRhRZr6PkcqwHgqruXdax9lOydFA4iRNrOOEBl0Pem6enhk Akj3qoca8WpMRpClCd7Sl2uQ9zvr4XnlQEa1A6oeTPxmRFp8KFlX33PZcG1Vr7Bi 2VV5Bj4nkLSE8DrBAANOtAl5W5g2uuxfOyIc4x+4jsErjJ5jpD7XOD/3go8C+/Aq LQpEAc+zNzggBDwRAyvs4rDylQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFEZbXr0K 2tqHuTE8kre8SvfiwUc6MB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvQTJCNTQ4N0NE NDVGMTFFRUFBRkY3MDQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEA9ohaAMEB9ohADANBgkqhkiG9w0BAQsFAAOCAQEAEb2e 5G3tcRQ/bw9r5ejBu4mVNoAMd+xkWIHrsUF3ZskodlMuGrjBjebOAJd44vRsJ6B0 JB4Al5FGzJhpPP9rpejp7O/8gU6Nc2dXOxBTGDtLc2iAnnzweW0jWDey3QlnWQUT mWJfdPo3pzmmQho5noz66xOgQL3sPjUvW4+oDvr5piOALUrca0PgPHMIF8IZMyDT Fmfzje9wkVaW6wKmxvwqNJ9W4O/86LDe3UouXeks1+Me+JF+R0RESI8wg99xig4F o1R52ZL782OafJDWdeXn8vako8V03ukToSmxOisoX6C9aFvv5XKoHQd0xSZjbG8B sYhZ2EgnMJg/Ukd0tw== -----END CERTIFICATE-----Generated at Wed May 1 05:55:43 2024 by rpki-client on console-ams.rpki-client.org