$ rpki-client -vvf rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/E5708A82CD0E11EC8038C333C4F9AE02.roa File: E5708A82CD0E11EC8038C333C4F9AE02.roa (raw, json) Hash identifier: bvhljrW7JyoPbpspTQPlbRcWJePp44bixxuUIkf1ppo= Subject key identifier: D8:B9:AF:35:F8:47:37:2C:57:7E:0D:CC:9E:99:6D:9C:60:40:1B:68 Certificate issuer: /CN=A91948F2/serialNumber=8674D77B4037300186D38104838EECA4B81832C2 Certificate serial: 0219 Authority key identifier: 86:74:D7:7B:40:37:30:01:86:D3:81:04:83:8E:EC:A4:B8:18:32:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnTXe0A3MAGG04EEg47spLgYMsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/E5708A82CD0E11EC8038C333C4F9AE02.roa Signing time: Fri 05 Jan 2024 03:24:48 +0000 ROA not before: Fri 05 Jan 2024 03:24:48 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 135391 IP address blocks: 43.224.64.0/22 maxlen: 24 103.43.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.crl rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnTXe0A3MAGG04EEg47spLgYMsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Apr 2024 03:47:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91948F2/serialNumber=8674D77B4037300186D38104838EECA4B81832C2 Validity Not Before: Jan 5 03:24:48 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6597767f-88f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f0:3b:e1:77:60:ba:1b:ad:25:39:79:6d:25: 3f:62:89:e7:93:c8:45:f2:f1:54:b2:17:25:eb:5c: 79:3c:08:68:cb:ed:d1:c1:30:21:b7:9a:c9:4b:1d: 53:7d:38:38:c2:b7:6f:6d:e5:95:db:71:ed:e3:8a: 93:36:c5:b4:4f:04:a0:cf:69:09:ee:22:ff:39:ed: ae:73:0e:d0:5f:7f:a5:db:7d:7f:8c:19:13:47:a1: 40:b5:db:fa:47:37:4e:0a:cc:d7:2f:f8:af:0b:f1: f6:93:d4:dd:43:56:d5:2c:ac:9e:06:53:76:c7:01: 56:9c:92:04:a3:f8:c0:64:b6:4c:b5:3c:ce:4e:97: 42:61:3d:98:28:ab:02:8a:58:0d:d2:f9:01:15:ab: 7e:5d:2b:e4:81:26:30:fd:1b:96:2f:09:0f:34:b2: 70:76:b3:ab:99:d3:bb:d7:3a:1e:43:38:8b:04:3a: fe:39:cd:f0:a3:76:26:ba:63:1f:6b:45:58:44:ef: a8:94:81:b5:42:c4:97:93:38:9d:50:22:c9:b9:5c: 35:c7:42:c0:96:c2:15:57:24:bf:a6:61:1c:ef:b1: ae:48:a6:a9:e6:7c:2d:43:00:3a:0f:62:62:77:38: ba:0e:5f:b6:86:89:80:8f:72:a7:9b:18:7b:f1:c2: 84:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B9:AF:35:F8:47:37:2C:57:7E:0D:CC:9E:99:6D:9C:60:40:1B:68 X509v3 Authority Key Identifier: keyid:86:74:D7:7B:40:37:30:01:86:D3:81:04:83:8E:EC:A4:B8:18:32:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnTXe0A3MAGG04EEg47spLgYMsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/E5708A82CD0E11EC8038C333C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.224.64.0/22 103.43.84.0/22 Signature Algorithm: sha256WithRSAEncryption 89:39:5b:e3:7b:da:0d:dc:31:fc:86:12:ef:7c:41:07:11:ba: 0d:f3:24:8f:80:5f:81:ee:f1:b5:e7:8d:29:0b:b0:da:59:a1: 15:e0:16:81:40:82:59:57:86:17:91:10:44:27:99:67:d7:cf: 70:97:00:27:e3:a0:cf:be:6e:78:77:bb:4d:f9:37:38:af:34: 54:6c:d6:32:91:72:ed:16:92:29:6b:db:39:bd:b5:6e:01:60: 2c:5a:af:02:39:e7:72:e5:56:fa:91:02:64:b3:da:f6:24:02: 57:99:db:d7:3d:18:07:06:d3:c3:ee:d5:6c:56:d9:4c:ce:cd: 78:59:10:b7:21:4e:c7:43:c0:89:85:d5:1a:15:dc:90:d6:d3: 67:34:bf:15:f9:94:87:c1:5c:c5:78:de:39:83:68:ab:33:d7: f0:e8:0c:67:94:cf:cd:08:bf:54:88:03:ff:dc:ff:b0:bb:3e: f6:a4:b3:9d:70:55:08:01:1c:94:35:20:65:23:38:0e:e1:a3: 6c:80:91:b1:4e:95:83:d5:85:8d:0c:3c:31:b3:c1:72:90:04: a5:f5:bb:5e:58:c9:d3:72:3d:5d:78:fb:b0:90:bf:dc:80:c1: 21:c8:7f:87:6a:76:d9:0f:1e:e3:d2:65:df:fa:8f:28:ed:77: 4e:2f:6b:01 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ4RjIxMTAvBgNVBAUTKDg2NzRENzdCNDAzNzMwMDE4NkQzODEwNDgzOEVFQ0E0 QjgxODMyQzIwHhcNMjQwMTA1MDMyNDQ4WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTk3NzY3Zi04OGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fA74XdguhutJTl5bSU/Yonnk8hF8vFUshcl61x5PAhoy+3RwTAht5rJSx1T fTg4wrdvbeWV23Ht44qTNsW0TwSgz2kJ7iL/Oe2ucw7QX3+l231/jBkTR6FAtdv6 RzdOCszXL/ivC/H2k9TdQ1bVLKyeBlN2xwFWnJIEo/jAZLZMtTzOTpdCYT2YKKsC ilgN0vkBFat+XSvkgSYw/RuWLwkPNLJwdrOrmdO71zoeQziLBDr+Oc3wo3YmumMf a0VYRO+olIG1QsSXkzidUCLJuVw1x0LAlsIVVyS/pmEc77GuSKap5nwtQwA6D2Ji dzi6Dl+2homAj3Knmxh78cKEwwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNi5rzX4 RzcsV34NzJ6ZbZxgQBtoMB8GA1UdIwQYMBaAFIZ013tANzABhtOBBIOO7KS4GDLC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDhGMi9FNUYyQzdEQUNE MEExMUVDQUUwQTBDMkVDNEY5QUUwMi9oblRYZTBBM01BR0cwNEVFZzQ3c3BMZ1lN c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2huVFhlMEEzTUFHRzA0RUVnNDdzcExnWU1zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTQ4RjIvRTVGMkM3REFDRDBBMTFFQ0FFMEEwQzJFQzRGOUFFMDIvRTU3MDhBODJD RDBFMTFFQzgwMzhDMzMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr4EADBAJnK1QwDQYJKoZIhvcNAQELBQADggEBAIk5W+N7 2g3cMfyGEu98QQcRug3zJI+AX4Hu8bXnjSkLsNpZoRXgFoFAgllXhheREEQnmWfX z3CXACfjoM++bnh3u035NzivNFRs1jKRcu0Wkilr2zm9tW4BYCxarwI553LlVvqR AmSz2vYkAleZ29c9GAcG08Pu1WxW2UzOzXhZELchTsdDwImF1RoV3JDW02c0vxX5 lIfBXMV43jmDaKsz1/DoDGeUz80Iv1SIA//c/7C7Pvaks51wVQgBHJQ1IGUjOA7h o2yAkbFOlYPVhY0MPDGzwXKQBKX1u15YydNyPV14+7CQv9yAwSHIf4dqdtkPHuPS Zd/6jyjtd04vawE= -----END CERTIFICATE-----Generated at Fri Apr 19 05:37:02 2024 by rpki-client on console-fra.rpki-client.org