$ rpki-client -vvf rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/74087358355111E99EC82E0AC4F9AE02.roa File: 74087358355111E99EC82E0AC4F9AE02.roa (raw, json) Hash identifier: J13YXMbpb9DmPsFXcQePqhqj7Wu1xBAXD7neNPMUSJw= Subject key identifier: 69:E3:89:C6:66:66:12:D6:4C:2A:22:1B:81:31:40:EB:B9:83:88:3D Certificate issuer: /CN=A919D49F/serialNumber=707D48605A0D85772F90DC4B1172BEF30294A087 Certificate serial: 0F3D Authority key identifier: 70:7D:48:60:5A:0D:85:77:2F:90:DC:4B:11:72:BE:F3:02:94:A0:87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/74087358355111E99EC82E0AC4F9AE02.roa Signing time: Tue 31 Oct 2023 18:25:40 +0000 ROA not before: Tue 31 Oct 2023 18:25:40 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 132449 IP address blocks: 43.249.196.0/24 maxlen: 24 43.249.197.0/24 maxlen: 24 43.249.198.0/24 maxlen: 24 43.249.199.0/24 maxlen: 24 103.21.172.0/23 maxlen: 23 103.21.174.0/24 maxlen: 24 103.21.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 18:13:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3901 (0xf3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D49F/serialNumber=707D48605A0D85772F90DC4B1172BEF30294A087 Validity Not Before: Oct 31 18:25:40 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=654146a3-f95b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:66:70:cf:d9:61:ba:0e:bb:03:aa:7f:42:a4: 01:36:12:d6:84:32:15:36:96:b0:f5:04:cc:29:a0: 81:6f:b1:03:de:b7:fa:84:c5:1e:f2:bb:ea:92:be: db:cd:94:8a:1a:d1:38:1b:65:02:7a:d1:01:0d:b6: 3d:6b:26:ee:f4:6f:8e:55:09:ff:a5:ec:8d:05:7c: d0:55:a9:02:56:c6:be:cc:9e:81:77:e5:62:14:c8: e9:30:45:9a:ac:99:f0:18:dd:08:9e:1e:71:d6:d6: 7c:8e:10:a2:7a:b5:70:8e:f2:b9:8b:cd:e3:6c:61: 63:0e:c5:06:b5:85:7b:5b:c9:b3:e5:95:e0:79:1d: 96:f9:39:b4:c2:ea:9c:2d:67:3f:e1:e4:ed:3c:19: ed:5b:1a:8b:ed:32:a1:95:0a:84:7e:fd:62:38:2c: 6b:9b:65:23:a3:a8:8b:7f:64:dd:21:69:3e:1b:34: 94:a0:62:a4:01:e4:29:55:78:ea:87:a6:ec:4a:01: 74:e0:cd:a4:c1:d6:5b:5b:18:4a:17:80:52:ea:46: 97:1a:7d:75:2c:ab:35:65:a9:23:1c:fe:1d:2a:82: 2d:4e:d5:2c:ba:7d:39:b2:37:ea:86:1f:b3:1a:2c: 2e:d9:18:3c:f7:c6:a8:86:4a:e7:6f:ff:34:4b:69: d6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E3:89:C6:66:66:12:D6:4C:2A:22:1B:81:31:40:EB:B9:83:88:3D X509v3 Authority Key Identifier: keyid:70:7D:48:60:5A:0D:85:77:2F:90:DC:4B:11:72:BE:F3:02:94:A0:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/74087358355111E99EC82E0AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.196.0/22 103.21.172.0/22 Signature Algorithm: sha256WithRSAEncryption 89:52:e1:4d:bf:0b:ea:20:39:ba:dc:6f:86:3a:65:f7:4a:fa: 5d:47:fd:ac:e5:47:5e:45:4f:f4:be:fc:a9:5b:59:78:c7:9c: 31:57:47:10:ab:02:5d:d0:eb:4a:93:cf:51:1f:6f:46:4e:c6: b5:9b:01:27:4c:8b:dc:b2:ce:e3:88:18:c0:e7:a7:9b:71:01: 2c:9b:2f:12:f7:bf:d2:05:03:bd:ba:87:a1:70:0e:25:31:da: 2b:91:03:3e:2d:bc:51:f1:7f:03:ec:ad:4b:db:2c:01:a0:56: 11:d4:12:d8:1b:de:48:85:84:c0:d2:25:e4:fd:fa:1e:c3:28: 3f:b6:32:f4:85:fe:a6:83:07:e3:69:62:c0:43:6b:f8:ad:69: c5:42:a4:dc:b8:2f:8e:f1:01:fc:67:ac:da:56:7d:34:b9:de: 6f:d8:8a:46:11:6e:b0:d3:29:be:e1:b6:90:85:20:02:5e:2b: b0:99:f3:80:84:44:51:0b:79:d4:eb:6e:5a:33:26:ee:fd:ca: 56:8c:0b:c1:e7:69:b6:54:6f:49:20:2b:d2:13:87:da:31:05: d5:e7:07:80:fa:39:69:1e:96:5c:b9:1c:63:59:a9:5e:79:1a: 31:a7:8f:70:c8:20:c3:dd:63:e0:3f:b2:b4:fb:56:7a:56:42: 28:4d:87:5f -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ0OUYxMTAvBgNVBAUTKDcwN0Q0ODYwNUEwRDg1NzcyRjkwREM0QjExNzJCRUYz MDI5NEEwODcwHhcNMjMxMDMxMTgyNTQwWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTQxNDZhMy1mOTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWZwz9lhug67A6p/QqQBNhLWhDIVNpaw9QTMKaCBb7ED3rf6hMUe8rvqkr7b zZSKGtE4G2UCetEBDbY9aybu9G+OVQn/peyNBXzQVakCVsa+zJ6Bd+ViFMjpMEWa rJnwGN0Inh5x1tZ8jhCierVwjvK5i83jbGFjDsUGtYV7W8mz5ZXgeR2W+Tm0wuqc LWc/4eTtPBntWxqL7TKhlQqEfv1iOCxrm2Ujo6iLf2TdIWk+GzSUoGKkAeQpVXjq h6bsSgF04M2kwdZbWxhKF4BS6kaXGn11LKs1ZakjHP4dKoItTtUsun05sjfqhh+z Giwu2Rg898aohkrnb/80S2nW6wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGnjicZm ZhLWTCoiG4ExQOu5g4g9MB8GA1UdIwQYMBaAFHB9SGBaDYV3L5DcSxFyvvMClKCH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDQ5Ri8wQkFDODU1NjM1 NTExMUU5OThBNTBBMEFDNEY5QUUwMi9jSDFJWUZvTmhYY3ZrTnhMRVhLLTh3S1Vv SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NIMUlZRm9OaFhjdmtOeExFWEstOHdLVW9JYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUQ0OUYvMEJBQzg1NTYzNTUxMTFFOTk4QTUwQTBBQzRGOUFFMDIvNzQwODczNTgz NTUxMTFFOTlFQzgyRTBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr+cQDBAJnFawwDQYJKoZIhvcNAQELBQADggEBAIlS4U2/ C+ogObrcb4Y6ZfdK+l1H/azlR15FT/S+/KlbWXjHnDFXRxCrAl3Q60qTz1Efb0ZO xrWbASdMi9yyzuOIGMDnp5txASybLxL3v9IFA726h6FwDiUx2iuRAz4tvFHxfwPs rUvbLAGgVhHUEtgb3kiFhMDSJeT9+h7DKD+2MvSF/qaDB+NpYsBDa/itacVCpNy4 L47xAfxnrNpWfTS53m/YikYRbrDTKb7htpCFIAJeK7CZ84CERFELedTrblozJu79 ylaMC8HnabZUb0kgK9ITh9oxBdXnB4D6OWkelly5HGNZqV55GjGnj3DIIMPdY+A/ srT7VnpWQihNh18= -----END CERTIFICATE-----Generated at Thu May 16 19:10:55 2024 by rpki-client on console-fra.rpki-client.org