$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/9A7071C0462E11ED90035452C4F9AE02.roa File: 9A7071C0462E11ED90035452C4F9AE02.roa (raw, json) Hash identifier: xI0GnyvN5cK5+FijAC55cRTHb9/XhLz8klCv+xpDf+0= Subject key identifier: 2B:BE:ED:F1:FE:BF:4F:2B:55:0D:BE:1E:CE:FA:FB:8A:34:AE:A3:3D Certificate issuer: /CN=A919DC74/serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA Certificate serial: E6 Authority key identifier: DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/9A7071C0462E11ED90035452C4F9AE02.roa Signing time: Sun 03 Dec 2023 04:35:04 +0000 ROA not before: Sun 03 Dec 2023 04:35:04 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 133748 IP address blocks: 43.249.248.0/22 maxlen: 24 103.41.128.0/22 maxlen: 24 203.208.22.0/24 maxlen: 24 2401:b080::/32 maxlen: 32 2401:b080:63::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC74/serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA Validity Not Before: Dec 3 04:35:04 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=656c0578-9495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:32:c5:cd:5a:d7:14:96:51:f8:50:24:2b:e1: 2c:1e:fe:dd:d1:bd:52:30:b7:2a:66:aa:00:e8:d3: e6:c7:f9:eb:c9:a9:40:97:4c:f8:f7:6b:9c:44:6a: 66:72:cf:95:17:a9:72:5e:4d:d9:05:d6:67:bc:af: 72:bc:ec:82:eb:cd:d2:e8:a6:f0:ac:35:7a:dc:21: 5d:49:d8:c7:b0:a9:42:23:0c:49:23:9e:e7:78:85: 7c:bb:7a:c2:dd:53:33:e0:c6:61:11:da:f4:0b:0b: 9c:6a:92:1d:7a:b5:65:d1:72:74:b4:72:7a:6c:28: 8a:2c:44:36:de:1e:c6:48:88:a6:b8:25:71:7f:b5: d0:56:36:d8:49:9a:b8:58:37:bb:db:cc:11:d1:48: c7:b3:4b:66:de:a0:24:c5:22:a4:46:d8:4c:ab:cb: 15:48:37:c8:19:07:da:77:80:a8:2b:5c:ac:c7:b0: 14:c3:c5:20:64:94:0b:cf:66:cb:1b:5b:b4:e1:29: 2d:ff:b9:c3:8d:5b:7e:f1:d0:20:bf:94:b6:d1:ac: 65:48:b8:ed:18:ee:82:96:39:d1:ef:77:17:ad:2c: 37:4f:a8:6b:3f:05:cd:eb:18:77:b7:62:9c:88:d7: 43:d7:7f:57:6f:66:8a:d6:13:a8:cd:eb:99:73:2a: 39:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:BE:ED:F1:FE:BF:4F:2B:55:0D:BE:1E:CE:FA:FB:8A:34:AE:A3:3D X509v3 Authority Key Identifier: keyid:DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/9A7071C0462E11ED90035452C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.248.0/22 103.41.128.0/22 203.208.22.0/24 IPv6: 2401:b080::/32 Signature Algorithm: sha256WithRSAEncryption c5:55:ed:8e:93:bc:69:45:23:dd:7e:54:91:2b:a3:3b:45:23: 10:d7:7f:2d:16:c2:d9:c9:e1:b0:cc:5e:24:75:a9:7d:6e:e3: 76:1a:79:e4:8c:55:39:86:0f:27:01:fa:00:bb:d8:38:c2:a1: 65:9c:6b:fa:ae:b2:42:9b:96:00:d6:65:94:a3:1b:30:60:0c: 58:43:b1:3d:63:54:8f:6c:43:ae:1e:85:e6:72:e2:08:fa:3c: 24:ba:a0:68:1a:f2:75:28:a3:1b:61:cd:6b:93:40:e1:ea:69: 8f:0b:76:9c:60:fb:59:dd:b9:56:61:86:49:52:e0:b9:e0:1c: 48:43:11:75:6e:39:d8:43:40:cd:f5:2c:b9:bd:3b:cb:8a:1d: 4b:c4:39:cb:5c:27:63:6c:df:25:46:dc:3d:36:af:9c:83:92: eb:f7:99:01:0c:79:e8:b7:9b:4e:44:e3:49:e0:4b:ac:07:8c: e9:c6:f5:ee:7d:26:c9:52:34:14:11:27:70:6c:d7:93:f0:97: 86:c2:77:3c:9d:97:9f:85:ca:2d:13:14:b1:a0:43:8d:b3:f1: 57:7e:6e:56:d3:ea:76:89:ee:ab:8e:ac:35:55:26:2c:f4:e2: d6:b3:83:2b:85:58:05:71:a6:1b:29:4d:b5:aa:32:b7:c9:56: fe:d1:29:ee -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzQxMTAvBgNVBAUTKERFQ0ZDNzUzNDM5OEM0ODU3OEI5RTQ3NEFFQjgwQjFD OTRDQkM1QkEwHhcNMjMxMjAzMDQzNTA0WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZjMDU3OC05NDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDLFzVrXFJZR+FAkK+EsHv7d0b1SMLcqZqoA6NPmx/nryalAl0z492ucRGpm cs+VF6lyXk3ZBdZnvK9yvOyC683S6KbwrDV63CFdSdjHsKlCIwxJI57neIV8u3rC 3VMz4MZhEdr0CwucapIderVl0XJ0tHJ6bCiKLEQ23h7GSIimuCVxf7XQVjbYSZq4 WDe728wR0UjHs0tm3qAkxSKkRthMq8sVSDfIGQfad4CoK1ysx7AUw8UgZJQLz2bL G1u04Skt/7nDjVt+8dAgv5S20axlSLjtGO6CljnR73cXrSw3T6hrPwXN6xh3t2Kc iNdD139Xb2aK1hOozeuZcyo56wIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFCu+7fH+ v08rVQ2+Hs76+4o0rqM9MB8GA1UdIwQYMBaAFN7Px1NDmMSFeLnkdK64CxyUy8W6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3NC9FNDJDQkM0QzQ2 MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi8zc19IVTBPWXhJVjR1ZVIwcnJnTEhKVEx4 Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNzX0hVME9ZeElWNHVlUjBycmdMSEpUTHhiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OURDNzQvRTQyQ0JDNEM0NjI5MTFFREFFNzhCMjM1QzRGOUFFMDIvOUE3MDcxQzA0 NjJFMTFFRDkwMDM1NDUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAIr+fgDBAJnKYADBADL0BYwDQQCAAIwBwMFACQBsIAwDQYJ KoZIhvcNAQELBQADggEBAMVV7Y6TvGlFI91+VJEroztFIxDXfy0WwtnJ4bDMXiR1 qX1u43YaeeSMVTmGDycB+gC72DjCoWWca/quskKblgDWZZSjGzBgDFhDsT1jVI9s Q64eheZy4gj6PCS6oGga8nUooxthzWuTQOHqaY8Ldpxg+1nduVZhhklS4LngHEhD EXVuOdhDQM31LLm9O8uKHUvEOctcJ2Ns3yVG3D02r5yDkuv3mQEMeei3m05E40ng S6wHjOnG9e59JslSNBQRJ3Bs15Pwl4bCdzydl5+Fyi0TFLGgQ42z8Vd+blbT6naJ 7quOrDVVJiz04tazgyuFWAVxphspTbWqMrfJVv7RKe4= -----END CERTIFICATE-----Generated at Thu Nov 21 03:12:01 2024 by rpki-client on console-fra.rpki-client.org