$ rpki-client -vvf rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/F9341586EDDA11EEB7B92015C4F9AE02.roa File: F9341586EDDA11EEB7B92015C4F9AE02.roa (raw, json) Hash identifier: /P/4C+DI1IWnDZ/kR3Rolylp/uFmfZUNpmilWuwAYao= Subject key identifier: 18:82:65:B5:A5:00:0C:A4:B4:3A:F7:1A:EA:C5:60:7C:4F:18:85:3F Certificate issuer: /CN=A919ECE7/serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33 Certificate serial: 0606 Authority key identifier: 77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/F9341586EDDA11EEB7B92015C4F9AE02.roa Signing time: Fri 29 Mar 2024 14:45:23 +0000 ROA not before: Fri 29 Mar 2024 14:45:23 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 21859 IP address blocks: 43.250.172.0/24 maxlen: 24 43.250.173.0/24 maxlen: 24 43.250.175.0/24 maxlen: 24 103.42.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 23:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1542 (0x606) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919ECE7/serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33 Validity Not Before: Mar 29 14:45:23 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6606d403-f9b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:eb:ad:65:20:54:60:c5:fa:85:e4:ed:1a:9e: 8f:2b:b5:da:82:15:f5:a6:c1:08:ed:3f:a7:e3:56: 63:57:48:6a:ac:c3:77:8e:d5:21:f3:1c:eb:94:18: 06:cc:59:e8:3b:06:73:36:65:a2:42:d2:5e:dd:15: 86:c7:b9:07:b3:5e:cc:b7:8c:98:dd:e5:40:f1:26: e5:b0:63:a8:ee:a4:9d:67:63:01:d5:92:66:60:2a: d6:8f:32:57:b5:a4:3a:f4:4e:4a:00:51:23:dc:25: ca:b5:ba:e6:61:9b:e4:98:76:33:01:f9:06:94:18: 8a:d1:c8:98:98:92:82:a9:a7:f1:4d:92:2d:2a:f1: eb:20:63:15:66:14:1e:cc:f8:3e:a6:f2:a7:55:a7: 33:72:eb:46:98:3f:ac:8b:07:fd:10:96:72:c3:69: c4:12:3f:1d:6b:a4:1e:0d:df:8a:3f:97:37:33:e4: 7c:d5:8c:33:c3:9d:fc:00:5a:1f:2a:db:85:9f:30: d8:59:3b:88:93:1b:d4:b6:c5:a7:00:85:9f:04:42: 5c:0a:c8:c0:2e:71:be:08:97:f3:8a:07:34:13:68: cc:13:63:b5:36:b9:cd:13:d3:7d:ad:65:0d:e8:37: 53:b9:3c:d6:03:1c:3c:c0:cb:6a:50:91:26:58:ba: 37:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:82:65:B5:A5:00:0C:A4:B4:3A:F7:1A:EA:C5:60:7C:4F:18:85:3F X509v3 Authority Key Identifier: keyid:77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/F9341586EDDA11EEB7B92015C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.250.172.0/23 43.250.175.0/24 103.42.28.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:84:3b:82:2d:ef:03:59:1e:b5:cf:c4:10:ba:1f:43:a5:35: 19:74:2d:ab:9b:de:69:85:de:c0:ac:43:4e:2f:85:11:c3:5d: c4:d4:4b:a5:96:4d:3d:31:29:60:c2:c9:b5:18:ae:2b:82:7d: 6d:ab:65:8f:e7:73:16:8c:96:a2:61:77:55:3e:d4:21:4f:e4: 6c:5f:f8:29:dd:72:ad:b6:d0:71:35:6c:fa:b3:0e:30:a8:8e: 1f:e4:bf:35:50:4e:f0:f7:b9:76:24:39:9c:41:a7:d9:d7:c8: ca:fe:dd:79:de:85:1e:ff:61:b3:f3:9b:96:7f:70:8a:75:32: e1:f6:f6:be:f3:71:39:cf:05:fe:5c:12:e9:15:75:72:cc:f8: 40:4c:d7:2c:dd:7c:27:b9:53:3f:76:08:4d:c9:80:9d:4a:f4: 2e:02:45:1a:df:23:76:bf:a8:ab:94:38:24:01:be:b8:2f:5b: 46:a9:59:5b:22:bc:52:01:b0:ab:97:d0:cf:2b:f1:1e:9e:80: ec:07:16:97:fd:d8:3d:5f:af:fb:8d:00:93:f0:31:94:2d:87: d0:3b:c4:db:50:ff:2f:7d:66:78:e9:5e:9b:14:24:ad:e7:2a: 16:18:ba:68:ce:83:cb:ca:84:af:be:9d:5f:d6:92:32:7e:df: 26:d8:ce:c0 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVDRTcxMTAvBgNVBAUTKDc3MzcwQkMwNzMwNUQxOURCREFDQ0U0QkY3MjA5RTFF QjZENDBFMzMwHhcNMjQwMzI5MTQ0NTIzWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjA2ZDQwMy1mOWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+utZSBUYMX6heTtGp6PK7XaghX1psEI7T+n41ZjV0hqrMN3jtUh8xzrlBgG zFnoOwZzNmWiQtJe3RWGx7kHs17Mt4yY3eVA8SblsGOo7qSdZ2MB1ZJmYCrWjzJX taQ69E5KAFEj3CXKtbrmYZvkmHYzAfkGlBiK0ciYmJKCqafxTZItKvHrIGMVZhQe zPg+pvKnVaczcutGmD+siwf9EJZyw2nEEj8da6QeDd+KP5c3M+R81Ywzw538AFof KtuFnzDYWTuIkxvUtsWnAIWfBEJcCsjALnG+CJfzigc0E2jME2O1NrnNE9N9rWUN 6DdTuTzWAxw8wMtqUJEmWLo3TQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFBiCZbWl AAyktDr3GurFYHxPGIU/MB8GA1UdIwQYMBaAFHc3C8BzBdGdvazOS/cgnh621A4z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUNFNy81RTA1REJBNDVG QUMxMUVCODQ5NDQ1MkZDNEY5QUUwMi9kemNMd0hNRjBaMjlyTTVMOXlDZUhyYlVE ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R6Y0x3SE1GMFoyOXJNNUw5eUNlSHJiVURqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUVDRTcvNUUwNURCQTQ1RkFDMTFFQjg0OTQ0NTJGQzRGOUFFMDIvRjkzNDE1ODZF RERBMTFFRUI3QjkyMDE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAEr+qwDBAAr+q8DBABnKhwwDQYJKoZIhvcNAQELBQADggEB AA6EO4It7wNZHrXPxBC6H0OlNRl0Laub3mmF3sCsQ04vhRHDXcTUS6WWTT0xKWDC ybUYriuCfW2rZY/ncxaMlqJhd1U+1CFP5Gxf+Cndcq220HE1bPqzDjCojh/kvzVQ TvD3uXYkOZxBp9nXyMr+3XnehR7/YbPzm5Z/cIp1MuH29r7zcTnPBf5cEukVdXLM +EBM1yzdfCe5Uz92CE3JgJ1K9C4CRRrfI3a/qKuUOCQBvrgvW0apWVsivFIBsKuX 0M8r8R6egOwHFpf92D1fr/uNAJPwMZQth9A7xNtQ/y99ZnjpXpsUJK3nKhYYumjO g8vKhK++nV/WkjJ+3ybYzsA= -----END CERTIFICATE-----Generated at Wed May 1 01:04:06 2024 by rpki-client on console-fra.rpki-client.org