$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/DA45147EB35E11EE8EED0E37C4F9AE02.roa File: DA45147EB35E11EE8EED0E37C4F9AE02.roa (raw, json) Hash identifier: O762b9O8eAbqPwdVQTVdzB2ShiBwgCIaagmOOLFp5cQ= Subject key identifier: A2:33:6B:11:9C:E7:82:F3:F7:B9:B5:B5:41:F4:32:B6:8D:EF:0F:AC Certificate issuer: /CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB Certificate serial: 05CD Authority key identifier: 0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/DA45147EB35E11EE8EED0E37C4F9AE02.roa Signing time: Mon 15 Jan 2024 04:30:46 +0000 ROA not before: Mon 15 Jan 2024 04:30:46 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 133073 IP address blocks: 43.251.118.0/24 maxlen: 24 43.251.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1485 (0x5cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB Validity Not Before: Jan 15 04:30:46 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65a4b4f6-905e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6d:92:dd:92:42:7a:f3:c6:02:43:be:2f:5b: de:1b:bb:25:09:b8:df:7b:c9:c9:31:d4:f7:72:c6: 10:9c:c6:83:7b:1d:64:c5:cd:00:e5:d5:ce:2c:59: 15:43:f5:d9:f6:eb:6b:b9:fa:84:a1:3d:e0:21:7c: 48:72:61:ed:01:9d:aa:49:ed:13:f8:d4:c9:03:f5: 6c:d6:20:a9:69:b6:3b:72:93:fe:89:33:1e:bb:b1: 89:23:5b:7e:40:3a:b2:08:ee:b3:bc:d1:33:db:64: 93:0e:6f:0d:f7:ef:2d:55:ca:da:e7:2e:d9:3a:a2: 0a:86:3b:26:cd:fc:3b:6f:f5:f3:d3:b1:fe:7e:c8: 74:ed:fb:34:cd:a4:e4:10:a9:c6:76:89:67:29:25: 3d:3c:6f:c3:04:53:0e:71:03:d4:7e:92:c6:96:f1: 29:13:4a:85:d7:e2:c5:c7:51:5c:9e:75:c2:db:ee: f2:d8:20:81:9b:04:60:08:11:a9:3f:58:25:61:90: 02:e7:36:db:da:b4:01:14:3c:d8:2b:18:80:6e:5a: 3d:85:78:2b:98:d6:bf:41:3a:58:bc:10:27:1f:aa: 07:5c:84:1b:54:32:f9:9c:66:35:8b:15:af:26:13: c8:be:7f:92:29:3c:cb:82:87:ad:22:3d:a0:b8:5f: a7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:33:6B:11:9C:E7:82:F3:F7:B9:B5:B5:41:F4:32:B6:8D:EF:0F:AC X509v3 Authority Key Identifier: keyid:0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/DA45147EB35E11EE8EED0E37C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.251.118.0/23 Signature Algorithm: sha256WithRSAEncryption 36:3c:6a:e6:95:ca:81:2d:0d:56:1f:3f:43:c0:29:c1:5d:ee: 15:c8:4c:28:60:8a:8b:a0:60:61:de:90:75:89:33:f9:cd:2e: e9:93:f0:7e:a3:0d:3f:fe:e6:8b:8f:0b:15:1b:a7:30:fa:f2: 3d:46:3e:30:bd:09:05:72:fd:46:16:4e:45:72:84:e5:70:72: 3c:ad:0d:d2:ef:30:12:8a:a8:f5:a7:b6:25:27:ea:e6:f7:45: 77:f1:4c:51:bd:71:e0:bc:5d:a6:0c:f2:09:9e:a3:93:41:d6: a1:81:c2:4a:cc:d3:27:ba:49:10:29:6f:19:7e:02:27:a0:13: 63:fc:bf:b5:d9:8d:a7:7a:fc:9d:60:df:3f:2c:25:06:c0:7b: d9:62:21:61:93:da:90:0a:66:88:07:7f:73:54:58:e3:c0:06: a8:5f:3c:0c:98:22:41:90:34:da:90:62:6e:2a:a3:1d:4d:16: 3d:97:cf:e3:3a:63:3d:08:d6:5b:8a:35:b7:57:0f:e7:4c:24: 0a:b8:ec:70:f6:fe:3c:5f:09:e3:7b:1b:b6:51:b5:85:84:c4: fd:39:05:82:ab:64:a6:6e:e4:9c:20:39:09:5d:6c:e8:d7:6d: 91:20:01:74:91:c8:74:9b:5d:30:e9:0e:64:f4:dc:fb:42:7f: db:4e:fd:c3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdDMDQxMTAvBgNVBAUTKDBBRTIyMkVDNUUxN0E2RTYzMkI1NTlENDlDNUIxRUYz MzJEQTQzQ0IwHhcNMjQwMTE1MDQzMDQ2WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NWE0YjRmNi05MDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzG2S3ZJCevPGAkO+L1veG7slCbjfe8nJMdT3csYQnMaDex1kxc0A5dXOLFkV Q/XZ9utrufqEoT3gIXxIcmHtAZ2qSe0T+NTJA/Vs1iCpabY7cpP+iTMeu7GJI1t+ QDqyCO6zvNEz22STDm8N9+8tVcra5y7ZOqIKhjsmzfw7b/Xz07H+fsh07fs0zaTk EKnGdolnKSU9PG/DBFMOcQPUfpLGlvEpE0qF1+LFx1FcnnXC2+7y2CCBmwRgCBGp P1glYZAC5zbb2rQBFDzYKxiAblo9hXgrmNa/QTpYvBAnH6oHXIQbVDL5nGY1ixWv JhPIvn+SKTzLgoetIj2guF+nrQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKIzaxGc 54Lz97m1tUH0MraN7w+sMB8GA1UdIwQYMBaAFAriIuxeF6bmMrVZ1JxbHvMy2kPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0MwNC9BMERCMzU1MjVG QjQxMUVCQUI3QzZBMjNDNEY5QUUwMi9DdUlpN0Y0WHB1WXl0Vm5VbkZzZTh6TGFR OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N1SWk3RjRYcHVZeXRWblVuRnNlOHpMYVE4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzdDMDQvQTBEQjM1NTI1RkI0MTFFQkFCN0M2QTIzQzRGOUFFMDIvREE0NTE0N0VC MzVFMTFFRThFRUQwRTM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAEr+3YwDQYJKoZIhvcNAQELBQADggEBADY8auaVyoEtDVYf P0PAKcFd7hXITChgiougYGHekHWJM/nNLumT8H6jDT/+5ouPCxUbpzD68j1GPjC9 CQVy/UYWTkVyhOVwcjytDdLvMBKKqPWntiUn6ub3RXfxTFG9ceC8XaYM8gmeo5NB 1qGBwkrM0ye6SRApbxl+AiegE2P8v7XZjad6/J1g3z8sJQbAe9liIWGT2pAKZogH f3NUWOPABqhfPAyYIkGQNNqQYm4qox1NFj2Xz+M6Yz0I1luKNbdXD+dMJAq47HD2 /jxfCeN7G7ZRtYWExP05BYKrZKZu5JwgOQldbOjXbZEgAXSRyHSbXTDpDmT03PtC f9tO/cM= -----END CERTIFICATE-----Generated at Fri May 17 01:02:52 2024 by rpki-client on console-ams.rpki-client.org