$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/2B07FA82EADC11EBBE430B5EC4F9AE02.roa File: 2B07FA82EADC11EBBE430B5EC4F9AE02.roa (raw, json) Hash identifier: tOaWIn0hKgLGbTa/9KsuAGYfXUTZkuc/qe0+6/vgHdw= Subject key identifier: 42:28:A0:BE:05:80:24:47:A7:A0:19:37:C9:60:F4:0A:C1:7F:D6:EC Certificate issuer: /CN=A91D28BC/serialNumber=C48A0E40FB7FE3975B12C23E030AC54C52057163 Certificate serial: 03E5 Authority key identifier: C4:8A:0E:40:FB:7F:E3:97:5B:12:C2:3E:03:0A:C5:4C:52:05:71:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/2B07FA82EADC11EBBE430B5EC4F9AE02.roa Signing time: Mon 05 Jun 2023 03:10:31 +0000 ROA not before: Mon 05 Jun 2023 03:10:31 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 133613 IP address blocks: 43.247.24.0/22 maxlen: 22 43.247.24.0/24 maxlen: 24 43.247.25.0/24 maxlen: 24 43.247.26.0/24 maxlen: 24 43.247.27.0/24 maxlen: 24 103.237.124.0/24 maxlen: 24 103.237.125.0/24 maxlen: 24 103.237.126.0/24 maxlen: 24 103.237.127.0/24 maxlen: 24 2401:3280:1000::/36 maxlen: 36 2401:3280:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.crl rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 997 (0x3e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28BC/serialNumber=C48A0E40FB7FE3975B12C23E030AC54C52057163 Validity Not Before: Jun 5 03:10:31 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=647d5226-e00e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ab:53:9c:07:58:3d:44:b9:33:95:b3:83:05: 71:f3:75:6d:7b:27:75:a3:2e:80:27:f9:ba:f8:38: fd:47:c3:76:95:44:67:a2:ef:31:a9:db:84:a5:b8: dc:73:81:40:bf:02:4f:2e:47:a9:67:a4:f5:bd:e2: 49:ca:23:bc:d8:1f:63:29:60:79:f1:24:01:38:2d: 60:b7:0d:e1:34:1d:0f:98:c7:60:44:55:77:ab:30: 23:5b:eb:05:42:40:b0:99:59:71:20:f9:28:cf:7a: 90:4b:39:a5:fe:7d:a5:49:e6:7f:cc:c9:96:8a:c7: 4b:c0:a4:b2:62:46:02:d1:a9:bc:57:01:65:e3:70: 0a:47:94:53:2b:bb:d1:37:62:8a:82:ff:56:bd:49: b6:e7:8d:66:08:75:3a:a3:bc:ef:57:49:8e:16:fb: 3f:88:48:b4:ef:23:77:23:21:1c:60:51:6b:a0:88: fe:c9:2d:a5:31:42:c8:fe:6a:2e:de:49:ef:9d:65: c7:cb:88:35:fa:6b:29:bd:50:fd:ad:cb:48:46:b5: 7b:8b:1b:60:66:e5:fd:a5:72:5b:ac:0f:11:54:7a: 2f:b5:19:e3:dd:52:99:93:3b:43:1c:d0:46:1b:ee: 1b:98:93:83:22:e1:a6:6c:a2:dc:e8:f6:12:1b:3b: a3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:28:A0:BE:05:80:24:47:A7:A0:19:37:C9:60:F4:0A:C1:7F:D6:EC X509v3 Authority Key Identifier: keyid:C4:8A:0E:40:FB:7F:E3:97:5B:12:C2:3E:03:0A:C5:4C:52:05:71:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/2B07FA82EADC11EBBE430B5EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.247.24.0/22 103.237.124.0/22 IPv6: 2401:3280:1000::-2401:3280:2fff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 27:84:e6:18:d7:9f:13:4b:cd:d6:f6:0e:63:47:cb:e4:42:f4: aa:81:c4:e8:cb:7c:81:58:63:c3:3e:39:41:6c:84:62:f8:85: e1:93:67:82:e9:9d:59:7d:09:47:6d:68:f6:df:49:20:36:03: 2c:68:b8:d1:83:8a:32:bb:9c:2b:a5:53:d4:46:0f:c5:b8:a6: 0d:fb:be:30:2c:1f:7e:b0:48:e2:df:62:d4:2d:f8:f9:77:85: ab:a6:87:e2:e0:10:46:f5:cf:c2:81:ee:47:99:ee:d0:90:3f: d7:c7:1b:e5:f6:9a:f4:de:ce:3f:3f:0b:98:e7:dc:3c:40:85: 1b:f6:ea:3a:f6:99:15:c8:a4:30:93:48:a3:a9:7f:51:26:29: 27:fc:f8:0a:74:6b:92:40:ca:a2:50:ef:19:98:66:1c:fd:34: 71:47:f0:67:18:69:46:f7:16:2b:82:ef:71:e2:c1:c5:ad:07: 70:bf:ad:cc:cd:ff:ee:9a:2e:bd:98:b8:e6:e8:c7:0c:aa:58: cf:1f:40:07:49:9d:37:1e:fa:4b:05:b2:8d:39:5e:ea:4e:9e: 32:5c:dc:5c:ce:36:48:ab:ac:7d:a2:7e:04:93:b7:a5:c7:fa: ef:84:36:41:a0:09:e9:4d:4f:9b:bf:70:8a:ba:46:bb:d7:cb: e8:f6:79:7a -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICA+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4QkMxMTAvBgNVBAUTKEM0OEEwRTQwRkI3RkUzOTc1QjEyQzIzRTAzMEFDNTRD NTIwNTcxNjMwHhcNMjMwNjA1MDMxMDMxWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDdkNTIyNi1lMDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KtTnAdYPUS5M5WzgwVx83Vteyd1oy6AJ/m6+Dj9R8N2lURnou8xqduEpbjc c4FAvwJPLkepZ6T1veJJyiO82B9jKWB58SQBOC1gtw3hNB0PmMdgRFV3qzAjW+sF QkCwmVlxIPkoz3qQSzml/n2lSeZ/zMmWisdLwKSyYkYC0am8VwFl43AKR5RTK7vR N2KKgv9WvUm2541mCHU6o7zvV0mOFvs/iEi07yN3IyEcYFFroIj+yS2lMULI/mou 3knvnWXHy4g1+mspvVD9rctIRrV7ixtgZuX9pXJbrA8RVHovtRnj3VKZkztDHNBG G+4bmJODIuGmbKLc6PYSGzujlQIDAQABo4ICtTCCArEwHQYDVR0OBBYEFEIooL4F gCRHp6AZN8lg9ArBf9bsMB8GA1UdIwQYMBaAFMSKDkD7f+OXWxLCPgMKxUxSBXFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhCQy85MjA5MjM5MEVB RDgxMUVCQkQyQ0M3NThDNEY5QUUwMi94SW9PUVB0XzQ1ZGJFc0ktQXdyRlRGSUZj V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJb09RUHRfNDVkYkVzSS1Bd3JGVEZJRmNXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDI4QkMvOTIwOTIzOTBFQUQ4MTFFQkJEMkNDNzU4QzRGOUFFMDIvMkIwN0ZBODJF QURDMTFFQkJFNDMwQjVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E MDAuMBIEAgABMAwDBAIr9xgDBAJn7XwwGAQCAAIwEjAQAwYEJAEygBADBgQkATKA IDANBgkqhkiG9w0BAQsFAAOCAQEAJ4TmGNefE0vN1vYOY0fL5EL0qoHE6Mt8gVhj wz45QWyEYviF4ZNngumdWX0JR21o9t9JIDYDLGi40YOKMrucK6VT1EYPxbimDfu+ MCwffrBI4t9i1C34+XeFq6aH4uAQRvXPwoHuR5nu0JA/18cb5faa9N7OPz8LmOfc PECFG/bqOvaZFcikMJNIo6l/USYpJ/z4CnRrkkDKolDvGZhmHP00cUfwZxhpRvcW K4LvceLBxa0HcL+tzM3/7pouvZi45ujHDKpYzx9AB0mdNx76SwWyjTle6k6eMlzc XM42SKusfaJ+BJO3pcf674Q2QaAJ6U1Pm79wirpGu9fL6PZ5eg== -----END CERTIFICATE-----Generated at Sun May 19 02:59:15 2024 by rpki-client on console-ams.rpki-client.org