$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/42718A9815EE11EC972DE124C4F9AE02.roa File: 42718A9815EE11EC972DE124C4F9AE02.roa (raw, json) Hash identifier: 0xVHeAifboXPlMWBpPwl8xx3T9DgQwIqtVmTBW2evMg= Subject key identifier: C3:B6:10:0F:01:72:66:8A:11:E3:CA:EF:F7:B9:B6:F5:AE:AD:67:CC Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Certificate serial: 0BC0 Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/42718A9815EE11EC972DE124C4F9AE02.roa Signing time: Wed 24 May 2023 23:25:31 +0000 ROA not before: Wed 24 May 2023 23:25:31 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 146993 IP address blocks: 43.226.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Apr 2024 08:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3008 (0xbc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Validity Not Before: May 24 23:25:31 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=646e9ceb-5a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:13:09:3d:68:a6:2c:f6:4a:e9:12:c2:98:77: b4:a1:42:f1:d0:ed:6b:a8:cd:60:10:43:c1:b2:c2: 2c:be:47:3b:76:d6:6d:48:91:82:b9:8b:81:fc:33: 3a:63:43:7a:4b:0a:04:90:69:78:64:87:3d:fa:4e: 02:ae:77:ef:ba:f6:37:fb:a8:81:28:92:8e:99:f8: 13:b8:2e:0e:2b:05:43:8f:69:bc:5a:f8:84:74:b9: 40:7d:f3:c2:6e:e0:61:c2:d3:32:c1:67:f1:fe:bc: 3d:e3:ed:48:70:55:d7:cb:e7:4e:0a:98:00:51:c4: da:69:92:45:61:6d:72:38:ac:59:75:8c:25:2b:99: 18:ac:03:1a:52:c3:84:25:98:fb:e7:b3:e9:ef:52: f3:61:a9:2e:cb:0f:2e:12:42:af:e9:3f:c5:45:fc: eb:81:99:c0:0c:aa:1d:84:cf:a7:86:33:b0:6e:fd: 02:80:c4:ec:50:52:d0:2c:b8:23:be:6a:e4:f8:40: 26:42:11:65:ad:3b:2a:88:76:89:02:96:eb:8a:9b: d8:e6:a0:92:ba:df:25:89:ee:b0:4a:34:2a:bb:cf: 52:d8:26:38:75:be:64:15:e3:d7:d0:bb:fd:2c:47: 11:4d:24:db:07:08:59:c0:80:c1:26:d6:02:6d:47: e3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B6:10:0F:01:72:66:8A:11:E3:CA:EF:F7:B9:B6:F5:AE:AD:67:CC X509v3 Authority Key Identifier: keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/42718A9815EE11EC972DE124C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.226.224.0/22 Signature Algorithm: sha256WithRSAEncryption 95:1a:65:11:ab:d8:b2:f7:f5:54:a4:ea:ea:f6:e6:24:5a:30: 01:fb:fe:2a:96:41:4a:64:1f:37:06:58:e6:fc:18:8b:7c:7c: 92:9b:30:0c:9c:07:07:2e:eb:7d:d2:f9:b3:64:48:a3:88:1a: 41:6e:38:7b:ef:0c:77:b8:e9:c7:df:44:c0:f5:31:11:00:85: 4c:01:40:91:2d:e7:bb:c5:bb:15:a4:84:cf:26:5c:93:96:ff: 94:54:85:b5:21:a9:48:4d:19:ff:07:78:3a:05:71:a7:7b:f2: 90:fb:c2:7c:42:17:b9:f1:c1:9d:bc:d5:b6:f1:d6:be:11:af: af:9f:91:a4:78:30:ea:14:ce:3e:46:a5:98:17:e2:25:e5:4a: 44:91:69:dd:5f:a9:47:24:5c:d5:c6:a7:d4:b2:7c:fc:4d:f8: b0:47:3a:c6:38:2b:8b:bc:2e:dc:f3:f6:f4:b3:4e:63:1a:29: d1:10:69:75:24:98:92:77:4c:8f:87:68:dd:59:3f:4d:1b:e2: 14:dc:92:af:e8:7b:c7:2b:e5:af:a4:40:33:da:b9:e8:af:2c: 00:03:6d:3a:ea:5d:e2:7a:13:17:d8:fc:7f:6f:c3:77:d7:a2: a2:ce:50:9c:1f:da:c5:28:36:2a:bf:12:e9:ee:d3:37:47:1b: 0a:e0:05:6b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy MUU1QjM5QzQwHhcNMjMwNTI0MjMyNTMxWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDZlOWNlYi01YTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqhMJPWimLPZK6RLCmHe0oULx0O1rqM1gEEPBssIsvkc7dtZtSJGCuYuB/DM6 Y0N6SwoEkGl4ZIc9+k4CrnfvuvY3+6iBKJKOmfgTuC4OKwVDj2m8WviEdLlAffPC buBhwtMywWfx/rw94+1IcFXXy+dOCpgAUcTaaZJFYW1yOKxZdYwlK5kYrAMaUsOE JZj757Pp71LzYakuyw8uEkKv6T/FRfzrgZnADKodhM+nhjOwbv0CgMTsUFLQLLgj vmrk+EAmQhFlrTsqiHaJApbripvY5qCSut8lie6wSjQqu89S2CY4db5kFePX0Lv9 LEcRTSTbBwhZwIDBJtYCbUfj7QIDAQABo4IClTCCApEwHQYDVR0OBBYEFMO2EA8B cmaKEePK7/e5tvWurWfMMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNDI3MThBOTgx NUVFMTFFQzk3MkRFMTI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAIr4uAwDQYJKoZIhvcNAQELBQADggEBAJUaZRGr2LL39VSk 6ur25iRaMAH7/iqWQUpkHzcGWOb8GIt8fJKbMAycBwcu633S+bNkSKOIGkFuOHvv DHe46cffRMD1MREAhUwBQJEt57vFuxWkhM8mXJOW/5RUhbUhqUhNGf8HeDoFcad7 8pD7wnxCF7nxwZ281bbx1r4Rr6+fkaR4MOoUzj5GpZgX4iXlSkSRad1fqUckXNXG p9SyfPxN+LBHOsY4K4u8Ltzz9vSzTmMaKdEQaXUkmJJ3TI+HaN1ZP00b4hTckq/o e8cr5a+kQDPaueivLAADbTrqXeJ6ExfY/H9vw3fXoqLOUJwf2sUoNiq/Eunu0zdH GwrgBWs= -----END CERTIFICATE-----Generated at Wed Mar 27 13:24:16 2024 by rpki-client on console-fra.rpki-client.org