$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/D4D3CCDAC53811ECB4EAFD1AC4F9AE02.roa File: D4D3CCDAC53811ECB4EAFD1AC4F9AE02.roa (raw, json) Hash identifier: y5qT01H1BREmYiDlGr8J+8ElXF3KvSh7J+XIUQSF/hY= Subject key identifier: 94:83:00:18:D1:B8:BF:37:84:EB:98:79:8C:C9:4A:8C:84:F0:24:61 Certificate issuer: /CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Certificate serial: 0220 Authority key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/D4D3CCDAC53811ECB4EAFD1AC4F9AE02.roa Signing time: Wed 29 Nov 2023 03:34:07 +0000 ROA not before: Wed 29 Nov 2023 03:34:07 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 132446 IP address blocks: 43.241.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Validity Not Before: Nov 29 03:34:07 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6566b12f-5d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b1:ce:8d:95:a9:d4:80:56:af:8b:8f:8d:7e: 0b:97:00:52:da:01:87:c2:eb:84:e3:0d:fd:ec:ae: e8:0c:8b:8a:6d:67:9e:a5:06:79:cc:6c:4f:26:91: b0:5b:ac:d8:b3:ed:1e:a0:fd:ef:2e:a2:20:c1:32: 91:06:48:df:07:f9:21:13:e7:cd:bd:5f:5d:2d:78: ee:af:36:13:43:05:52:c9:fd:8d:4a:c7:c6:01:0c: 6b:be:86:40:61:33:84:83:01:42:bd:cb:9c:2b:96: 9e:e4:56:31:89:1f:70:95:4f:35:42:22:dd:26:cc: a9:66:8f:d7:c1:0b:9f:91:9c:02:61:c8:43:73:28: b0:a1:20:c7:cd:bf:fe:df:65:59:a7:a0:e5:54:47: 3b:87:70:8b:98:17:ca:38:bc:c4:37:22:ca:c1:7a: 41:71:c0:24:d8:85:2d:a0:ee:80:d5:82:3e:8b:e7: 95:bb:a7:82:c4:0c:c3:4d:5a:96:83:2f:3d:83:9d: 05:06:7a:f5:f0:de:0f:71:28:7d:d1:06:c9:b5:f7: a7:33:3b:58:e7:4f:66:c5:a8:25:86:41:ae:97:8a: bd:16:ec:23:51:5f:d9:02:4c:50:70:de:cd:e9:b6: eb:a8:30:1c:cb:41:7e:5c:fc:2b:29:76:1b:87:bd: 90:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:83:00:18:D1:B8:BF:37:84:EB:98:79:8C:C9:4A:8C:84:F0:24:61 X509v3 Authority Key Identifier: keyid:B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/D4D3CCDAC53811ECB4EAFD1AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.241.252.0/22 Signature Algorithm: sha256WithRSAEncryption 40:a5:8b:e1:dd:c4:65:f2:62:c3:60:94:52:ed:45:86:f7:43: a4:5b:98:a7:a6:2d:7a:53:b2:59:15:7a:28:a5:6b:98:8a:77: 5d:45:11:e7:7a:e9:a5:6e:ca:9f:be:de:b9:8b:ae:dc:25:a5: ad:23:57:d7:83:4e:cb:ae:e8:df:f6:54:d7:a0:07:bf:97:3a: 5a:de:13:52:59:29:63:fa:25:33:9e:5d:7b:16:4c:49:31:e9: f9:ef:a6:63:3a:ba:1d:60:77:27:0b:d5:cc:3b:27:bf:1b:ef: 04:03:65:c8:af:f7:98:1c:63:86:44:c5:2f:de:ee:c1:82:8b: 95:a6:00:4c:84:77:fc:ff:b7:3f:0a:c8:ec:f1:06:e3:d8:d2: 15:2c:39:17:dc:b4:cb:7d:59:8b:41:87:4e:84:10:64:1b:8b: 44:85:cf:b4:7d:42:c5:dc:57:fc:15:85:0a:67:1d:f0:8e:02: 70:44:d1:5a:30:7d:d7:dc:5a:d5:5c:e3:74:07:33:c3:0b:f2: d7:f5:a8:f2:54:7a:ac:52:fb:a8:af:97:e9:32:0b:aa:d1:9c: 7b:b6:95:b1:78:3d:4d:d1:8a:49:7c:4c:4c:6b:db:9a:61:48: ad:6a:37:83:01:23:78:39:84:1d:16:79:90:c4:c5:a7:02:4b: 14:39:a2:5d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0NDYxMTAvBgNVBAUTKEI1RDMzQTdBMzJBNTA4MkQzMzZCNkIwNUI3OTY1RjMw NzQ3MEEyNzYwHhcNMjMxMTI5MDMzNDA3WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY2YjEyZi01ZDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLHOjZWp1IBWr4uPjX4LlwBS2gGHwuuE4w397K7oDIuKbWeepQZ5zGxPJpGw W6zYs+0eoP3vLqIgwTKRBkjfB/khE+fNvV9dLXjurzYTQwVSyf2NSsfGAQxrvoZA YTOEgwFCvcucK5ae5FYxiR9wlU81QiLdJsypZo/XwQufkZwCYchDcyiwoSDHzb/+ 32VZp6DlVEc7h3CLmBfKOLzENyLKwXpBccAk2IUtoO6A1YI+i+eVu6eCxAzDTVqW gy89g50FBnr18N4PcSh90QbJtfenMztY509mxaglhkGul4q9FuwjUV/ZAkxQcN7N 6bbrqDAcy0F+XPwrKXYbh72QpQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJSDABjR uL83hOuYeYzJSoyE8CRhMB8GA1UdIwQYMBaAFLXTOnoypQgtM2trBbeWXzB0cKJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ0Ni8yQTFGRjU2RUM1 MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbENDMHphMnNGdDVaZk1IUndv blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RkTTZlaktsQ0MwemEyc0Z0NVpmTUhSd29uWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjE0NDYvMkExRkY1NkVDNTM1MTFFQzhFNUEwMzEzQzRGOUFFMDIvRDREM0NDREFD NTM4MTFFQ0I0RUFGRDFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAIr8fwwDQYJKoZIhvcNAQELBQADggEBAECli+HdxGXyYsNg lFLtRYb3Q6RbmKemLXpTslkVeiila5iKd11FEed66aVuyp++3rmLrtwlpa0jV9eD Tsuu6N/2VNegB7+XOlreE1JZKWP6JTOeXXsWTEkx6fnvpmM6uh1gdycL1cw7J78b 7wQDZciv95gcY4ZExS/e7sGCi5WmAEyEd/z/tz8KyOzxBuPY0hUsORfctMt9WYtB h06EEGQbi0SFz7R9QsXcV/wVhQpnHfCOAnBE0VowfdfcWtVc43QHM8ML8tf1qPJU eqxS+6ivl+kyC6rRnHu2lbF4PU3Rikl8TExr25phSK1qN4MBI3g5hB0WeZDExacC SxQ5ol0= -----END CERTIFICATE-----Generated at Sun May 19 04:22:06 2024 by rpki-client on console-fra.rpki-client.org