$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/AF95E6D8F2B711EAA1C01744C4F9AE02.roa File: AF95E6D8F2B711EAA1C01744C4F9AE02.roa (raw, json) Hash identifier: vIflsf/fjEByFfGrv1p8P18g4LD7hnN0gdzgdZrpMvI= Subject key identifier: AB:C6:16:7E:EF:E7:D9:6E:EB:B7:96:61:C5:FB:8F:E3:DE:FA:C2:14 Certificate issuer: /CN=A91F17F6/serialNumber=52D5D6FFBDA88F545E51BAF99F7DACE193C06E57 Certificate serial: 064A Authority key identifier: 52:D5:D6:FF:BD:A8:8F:54:5E:51:BA:F9:9F:7D:AC:E1:93:C0:6E:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/AF95E6D8F2B711EAA1C01744C4F9AE02.roa Signing time: Fri 21 Apr 2023 01:20:10 +0000 ROA not before: Fri 21 Apr 2023 01:20:10 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 56229 IP address blocks: 43.231.72.0/24 maxlen: 24 43.231.73.0/24 maxlen: 24 43.231.74.0/24 maxlen: 24 43.231.75.0/24 maxlen: 24 103.3.72.0/24 maxlen: 24 103.3.73.0/24 maxlen: 24 103.3.74.0/24 maxlen: 24 103.3.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.crl rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1610 (0x64a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17F6/serialNumber=52D5D6FFBDA88F545E51BAF99F7DACE193C06E57 Validity Not Before: Apr 21 01:20:10 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=6441e4c9-7d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:96:4f:b2:f3:40:b9:d7:75:17:df:8a:27:76: d5:f4:cd:e3:74:35:ec:28:03:d9:f3:eb:ac:ab:df: 6e:e3:54:ab:20:4d:f5:6f:0c:87:71:a7:af:ae:0c: df:ae:94:1a:d1:fd:56:23:3c:70:d1:2f:ee:43:bf: a7:23:c8:64:d1:4e:8f:3e:e7:b7:7b:6c:c4:d0:59: 0e:86:3e:fc:f9:92:7e:33:8e:8d:81:91:d4:22:b5: f1:57:54:09:24:f9:37:8f:60:2a:26:47:f7:69:59: 59:67:1c:23:28:66:7e:6f:45:31:8a:a4:58:33:70: 3d:c3:1b:4b:e3:bf:f1:70:a4:8a:d8:db:d5:57:bb: 68:b6:8d:a1:c2:3b:b4:09:fe:eb:3f:45:9f:45:a6: 08:8a:26:39:cc:52:3e:c4:61:91:fe:50:d8:03:2b: 7a:d6:84:9a:0b:7e:1c:48:b7:32:5e:ed:cf:8a:b4: 48:e1:2f:c0:05:90:0a:c1:7a:46:ff:e5:39:81:a7: 9f:e0:7e:1f:81:f6:1d:5f:32:0b:b5:d4:b1:d2:af: 99:d1:29:33:68:a3:fd:45:0f:d7:0e:8b:68:92:e9: f4:11:f7:30:3e:4a:86:d0:d1:cd:84:8b:dc:dc:0c: 5a:db:42:84:ab:a4:1a:5a:6a:2e:9b:12:3f:81:b4: 7d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C6:16:7E:EF:E7:D9:6E:EB:B7:96:61:C5:FB:8F:E3:DE:FA:C2:14 X509v3 Authority Key Identifier: keyid:52:D5:D6:FF:BD:A8:8F:54:5E:51:BA:F9:9F:7D:AC:E1:93:C0:6E:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/UtXW_72oj1ReUbr5n32s4ZPAblc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UtXW_72oj1ReUbr5n32s4ZPAblc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17F6/ED93CEE8F2B511EA9A3F6341C4F9AE02/AF95E6D8F2B711EAA1C01744C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.231.72.0/22 103.3.72.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:02:8b:91:92:cd:e6:46:fa:7a:f1:97:71:8d:2a:a8:e9:5e: bc:bb:cb:d4:ff:fb:9f:5e:3e:a2:56:4f:7f:e8:e4:2a:31:31: b3:30:f2:97:25:a6:cb:12:cc:f7:ca:2a:17:96:fb:45:18:55: 28:a7:bf:f1:f1:f9:e1:cd:0c:19:a9:59:3e:84:a2:f8:70:cb: 16:f4:dd:69:76:0e:ee:bc:9e:ac:b2:91:77:ce:8b:86:89:35: 04:43:0b:77:17:81:eb:17:8f:02:25:d7:f6:1f:0c:7a:7b:9c: 34:53:b4:db:78:77:60:5d:bb:72:d4:bf:37:11:00:4c:8f:46: 75:1f:88:ef:04:b1:36:2a:dc:52:5e:56:20:85:5b:8d:c0:6e: 57:33:8c:e4:c5:13:50:22:53:8f:2c:ba:8a:db:f1:7a:13:22: ea:a0:e3:77:c9:b3:a8:bd:ee:1c:ec:c5:f2:71:6d:ab:fe:ab: 35:74:f4:6c:d4:c8:3b:f2:d4:a5:c9:10:67:b4:77:27:40:20: cd:89:eb:4f:3f:f6:3f:73:89:bb:68:c1:30:62:b2:31:c6:36: 38:e3:d7:ff:cb:1b:49:5d:ea:dc:4c:cf:bb:a9:40:d6:46:d1: 5c:12:ef:5b:27:39:62:66:e6:12:12:be:d5:34:7e:f6:2f:d0: 9b:38:fa:d0 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3RjYxMTAvBgNVBAUTKDUyRDVENkZGQkRBODhGNTQ1RTUxQkFGOTlGN0RBQ0Ux OTNDMDZFNTcwHhcNMjMwNDIxMDEyMDEwWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDQxZTRjOS03ZDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0JZPsvNAudd1F9+KJ3bV9M3jdDXsKAPZ8+usq99u41SrIE31bwyHcaevrgzf rpQa0f1WIzxw0S/uQ7+nI8hk0U6PPue3e2zE0FkOhj78+ZJ+M46NgZHUIrXxV1QJ JPk3j2AqJkf3aVlZZxwjKGZ+b0UxiqRYM3A9wxtL47/xcKSK2NvVV7toto2hwju0 Cf7rP0WfRaYIiiY5zFI+xGGR/lDYAyt61oSaC34cSLcyXu3PirRI4S/ABZAKwXpG /+U5gaef4H4fgfYdXzILtdSx0q+Z0SkzaKP9RQ/XDotokun0EfcwPkqG0NHNhIvc 3Axa20KEq6QaWmoumxI/gbR9dQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKvGFn7v 59lu67eWYcX7j+Pe+sIUMB8GA1UdIwQYMBaAFFLV1v+9qI9UXlG6+Z99rOGTwG5X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdGNi9FRDkzQ0VFOEYy QjUxMUVBOUEzRjYzNDFDNEY5QUUwMi9VdFhXXzcyb2oxUmVVYnI1bjMyczRaUEFi bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V0WFdfNzJvajFSZVVicjVuMzJzNFpQQWJsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjE3RjYvRUQ5M0NFRThGMkI1MTFFQTlBM0Y2MzQxQzRGOUFFMDIvQUY5NUU2RDhG MkI3MTFFQUExQzAxNzQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr50gDBAJnA0gwDQYJKoZIhvcNAQELBQADggEBAA4Ci5GS zeZG+nrxl3GNKqjpXry7y9T/+59ePqJWT3/o5CoxMbMw8pclpssSzPfKKheW+0UY VSinv/Hx+eHNDBmpWT6Eovhwyxb03Wl2Du68nqyykXfOi4aJNQRDC3cXgesXjwIl 1/YfDHp7nDRTtNt4d2Bdu3LUvzcRAEyPRnUfiO8EsTYq3FJeViCFW43AblczjOTF E1AiU48suorb8XoTIuqg43fJs6i97hzsxfJxbav+qzV09GzUyDvy1KXJEGe0dydA IM2J608/9j9zibtowTBisjHGNjjj1//LG0ld6txMz7upQNZG0VwS71snOWJm5hIS vtU0fvYv0Js4+tA= -----END CERTIFICATE-----Generated at Sun May 19 00:16:20 2024 by rpki-client on console-fra.rpki-client.org