$ rpki-client -vvf rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/7B68D8F2A3E811EAB397F675C4F9AE02.roa File: 7B68D8F2A3E811EAB397F675C4F9AE02.roa (raw, json) Hash identifier: Nx148Hia3mtZBzFRIhXoxgU+sJRRy0O36TW1Esz7mxI= Subject key identifier: ED:9D:F8:5A:6F:57:23:FC:B9:40:42:11:F5:18:55:39:06:10:B7:74 Certificate issuer: /CN=A911E24A/serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Certificate serial: 0846 Authority key identifier: CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/7B68D8F2A3E811EAB397F675C4F9AE02.roa Signing time: Tue 16 Apr 2024 22:00:32 +0000 ROA not before: Tue 16 Apr 2024 22:00:32 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 38478 IP address blocks: 103.53.224.0/24 maxlen: 24 103.53.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 21:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2118 (0x846) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E24A/serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Validity Not Before: Apr 16 22:00:32 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=661ef500-2cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6e:ee:4d:ed:09:56:16:c6:ec:ab:85:de:68: 89:47:a1:85:dc:8c:1c:84:53:c8:8a:9f:d3:01:31: b8:b9:f8:c5:5d:c9:40:51:94:a1:cd:e0:7c:ba:1f: 5a:ae:ad:40:e0:e5:5a:77:87:b2:39:c6:85:fb:df: 3d:30:23:a6:86:2f:f2:6d:ba:15:99:15:98:5c:a9: c6:28:67:50:4e:b4:9a:82:b5:2a:96:88:6b:14:05: 31:14:5f:6c:41:c5:ea:34:14:b5:8b:aa:ea:92:b8: 28:ba:84:78:ea:99:8e:a1:c8:ba:5b:d4:1a:12:82: 8a:c8:78:9e:c9:4d:32:56:e2:3b:b7:1d:a3:fd:2b: 0e:31:61:3b:ce:a9:7a:30:1d:0f:3e:cf:a6:2d:e9: a8:c5:77:ed:bb:2b:fc:14:49:2f:36:3f:b7:30:5c: b3:23:84:23:89:a0:01:c5:95:f6:f2:88:ff:8a:42: 6b:35:91:67:fe:29:ea:42:34:83:fb:8f:6e:40:99: b4:30:52:c2:d8:76:1e:19:18:7f:5e:f9:7d:a4:40: 1e:6c:eb:d6:26:76:02:55:ed:a4:8e:54:8a:3a:4f: f0:04:77:85:b4:fe:9c:2a:06:99:59:68:4a:2b:82: 48:63:f1:23:69:02:92:e9:90:0f:d0:9b:6c:9b:71: e5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9D:F8:5A:6F:57:23:FC:B9:40:42:11:F5:18:55:39:06:10:B7:74 X509v3 Authority Key Identifier: keyid:CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/7B68D8F2A3E811EAB397F675C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.53.224.0/23 Signature Algorithm: sha256WithRSAEncryption 53:ef:44:f5:ec:fb:a0:d8:d9:9c:95:08:b7:c1:02:e0:5c:32: 74:ad:ee:92:97:d1:f5:06:b0:63:aa:7f:a8:fb:aa:5f:35:eb: 37:b2:c4:89:1a:39:3b:6b:b2:74:b1:5e:ad:1d:61:6c:ef:26: 35:c2:ae:07:a7:90:81:36:10:1a:85:8c:19:4b:f2:cb:6c:16: cb:8d:40:64:45:e7:b4:e0:20:73:55:f9:7d:52:53:36:13:b6: e8:ab:07:e9:b5:81:d3:ae:c1:5a:08:9e:d4:37:c7:f7:97:6d: 4b:8d:54:25:43:66:37:cd:dc:c6:33:07:c0:47:e8:91:0b:38: 69:1a:db:8d:34:7a:24:2e:be:62:cb:ee:4f:74:bf:b3:2e:f7: f9:38:07:37:2e:90:41:61:84:95:e2:f3:7a:b9:bd:2e:57:f0: ef:1a:a0:98:99:5b:96:e5:4a:ea:da:34:cf:a3:94:2f:9a:b7: a0:e3:ef:a3:b8:6c:b7:02:b6:82:03:d2:ce:f8:2e:97:9d:3c: ef:31:bb:bc:97:e5:57:52:b7:f0:2a:ee:8b:64:78:19:3a:56: 38:46:a2:5f:77:9d:73:16:c6:6c:0d:2f:3f:24:c7:37:39:86: 36:fc:4c:46:ca:1f:71:f6:ac:8e:af:11:70:56:95:81:82:5f: aa:3e:e6:96 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUyNEExMTAvBgNVBAUTKENENEZCOTEwRjNFNkY1OUM1OUNFNUFDQzk0MzhFREQw OEQ1NkZDODgwHhcNMjQwNDE2MjIwMDMyWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjFlZjUwMC0yY2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsm7uTe0JVhbG7KuF3miJR6GF3IwchFPIip/TATG4ufjFXclAUZShzeB8uh9a rq1A4OVad4eyOcaF+989MCOmhi/ybboVmRWYXKnGKGdQTrSagrUqlohrFAUxFF9s QcXqNBS1i6rqkrgouoR46pmOoci6W9QaEoKKyHieyU0yVuI7tx2j/SsOMWE7zql6 MB0PPs+mLemoxXftuyv8FEkvNj+3MFyzI4QjiaABxZX28oj/ikJrNZFn/inqQjSD +49uQJm0MFLC2HYeGRh/Xvl9pEAebOvWJnYCVe2kjlSKOk/wBHeFtP6cKgaZWWhK K4JIY/EjaQKS6ZAP0Jtsm3HlSQIDAQABo4IClTCCApEwHQYDVR0OBBYEFO2d+Fpv VyP8uUBCEfUYVTkGELd0MB8GA1UdIwQYMBaAFM1PuRDz5vWcWc5azJQ47dCNVvyI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTI0QS82MzVDMDExOEEz RTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTlaeFp6bHJNbERqdDBJMVdf SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVLTVFUFBtOVp4Wnpsck1sRGp0MEkxV19JZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUUyNEEvNjM1QzAxMThBM0U3MTFFQUE2QTlEOTc0QzRGOUFFMDIvN0I2OEQ4RjJB M0U4MTFFQUIzOTdGNjc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnNeAwDQYJKoZIhvcNAQELBQADggEBAFPvRPXs+6DY2ZyV CLfBAuBcMnSt7pKX0fUGsGOqf6j7ql816zeyxIkaOTtrsnSxXq0dYWzvJjXCrgen kIE2EBqFjBlL8stsFsuNQGRF57TgIHNV+X1SUzYTtuirB+m1gdOuwVoIntQ3x/eX bUuNVCVDZjfN3MYzB8BH6JELOGka2400eiQuvmLL7k90v7Mu9/k4BzcukEFhhJXi 83q5vS5X8O8aoJiZW5blSuraNM+jlC+at6Dj76O4bLcCtoID0s74LpedPO8xu7yX 5VdSt/Aq7otkeBk6VjhGol93nXMWxmwNLz8kxzc5hjb8TEbKH3H2rI6vEXBWlYGC X6o+5pY= -----END CERTIFICATE-----Generated at Thu Jun 6 22:35:25 2024 by rpki-client on console-fra.rpki-client.org