$ rpki-client -vvf rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/C420EBE06EC911EC8A5A940AC4F9AE02.roa File: C420EBE06EC911EC8A5A940AC4F9AE02.roa (raw, json) Hash identifier: 7M33YTa8Ps11HunXEcyKgTV4o/04RKVc8VqGhI0g1ng= Subject key identifier: E8:AD:CF:BC:1F:86:92:98:44:D2:21:9D:D0:87:14:8C:77:FF:6D:BC Certificate issuer: /CN=A9122373/serialNumber=4A28651A94AC639F6AB132474D31EB0DFCE6DC79 Certificate serial: 03EB Authority key identifier: 4A:28:65:1A:94:AC:63:9F:6A:B1:32:47:4D:31:EB:0D:FC:E6:DC:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/C420EBE06EC911EC8A5A940AC4F9AE02.roa Signing time: Fri 15 Mar 2024 02:04:20 +0000 ROA not before: Fri 15 Mar 2024 02:04:20 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 137433 IP address blocks: 103.108.116.0/24 maxlen: 24 103.114.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.crl rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 03:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1003 (0x3eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122373/serialNumber=4A28651A94AC639F6AB132474D31EB0DFCE6DC79 Validity Not Before: Mar 15 02:04:20 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65f3aca4-375c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a7:b2:5f:90:55:c8:12:01:ac:c6:7b:92:32: bb:2b:42:6f:fc:50:e4:4b:30:1d:47:ed:08:06:cd: 5d:ac:31:98:f8:89:ba:0e:a1:40:8a:bc:af:2a:9f: e6:1d:30:7e:11:a5:36:ea:5e:c1:2b:91:30:f6:da: 58:fa:ae:64:08:09:8f:8d:d3:78:ff:4e:e8:d0:92: 26:fd:c5:65:ad:e2:ef:33:46:03:0d:f7:20:1c:dd: ea:cc:21:4e:39:1b:97:ac:29:bc:2a:c4:dc:90:57: 81:35:87:b6:b5:bb:a9:3c:16:72:bf:7a:6f:63:81: fe:b1:25:09:76:30:d3:ae:df:8e:68:df:12:01:63: 40:ce:39:e2:b6:27:8f:94:87:51:2a:c7:a6:08:df: a7:74:d7:0e:7e:f0:18:a0:e4:47:ab:be:64:f0:97: d5:f6:c6:fd:d6:25:30:e6:f6:bf:69:95:9d:9b:42: 83:26:26:6c:ed:ac:c0:26:6f:1a:8c:9b:b4:ec:89: 0c:b4:f5:27:a8:1d:34:78:1d:c4:87:ac:c9:86:e6: 0e:32:7e:74:f9:e9:4f:29:15:2a:96:c6:3a:98:aa: f1:18:56:dd:bd:f3:62:5e:50:7f:ef:8f:79:f6:91: f4:81:75:86:cb:d3:bd:e7:63:0a:e9:c0:d1:3b:5f: 41:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AD:CF:BC:1F:86:92:98:44:D2:21:9D:D0:87:14:8C:77:FF:6D:BC X509v3 Authority Key Identifier: keyid:4A:28:65:1A:94:AC:63:9F:6A:B1:32:47:4D:31:EB:0D:FC:E6:DC:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/C420EBE06EC911EC8A5A940AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.108.116.0/24 103.114.206.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:39:8e:f7:cd:4b:ca:12:0f:1b:4b:95:e2:2f:15:b9:9a:4c: ca:b2:62:83:38:cf:5c:0f:1e:b2:85:26:2f:11:4d:6b:47:bd: 88:dc:56:9f:50:58:c3:80:98:e8:d7:ee:18:b2:ba:c6:e8:70: b2:74:e0:13:39:a2:dd:94:d2:93:ba:16:d9:38:51:4c:86:ea: c8:b8:71:64:7c:11:22:fd:f0:d9:b9:f3:d3:a8:21:28:76:3f: e3:3a:e7:42:35:33:6a:06:77:a6:f1:fa:e7:e7:73:44:36:ea: e2:6d:16:4c:32:3a:17:3d:6b:87:3c:34:6b:21:3f:9c:d7:28: 8c:89:d4:bb:67:15:ab:c6:e0:c5:51:af:58:a9:34:85:09:0e: 06:41:d2:76:eb:b1:db:7f:1e:bc:0c:c2:26:bc:e2:e7:24:9a: 04:bf:04:c2:46:ae:74:72:23:89:9e:fe:7d:20:7c:1d:41:b1: e9:b3:14:db:28:0a:41:b5:1b:16:df:8e:56:54:ff:de:25:40: 94:09:f4:b5:3f:25:e0:9b:89:f6:e6:ff:96:71:35:f1:a1:df: 91:01:da:72:fe:bd:c2:38:f6:48:07:4e:fa:62:f6:a2:b2:60: f0:72:4e:03:ef:07:55:26:16:33:c7:8b:31:4c:39:c9:61:c1: 30:9d:2b:07 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICA+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIzNzMxMTAvBgNVBAUTKDRBMjg2NTFBOTRBQzYzOUY2QUIxMzI0NzREMzFFQjBE RkNFNkRDNzkwHhcNMjQwMzE1MDIwNDIwWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWYzYWNhNC0zNzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzqeyX5BVyBIBrMZ7kjK7K0Jv/FDkSzAdR+0IBs1drDGY+Im6DqFAiryvKp/m HTB+EaU26l7BK5Ew9tpY+q5kCAmPjdN4/07o0JIm/cVlreLvM0YDDfcgHN3qzCFO ORuXrCm8KsTckFeBNYe2tbupPBZyv3pvY4H+sSUJdjDTrt+OaN8SAWNAzjnitieP lIdRKsemCN+ndNcOfvAYoORHq75k8JfV9sb91iUw5va/aZWdm0KDJiZs7azAJm8a jJu07IkMtPUnqB00eB3Eh6zJhuYOMn50+elPKRUqlsY6mKrxGFbdvfNiXlB/7495 9pH0gXWGy9O952MK6cDRO19BeQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOitz7wf hpKYRNIhndCHFIx3/228MB8GA1UdIwQYMBaAFEooZRqUrGOfarEyR00x6w385tx5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjM3My8yQzAwNkJCODJC MkQxMUVDQjg0RTcyNzNDNEY5QUUwMi9TaWhsR3BTc1k1OXFzVEpIVFRIckRmem0z SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NpaGxHcFNzWTU5cXNUSkhUVEhyRGZ6bTNIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjIzNzMvMkMwMDZCQjgyQjJEMTFFQ0I4NEU3MjczQzRGOUFFMDIvQzQyMEVCRTA2 RUM5MTFFQzhBNUE5NDBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnbHQDBABncs4wDQYJKoZIhvcNAQELBQADggEBAB45jvfN S8oSDxtLleIvFbmaTMqyYoM4z1wPHrKFJi8RTWtHvYjcVp9QWMOAmOjX7hiyusbo cLJ04BM5ot2U0pO6Ftk4UUyG6si4cWR8ESL98Nm589OoISh2P+M650I1M2oGd6bx +ufnc0Q26uJtFkwyOhc9a4c8NGshP5zXKIyJ1LtnFavG4MVRr1ipNIUJDgZB0nbr sdt/HrwMwia84uckmgS/BMJGrnRyI4me/n0gfB1BsemzFNsoCkG1GxbfjlZU/94l QJQJ9LU/JeCbifbm/5ZxNfGh35EB2nL+vcI49kgHTvpi9qKyYPByTgPvB1UmFjPH izFMOclhwTCdKwc= -----END CERTIFICATE-----Generated at Sat Jun 1 04:07:21 2024 by rpki-client on console-ams.rpki-client.org