$ rpki-client -vvf rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/0CE4B8C6474911EEA995D74FC4F9AE02.roa File: 0CE4B8C6474911EEA995D74FC4F9AE02.roa (raw, json) Hash identifier: xolDRhSXt2WA8L+8gCDvdLVCLWfk24OE5JGsb3rd3QE= Subject key identifier: 70:62:F6:49:0F:35:5D:1A:42:1D:F4:A6:EB:BA:DA:76:9C:E0:F0:24 Certificate issuer: /CN=A913500A/serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A Certificate serial: 4E Authority key identifier: 68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/0CE4B8C6474911EEA995D74FC4F9AE02.roa Signing time: Tue 23 Jan 2024 06:48:30 +0000 ROA not before: Tue 23 Jan 2024 06:48:30 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 150729 IP address blocks: 103.73.184.0/23 maxlen: 23 103.73.184.0/24 maxlen: 24 103.73.185.0/24 maxlen: 24 2001:df1:dac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913500A/serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A Validity Not Before: Jan 23 06:48:30 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65af613e-a57a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f4:2d:50:5c:34:dc:3c:6d:ae:22:04:a1:50: 79:1f:f6:15:8b:f6:36:28:92:40:fe:1a:af:21:5d: c0:3f:e8:f2:26:ea:69:2e:7e:66:00:fc:69:ba:37: 33:ee:b9:1f:c2:0c:5b:3b:d0:e3:60:00:d9:b7:12: e8:5d:fe:49:30:cc:60:9d:34:b9:ea:d6:ae:2d:de: bc:71:8a:9d:8a:61:29:8c:c6:90:d5:f7:02:2d:e2: 5f:12:31:69:2e:f7:6b:5b:17:34:56:14:35:1b:62: b7:4d:4f:d3:57:e6:3f:c3:4d:9a:af:7e:8f:f1:e5: c8:a3:8b:a0:cc:09:87:d4:7b:4f:d9:65:81:64:5b: 72:33:53:d3:2e:b8:c1:97:1a:42:30:a8:21:3f:1a: d7:45:57:f3:d0:21:79:95:a6:43:4a:e9:b6:29:36: 07:39:e5:bc:bb:68:1b:ac:2c:3c:ca:a7:9f:15:72: 3f:08:08:13:2b:90:65:68:3f:45:5d:01:8c:1b:ec: 61:eb:80:5e:b2:09:4e:82:57:a5:4a:50:20:8b:c2: 6c:f3:10:09:18:52:85:55:9c:3c:a3:18:7b:fe:7c: 10:52:82:73:16:49:99:83:65:3d:63:37:e9:91:e2: 9c:60:3e:a9:52:58:a9:92:cc:68:db:b5:fd:d4:fa: 35:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:62:F6:49:0F:35:5D:1A:42:1D:F4:A6:EB:BA:DA:76:9C:E0:F0:24 X509v3 Authority Key Identifier: keyid:68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/0CE4B8C6474911EEA995D74FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.73.184.0/23 IPv6: 2001:df1:dac0::/48 Signature Algorithm: sha256WithRSAEncryption 1a:51:e4:56:00:6b:86:4f:40:68:a4:54:fb:62:5c:ce:e1:bb: 0c:b7:96:44:b4:61:13:85:d7:e6:21:7c:f3:73:90:49:56:ef: 5a:82:d3:20:ee:21:db:a8:66:ba:6e:01:a9:54:8e:b5:83:ee: bc:ce:93:9d:b1:cc:8d:07:d6:49:cf:18:a4:fe:f7:ce:68:ba: 5a:a6:a4:ba:8a:57:3d:06:b5:8e:4b:fb:8d:55:84:91:58:f0: 1a:50:e6:7b:8d:9f:7e:de:02:c5:46:33:a8:04:b4:45:55:7a: 82:cf:60:4d:d2:af:52:17:05:15:d3:01:55:c3:dc:8e:c6:c6: 6d:a4:e2:da:6a:ca:29:4d:b5:0a:b5:cd:6e:65:87:49:9e:e4: 3a:cf:22:87:fd:41:7f:03:30:16:e3:c0:48:a6:57:79:c4:af: 68:ac:84:a8:19:9a:57:88:d5:dc:c2:33:56:59:93:a7:da:82: 84:42:5d:1c:98:87:67:a7:99:6d:ea:28:85:d3:f1:6b:18:20: 81:fd:07:1e:1e:e9:a2:52:fc:21:d1:ab:e3:bc:3f:1b:4f:e7: c5:9a:2c:94:fc:21:2e:f3:73:ca:df:52:44:82:e1:67:e6:ab: 7e:a7:54:4d:94:64:dc:63:42:73:18:a1:dd:1f:2e:5e:12:ef: f5:ea:a6:76 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NTAwQTExMC8GA1UEBRMoNjg0NUEzNTcwNzU3RTZCRjJDMDQ4NUFDMjE3ODlCRkY1 MDA1MUU5QTAeFw0yNDAxMjMwNjQ4MzBaFw0yNTAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1YWY2MTNlLWE1N2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCi9C1QXDTcPG2uIgShUHkf9hWL9jYokkD+Gq8hXcA/6PIm6mkufmYA/Gm6NzPu uR/CDFs70ONgANm3Euhd/kkwzGCdNLnq1q4t3rxxip2KYSmMxpDV9wIt4l8SMWku 92tbFzRWFDUbYrdNT9NX5j/DTZqvfo/x5ciji6DMCYfUe0/ZZYFkW3IzU9MuuMGX GkIwqCE/GtdFV/PQIXmVpkNK6bYpNgc55by7aBusLDzKp58Vcj8ICBMrkGVoP0Vd AYwb7GHrgF6yCU6CV6VKUCCLwmzzEAkYUoVVnDyjGHv+fBBSgnMWSZmDZT1jN+mR 4pxgPqlSWKmSzGjbtf3U+jUXAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUcGL2SQ81 XRpCHfSm67radpzg8CQwHwYDVR0jBBgwFoAUaEWjVwdX5r8sBIWsIXib/1AFHpow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1MDBBL0NDQTNFQTkyNDcz RjExRUU4N0Y0MEE3RUM0RjlBRTAyL2FFV2pWd2RYNXI4c0JJV3NJWGliXzFBRkhw by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYUVXalZ3ZFg1cjhzQklXc0lYaWJfMUFGSHBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAwQS9DQ0EzRUE5MjQ3M0YxMUVFODdGNDBBN0VDNEY5QUUwMi8wQ0U0QjhDNjQ3 NDkxMUVFQTk5NUQ3NEZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAWdJuDAPBAIAAjAJAwcAIAEN8drAMA0GCSqGSIb3DQEBCwUA A4IBAQAaUeRWAGuGT0BopFT7YlzO4bsMt5ZEtGEThdfmIXzzc5BJVu9agtMg7iHb qGa6bgGpVI61g+68zpOdscyNB9ZJzxik/vfOaLpapqS6ilc9BrWOS/uNVYSRWPAa UOZ7jZ9+3gLFRjOoBLRFVXqCz2BN0q9SFwUV0wFVw9yOxsZtpOLaasopTbUKtc1u ZYdJnuQ6zyKH/UF/AzAW48BIpld5xK9orISoGZpXiNXcwjNWWZOn2oKEQl0cmIdn p5lt6iiF0/FrGCCB/QceHumiUvwh0avjvD8bT+fFmiyU/CEu83PK31JEguFn5qt+ p1RNlGTcY0JzGKHdHy5eEu/16qZ2 -----END CERTIFICATE-----Generated at Sat Jun 1 09:10:29 2024 by rpki-client on console-fra.rpki-client.org