$ rpki-client -vvf rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/8109A2E65EA111EA879CA66DC4F9AE02.roa File: 8109A2E65EA111EA879CA66DC4F9AE02.roa (raw, json) Hash identifier: o3CpPx5HlaikS1syR+TkMDr+suz5m810ICzOqnyhfhs= Subject key identifier: FB:B2:E2:93:FB:BE:F6:B9:82:42:62:F4:F1:6A:18:D8:D0:E8:2B:1B Certificate issuer: /CN=A914397B/serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058 Certificate serial: 09A2 Authority key identifier: B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/8109A2E65EA111EA879CA66DC4F9AE02.roa Signing time: Tue 02 Apr 2024 21:29:45 +0000 ROA not before: Tue 02 Apr 2024 21:29:45 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 135124 IP address blocks: 103.135.172.0/22 maxlen: 22 103.135.172.0/23 maxlen: 23 103.135.172.0/24 maxlen: 24 103.135.173.0/24 maxlen: 24 103.135.174.0/23 maxlen: 23 103.135.174.0/24 maxlen: 24 103.135.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 21:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2466 (0x9a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914397B/serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058 Validity Not Before: Apr 2 21:29:45 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660c78c9-d7b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:be:18:26:dd:b1:ea:d3:48:ea:96:0e:a1:8f: cc:2e:2f:21:6f:ef:8b:ab:30:39:6c:c2:9d:1b:d5: 88:fa:a8:f6:f5:c5:18:db:51:49:53:02:a9:f5:2b: f5:11:1f:e3:76:d5:8f:13:35:69:91:58:99:99:b0: ce:28:e3:d0:14:54:67:e4:e6:dd:bc:cb:df:4a:c3: e8:65:b1:76:0d:e8:97:ab:3e:30:e0:46:22:03:06: d3:27:1a:35:8d:88:ab:fc:b6:b7:6f:f8:c4:09:a2: 90:8f:d1:89:ea:ec:1e:27:70:e3:1b:5f:ed:5f:1e: 46:2d:1b:fa:62:9a:3b:ec:f4:63:f2:1f:87:a3:1f: 10:93:a6:28:8a:40:1c:ac:fc:20:2a:5f:b2:50:7b: 76:b4:cb:34:63:23:88:d7:12:d6:15:83:02:4a:aa: bc:8d:d9:1f:b0:07:9c:9b:7b:60:92:fa:14:53:3d: 6f:b1:96:66:4e:e5:3c:77:f9:54:c0:78:1a:a7:f4: b9:27:0a:2c:6c:6d:87:9a:db:b3:b0:65:7f:18:29: 1c:43:d6:3d:ae:3f:bf:43:77:cb:99:e0:71:07:47: c9:9f:0a:a8:64:e0:d2:11:1d:86:45:27:c6:b9:eb: 0e:08:99:e8:fc:c8:0f:da:a6:66:6e:ae:09:a5:6a: f4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B2:E2:93:FB:BE:F6:B9:82:42:62:F4:F1:6A:18:D8:D0:E8:2B:1B X509v3 Authority Key Identifier: keyid:B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/8109A2E65EA111EA879CA66DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.135.172.0/22 Signature Algorithm: sha256WithRSAEncryption 06:3f:fd:a7:33:8d:e1:21:fe:70:ce:58:d9:f0:bc:62:de:3e: 5c:20:b4:e4:35:23:f8:c5:b9:41:ae:95:a9:2b:77:e1:a2:6b: 34:82:a7:07:8a:ca:cc:c1:f6:f1:77:7c:c2:a0:35:f5:40:93: d7:1b:7f:1e:48:c7:35:48:1c:6d:84:c2:b6:49:f8:77:a4:a9: c7:71:3b:7b:a4:63:59:36:50:3c:8d:87:5f:5a:81:ac:11:d3: b9:98:1d:8f:17:4a:79:93:7d:76:0f:8f:7c:da:bb:ff:50:fb: ab:f9:8d:89:28:bd:c3:a6:12:3c:e7:f8:00:d5:0e:7e:d0:4b: 8a:5d:c6:73:f2:9f:46:00:2f:cd:2a:b2:f3:ca:af:16:1d:a3: 07:7a:34:78:2e:5c:87:a4:df:ce:f3:8e:10:24:52:9c:9d:9b: 70:36:ee:4f:d2:c3:86:43:21:52:f4:89:88:d6:a0:05:98:ab: 08:95:e0:4e:b3:27:44:2b:ab:46:ed:0c:39:79:6f:b2:74:e5: a5:c4:d9:a3:b6:b8:de:14:b1:47:2c:b3:4e:8e:18:40:71:ea: d9:05:3e:7a:55:14:a9:ec:a2:64:b8:dc:9e:d5:91:a5:93:74: 0a:20:93:ce:97:82:73:89:30:c2:1b:4a:31:2e:7b:88:26:63: 56:4d:1b:b1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM5N0IxMTAvBgNVBAUTKEIyQkE0RDI3NUE0OThGQjQ2NDZDN0JDMDZFMjYyM0Ux NkJFNzkwNTgwHhcNMjQwNDAyMjEyOTQ1WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjBjNzhjOS1kN2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv74YJt2x6tNI6pYOoY/MLi8hb++LqzA5bMKdG9WI+qj29cUY21FJUwKp9Sv1 ER/jdtWPEzVpkViZmbDOKOPQFFRn5ObdvMvfSsPoZbF2DeiXqz4w4EYiAwbTJxo1 jYir/La3b/jECaKQj9GJ6uweJ3DjG1/tXx5GLRv6Ypo77PRj8h+Hox8Qk6YoikAc rPwgKl+yUHt2tMs0YyOI1xLWFYMCSqq8jdkfsAecm3tgkvoUUz1vsZZmTuU8d/lU wHgap/S5JwosbG2HmtuzsGV/GCkcQ9Y9rj+/Q3fLmeBxB0fJnwqoZODSER2GRSfG uesOCJno/MgP2qZmbq4JpWr0owIDAQABo4IClTCCApEwHQYDVR0OBBYEFPuy4pP7 vva5gkJi9PFqGNjQ6CsbMB8GA1UdIwQYMBaAFLK6TSdaSY+0ZGx7wG4mI+Fr55BY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mzk3Qi8wRTA0MDFBMjVF QTAxMUVBOUEyNjQ2NkJDNEY5QUUwMi9zcnBOSjFwSmo3UmtiSHZBYmlZajRXdm5r RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NycE5KMXBKajdSa2JIdkFiaVlqNFd2bmtGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDM5N0IvMEUwNDAxQTI1RUEwMTFFQTlBMjY0NjZCQzRGOUFFMDIvODEwOUEyRTY1 RUExMTFFQTg3OUNBNjZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnh6wwDQYJKoZIhvcNAQELBQADggEBAAY//aczjeEh/nDO WNnwvGLePlwgtOQ1I/jFuUGulakrd+GiazSCpweKyszB9vF3fMKgNfVAk9cbfx5I xzVIHG2EwrZJ+HekqcdxO3ukY1k2UDyNh19agawR07mYHY8XSnmTfXYPj3zau/9Q +6v5jYkovcOmEjzn+ADVDn7QS4pdxnPyn0YAL80qsvPKrxYdowd6NHguXIek387z jhAkUpydm3A27k/Sw4ZDIVL0iYjWoAWYqwiV4E6zJ0Qrq0btDDl5b7J05aXE2aO2 uN4UsUcss06OGEBx6tkFPnpVFKnsomS43J7VkaWTdAogk86XgnOJMMIbSjEue4gm Y1ZNG7E= -----END CERTIFICATE-----Generated at Fri May 31 22:13:03 2024 by rpki-client on console-fra.rpki-client.org