$ rpki-client -vvf rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/007AE4426C9311EEBEA0EB63C4F9AE02.roa File: 007AE4426C9311EEBEA0EB63C4F9AE02.roa (raw, json) Hash identifier: GQbESOYUtUaZ94Yc1FDzYQHcOOIJVDWv/UCKcDQ3h8E= Subject key identifier: CD:67:11:CD:FA:FD:75:19:C3:8B:9F:7C:88:D4:CE:D2:18:8F:CE:7A Certificate issuer: /CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3 Certificate serial: 3A Authority key identifier: 82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/007AE4426C9311EEBEA0EB63C4F9AE02.roa Signing time: Wed 17 Jan 2024 21:19:24 +0000 ROA not before: Wed 17 Jan 2024 21:19:24 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 135403 IP address blocks: 103.180.48.0/23 maxlen: 23 103.180.48.0/24 maxlen: 24 103.180.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3 Validity Not Before: Jan 17 21:19:24 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65a8445c-9f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:51:f9:66:17:51:1f:e0:e2:ee:1d:ad:41:64: 84:df:bf:04:4d:6d:6f:82:db:1a:df:f7:74:6a:3c: c9:f4:00:6d:c9:ae:ab:46:b4:85:83:ca:72:ec:e1: 29:4f:03:84:6e:1b:a3:86:da:54:2b:4d:6d:e1:89: 55:6a:95:5b:8c:e0:0c:3d:fd:b2:79:3f:e1:90:92: 3a:d2:cb:65:46:37:d1:a0:98:63:51:c3:81:e6:ea: f9:f7:f0:5f:31:3b:6a:5d:b9:fe:28:67:ef:c0:a3: 42:cd:7c:8b:d5:07:a7:8e:b5:43:52:e8:5b:cb:c1: 10:8b:6a:39:db:e0:30:0a:79:9f:85:37:f5:ad:55: 2b:63:11:1f:fb:64:9b:fb:01:e9:46:10:4b:be:d3: 88:f3:66:c9:c9:3b:df:78:cf:6c:8d:fe:8c:98:9a: 0d:e9:47:a9:c0:7a:9a:b6:7a:2f:8c:77:fd:15:89: b0:3b:0e:48:3d:cc:0e:de:f8:e9:f5:a6:8f:34:3e: 36:c4:f7:12:e9:c3:c7:1c:4a:92:f0:22:88:56:f5: 90:18:39:d8:75:41:e3:91:39:00:69:f3:53:59:9d: c1:d0:4a:12:08:1c:00:6a:ec:92:09:c0:61:20:59: 39:48:23:3c:4f:e4:a6:e5:4e:35:38:e2:92:40:6b: 70:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:67:11:CD:FA:FD:75:19:C3:8B:9F:7C:88:D4:CE:D2:18:8F:CE:7A X509v3 Authority Key Identifier: keyid:82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/007AE4426C9311EEBEA0EB63C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.180.48.0/23 Signature Algorithm: sha256WithRSAEncryption 04:93:45:f6:8a:9e:dd:16:61:9f:5e:fb:fc:25:63:b5:1b:1e: 1e:02:83:42:3e:12:ed:f7:e4:9d:9c:08:21:a0:a6:82:a8:e0: fa:e9:80:17:7b:1c:84:9f:97:55:9a:06:65:df:57:36:d5:d3: 76:d6:0a:58:08:ec:d9:5f:24:1c:0e:60:ab:3a:18:3d:33:15: 07:cb:6e:9b:80:1e:2d:e1:73:5c:2c:c0:d9:f1:59:8b:1e:e0: 71:1d:1b:c5:dd:e0:3c:bf:fc:b3:46:57:d2:43:f1:58:6a:ca: 58:f3:c7:f0:5d:29:b2:55:d3:5b:86:b3:5a:34:ea:f0:08:a7: 8d:2b:a1:65:6e:d7:15:ef:bb:6b:e3:73:63:06:e8:43:2f:52: d9:b5:f0:01:f1:b4:a2:6f:a5:b2:e8:f6:99:a3:45:ab:bf:a6: db:41:93:6a:10:c2:08:20:53:65:96:8e:88:b4:c6:1d:1e:78: e3:20:c0:4b:0b:c7:83:49:6f:8d:e8:8e:03:bf:e5:46:62:cf: 07:20:86:3f:e9:f7:0e:72:10:e3:42:52:46:ee:26:26:40:66: c2:0e:dc:3d:cc:68:f2:05:43:cd:90:2b:06:49:7c:ca:39:32: eb:ae:1d:33:38:d2:53:0e:99:75:14:42:8f:1b:b6:8d:a7:ba: be:9e:10:52 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NDc4ODExMC8GA1UEBRMoODIwOUZERjM5QUYwMkMzQjlBRTUwM0YyMjVENzQ3RTY3 QUEzQ0RGMzAeFw0yNDAxMTcyMTE5MjRaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY1YTg0NDVjLTlmMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEUflmF1Ef4OLuHa1BZITfvwRNbW+C2xrf93RqPMn0AG3JrqtGtIWDynLs4SlP A4RuG6OG2lQrTW3hiVVqlVuM4Aw9/bJ5P+GQkjrSy2VGN9GgmGNRw4Hm6vn38F8x O2pduf4oZ+/Ao0LNfIvVB6eOtUNS6FvLwRCLajnb4DAKeZ+FN/WtVStjER/7ZJv7 AelGEEu+04jzZsnJO994z2yN/oyYmg3pR6nAepq2ei+Md/0VibA7Dkg9zA7e+On1 po80PjbE9xLpw8ccSpLwIohW9ZAYOdh1QeOROQBp81NZncHQShIIHABq7JIJwGEg WTlIIzxP5KblTjU44pJAa3AvAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUzWcRzfr9 dRnDi598iNTO0hiPznowHwYDVR0jBBgwFoAUggn985rwLDua5QPyJddH5nqjzfMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0Nzg4LzM3RjAxQjFBNkM5 MTExRUVBNTYwN0IyOUM0RjlBRTAyL2dnbjk4NXJ3TER1YTVRUHlKZGRINW5xanpm TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ2duOTg1cndMRHVhNVFQeUpkZEg1bnFqemZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDc4OC8zN0YwMUIxQTZDOTExMUVFQTU2MDdCMjlDNEY5QUUwMi8wMDdBRTQ0MjZD OTMxMUVFQkVBMEVCNjNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWe0MDANBgkqhkiG9w0BAQsFAAOCAQEABJNF9oqe3RZhn177 /CVjtRseHgKDQj4S7ffknZwIIaCmgqjg+umAF3schJ+XVZoGZd9XNtXTdtYKWAjs 2V8kHA5gqzoYPTMVB8tum4AeLeFzXCzA2fFZix7gcR0bxd3gPL/8s0ZX0kPxWGrK WPPH8F0pslXTW4azWjTq8AinjSuhZW7XFe+7a+NzYwboQy9S2bXwAfG0om+lsuj2 maNFq7+m20GTahDCCCBTZZaOiLTGHR544yDASwvHg0lvjeiOA7/lRmLPByCGP+n3 DnIQ40JSRu4mJkBmwg7cPcxo8gVDzZArBkl8yjky664dMzjSUw6ZdRRCjxu2jae6 vp4QUg== -----END CERTIFICATE-----Generated at Sat Jun 1 11:14:27 2024 by rpki-client on console-fra.rpki-client.org