$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/AB05727AFE8C11EE81FDAB6FC4F9AE02.roa File: AB05727AFE8C11EE81FDAB6FC4F9AE02.roa (raw, json) Hash identifier: ocKjbQ/3Baa9czIVFPuOiDN233xrblHduj0FuSh8Zac= Subject key identifier: B4:EA:AE:F4:F2:D3:4B:E5:1B:6A:74:3C:06:74:22:DA:BD:23:BF:BC Certificate issuer: /CN=A914FA48/serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A Certificate serial: 03 Authority key identifier: 19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/AB05727AFE8C11EE81FDAB6FC4F9AE02.roa Signing time: Fri 19 Apr 2024 20:37:41 +0000 ROA not before: Fri 19 Apr 2024 20:37:41 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 135650 IP address blocks: 103.24.78.0/23 maxlen: 23 103.24.78.0/24 maxlen: 24 103.24.79.0/24 maxlen: 24 2001:df3:b140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FA48/serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A Validity Not Before: Apr 19 20:37:41 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6622d615-550d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ce:01:e3:25:ef:b5:38:7a:b5:1d:5a:61:83: 04:2a:c5:55:66:0f:fe:98:e4:75:b2:14:5f:d4:1c: 52:3b:a4:71:dd:f0:34:2f:af:0b:42:34:9c:2f:96: 15:ed:64:53:20:ba:21:6f:9c:a9:c5:d5:a7:f9:05: 0f:06:ee:0a:0d:fa:a2:df:b8:68:b6:52:58:c4:ee: 54:39:64:d8:f2:0d:20:e5:ff:bc:8d:f0:08:67:bb: 3f:19:bc:6e:1e:8a:de:8d:16:5b:5e:82:b1:95:26: e5:6c:38:0d:78:34:d7:a5:5a:62:e8:6c:ff:f7:87: a6:21:5f:07:67:3c:b0:5b:c6:13:9c:87:76:0b:be: 2e:d9:28:dc:ef:85:6c:32:26:0a:40:86:44:4c:84: 01:b6:65:be:6e:f9:39:76:8e:e0:f6:75:92:71:ea: 4b:a0:13:ae:75:1c:2a:3a:d0:9d:b3:71:5f:08:5b: 62:bc:66:cc:95:bd:be:be:f0:6d:51:3a:a4:c5:44: a6:84:c9:88:1c:dd:b1:48:e3:d6:de:dd:f8:b0:2b: 9e:5b:22:f9:ba:df:dc:be:53:82:f8:80:bd:4d:47: a1:09:c3:a0:ca:86:91:f0:85:8e:c6:cf:bf:98:5c: 43:57:46:36:2c:17:55:17:87:53:d9:f6:f7:eb:ed: eb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:EA:AE:F4:F2:D3:4B:E5:1B:6A:74:3C:06:74:22:DA:BD:23:BF:BC X509v3 Authority Key Identifier: keyid:19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/AB05727AFE8C11EE81FDAB6FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.24.78.0/23 IPv6: 2001:df3:b140::/48 Signature Algorithm: sha256WithRSAEncryption c6:3b:21:d3:c1:57:4a:c6:68:9f:e7:e1:91:04:0f:3b:c9:6e: 4e:58:3d:d4:01:30:1f:57:ed:84:fe:75:93:11:59:d5:3f:12: 50:5e:73:28:e0:15:62:05:a3:48:36:9e:83:58:30:5d:2c:38: 82:0a:8c:ce:a8:dc:bf:e4:85:cb:a7:ce:f8:d4:40:aa:00:15: 26:de:2b:1c:04:63:1f:af:fa:26:0e:70:cc:e4:20:80:c1:19: e0:3f:b3:3e:dd:2b:36:6b:2c:98:10:c8:3f:bd:b7:08:62:4c: 94:78:5e:a2:2e:6f:71:a2:88:da:02:df:f4:cf:89:93:e3:35: ce:9c:95:e6:60:26:9b:4d:56:59:7b:df:fa:d7:60:6a:54:99: 30:7b:41:e6:25:dc:2c:05:58:3a:f1:69:3e:0e:12:87:5a:7e: 17:b8:de:92:ea:90:f1:b1:8c:bd:da:cb:37:82:1b:e3:ef:ff: 08:71:47:3c:d7:67:78:43:69:d3:51:9d:d6:2c:00:26:92:61: cd:70:9c:47:61:8c:b8:c0:d4:45:eb:8f:bc:7d:dc:06:77:8a: 12:0e:a4:6c:21:69:cc:3c:6e:b7:de:13:74:53:37:9d:88:02: f8:e2:62:56:4c:d8:db:29:22:be:91:5e:19:92:2c:b5:7c:fb: 33:3e:45:a4 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RkE0ODExMC8GA1UEBRMoMTk3OTRGM0NBQTM3NTUyN0JBMEZEMzM0NDgwQzdFMDMz OEU3OUUyQTAeFw0yNDA0MTkyMDM3NDFaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MjJkNjE1LTU1MGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD0zgHjJe+1OHq1HVphgwQqxVVmD/6Y5HWyFF/UHFI7pHHd8DQvrwtCNJwvlhXt ZFMguiFvnKnF1af5BQ8G7goN+qLfuGi2UljE7lQ5ZNjyDSDl/7yN8Ahnuz8ZvG4e it6NFltegrGVJuVsOA14NNelWmLobP/3h6YhXwdnPLBbxhOch3YLvi7ZKNzvhWwy JgpAhkRMhAG2Zb5u+Tl2juD2dZJx6kugE651HCo60J2zcV8IW2K8ZsyVvb6+8G1R OqTFRKaEyYgc3bFI49be3fiwK55bIvm639y+U4L4gL1NR6EJw6DKhpHwhY7Gz7+Y XENXRjYsF1UXh1PZ9vfr7eupAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUtOqu9PLT S+UbanQ8BnQi2r0jv7wwHwYDVR0jBBgwFoAUGXlPPKo3VSe6D9M0SAx+Azjnniow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRGQTQ4L0I5RTJBQ0EwRkU1 NDExRUU5NjE5QTMxNEM0RjlBRTAyL0dYbFBQS28zVlNlNkQ5TTBTQXgtQXpqbm5p by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR1hsUFBLbzNWU2U2RDlNMFNBeC1BempubmlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkE0OC9COUUyQUNBMEZFNTQxMUVFOTYxOUEzMTRDNEY5QUUwMi9BQjA1NzI3QUZF OEMxMUVFODFGREFCNkZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAWcYTjAPBAIAAjAJAwcAIAEN87FAMA0GCSqGSIb3DQEBCwUA A4IBAQDGOyHTwVdKxmif5+GRBA87yW5OWD3UATAfV+2E/nWTEVnVPxJQXnMo4BVi BaNINp6DWDBdLDiCCozOqNy/5IXLp8741ECqABUm3iscBGMfr/omDnDM5CCAwRng P7M+3Ss2ayyYEMg/vbcIYkyUeF6iLm9xoojaAt/0z4mT4zXOnJXmYCabTVZZe9/6 12BqVJkwe0HmJdwsBVg68Wk+DhKHWn4XuN6S6pDxsYy92ss3ghvj7/8IcUc812d4 Q2nTUZ3WLAAmkmHNcJxHYYy4wNRF64+8fdwGd4oSDqRsIWnMPG633hN0UzediAL4 4mJWTNjbKSK+kV4Zkiy1fPszPkWk -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:13 2024 by rpki-client on console-ams.rpki-client.org