$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/7D3B257298C411EC97E3503CC4F9AE02.roa File: 7D3B257298C411EC97E3503CC4F9AE02.roa (raw, json) Hash identifier: ce4ePTxD5Rw6/EXwAE6IKueifUBmCporSH8E9XxekiY= Subject key identifier: B4:D7:83:42:D8:FE:77:10:76:9A:FF:0A:B4:40:07:D0:47:46:D4:81 Certificate issuer: /CN=A915FD1D/serialNumber=3F731363FE4740461A59C88FA767BD8A36EC0DF6 Certificate serial: 0610 Authority key identifier: 3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/7D3B257298C411EC97E3503CC4F9AE02.roa Signing time: Thu 04 Jan 2024 23:41:29 +0000 ROA not before: Thu 04 Jan 2024 23:41:29 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 134455 IP address blocks: 103.160.92.0/23 maxlen: 23 103.160.92.0/24 maxlen: 24 103.160.93.0/24 maxlen: 24 2406:e7c0::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.crl rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1552 (0x610) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FD1D/serialNumber=3F731363FE4740461A59C88FA767BD8A36EC0DF6 Validity Not Before: Jan 4 23:41:29 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65974228-a301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:aa:20:75:52:3b:c6:9b:82:05:8d:d2:02:5e: b1:48:bc:8e:45:dc:24:e3:5c:63:9a:e6:b6:52:8e: 9a:35:87:0e:67:0e:ba:6e:6b:03:d6:aa:17:20:84: 09:e8:96:ed:38:98:03:ba:1f:ee:85:5d:9b:5a:22: 92:32:34:de:b4:41:18:58:33:98:fe:0f:69:87:ca: ed:88:ba:80:a1:4e:2b:cd:49:57:03:6b:4b:1e:6c: 67:03:ee:35:a2:69:2d:66:cb:16:3d:27:7c:59:f9: f5:c6:9c:3d:5e:1f:a7:ec:58:42:35:72:12:70:c2: a7:a8:47:86:68:9e:d5:b1:d2:11:3c:fe:7b:7d:c6: 9c:cb:4c:6a:6f:d2:a8:dd:d6:3e:e2:91:80:c5:e3: c0:2d:9e:94:89:12:a2:d2:e6:af:ba:08:08:87:79: 19:89:b8:39:e3:52:10:19:61:f4:98:c2:d6:1e:dd: 47:18:0e:22:fc:3a:e3:ab:ff:16:c1:8d:06:60:91: 79:6c:1f:f2:80:f0:45:09:5e:e6:f6:48:0f:ed:d8: 5c:8c:6a:e1:16:d6:ad:f8:13:10:ed:25:23:94:86: 04:69:18:57:10:18:a7:03:72:64:18:b3:4d:d5:12: 29:72:b3:5b:13:b6:f6:28:73:d5:10:e9:e6:1c:de: 2f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D7:83:42:D8:FE:77:10:76:9A:FF:0A:B4:40:07:D0:47:46:D4:81 X509v3 Authority Key Identifier: keyid:3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/7D3B257298C411EC97E3503CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.160.92.0/23 IPv6: 2406:e7c0::/32 Signature Algorithm: sha256WithRSAEncryption 70:91:85:8b:c3:bb:d0:fe:ed:0d:70:bb:56:24:e1:22:dc:1f: c2:48:29:70:48:ac:37:f3:0e:51:97:e6:62:9b:da:b1:a6:33: 8f:eb:47:30:8c:31:bb:aa:28:54:a2:f8:94:55:45:a6:fe:e5: 89:35:7b:74:5e:8d:bd:1b:20:d5:cc:f1:da:e5:f5:bc:97:7e: fa:71:0d:49:60:66:b2:e1:47:9a:78:cc:8c:3e:5f:30:8e:c8: 40:f4:af:48:a1:11:84:b9:0e:b8:f8:af:2b:e6:28:61:18:ab: 42:b9:2a:a2:b1:fa:94:26:24:ad:71:65:a1:af:1e:6c:8c:d2: 69:d6:d4:00:7f:5f:f9:f9:46:1e:51:32:e7:d9:66:c7:b6:3e: 19:b8:b3:a9:b0:15:cb:75:d9:b3:a4:e1:e6:0d:1a:f6:63:6a: 07:1c:41:f4:06:41:b3:a9:b7:09:f1:3b:38:dc:aa:8c:8f:5e: e0:be:17:07:91:03:bc:62:cb:c1:4b:32:87:31:fc:7e:b1:18: 60:11:9a:34:c5:48:99:1f:8f:56:81:ee:62:8d:80:f3:55:3f: 8d:91:30:36:19:72:e8:7f:bd:c8:ec:c3:ef:b3:0b:5b:1d:7c: e0:e3:4a:05:75:a8:99:37:57:8d:fc:cd:95:0b:1f:ce:af:b3: 37:95:8b:ef -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEMUQxMTAvBgNVBAUTKDNGNzMxMzYzRkU0NzQwNDYxQTU5Qzg4RkE3NjdCRDhB MzZFQzBERjYwHhcNMjQwMTA0MjM0MTI5WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTk3NDIyOC1hMzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKogdVI7xpuCBY3SAl6xSLyORdwk41xjmua2Uo6aNYcOZw66bmsD1qoXIIQJ 6JbtOJgDuh/uhV2bWiKSMjTetEEYWDOY/g9ph8rtiLqAoU4rzUlXA2tLHmxnA+41 omktZssWPSd8Wfn1xpw9Xh+n7FhCNXIScMKnqEeGaJ7VsdIRPP57fcacy0xqb9Ko 3dY+4pGAxePALZ6UiRKi0uavuggIh3kZibg541IQGWH0mMLWHt1HGA4i/Drjq/8W wY0GYJF5bB/ygPBFCV7m9kgP7dhcjGrhFtat+BMQ7SUjlIYEaRhXEBinA3JkGLNN 1RIpcrNbE7b2KHPVEOnmHN4vbQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFLTXg0LY /ncQdpr/CrRAB9BHRtSBMB8GA1UdIwQYMBaAFD9zE2P+R0BGGlnIj6dnvYo27A32 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkQxRC84QURFMzNGQzQx MkUxMUVCOUE5NzRDMTZDNEY5QUUwMi9QM01UWV81SFFFWWFXY2lQcDJlOWlqYnNE ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AzTVRZXzVIUUVZYVdjaVBwMmU5aWpic0RmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUZEMUQvOEFERTMzRkM0MTJFMTFFQjlBOTc0QzE2QzRGOUFFMDIvN0QzQjI1NzI5 OEM0MTFFQzk3RTM1MDNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnoFwwDQQCAAIwBwMFACQG58AwDQYJKoZIhvcNAQELBQAD ggEBAHCRhYvDu9D+7Q1wu1Yk4SLcH8JIKXBIrDfzDlGX5mKb2rGmM4/rRzCMMbuq KFSi+JRVRab+5Yk1e3Rejb0bINXM8drl9byXfvpxDUlgZrLhR5p4zIw+XzCOyED0 r0ihEYS5Drj4ryvmKGEYq0K5KqKx+pQmJK1xZaGvHmyM0mnW1AB/X/n5Rh5RMufZ Zse2Phm4s6mwFct12bOk4eYNGvZjagccQfQGQbOptwnxOzjcqoyPXuC+FweRA7xi y8FLMocx/H6xGGARmjTFSJkfj1aB7mKNgPNVP42RMDYZcuh/vcjsw++zC1sdfODj SgV1qJk3V438zZULH86vszeVi+8= -----END CERTIFICATE-----Generated at Sat Jun 1 01:41:44 2024 by rpki-client on console-fra.rpki-client.org