$ rpki-client -vvf rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/5D4FB6AA9AB711EE86E1D058C4F9AE02.roa File: 5D4FB6AA9AB711EE86E1D058C4F9AE02.roa (raw, json) Hash identifier: jGLgl+s+EXh85DiPzfOmONprvM0A0uRoqJDk3lKU0CI= Subject key identifier: 1A:77:3E:9C:EF:D7:8A:6F:80:33:46:4C:96:D2:AB:57:D9:38:2B:D8 Certificate issuer: /CN=A9174589/serialNumber=458CDDCA3E8FB64C9D1A23492528BA777FCDD234 Certificate serial: 2F Authority key identifier: 45:8C:DD:CA:3E:8F:B6:4C:9D:1A:23:49:25:28:BA:77:7F:CD:D2:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/5D4FB6AA9AB711EE86E1D058C4F9AE02.roa Signing time: Thu 14 Dec 2023 19:32:10 +0000 ROA not before: Thu 14 Dec 2023 19:32:10 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 151835 IP address blocks: 103.240.2.0/23 maxlen: 23 103.240.2.0/24 maxlen: 24 103.240.3.0/24 maxlen: 24 2001:df2:fbc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.crl rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174589/serialNumber=458CDDCA3E8FB64C9D1A23492528BA777FCDD234 Validity Not Before: Dec 14 19:32:10 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=657b583a-1489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7c:11:ef:0f:95:fe:48:8d:a6:1a:f5:5a:fb: b6:38:a3:0d:d7:20:97:99:6a:81:cd:11:0a:0b:a9: 68:39:f4:83:6b:f2:70:e5:00:b6:2a:91:da:1d:26: cc:b5:bb:7d:27:06:e6:1d:fb:6b:3b:26:07:78:50: f8:f0:44:db:4a:d2:1a:9e:1c:82:83:be:99:c3:b6: c9:71:2d:ec:46:f6:30:9b:0f:80:c4:b7:1d:01:94: 3b:43:43:7f:69:b1:e6:40:31:a6:1a:a2:2b:9e:36: 89:6b:12:4a:e9:6c:44:e0:e3:f9:11:6f:47:27:46: c6:c5:eb:f0:3f:95:a9:92:dd:7d:e4:cf:0e:09:83: 1b:06:76:08:a4:03:40:29:97:57:50:cd:4f:33:98: 46:ff:08:46:4c:54:16:4d:57:db:b4:52:07:c4:62: d0:2f:56:8d:0b:25:ae:80:c0:3d:51:be:a0:51:1d: 81:6a:47:89:e2:11:84:62:22:c5:71:40:55:f9:c6: 49:c7:31:70:1e:b1:93:a6:b8:a4:e9:a6:d8:df:49: 29:15:59:d6:18:8c:b2:93:53:a3:ef:9e:c6:31:1b: 90:e4:30:53:44:03:a4:7a:30:76:6d:8b:80:da:e0: e3:13:9c:b6:1e:f6:5b:48:4e:8e:57:eb:4e:5b:eb: 75:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:77:3E:9C:EF:D7:8A:6F:80:33:46:4C:96:D2:AB:57:D9:38:2B:D8 X509v3 Authority Key Identifier: keyid:45:8C:DD:CA:3E:8F:B6:4C:9D:1A:23:49:25:28:BA:77:7F:CD:D2:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/5D4FB6AA9AB711EE86E1D058C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.240.2.0/23 IPv6: 2001:df2:fbc0::/48 Signature Algorithm: sha256WithRSAEncryption 19:ee:fb:95:2f:09:5d:74:64:ff:9d:0b:b7:50:73:eb:c2:cd: 58:d3:19:73:30:54:48:55:ff:0c:b2:c7:16:f9:f9:40:b8:49: 6e:0d:22:af:0b:ac:88:88:09:d9:6d:e0:6f:d6:bc:f7:c5:b3: bc:39:db:b5:ce:fc:0c:64:1a:41:d6:cf:3f:ef:11:41:bf:5a: 2c:61:6c:27:66:11:6e:20:09:73:22:35:17:81:74:5e:3e:d3: 6b:5a:5b:78:bf:bb:90:15:80:57:95:9c:b8:be:8b:5c:1c:c8: 9d:7a:7f:0b:30:30:b4:c3:69:1f:cd:1d:fe:3b:ae:61:2b:7d: 65:51:fc:96:fc:ae:0b:79:7f:8d:89:b6:63:d9:f8:74:9c:41: d3:37:c7:64:a4:88:ee:31:28:4c:38:e3:64:5b:36:7b:46:2a: bf:b9:dd:59:be:3b:55:a0:9d:05:d0:16:ff:51:36:fb:23:5a: 97:b3:5c:08:d9:48:bc:fc:79:da:73:54:28:42:d6:82:c5:83: cc:14:4d:dc:5b:97:42:52:30:9e:1c:7d:48:46:6f:47:e4:b4: e4:2e:54:bd:fc:83:bc:d0:37:c1:2c:be:1e:a1:b3:8b:32:99: f6:66:27:f5:84:ff:f6:69:b3:e4:13:1c:a4:4e:32:c8:43:54: 3d:47:0c:f9 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NDU4OTExMC8GA1UEBRMoNDU4Q0REQ0EzRThGQjY0QzlEMUEyMzQ5MjUyOEJBNzc3 RkNERDIzNDAeFw0yMzEyMTQxOTMyMTBaFw0yNDEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY1N2I1ODNhLTE0ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClfBHvD5X+SI2mGvVa+7Y4ow3XIJeZaoHNEQoLqWg59INr8nDlALYqkdodJsy1 u30nBuYd+2s7Jgd4UPjwRNtK0hqeHIKDvpnDtslxLexG9jCbD4DEtx0BlDtDQ39p seZAMaYaoiueNolrEkrpbETg4/kRb0cnRsbF6/A/lamS3X3kzw4JgxsGdgikA0Ap l1dQzU8zmEb/CEZMVBZNV9u0UgfEYtAvVo0LJa6AwD1RvqBRHYFqR4niEYRiIsVx QFX5xknHMXAesZOmuKTpptjfSSkVWdYYjLKTU6PvnsYxG5DkMFNEA6R6MHZti4Da 4OMTnLYe9ltITo5X605b63VRAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUGnc+nO/X im+AM0ZMltKrV9k4K9gwHwYDVR0jBBgwFoAURYzdyj6PtkydGiNJJSi6d3/N0jQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0NTg5LzVGQzYyN0M0NjFD NDExRUVCQjE1MUM0QkM0RjlBRTAyL1JZemR5ajZQdGt5ZEdpTkpKU2k2ZDNfTjBq US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUll6ZHlqNlB0a3lkR2lOSkpTaTZkM19OMGpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDU4OS81RkM2MjdDNDYxQzQxMUVFQkIxNTFDNEJDNEY5QUUwMi81RDRGQjZBQTlB QjcxMUVFODZFMUQwNThDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAWfwAjAPBAIAAjAJAwcAIAEN8vvAMA0GCSqGSIb3DQEBCwUA A4IBAQAZ7vuVLwlddGT/nQu3UHPrws1Y0xlzMFRIVf8MsscW+flAuEluDSKvC6yI iAnZbeBv1rz3xbO8Odu1zvwMZBpB1s8/7xFBv1osYWwnZhFuIAlzIjUXgXRePtNr Wlt4v7uQFYBXlZy4votcHMiden8LMDC0w2kfzR3+O65hK31lUfyW/K4LeX+NibZj 2fh0nEHTN8dkpIjuMShMOONkWzZ7Riq/ud1ZvjtVoJ0F0Bb/UTb7I1qXs1wI2Ui8 /Hnac1QoQtaCxYPMFE3cW5dCUjCeHH1IRm9H5LTkLlS9/IO80DfBLL4eobOLMpn2 Zif1hP/2abPkExykTjLIQ1Q9Rwz5 -----END CERTIFICATE-----Generated at Sat Jun 1 09:10:33 2024 by rpki-client on console-fra.rpki-client.org