$ rpki-client -vvf rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/7136F65A37A811EE94E32169C4F9AE02.roa File: 7136F65A37A811EE94E32169C4F9AE02.roa (raw, json) Hash identifier: NBR52rvY8WiF26EIW9oNvJ+wbiAonJxITHdJqzHDCjs= Subject key identifier: F4:DB:E5:39:A0:08:18:55:22:5C:C3:7D:5C:04:DC:B0:2C:36:16:59 Certificate issuer: /CN=A917BBF1/serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2 Certificate serial: 0B05 Authority key identifier: 65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/7136F65A37A811EE94E32169C4F9AE02.roa Signing time: Sun 03 Sep 2023 11:36:27 +0000 ROA not before: Sun 03 Sep 2023 11:36:27 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 138640 IP address blocks: 103.114.96.0/24 maxlen: 24 103.114.97.0/24 maxlen: 24 103.114.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2821 (0xb05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BBF1/serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2 Validity Not Before: Sep 3 11:36:27 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=64f46fbb-5f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0e:ee:f0:4e:21:d1:90:08:01:46:2f:16:03: de:91:33:61:cf:df:d0:bc:b5:80:b4:86:f7:51:f1: a3:73:33:80:3a:d1:5d:02:d0:bb:11:81:05:9e:79: 71:50:6c:de:87:2b:b1:45:34:3b:f5:fb:0e:63:69: 45:17:17:67:8f:d9:e5:44:0b:45:14:63:5e:b8:59: b5:36:39:09:1f:61:87:ed:ba:e7:d8:15:f7:73:92: f4:50:a3:4b:9c:b9:11:49:f3:cc:b8:81:a4:5b:78: 65:f3:28:da:a4:35:23:7c:8e:7c:31:a5:2e:63:90: 2d:5f:fc:21:c5:fa:3d:92:bb:ed:2d:f1:a6:8e:79: 5f:5f:43:2d:41:5d:05:f3:64:df:46:32:bc:39:ff: 6e:b3:2b:94:b5:b6:f7:52:e0:5f:a8:e3:7f:5b:34: 76:cc:57:54:42:f5:02:5c:11:6f:6b:f4:41:7f:da: 05:21:59:67:ed:f2:6f:af:12:d3:07:ad:e0:44:9c: 65:3e:7a:d1:43:9f:14:52:1e:90:7f:2e:5e:3d:63: d8:dd:fa:7d:cb:95:28:60:45:cc:e3:6d:e8:21:11: ca:d6:6b:aa:76:40:d0:86:93:1a:87:0e:a5:6e:eb: b9:d0:cf:12:62:8c:fc:ff:96:e8:46:de:98:79:b0: 03:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:DB:E5:39:A0:08:18:55:22:5C:C3:7D:5C:04:DC:B0:2C:36:16:59 X509v3 Authority Key Identifier: keyid:65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/7136F65A37A811EE94E32169C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.114.96.0-103.114.98.255 Signature Algorithm: sha256WithRSAEncryption 89:bf:1d:6c:e6:8b:be:dc:70:44:0b:11:d5:00:4f:dd:1b:8b: e6:35:df:5f:96:50:d8:80:40:ac:d5:ac:59:75:f6:15:27:64: b1:b1:fe:a4:11:8a:91:a8:a8:7a:84:ee:72:f4:c8:ed:ee:1d: 27:ac:fd:c1:fd:36:34:60:1d:14:0d:9a:12:de:7e:94:f7:67: dc:07:3b:19:2c:13:10:ec:da:a0:64:84:e5:3c:c2:7f:20:1b: 69:ee:d0:e8:b0:e4:a3:df:50:cc:e7:56:fa:db:f0:76:7d:c4: e5:38:ee:80:64:3e:b1:3e:f1:3c:4e:29:79:77:21:6b:da:ec: 01:78:55:07:d2:9a:58:a6:64:3e:5f:04:c0:ab:67:a3:2c:e2: c1:40:6e:e6:bf:02:c4:b0:25:b2:6d:4b:33:bf:44:52:4d:57: c7:34:97:35:1a:c5:5b:e1:f7:2d:e4:f1:d5:04:2e:4a:df:33: 4a:cd:c8:b9:de:e4:60:82:f8:c8:d9:55:a3:f8:19:3c:b5:b5: 59:08:6d:39:0f:d8:94:5f:76:b8:b6:e1:c9:f3:41:42:58:c4: af:74:e5:83:71:a1:5e:8b:85:65:8b:b7:49:b9:4c:14:89:60: c6:6e:27:7c:7f:71:b8:b3:90:a7:a1:cc:96:03:02:77:f5:aa: 50:40:96:84 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICCwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCRjExMTAvBgNVBAUTKDY1NDA5MTg2MDI4RUM1NENENDVCNTgzNEZGQkVDQUY0 Qjc4RjE5QzIwHhcNMjMwOTAzMTEzNjI3WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGY0NmZiYi01Zjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuw7u8E4h0ZAIAUYvFgPekTNhz9/QvLWAtIb3UfGjczOAOtFdAtC7EYEFnnlx UGzehyuxRTQ79fsOY2lFFxdnj9nlRAtFFGNeuFm1NjkJH2GH7brn2BX3c5L0UKNL nLkRSfPMuIGkW3hl8yjapDUjfI58MaUuY5AtX/whxfo9krvtLfGmjnlfX0MtQV0F 82TfRjK8Of9usyuUtbb3UuBfqON/WzR2zFdUQvUCXBFva/RBf9oFIVln7fJvrxLT B63gRJxlPnrRQ58UUh6Qfy5ePWPY3fp9y5UoYEXM423oIRHK1muqdkDQhpMahw6l buu50M8SYoz8/5boRt6YebADgQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFPTb5Tmg CBhVIlzDfVwE3LAsNhZZMB8GA1UdIwQYMBaAFGVAkYYCjsVM1FtYNP++yvS3jxnC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkJGMS8yNDVEQzVDQTBB RjcxMUVBQTg1QTVEMUFDNEY5QUUwMi9aVUNSaGdLT3hVelVXMWcwXzc3SzlMZVBH Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pVQ1JoZ0tPeFV6VVcxZzBfNzdLOUxlUEdjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0JCRjEvMjQ1REM1Q0EwQUY3MTFFQUE4NUE1RDFBQzRGOUFFMDIvNzEzNkY2NUEz N0E4MTFFRTk0RTMyMTY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEBWdyYAMEAGdyYjANBgkqhkiG9w0BAQsFAAOCAQEAib8d bOaLvtxwRAsR1QBP3RuL5jXfX5ZQ2IBArNWsWXX2FSdksbH+pBGKkaioeoTucvTI 7e4dJ6z9wf02NGAdFA2aEt5+lPdn3Ac7GSwTEOzaoGSE5TzCfyAbae7Q6LDko99Q zOdW+tvwdn3E5TjugGQ+sT7xPE4peXcha9rsAXhVB9KaWKZkPl8EwKtnoyziwUBu 5r8CxLAlsm1LM79EUk1XxzSXNRrFW+H3LeTx1QQuSt8zSs3Iud7kYIL4yNlVo/gZ PLW1WQhtOQ/YlF92uLbhyfNBQljEr3Tlg3GhXouFZYu3SblMFIlgxm4nfH9xuLOQ p6HMlgMCd/WqUECWhA== -----END CERTIFICATE-----Generated at Fri May 31 22:13:06 2024 by rpki-client on console-fra.rpki-client.org