$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/19E264067A0C11EEAA6E2D82C4F9AE02.roa File: 19E264067A0C11EEAA6E2D82C4F9AE02.roa (raw, json) Hash identifier: 7owgtKNZJKWaFEbUpSNT+QUFPCnteoO6nZf4jiwxxUk= Subject key identifier: E2:30:E7:36:8F:03:A9:50:2B:BC:31:39:2D:39:33:27:0D:B5:B2:CC Certificate issuer: /CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Certificate serial: AC Authority key identifier: 0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/19E264067A0C11EEAA6E2D82C4F9AE02.roa Signing time: Mon 08 Apr 2024 05:32:45 +0000 ROA not before: Mon 08 Apr 2024 05:32:45 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 151419 IP address blocks: 103.158.116.0/24 maxlen: 24 103.158.117.0/24 maxlen: 24 2401:e60:1::/48 maxlen: 48 2401:e60:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Validity Not Before: Apr 8 05:32:45 2024 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=6613817d-938d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5e:01:50:81:32:57:00:b9:23:fb:cc:97:bb: a5:06:0e:88:b8:21:89:82:22:4f:ac:9d:43:43:09: 32:29:10:be:34:48:0a:1a:bd:33:4b:d3:b2:c1:d1: 15:d6:bc:e0:b3:ad:c9:dc:bf:44:30:31:ce:7b:6e: bc:6e:7e:66:e4:91:84:e9:33:ce:76:38:a6:19:d1: 86:7f:fc:22:79:92:44:87:1a:a5:c6:de:a2:84:0a: cb:18:a8:8b:b9:e6:a7:0d:dc:be:59:ba:bd:81:91: 9a:8a:0a:82:ab:f1:16:fd:d1:8b:73:21:bd:f4:79: 3a:24:7e:af:c9:79:65:3e:b9:ca:ff:5e:e3:84:51: 6c:e7:1b:5e:16:30:6f:01:c0:0b:55:7e:95:80:6f: 78:65:cd:cc:88:45:17:2c:27:ce:10:90:5c:29:c8: 20:08:8d:53:85:de:4a:0f:6a:6b:13:dc:a9:f0:09: 04:53:0e:a1:26:32:85:cc:2f:15:93:3b:fd:51:e5: e2:d1:cf:48:99:84:3d:74:f5:2f:01:ad:bf:60:92: eb:7b:14:5c:2d:9c:f3:ac:cd:9f:35:43:20:22:7f: 86:08:ab:8f:20:52:65:e2:d0:a3:6b:47:ef:36:6f: eb:b0:17:49:9c:3b:e4:62:3e:a2:bb:ba:2e:02:30: 86:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:30:E7:36:8F:03:A9:50:2B:BC:31:39:2D:39:33:27:0D:B5:B2:CC X509v3 Authority Key Identifier: keyid:0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/19E264067A0C11EEAA6E2D82C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.158.116.0/23 IPv6: 2401:e60:1::-2401:e60:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 59:0d:7b:96:43:fd:17:44:b8:f8:0d:e6:31:40:13:5a:9c:b9: 35:bc:4e:ee:73:d6:e2:4e:01:49:c2:a9:e5:81:11:fe:12:92: 93:03:13:f6:0d:f0:b9:52:4e:bd:73:06:9b:67:89:9c:4f:62: 62:80:bb:ec:2c:cb:80:32:07:e2:e8:99:28:65:1a:c4:c9:20: 42:7e:13:db:7d:38:0a:70:57:7a:08:1e:87:61:f3:cc:5a:80: b0:6e:ef:4e:04:d7:16:b3:f6:a1:6b:5d:33:47:29:6b:6a:79: 5c:13:2b:87:0a:c5:53:e0:11:59:20:95:24:71:b5:d0:09:6c: d2:0d:c7:6b:02:8c:33:81:c6:45:78:09:a4:19:5b:5f:4e:4f: 7f:fc:6a:09:5f:3d:88:b0:f0:06:08:67:ef:22:b9:ec:91:0a: c6:07:15:28:9e:ee:1a:dd:cd:89:b6:09:55:67:6e:4a:67:14: b2:21:c0:15:39:77:7d:30:af:91:1b:22:09:0e:83:48:68:53: 0b:87:4b:71:77:e2:85:62:5b:6f:c6:d4:ef:47:9d:e8:c9:a1: a1:e9:d8:57:fc:77:3f:21:c7:f5:db:1a:a2:70:db:7e:20:2e: 0d:72:ae:44:8d:35:f3:6f:f5:c5:f0:a2:5f:97:aa:5b:69:96: 59:23:02:40 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFQTcxMTAvBgNVBAUTKDBCOEQ2MzhGRkQzOEIxRjc3RTQ4RTFCQjVERjI5OTI5 Q0U3RDc4QjUwHhcNMjQwNDA4MDUzMjQ1WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjEzODE3ZC05MzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvV4BUIEyVwC5I/vMl7ulBg6IuCGJgiJPrJ1DQwkyKRC+NEgKGr0zS9OywdEV 1rzgs63J3L9EMDHOe268bn5m5JGE6TPOdjimGdGGf/wieZJEhxqlxt6ihArLGKiL ueanDdy+Wbq9gZGaigqCq/EW/dGLcyG99Hk6JH6vyXllPrnK/17jhFFs5xteFjBv AcALVX6VgG94Zc3MiEUXLCfOEJBcKcggCI1Thd5KD2prE9yp8AkEUw6hJjKFzC8V kzv9UeXi0c9ImYQ9dPUvAa2/YJLrexRcLZzzrM2fNUMgIn+GCKuPIFJl4tCja0fv Nm/rsBdJnDvkYj6iu7ouAjCG3wIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFOIw5zaP A6lQK7wxOS05MycNtbLMMB8GA1UdIwQYMBaAFAuNY4/9OLH3fkjhu13ymSnOfXi1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVBNy8wNDRGNjQ0ODEx NjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNmZC1TT0c3WGZLWktjNTll TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M0MWpqXzA0c2ZkLVNPRzdYZktaS2M1OWVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0JFQTcvMDQ0RjY0NDgxMTY4MTFFRUFDNjNDMjM0QzRGOUFFMDIvMTlFMjY0MDY3 QTBDMTFFRUFBNkUyRDgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOwYIKwYBBQUHAQcBAf8E LDAqMAwEAgABMAYDBAFnnnQwGgQCAAIwFDASAwcAJAEOYAABAwcAJAEOYAACMA0G CSqGSIb3DQEBCwUAA4IBAQBZDXuWQ/0XRLj4DeYxQBNanLk1vE7uc9biTgFJwqnl gRH+EpKTAxP2DfC5Uk69cwabZ4mcT2JigLvsLMuAMgfi6JkoZRrEySBCfhPbfTgK cFd6CB6HYfPMWoCwbu9OBNcWs/aha10zRylranlcEyuHCsVT4BFZIJUkcbXQCWzS DcdrAowzgcZFeAmkGVtfTk9//GoJXz2IsPAGCGfvIrnskQrGBxUonu4a3c2JtglV Z25KZxSyIcAVOXd9MK+RGyIJDoNIaFMLh0txd+KFYltvxtTvR53oyaGh6dhX/Hc/ Icf12xqicNt+IC4Ncq5EjTXzb/XF8KJfl6pbaZZZIwJA -----END CERTIFICATE-----Generated at Sat Jun 1 09:10:33 2024 by rpki-client on console-fra.rpki-client.org