$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/D0D573BA7D4611EDA39A867EC4F9AE02.roa File: D0D573BA7D4611EDA39A867EC4F9AE02.roa (raw, json) Hash identifier: Ri908Mam4olAUfRbBVo4OcQZuaNzAo60OI3PDGDqutA= Subject key identifier: 1C:C2:76:4C:F4:90:96:A1:75:97:86:C7:90:11:D5:F8:17:DD:08:42 Certificate issuer: /CN=A917E0A8/serialNumber=7ACE6DA35FB6A4A9F6F9970C18BCAF5B2748119F Certificate serial: 09CA Authority key identifier: 7A:CE:6D:A3:5F:B6:A4:A9:F6:F9:97:0C:18:BC:AF:5B:27:48:11:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/D0D573BA7D4611EDA39A867EC4F9AE02.roa Signing time: Fri 26 Apr 2024 21:09:52 +0000 ROA not before: Fri 26 Apr 2024 21:09:52 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 212238 IP address blocks: 103.149.46.0/24 maxlen: 24 203.55.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.crl rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2506 (0x9ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8/serialNumber=7ACE6DA35FB6A4A9F6F9970C18BCAF5B2748119F Validity Not Before: Apr 26 21:09:52 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=662c1820-9314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7c:aa:e6:4f:0c:2b:d6:1b:18:fe:00:48:b2: 9d:9c:de:38:9b:a9:73:6d:ed:b7:68:91:a8:f3:7d: 48:2e:21:89:c5:b5:9d:6b:14:dc:92:ef:e6:a9:b5: 39:0e:b3:f3:4e:0c:f4:56:67:60:07:6f:bc:a8:53: 5f:6d:b1:8c:ef:d6:cb:46:ec:32:a1:3f:db:c5:c8: 2b:0d:17:12:4c:e5:d3:14:c6:a7:3f:81:04:f6:73: 72:29:e3:a2:80:5e:b1:c1:ee:0e:d3:ff:60:91:10: 2a:56:bc:ec:db:f5:13:77:c8:f3:0b:a6:ca:d9:f3: 77:0c:d5:8e:bd:b5:88:6a:a6:ab:2a:ab:5d:68:9c: 49:77:87:02:2c:25:94:da:d0:7c:0c:d8:72:e5:0b: 40:e4:0e:ed:41:e9:6d:b5:1e:fa:36:82:bc:89:cc: 09:e3:f6:29:7f:8f:ab:3c:96:91:60:af:f4:d4:e3: ce:e7:22:4f:37:47:85:3a:34:b2:9d:6d:a3:da:35: ff:b2:24:53:f2:b0:12:35:27:33:a8:68:39:8a:09: 81:1f:36:a9:00:f6:6d:71:56:f9:bc:64:cb:72:cb: e2:7d:b4:e8:2c:17:75:c8:6e:6b:9b:b8:6e:90:a5: 62:dc:51:c1:4a:24:73:ab:01:d6:f5:bf:a3:2c:2b: f6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C2:76:4C:F4:90:96:A1:75:97:86:C7:90:11:D5:F8:17:DD:08:42 X509v3 Authority Key Identifier: keyid:7A:CE:6D:A3:5F:B6:A4:A9:F6:F9:97:0C:18:BC:AF:5B:27:48:11:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/D0D573BA7D4611EDA39A867EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.149.46.0/24 203.55.176.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:c9:bb:f0:74:2e:6a:51:d7:bc:19:e3:04:62:a9:69:fa:aa: 0e:20:9a:8e:72:ae:fc:c2:82:29:67:43:25:f9:8b:ee:86:e6: 8a:3d:bc:a3:ae:be:bd:88:a0:85:9f:07:5f:c6:be:10:b3:aa: 00:40:11:9c:74:7a:eb:bd:26:1c:ac:75:45:98:ff:21:3b:1e: a9:9a:5d:3a:67:d3:db:95:fe:02:90:e3:77:08:de:63:86:11: 8f:5c:f9:d5:cc:fe:5c:9a:20:f1:23:db:85:62:e5:15:fe:4d: ff:58:44:41:5a:97:d1:34:21:62:ff:4d:dc:46:a7:87:d5:6f: 23:fd:8c:1d:5d:3e:13:97:5d:23:7c:7e:06:6c:f9:2e:7f:0d: e4:ff:23:bd:fb:ea:95:87:ac:5f:e5:06:f4:12:51:1d:51:25: fd:33:80:f7:34:2e:21:d7:13:46:37:42:89:65:3b:b6:00:45: 81:8f:3a:8a:15:a9:3e:04:0d:25:33:13:fa:24:54:0f:6b:62: 64:02:ac:bb:d2:ba:a7:a3:d3:03:d3:0a:64:9f:f6:c3:a4:47: 25:cb:9a:31:0f:02:53:e8:95:21:e2:6b:de:c7:4c:f9:15:b7: d6:0d:0f:78:77:b6:93:54:28:56:de:59:b0:74:ba:31:b0:23: 6f:cb:d8:d7 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDdBQ0U2REEzNUZCNkE0QTlGNkY5OTcwQzE4QkNBRjVC Mjc0ODExOUYwHhcNMjQwNDI2MjEwOTUyWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjJjMTgyMC05MzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXyq5k8MK9YbGP4ASLKdnN44m6lzbe23aJGo831ILiGJxbWdaxTcku/mqbU5 DrPzTgz0VmdgB2+8qFNfbbGM79bLRuwyoT/bxcgrDRcSTOXTFManP4EE9nNyKeOi gF6xwe4O0/9gkRAqVrzs2/UTd8jzC6bK2fN3DNWOvbWIaqarKqtdaJxJd4cCLCWU 2tB8DNhy5QtA5A7tQelttR76NoK8icwJ4/Ypf4+rPJaRYK/01OPO5yJPN0eFOjSy nW2j2jX/siRT8rASNSczqGg5igmBHzapAPZtcVb5vGTLcsvifbToLBd1yG5rm7hu kKVi3FHBSiRzqwHW9b+jLCv2eQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFBzCdkz0 kJahdZeGx5AR1fgX3QhCMB8GA1UdIwQYMBaAFHrObaNftqSp9vmXDBi8r1snSBGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC9BMDU5QUY4QTY0 MEQxMUVBQjYzOTU1NzFDNEY5QUUwMi9lczV0bzEtMnBLbjItWmNNR0x5dld5ZElF WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VzNXRvMS0ycEtuMi1aY01HTHl2V3lkSUVaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UwQTgvQTA1OUFGOEE2NDBEMTFFQUI2Mzk1NTcxQzRGOUFFMDIvRDBENTczQkE3 RDQ2MTFFREEzOUE4NjdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnlS4DBADLN7AwDQYJKoZIhvcNAQELBQADggEBAC7Ju/B0 LmpR17wZ4wRiqWn6qg4gmo5yrvzCgilnQyX5i+6G5oo9vKOuvr2IoIWfB1/GvhCz qgBAEZx0euu9JhysdUWY/yE7HqmaXTpn09uV/gKQ43cI3mOGEY9c+dXM/lyaIPEj 24Vi5RX+Tf9YREFal9E0IWL/TdxGp4fVbyP9jB1dPhOXXSN8fgZs+S5/DeT/I737 6pWHrF/lBvQSUR1RJf0zgPc0LiHXE0Y3QollO7YARYGPOooVqT4EDSUzE/okVA9r YmQCrLvSuqej0wPTCmSf9sOkRyXLmjEPAlPolSHia97HTPkVt9YND3h3tpNUKFbe WbB0ujGwI2/L2Nc= -----END CERTIFICATE-----Generated at Mon May 6 23:05:42 2024 by rpki-client on console-fra.rpki-client.org