$ rpki-client -vvf rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/D26D6D160BF111EDBBF4F61BC4F9AE02.roa File: D26D6D160BF111EDBBF4F61BC4F9AE02.roa (raw, json) Hash identifier: zNTcC5CyTS6JuhQb6sgjcHoKNdQdVFKe3hcrpOUITOw= Subject key identifier: 7D:54:ED:1F:39:B5:AF:5D:8F:55:2B:9C:45:98:14:41:A4:BD:C4:91 Certificate issuer: /CN=A918216E/serialNumber=647E9CCC4B698815938C3B367BCE3082030E2347 Certificate serial: 012C Authority key identifier: 64:7E:9C:CC:4B:69:88:15:93:8C:3B:36:7B:CE:30:82:03:0E:23:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/D26D6D160BF111EDBBF4F61BC4F9AE02.roa Signing time: Thu 03 Aug 2023 03:23:48 +0000 ROA not before: Thu 03 Aug 2023 03:23:48 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 150135 IP address blocks: 103.191.174.0/23 maxlen: 23 103.191.174.0/24 maxlen: 24 103.191.175.0/24 maxlen: 24 2001:df1:7c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.crl rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 04:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918216E/serialNumber=647E9CCC4B698815938C3B367BCE3082030E2347 Validity Not Before: Aug 3 03:23:48 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64cb1dc4-3138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:75:87:3f:c1:ce:2d:93:44:59:53:b7:22:91: 43:c7:9b:aa:d3:5c:e4:49:73:e2:d4:b5:42:6d:0b: c7:12:57:a1:6c:74:9c:a0:58:25:bb:5a:76:75:07: 1e:9d:ab:5e:a2:21:3f:ae:f1:f9:03:59:89:f3:3a: de:df:ff:72:b1:7d:14:2c:c9:10:74:00:b3:8a:17: f3:ca:f9:72:f7:ed:a3:89:a7:be:73:c9:f6:f9:70: ba:14:bb:81:ef:7a:80:66:69:ca:6e:49:8c:47:6a: 6a:b2:92:24:e5:2b:23:9c:70:1d:77:30:a3:dd:a5: 8f:a0:80:e9:87:5f:5f:dc:75:43:fb:8b:f6:ef:7e: c5:d4:6f:b5:be:40:c8:92:3c:5d:40:49:44:bf:0c: d7:87:ce:ff:ea:21:cf:02:33:16:35:35:64:ce:c0: da:35:9d:3b:8a:4f:21:4e:b2:1f:3b:6b:d7:b1:05: 51:8d:40:16:fd:79:bb:1d:55:3f:44:1f:d9:22:a0: c1:fa:2c:66:61:af:18:e1:b9:26:75:f8:8f:73:16: 7a:92:56:1c:a9:47:fc:7b:57:92:4a:b6:a6:ca:65: 6e:c5:6e:2d:38:f9:42:43:98:36:c9:17:0b:b2:9e: 80:5e:43:d5:42:72:34:f8:21:10:b8:d5:c7:97:00: 78:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:54:ED:1F:39:B5:AF:5D:8F:55:2B:9C:45:98:14:41:A4:BD:C4:91 X509v3 Authority Key Identifier: keyid:64:7E:9C:CC:4B:69:88:15:93:8C:3B:36:7B:CE:30:82:03:0E:23:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/D26D6D160BF111EDBBF4F61BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.191.174.0/23 IPv6: 2001:df1:7c0::/48 Signature Algorithm: sha256WithRSAEncryption a8:9f:1d:c1:d4:f5:16:45:42:49:a7:24:00:8c:24:f8:b4:29: 20:30:ca:44:74:06:f2:dc:b3:83:8a:35:07:0e:73:90:4c:5c: 6a:dc:69:76:3a:ca:d9:db:b2:5c:7a:ef:69:a0:95:73:0e:87: 0c:9f:37:0e:bc:e2:07:90:fd:d6:7c:5d:b0:95:bd:25:29:e7: 6c:a4:14:36:89:47:34:cf:86:2b:84:02:22:2a:28:cd:d8:e8: 44:04:9a:de:0e:8f:03:93:7c:21:53:6d:3e:bf:58:c0:8a:ae: 48:c6:58:9e:dd:82:60:c3:40:7b:d6:42:7b:b1:2c:99:1a:e2: c4:14:b4:7b:43:06:5e:be:e5:47:1f:9b:ab:d9:59:9b:57:49: d5:da:72:12:d4:20:6e:ea:92:5c:66:e5:18:63:b4:47:88:e1: 6a:96:7c:fb:e1:2b:2c:bf:58:00:b2:25:14:c5:94:6c:3d:4a: 91:85:c8:b0:f6:5d:13:d0:ab:d5:ef:a3:61:b7:e6:81:8b:ba: 6c:83:a7:a1:79:f3:13:56:2d:9f:96:ca:62:03:77:75:de:0c: eb:6b:09:09:e6:5b:2a:5d:e3:16:75:bd:ba:43:78:aa:b8:93: 30:53:28:b2:ca:f6:7a:7e:52:59:e4:e0:ef:9a:6f:1f:50:77: d0:a4:65:a1 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIxNkUxMTAvBgNVBAUTKDY0N0U5Q0NDNEI2OTg4MTU5MzhDM0IzNjdCQ0UzMDgy MDMwRTIzNDcwHhcNMjMwODAzMDMyMzQ4WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGNiMWRjNC0zMTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3nWHP8HOLZNEWVO3IpFDx5uq01zkSXPi1LVCbQvHElehbHScoFglu1p2dQce nateoiE/rvH5A1mJ8zre3/9ysX0ULMkQdACzihfzyvly9+2jiae+c8n2+XC6FLuB 73qAZmnKbkmMR2pqspIk5SsjnHAddzCj3aWPoIDph19f3HVD+4v2737F1G+1vkDI kjxdQElEvwzXh87/6iHPAjMWNTVkzsDaNZ07ik8hTrIfO2vXsQVRjUAW/Xm7HVU/ RB/ZIqDB+ixmYa8Y4bkmdfiPcxZ6klYcqUf8e1eSSramymVuxW4tOPlCQ5g2yRcL sp6AXkPVQnI0+CEQuNXHlwB4AQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFH1U7R85 ta9dj1UrnEWYFEGkvcSRMB8GA1UdIwQYMBaAFGR+nMxLaYgVk4w7NnvOMIIDDiNH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjE2RS9BRkZFQzQxMDBC NkUxMUVEOTczNTg4MTBDNEY5QUUwMi9aSDZjekV0cGlCV1RqRHMyZTg0d2dnTU9J MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pINmN6RXRwaUJXVGpEczJlODR3Z2dNT0kwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODIxNkUvQUZGRUM0MTAwQjZFMTFFRDk3MzU4ODEwQzRGOUFFMDIvRDI2RDZEMTYw QkYxMTFFREJCRjRGNjFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnv64wDwQCAAIwCQMHACABDfEHwDANBgkqhkiG9w0BAQsF AAOCAQEAqJ8dwdT1FkVCSackAIwk+LQpIDDKRHQG8tyzg4o1Bw5zkExcatxpdjrK 2duyXHrvaaCVcw6HDJ83DrziB5D91nxdsJW9JSnnbKQUNolHNM+GK4QCIioozdjo RASa3g6PA5N8IVNtPr9YwIquSMZYnt2CYMNAe9ZCe7EsmRrixBS0e0MGXr7lRx+b q9lZm1dJ1dpyEtQgbuqSXGblGGO0R4jhapZ8++ErLL9YALIlFMWUbD1KkYXIsPZd E9Cr1e+jYbfmgYu6bIOnoXnzE1Ytn5bKYgN3dd4M62sJCeZbKl3jFnW9ukN4qriT MFMossr2en5SWeTg75pvH1B30KRloQ== -----END CERTIFICATE-----Generated at Fri Jun 7 06:09:29 2024 by rpki-client on console-ams.rpki-client.org