$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/404A8F72F5F611EEB83F6E3FC4F9AE02.roa File: 404A8F72F5F611EEB83F6E3FC4F9AE02.roa (raw, json) Hash identifier: VBCr9IX6X4YLCeyCEzeETEeBvGSiVeRThxdakg0PJoY= Subject key identifier: 68:BF:A2:8B:6F:03:C3:8B:10:24:BD:19:07:23:13:8A:5D:0F:DD:93 Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Certificate serial: 0D1C Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/404A8F72F5F611EEB83F6E3FC4F9AE02.roa Signing time: Mon 08 Apr 2024 22:20:49 +0000 ROA not before: Mon 08 Apr 2024 22:20:49 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 138624 IP address blocks: 103.134.225.0/24 maxlen: 24 2001:df7:d500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3356 (0xd1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Validity Not Before: Apr 8 22:20:49 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=66146dc0-7014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:67:d5:b8:9c:64:31:34:5c:fc:e3:28:4c:10: 8f:41:35:0d:86:dd:24:15:cd:1f:6b:af:c7:7b:34: e9:10:7e:0e:6c:03:53:6b:0b:be:fa:3e:c9:18:e6: 83:a4:42:0f:ba:88:64:67:20:7f:ef:f3:aa:0a:31: 31:5b:ab:b7:e0:18:b8:dd:c4:d7:01:87:9d:75:28: c4:ca:eb:c3:8b:c8:e3:d9:71:a5:df:d2:0c:fb:65: dc:17:8b:97:a9:9d:44:0b:ee:80:5f:49:a1:c0:fb: 3a:05:e9:17:f7:32:c6:89:3b:c9:8b:c9:14:f0:d8: 58:4a:ec:8a:10:5a:06:ff:d4:d7:2a:d5:6e:3c:a6: 7c:c8:69:63:3e:e1:f6:51:b9:5e:b4:71:5b:aa:88: e2:20:6f:d1:1b:89:bd:ab:6f:fd:ac:fc:9e:e8:54: 2a:ed:78:c9:2b:cd:d9:58:48:1e:cd:d5:c0:21:2c: f2:8a:56:87:49:b6:4d:ad:82:b4:53:38:70:60:72: 0a:28:93:02:14:c7:11:fe:64:7d:af:ff:6b:bc:83: 4d:2f:c3:06:bc:8d:9b:2c:49:7f:39:d0:c7:f6:03: 4c:32:3c:db:2b:d2:d4:84:cd:49:8c:b3:05:45:42: 4a:eb:6b:10:f2:44:4d:b8:23:26:f1:cb:0b:b0:52: e4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BF:A2:8B:6F:03:C3:8B:10:24:BD:19:07:23:13:8A:5D:0F:DD:93 X509v3 Authority Key Identifier: keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/404A8F72F5F611EEB83F6E3FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.134.225.0/24 IPv6: 2001:df7:d500::/48 Signature Algorithm: sha256WithRSAEncryption 78:6f:41:a2:ac:24:11:70:b5:16:29:39:90:ef:29:c0:fd:3f: a1:ba:1e:01:c3:05:d4:7a:1d:64:64:2b:7f:7b:9a:8d:73:e4: 2f:cb:c1:86:02:1b:6e:04:ec:67:05:4b:f3:c1:b6:64:09:d8: 71:7a:db:ca:9d:71:5e:10:02:c5:2c:6f:a5:7b:3e:3a:38:b6: e5:a3:b4:6e:9a:0b:eb:09:75:f8:23:9c:fb:9d:e6:0c:92:4d: 46:16:a0:26:f8:41:57:fd:88:ca:3e:95:c9:98:00:5e:11:0f: 54:79:ff:e2:62:43:58:bc:b8:80:1e:41:65:e8:17:28:80:b9: e2:16:6c:03:ee:4b:35:f1:b2:a4:11:ba:a4:31:6c:3e:11:31: 23:52:0c:d1:34:15:ef:ce:c6:b8:2b:a5:2a:3b:dc:41:e9:a2: bc:25:49:04:ac:81:0c:7d:32:c1:3e:6b:b5:44:b7:c3:f6:87: c8:5c:3e:42:f7:69:a6:e6:6e:ea:10:0d:88:60:43:eb:5c:85: 62:d8:cc:cd:00:78:44:4c:82:31:55:00:4c:36:2f:0c:b9:eb: 1b:fe:54:7a:ce:9b:a4:0b:2d:98:31:e2:fe:03:af:1c:93:d3: c5:28:d8:09:3d:e5:90:bd:92:b3:2d:79:49:da:ec:a0:7a:db: 4f:5b:5c:2f -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4QjExMTAvBgNVBAUTKEI1QjNGQzNFNzYwODc3RUY0RjhEOEU4NDNCREQ2OENF MEY0MDU1MzAwHhcNMjQwNDA4MjIyMDQ5WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjE0NmRjMC03MDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArGfVuJxkMTRc/OMoTBCPQTUNht0kFc0fa6/HezTpEH4ObANTawu++j7JGOaD pEIPuohkZyB/7/OqCjExW6u34Bi43cTXAYeddSjEyuvDi8jj2XGl39IM+2XcF4uX qZ1EC+6AX0mhwPs6BekX9zLGiTvJi8kU8NhYSuyKEFoG/9TXKtVuPKZ8yGljPuH2 UbletHFbqojiIG/RG4m9q2/9rPye6FQq7XjJK83ZWEgezdXAISzyilaHSbZNrYK0 UzhwYHIKKJMCFMcR/mR9r/9rvINNL8MGvI2bLEl/OdDH9gNMMjzbK9LUhM1JjLMF RUJK62sQ8kRNuCMm8csLsFLkXQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFGi/ootv A8OLECS9GQcjE4pdD92TMB8GA1UdIwQYMBaAFLWz/D52CHfvT42OhDvdaM4PQFUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjhCMS83RDU0QTBDQUI1 ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQtOVBqWTZFTzkxb3pnOUFW VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RiUDhQbllJZC05UGpZNkVPOTFvemc5QVZUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEY4QjEvN0Q1NEEwQ0FCNTg2MTFFOUFBNUY0RDY1QzRGOUFFMDIvNDA0QThGNzJG NUY2MTFFRUI4M0Y2RTNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnhuEwDwQCAAIwCQMHACABDffVADANBgkqhkiG9w0BAQsF AAOCAQEAeG9BoqwkEXC1Fik5kO8pwP0/oboeAcMF1HodZGQrf3uajXPkL8vBhgIb bgTsZwVL88G2ZAnYcXrbyp1xXhACxSxvpXs+Oji25aO0bpoL6wl1+COc+53mDJJN RhagJvhBV/2Iyj6VyZgAXhEPVHn/4mJDWLy4gB5BZegXKIC54hZsA+5LNfGypBG6 pDFsPhExI1IM0TQV787GuCulKjvcQemivCVJBKyBDH0ywT5rtUS3w/aHyFw+Qvdp puZu6hANiGBD61yFYtjMzQB4REyCMVUATDYvDLnrG/5Ues6bpAstmDHi/gOvHJPT xSjYCT3lkL2Ssy15SdrsoHrbT1tcLw== -----END CERTIFICATE-----Generated at Fri May 31 19:47:51 2024 by rpki-client on console-fra.rpki-client.org