$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa File: B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa (raw, json) Hash identifier: koGFRVRewsJ7jkem3coBJtNJvVh8zs6qszUVNRr3ZBc= Subject key identifier: A5:7C:D2:68:B2:03:04:25:E2:88:99:6D:AF:52:9E:04:BE:58:1A:EA Certificate issuer: /CN=A9193F75/serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24 Certificate serial: 13C8 Authority key identifier: 86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa Signing time: Tue 30 Apr 2024 17:56:00 +0000 ROA not before: Tue 30 Apr 2024 17:56:00 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 135298 IP address blocks: 103.213.104.0/24 maxlen: 24 103.213.105.0/24 maxlen: 24 103.213.106.0/24 maxlen: 24 103.213.107.0/24 maxlen: 24 223.26.20.0/24 maxlen: 24 223.26.21.0/24 maxlen: 24 223.26.22.0/24 maxlen: 24 223.26.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 17:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5064 (0x13c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193F75/serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24 Validity Not Before: Apr 30 17:56:00 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=663130b0-4ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:aa:62:8f:3f:2b:ce:d8:dd:22:c8:7b:3b:85: 03:13:3e:40:40:66:e9:89:d1:19:01:b6:23:05:8f: 97:bd:a4:2a:98:09:5c:e6:1a:29:be:bc:d2:31:df: d0:57:94:3a:bb:5c:c9:2a:06:91:88:7e:af:15:4f: 90:61:fa:25:5b:15:c7:4e:c2:a6:05:30:8c:0b:31: 59:29:80:1c:69:65:e1:4e:3e:15:7a:e8:ec:77:a5: 80:8d:03:6b:9c:16:20:9d:72:d0:41:54:47:25:b6: 47:44:a1:70:ac:76:c7:6f:b2:98:e2:8e:25:e8:e5: a1:62:c3:3d:1d:ad:b2:22:3a:c1:93:01:96:4b:50: bd:8d:28:06:eb:a8:d8:e2:0a:aa:c1:f1:8f:3b:63: 3c:18:1d:a1:c7:3c:3d:a4:2d:08:b8:69:e2:35:67: 58:95:a1:37:ad:bc:24:f6:ef:87:2c:11:4d:a8:03: 96:6f:99:af:9e:83:33:98:c8:5a:38:f7:e1:58:aa: d8:67:8a:c3:2a:97:a7:c3:2d:c1:a3:b4:4f:e5:75: 3e:01:5b:ce:31:31:55:35:bb:85:cf:87:e7:49:28: a1:cc:94:2c:37:91:49:c3:3a:6a:fe:6d:56:79:0a: 95:9f:4b:42:07:53:56:47:e9:0e:b4:d9:6a:66:40: 01:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7C:D2:68:B2:03:04:25:E2:88:99:6D:AF:52:9E:04:BE:58:1A:EA X509v3 Authority Key Identifier: keyid:86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.213.104.0/22 223.26.20.0/22 Signature Algorithm: sha256WithRSAEncryption a3:9d:7b:ed:fe:e2:65:a8:bd:6e:e5:25:d5:74:a3:98:47:41: a0:90:e6:c8:c4:77:7f:ed:93:33:5b:fc:18:0f:ab:3a:79:c1: 92:a4:53:d5:a6:5f:96:ff:e4:59:cd:71:a6:c7:3e:a4:53:95: 1f:5f:21:2a:8c:b5:77:9c:6e:57:da:c5:a8:09:73:df:ef:58: fb:76:a0:ea:76:d5:1a:30:b1:c9:cf:03:26:3c:92:ee:fc:26: 44:0e:ef:fd:c8:13:18:5c:c2:43:5b:d3:a9:67:9e:1d:18:43: 70:93:65:ce:56:f0:59:4e:f8:b6:f9:3e:b8:5e:fb:c2:30:43: a9:30:bd:19:df:83:91:e3:14:f8:4c:86:0b:88:92:3d:f0:ec: 2f:70:17:e9:21:35:23:20:7f:9d:27:fa:1e:5c:cb:a7:23:06: 78:9a:0b:07:d6:7f:f3:17:a2:9b:15:68:00:09:98:8b:da:67: b8:5e:41:b0:04:56:60:c0:ee:59:e3:6f:63:33:dc:89:a1:32: b9:98:48:49:1e:0d:bb:27:3e:39:99:d1:21:a4:83:c4:96:e1: 80:3d:ae:4d:04:a7:ff:b0:5e:ef:5d:a3:70:1d:4b:f4:87:de: e0:f1:82:6f:33:94:4e:59:a7:29:5e:61:2f:84:c8:04:1c:98: e6:64:22:c8 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICE8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNGNzUxMTAvBgNVBAUTKDg2N0M5NTFBQTY4Q0MxODdFNDI2QkQxRjU2MUMwQzlE QTk1ODFEMjQwHhcNMjQwNDMwMTc1NjAwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMxMzBiMC00YWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKpijz8rztjdIsh7O4UDEz5AQGbpidEZAbYjBY+XvaQqmAlc5hopvrzSMd/Q V5Q6u1zJKgaRiH6vFU+QYfolWxXHTsKmBTCMCzFZKYAcaWXhTj4Veujsd6WAjQNr nBYgnXLQQVRHJbZHRKFwrHbHb7KY4o4l6OWhYsM9Ha2yIjrBkwGWS1C9jSgG66jY 4gqqwfGPO2M8GB2hxzw9pC0IuGniNWdYlaE3rbwk9u+HLBFNqAOWb5mvnoMzmMha OPfhWKrYZ4rDKpenwy3Bo7RP5XU+AVvOMTFVNbuFz4fnSSihzJQsN5FJwzpq/m1W eQqVn0tCB1NWR+kOtNlqZkAByQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKV80miy AwQl4oiZba9SngS+WBrqMB8GA1UdIwQYMBaAFIZ8lRqmjMGH5Ca9H1YcDJ2pWB0k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0Y3NS83MjA2RDZGNDZD NkYxMUU4OUY2RTRFNjZDNEY5QUUwMi9obnlWR3FhTXdZZmtKcjBmVmh3TW5hbFlI U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hueVZHcWFNd1lma0pyMGZWaHdNbmFsWUhTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTNGNzUvNzIwNkQ2RjQ2QzZGMTFFODlGNkU0RTY2QzRGOUFFMDIvQjE4NTFCQzZC M0Q4MTFFQTlGOEZDQTBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJn1WgDBALfGhQwDQYJKoZIhvcNAQELBQADggEBAKOde+3+ 4mWovW7lJdV0o5hHQaCQ5sjEd3/tkzNb/BgPqzp5wZKkU9WmX5b/5FnNcabHPqRT lR9fISqMtXecblfaxagJc9/vWPt2oOp21RowscnPAyY8ku78JkQO7/3IExhcwkNb 06lnnh0YQ3CTZc5W8FlO+Lb5Prhe+8IwQ6kwvRnfg5HjFPhMhguIkj3w7C9wF+kh NSMgf50n+h5cy6cjBniaCwfWf/MXopsVaAAJmIvaZ7heQbAEVmDA7lnjb2Mz3Imh MrmYSEkeDbsnPjmZ0SGkg8SW4YA9rk0Ep/+wXu9do3AdS/SH3uDxgm8zlE5Zpyle YS+EyAQcmOZkIsg= -----END CERTIFICATE-----Generated at Fri May 31 20:34:10 2024 by rpki-client on console-ams.rpki-client.org