$ rpki-client -vvf rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0E17B1AE78F511EC83E56014C4F9AE02.roa File: 0E17B1AE78F511EC83E56014C4F9AE02.roa (raw, json) Hash identifier: 6mPv2FPkPdVn8mEbOR89pKQkkNqTmbALuQL8Sady2qs= Subject key identifier: F3:1D:F1:76:3C:04:A2:84:42:B3:02:C2:A5:F9:F5:ED:C4:29:24:7D Certificate issuer: /CN=A919608D/serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9 Certificate serial: 0FE7 Authority key identifier: D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0E17B1AE78F511EC83E56014C4F9AE02.roa Signing time: Wed 10 Apr 2024 18:26:09 +0000 ROA not before: Wed 10 Apr 2024 18:26:09 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 136003 IP address blocks: 103.134.36.0/23 maxlen: 23 103.134.36.0/24 maxlen: 24 2404:5c40::/32 maxlen: 32 2404:5c40::/48 maxlen: 48 2404:5c40:1::/48 maxlen: 48 2404:5c40:2::/48 maxlen: 48 2404:5c40:3::/48 maxlen: 48 2404:5c40:4::/48 maxlen: 48 2404:5c40:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 18:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4071 (0xfe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919608D/serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9 Validity Not Before: Apr 10 18:26:09 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=6616d9c1-17a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7f:1a:59:98:2e:41:d6:88:0a:be:a6:ee:77: 60:5d:49:0c:f0:2c:39:fa:cd:73:e8:50:71:ea:9e: 66:f9:16:9c:fa:b7:9e:c1:ff:f8:a2:65:01:61:54: 45:a5:c4:72:f2:fd:1c:75:70:6f:ea:b9:80:0c:d3: 93:01:82:df:37:f7:21:8c:92:57:23:0e:fb:10:b1: 35:3b:93:10:38:a4:03:86:64:d5:d7:58:f7:c1:30: 6b:96:83:37:81:f0:f8:c6:d1:57:88:79:d6:e0:62: c5:a7:6b:8a:6f:2d:8b:93:82:d0:1f:92:f9:57:7c: 79:e3:cb:8f:20:90:ce:c3:88:70:25:16:e4:ac:48: e0:5e:aa:da:74:82:9b:43:e1:d0:ac:7d:d3:36:cd: 18:ef:46:8b:24:ad:0c:04:23:ab:3e:21:57:b2:eb: 15:9a:1c:13:fd:ba:12:14:5f:02:0d:f8:0b:6e:6f: e8:c3:fc:bf:a4:93:84:1a:26:26:f0:b8:0f:8c:6d: 09:a1:02:23:9a:06:79:c8:8f:2e:0f:8c:ad:e0:71: cc:58:cf:3d:ec:77:a8:c2:29:f2:ef:78:f4:44:dc: f8:cb:c1:0a:8b:f6:5b:f7:59:b3:c8:e2:bb:00:b9: f3:aa:2c:58:5a:ff:0b:eb:31:89:68:e4:02:08:70: 28:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1D:F1:76:3C:04:A2:84:42:B3:02:C2:A5:F9:F5:ED:C4:29:24:7D X509v3 Authority Key Identifier: keyid:D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0E17B1AE78F511EC83E56014C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.134.36.0/23 IPv6: 2404:5c40::/32 Signature Algorithm: sha256WithRSAEncryption a1:a3:be:e5:fd:00:4e:59:dc:4e:21:68:e1:89:f8:43:9e:0c: 3d:dd:9d:a3:3a:88:40:37:ce:a5:a5:e9:31:ed:22:e3:fb:43: 54:5e:4b:45:cb:1f:d0:6e:86:5f:f5:66:20:d2:76:e0:ff:a3: 59:83:cb:b1:9d:ea:56:13:d7:5c:a1:ab:8d:27:f5:5a:32:1a: b3:af:b3:d6:9e:ee:79:dd:7b:1a:98:f1:52:94:c1:60:6c:c6: 2d:b4:22:28:69:6c:32:4f:79:82:45:55:f3:e5:98:ef:2c:61: 9c:f5:93:0a:86:a9:e9:1b:15:01:c8:30:07:d7:cd:2f:65:10: 71:4b:ee:4d:4f:b2:87:5d:a6:74:80:04:4c:f5:23:cc:92:74: 65:94:55:08:09:91:0a:d0:a0:34:14:5c:56:b7:47:96:41:86: 4c:99:8b:50:b6:19:a4:a3:bf:75:26:ef:35:0d:be:ce:66:18: c4:14:f9:b3:03:c8:84:32:aa:38:f0:91:e2:44:ba:76:b3:e9: c8:7c:c4:6f:59:20:0c:3a:ba:8b:dd:31:8c:07:fc:b1:57:96: 9a:1f:1c:61:28:5f:fe:13:7c:4f:37:14:8d:7d:07:31:51:34: 79:07:0d:af:0f:a8:f6:53:94:fa:ed:6b:31:6b:cc:0d:04:1b: 74:75:91:a2 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICD+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTYwOEQxMTAvBgNVBAUTKEQyRDgwODA0OUE0NkVENzk3QzIxRjlGNjAyNTIzNDU2 NDYzMUIzRjkwHhcNMjQwNDEwMTgyNjA5WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjE2ZDljMS0xN2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsX8aWZguQdaICr6m7ndgXUkM8Cw5+s1z6FBx6p5m+Rac+reewf/4omUBYVRF pcRy8v0cdXBv6rmADNOTAYLfN/chjJJXIw77ELE1O5MQOKQDhmTV11j3wTBrloM3 gfD4xtFXiHnW4GLFp2uKby2Lk4LQH5L5V3x548uPIJDOw4hwJRbkrEjgXqradIKb Q+HQrH3TNs0Y70aLJK0MBCOrPiFXsusVmhwT/boSFF8CDfgLbm/ow/y/pJOEGiYm 8LgPjG0JoQIjmgZ5yI8uD4yt4HHMWM897Heowiny73j0RNz4y8EKi/Zb91mzyOK7 ALnzqixYWv8L6zGJaOQCCHAo1wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFPMd8XY8 BKKEQrMCwqX59e3EKSR9MB8GA1UdIwQYMBaAFNLYCASaRu15fCH59gJSNFZGMbP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjA4RC84MTA3M0EzMDI4 NzcxMUU5OTQyMUM4NENDNEY5QUUwMi8wdGdJQkpwRzdYbDhJZm4yQWxJMFZrWXhz X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB0Z0lCSnBHN1hsOElmbjJBbEkwVmtZeHNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTYwOEQvODEwNzNBMzAyODc3MTFFOTk0MjFDODRDQzRGOUFFMDIvMEUxN0IxQUU3 OEY1MTFFQzgzRTU2MDE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnhiQwDQQCAAIwBwMFACQEXEAwDQYJKoZIhvcNAQELBQAD ggEBAKGjvuX9AE5Z3E4haOGJ+EOeDD3dnaM6iEA3zqWl6THtIuP7Q1ReS0XLH9Bu hl/1ZiDSduD/o1mDy7Gd6lYT11yhq40n9VoyGrOvs9ae7nndexqY8VKUwWBsxi20 IihpbDJPeYJFVfPlmO8sYZz1kwqGqekbFQHIMAfXzS9lEHFL7k1PsoddpnSABEz1 I8ySdGWUVQgJkQrQoDQUXFa3R5ZBhkyZi1C2GaSjv3Um7zUNvs5mGMQU+bMDyIQy qjjwkeJEunaz6ch8xG9ZIAw6uovdMYwH/LFXlpofHGEoX/4TfE83FI19BzFRNHkH Da8PqPZTlPrtazFrzA0EG3R1kaI= -----END CERTIFICATE-----Generated at Tue Jun 18 21:00:25 2024 by rpki-client on console-ams.rpki-client.org