$ rpki-client -vvf rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/C355C10243E611E8843B4E66C4F9AE02.roa File: C355C10243E611E8843B4E66C4F9AE02.roa (raw, json) Hash identifier: H1/wMzuuXXUoNuPK1c3O8xbMg0+A7svPlNNuYm9uqvk= Subject key identifier: B1:10:87:CA:49:47:C0:2E:79:B2:D7:30:15:63:EE:3D:A2:A2:2C:D4 Certificate issuer: /CN=A919C233/serialNumber=DBC21849BB4C1704D23193C41B70C66B1A96562F Certificate serial: 147D Authority key identifier: DB:C2:18:49:BB:4C:17:04:D2:31:93:C4:1B:70:C6:6B:1A:96:56:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/C355C10243E611E8843B4E66C4F9AE02.roa Signing time: Tue 28 May 2024 17:56:00 +0000 ROA not before: Tue 28 May 2024 17:56:00 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 137572 IP address blocks: 103.113.224.0/22 maxlen: 24 2402:c440::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.crl rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 17:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5245 (0x147d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C233/serialNumber=DBC21849BB4C1704D23193C41B70C66B1A96562F Validity Not Before: May 28 17:56:00 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66561ab0-fdfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:1d:70:00:e1:85:b3:66:28:44:c3:b8:27:01: 34:68:05:cb:49:bb:c4:f9:08:d3:f5:d2:29:60:47: ef:93:29:49:6a:09:48:c6:a1:1a:16:73:45:2f:59: 75:e5:3c:bd:6c:ef:b9:00:d4:6a:8f:bb:d6:51:67: fc:1a:bb:c7:34:05:61:68:2b:d3:f5:2d:0b:a7:6f: df:03:74:fd:cc:e3:ee:09:7c:81:6d:c6:d5:18:75: df:00:b5:fe:9b:a8:a1:30:73:ab:f7:c0:8d:9a:51: f6:21:0f:32:5f:03:5b:8e:fb:b9:a7:fb:c0:fb:31: 11:45:65:ed:96:28:89:b9:49:62:67:e4:9b:c7:63: d7:83:71:8e:5d:2b:45:95:3e:6c:f7:0f:69:09:f9: ef:db:af:d0:7b:74:3a:41:f1:c9:69:65:60:93:05: 6d:3a:98:74:8d:18:13:99:e0:47:02:47:64:f6:7b: ac:6b:d5:d2:19:66:df:91:82:a1:30:87:1d:20:48: a6:02:ef:1b:92:a6:8d:a6:d6:27:9f:09:d5:37:80: 7b:d7:b9:2f:cd:b1:9f:5d:ef:1f:f6:0a:4e:14:ca: ce:f7:ee:00:fb:f7:f6:33:60:8c:5c:41:53:ed:23: 88:ac:27:92:5e:97:a9:28:ac:08:05:ae:ea:79:e4: 63:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:10:87:CA:49:47:C0:2E:79:B2:D7:30:15:63:EE:3D:A2:A2:2C:D4 X509v3 Authority Key Identifier: keyid:DB:C2:18:49:BB:4C:17:04:D2:31:93:C4:1B:70:C6:6B:1A:96:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/C355C10243E611E8843B4E66C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.113.224.0/22 IPv6: 2402:c440::/32 Signature Algorithm: sha256WithRSAEncryption 69:29:d1:6d:2e:62:47:43:6c:fb:0b:d3:cb:a6:4d:c6:03:c4: b2:d1:f6:1a:2d:4d:b6:b8:13:70:80:c9:47:15:8d:3e:31:94: 1e:22:55:23:69:86:66:ae:30:c4:04:fe:36:6a:e8:35:36:30: 98:63:c4:e8:09:9f:46:0d:e3:f2:41:58:42:bf:29:39:46:01: 83:42:aa:64:72:e9:80:f4:29:76:6f:db:27:b2:ef:a4:4d:e2: 17:e8:a3:b4:3f:4f:9c:9d:58:e9:11:e5:2e:79:e5:b3:d2:fa: 4c:25:95:67:62:b4:39:47:d1:d7:37:7d:6a:30:d4:7b:ab:1c: 99:fd:9b:67:bd:a3:22:3d:85:99:07:6b:31:17:7a:97:de:bb: 7a:99:18:94:8c:e1:06:8d:25:07:18:41:87:1c:18:a7:85:da: 6f:ae:70:a0:b9:8b:8a:cd:0e:e9:43:46:5b:9f:6f:69:62:9a: 43:7d:6f:5e:b5:c0:0b:ce:6a:1f:1a:9e:56:a4:20:3a:e5:14: e8:44:c0:63:bb:fe:0b:6d:f8:75:87:41:96:a2:90:90:4a:1f: ff:b5:cb:1c:9f:68:38:7c:b6:c0:8f:f8:f6:6b:9f:06:8e:45: 2f:97:b2:f3:72:59:01:0e:e0:e0:ed:a2:3a:85:47:de:a7:e5: 18:d1:35:00 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICFH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMyMzMxMTAvBgNVBAUTKERCQzIxODQ5QkI0QzE3MDREMjMxOTNDNDFCNzBDNjZC MUE5NjU2MkYwHhcNMjQwNTI4MTc1NjAwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU2MWFiMC1mZGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6R1wAOGFs2YoRMO4JwE0aAXLSbvE+QjT9dIpYEfvkylJaglIxqEaFnNFL1l1 5Ty9bO+5ANRqj7vWUWf8GrvHNAVhaCvT9S0Lp2/fA3T9zOPuCXyBbcbVGHXfALX+ m6ihMHOr98CNmlH2IQ8yXwNbjvu5p/vA+zERRWXtliiJuUliZ+Sbx2PXg3GOXStF lT5s9w9pCfnv26/Qe3Q6QfHJaWVgkwVtOph0jRgTmeBHAkdk9nusa9XSGWbfkYKh MIcdIEimAu8bkqaNptYnnwnVN4B717kvzbGfXe8f9gpOFMrO9+4A+/f2M2CMXEFT 7SOIrCeSXpepKKwIBa7qeeRjWwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFLEQh8pJ R8AuebLXMBVj7j2ioizUMB8GA1UdIwQYMBaAFNvCGEm7TBcE0jGTxBtwxmsallYv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzIzMy8xRkRBRkQ2MjQz RTYxMUU4QkM0MTVGNjVDNEY5QUUwMi8yOElZU2J0TUZ3VFNNWlBFRzNER2F4cVdW aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI4SVlTYnRNRndUU01aUEVHM0RHYXhxV1ZpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUMyMzMvMUZEQUZENjI0M0U2MTFFOEJDNDE1RjY1QzRGOUFFMDIvQzM1NUMxMDI0 M0U2MTFFODg0M0I0RTY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnceAwDQQCAAIwBwMFACQCxEAwDQYJKoZIhvcNAQELBQAD ggEBAGkp0W0uYkdDbPsL08umTcYDxLLR9hotTba4E3CAyUcVjT4xlB4iVSNphmau MMQE/jZq6DU2MJhjxOgJn0YN4/JBWEK/KTlGAYNCqmRy6YD0KXZv2yey76RN4hfo o7Q/T5ydWOkR5S555bPS+kwllWditDlH0dc3fWow1HurHJn9m2e9oyI9hZkHazEX epfeu3qZGJSM4QaNJQcYQYccGKeF2m+ucKC5i4rNDulDRlufb2limkN9b161wAvO ah8anlakIDrlFOhEwGO7/gtt+HWHQZaikJBKH/+1yxyfaDh8tsCP+PZrnwaORS+X svNyWQEO4ODtojqFR96n5RjRNQA= -----END CERTIFICATE-----Generated at Sun Jun 2 18:40:07 2024 by rpki-client on console-fra.rpki-client.org