$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/5533E6AEBD3711EB8D76EF31C4F9AE02.roa File: 5533E6AEBD3711EB8D76EF31C4F9AE02.roa (raw, json) Hash identifier: WALscRknOOfWfuWELmo7B7jUjxlqno4poZ1zMYtG2IA= Subject key identifier: 54:82:D6:67:97:F4:7B:7A:13:42:34:24:14:03:B7:A8:BE:40:D4:CE Certificate issuer: /CN=A919CAB5/serialNumber=5723794CD8226B331FA764DB9E41F5E994BD1495 Certificate serial: 0557 Authority key identifier: 57:23:79:4C:D8:22:6B:33:1F:A7:64:DB:9E:41:F5:E9:94:BD:14:95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/5533E6AEBD3711EB8D76EF31C4F9AE02.roa Signing time: Wed 29 May 2024 01:36:44 +0000 ROA not before: Wed 29 May 2024 01:36:44 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 131273 IP address blocks: 103.68.138.0/24 maxlen: 24 103.117.106.0/24 maxlen: 24 103.166.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.crl rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 01:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1367 (0x557) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CAB5/serialNumber=5723794CD8226B331FA764DB9E41F5E994BD1495 Validity Not Before: May 29 01:36:44 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=665686ac-bc4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5d:43:de:f9:a7:e2:e9:46:db:c3:b1:b1:ab: 7a:49:bf:0f:5a:af:a0:0d:8c:d7:5a:7e:11:fa:ee: 68:06:fc:d6:9f:38:e8:ad:42:3d:62:b9:05:a2:a4: 5e:47:8f:be:1a:ff:80:20:09:aa:35:2e:ad:c1:7f: c9:0b:2d:87:dd:ea:66:98:43:08:b0:04:92:25:99: e4:34:50:a8:72:7e:15:76:e4:50:1b:31:11:10:64: 5d:0c:32:a2:12:a2:39:5b:79:9c:e5:9e:d1:3f:fa: 9d:31:d6:a0:4e:b4:c9:d8:ea:2b:e6:af:0c:ed:72: 20:0c:f2:8f:22:cd:98:8e:33:1a:bf:6e:b5:4b:30: 98:9f:a9:d1:51:40:bb:28:fa:c2:99:0f:cd:31:2c: ef:69:fa:81:c2:7c:7b:fb:2c:f9:8c:25:02:30:e2: 9e:db:8d:63:8a:91:00:4b:2f:b5:74:43:ba:40:07: d4:f7:9f:40:df:ad:8c:4f:ca:36:38:3f:d1:1a:07: af:6b:10:e7:e7:7e:d5:a6:1a:8e:a4:78:be:fd:5a: 30:60:b2:1a:a6:d5:a5:8d:37:ae:b4:ca:a9:db:7b: 1a:f9:56:89:c6:a4:e4:b5:5a:80:2d:6a:88:56:14: da:db:1d:3c:3d:b9:30:b4:0c:d6:6e:8a:19:ca:db: 69:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:82:D6:67:97:F4:7B:7A:13:42:34:24:14:03:B7:A8:BE:40:D4:CE X509v3 Authority Key Identifier: keyid:57:23:79:4C:D8:22:6B:33:1F:A7:64:DB:9E:41:F5:E9:94:BD:14:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/5533E6AEBD3711EB8D76EF31C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.68.138.0/24 103.117.106.0/24 103.166.81.0/24 Signature Algorithm: sha256WithRSAEncryption 32:1b:61:45:75:71:e0:de:8d:52:61:4d:b6:3e:c3:8f:30:71: 8d:76:a4:31:08:95:45:6d:98:f9:dd:86:14:2e:0d:3c:cb:e6: 2c:a9:3d:42:1f:10:97:40:22:04:18:fb:fc:df:c2:68:68:86: d2:81:e9:33:72:54:0d:27:c2:68:28:f2:e1:26:4b:0e:ab:e2: de:de:5f:48:b8:2d:18:16:85:99:ad:19:4c:5f:6d:ba:89:22: ec:6e:15:00:cf:e0:b5:df:a3:3f:d5:aa:6c:64:37:d9:ba:03: 09:af:7b:c8:7d:42:a8:6a:70:b8:ee:b0:07:80:72:02:84:4b: b9:72:74:32:2e:77:0d:02:ca:91:ff:91:06:81:af:0b:44:de: 6a:b8:50:ac:42:91:16:be:56:44:dd:06:80:7b:8a:be:6c:77: b3:de:12:8a:1b:0e:36:12:b2:6c:b1:f0:48:4c:f6:19:4c:3a: db:9a:a7:b3:a9:17:52:c8:ea:86:e8:c4:47:f5:53:aa:88:5d: de:fb:3d:10:5e:e4:77:ea:1e:b1:0a:eb:64:2f:6e:8f:30:94: 43:24:91:14:6e:64:57:22:71:8f:99:71:7a:9e:bf:a6:ce:91: c7:7d:8e:1b:e8:ed:5b:55:b0:3b:12:e2:76:61:ac:3a:2a:39: 68:67:dc:39 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBQjUxMTAvBgNVBAUTKDU3MjM3OTRDRDgyMjZCMzMxRkE3NjREQjlFNDFGNUU5 OTRCRDE0OTUwHhcNMjQwNTI5MDEzNjQ0WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU2ODZhYy1iYzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAql1D3vmn4ulG28Oxsat6Sb8PWq+gDYzXWn4R+u5oBvzWnzjorUI9YrkFoqRe R4++Gv+AIAmqNS6twX/JCy2H3epmmEMIsASSJZnkNFCocn4VduRQGzEREGRdDDKi EqI5W3mc5Z7RP/qdMdagTrTJ2Oor5q8M7XIgDPKPIs2YjjMav261SzCYn6nRUUC7 KPrCmQ/NMSzvafqBwnx7+yz5jCUCMOKe241jipEASy+1dEO6QAfU959A362MT8o2 OD/RGgevaxDn537VphqOpHi+/VowYLIaptWljTeutMqp23sa+VaJxqTktVqALWqI VhTa2x08PbkwtAzWbooZyttpdwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFFSC1meX 9Ht6E0I0JBQDt6i+QNTOMB8GA1UdIwQYMBaAFFcjeUzYImszH6dk255B9emUvRSV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0FCNS83MkZCQUQ4OEE3 RDAxMUVCQkE1MTE1MjJDNEY5QUUwMi9WeU41VE5naWF6TWZwMlRibmtIMTZaUzlG SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z5TjVUTmdpYXpNZnAyVGJua0gxNlpTOUZKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUNBQjUvNzJGQkFEODhBN0QwMTFFQkJBNTExNTIyQzRGOUFFMDIvNTUzM0U2QUVC RDM3MTFFQjhENzZFRjMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABnRIoDBABndWoDBABnplEwDQYJKoZIhvcNAQELBQADggEB ADIbYUV1ceDejVJhTbY+w48wcY12pDEIlUVtmPndhhQuDTzL5iypPUIfEJdAIgQY +/zfwmhohtKB6TNyVA0nwmgo8uEmSw6r4t7eX0i4LRgWhZmtGUxfbbqJIuxuFQDP 4LXfoz/VqmxkN9m6Awmve8h9QqhqcLjusAeAcgKES7lydDIudw0CypH/kQaBrwtE 3mq4UKxCkRa+VkTdBoB7ir5sd7PeEoobDjYSsmyx8EhM9hlMOtuap7OpF1LI6obo xEf1U6qIXd77PRBe5HfqHrEK62Qvbo8wlEMkkRRuZFcicY+ZcXqev6bOkcd9jhvo 7VtVsDsS4nZhrDoqOWhn3Dk= -----END CERTIFICATE-----Generated at Sat Jun 1 04:07:29 2024 by rpki-client on console-ams.rpki-client.org