$ rpki-client -vvf rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/658CF9F2721411EEAC707910C4F9AE02.roa File: 658CF9F2721411EEAC707910C4F9AE02.roa (raw, json) Hash identifier: ZZDUXnqWBktvzLbgCqaw7CbFJvjtpkfDVEMt//M7XVU= Subject key identifier: 06:23:2F:EA:17:AC:0C:F7:BD:B5:A6:B6:F8:5F:BC:9D:36:55:35:6B Certificate issuer: /CN=A919D313/serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566 Certificate serial: 6C Authority key identifier: E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/658CF9F2721411EEAC707910C4F9AE02.roa Signing time: Tue 07 May 2024 07:39:54 +0000 ROA not before: Tue 07 May 2024 07:39:54 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 8220 IP address blocks: 103.138.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D313/serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566 Validity Not Before: May 7 07:39:54 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6639daca-da52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:07:7c:51:a7:5c:e0:c5:73:e8:ef:51:db:4b: a5:0b:8c:5a:c9:4c:61:91:39:cc:84:e7:6e:39:ff: 9d:a0:d9:66:60:73:ec:93:fd:76:69:0e:d4:96:3a: a4:b5:83:bb:2b:22:ed:fa:97:4b:fa:78:67:52:6b: d8:e2:86:e4:05:8e:94:24:b4:84:c1:1f:df:30:ff: 49:a1:31:7f:a8:ea:a3:da:c5:56:5f:95:60:19:30: ba:12:e2:60:c6:0b:ad:7c:3c:8b:ce:f8:4e:54:04: a4:cc:c0:a9:68:6a:a5:02:04:df:88:b4:7d:81:19: 2f:75:75:d2:c7:d6:10:04:37:8f:1c:28:a4:60:73: aa:94:ae:19:28:aa:e8:dc:6a:6a:fd:e7:c2:3e:2c: e6:7c:f1:ac:a1:42:74:40:75:b2:4c:9d:5c:33:f6: af:1f:94:8f:f0:67:46:d5:a1:73:36:df:88:a2:6e: 5b:dc:a2:e1:ac:b5:f4:25:22:ba:8b:b8:44:c2:e2: 94:01:76:44:bf:bd:0d:85:17:37:7f:85:91:68:15: 65:af:1e:70:f4:ef:66:0f:37:05:91:e4:f4:81:f2: 67:1a:fd:83:b8:4e:40:56:b3:ee:76:22:e7:2d:2b: c1:2e:b6:30:9c:3c:95:c4:3e:04:57:cf:51:24:ac: df:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:23:2F:EA:17:AC:0C:F7:BD:B5:A6:B6:F8:5F:BC:9D:36:55:35:6B X509v3 Authority Key Identifier: keyid:E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/658CF9F2721411EEAC707910C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.100.0/22 Signature Algorithm: sha256WithRSAEncryption a9:63:7a:8a:9b:6a:a2:04:47:b9:51:58:23:ec:99:c9:7d:bb: b0:35:86:0e:55:2a:35:46:23:f1:8b:35:2a:1e:bf:fa:05:cd: 4b:0b:83:07:cb:e6:7d:5d:38:b4:d1:8e:0b:65:d2:ed:b7:c1: 76:ec:e7:25:1c:10:cb:14:53:a5:c2:06:01:c0:58:6b:c0:7f: 68:69:10:fc:d2:24:d8:24:dd:11:a4:42:d9:09:fe:44:0a:97: be:61:2b:76:65:2a:45:3d:5d:e0:b5:50:ae:31:20:96:7c:c5: f2:56:57:4e:f7:9e:25:63:81:61:12:8e:15:8e:6b:33:af:95: 4c:29:7d:28:02:df:da:27:77:d6:71:02:77:fa:3b:2e:fc:3e: e2:e4:fd:2f:a1:42:0f:24:0e:09:4a:29:d5:8d:cf:34:30:43: 39:7e:98:1e:e2:2e:f6:ba:45:2b:e8:5c:99:c4:13:e2:90:33: 79:72:f0:46:d8:fc:e8:04:e7:f0:db:01:56:39:c9:91:db:82: e8:35:f1:95:cd:19:c4:94:e0:b9:ef:2c:70:09:65:49:d4:e9: d2:82:e1:60:f1:28:6f:0d:54:d8:4c:ce:2f:e5:1f:79:61:b2: c8:f1:e0:5b:0c:91:78:ba:7d:b4:aa:02:06:d7:8e:4a:35:32: e4:9e:ee:15 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDMxMzExMC8GA1UEBRMoRTEzQzQ3NERENDQ1NzFBOENFRjQwNjY5NEUwNEFENkFD NjFCMjU2NjAeFw0yNDA1MDcwNzM5NTRaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MzlkYWNhLWRhNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVB3xRp1zgxXPo71HbS6ULjFrJTGGROcyE5245/52g2WZgc+yT/XZpDtSWOqS1 g7srIu36l0v6eGdSa9jihuQFjpQktITBH98w/0mhMX+o6qPaxVZflWAZMLoS4mDG C618PIvO+E5UBKTMwKloaqUCBN+ItH2BGS91ddLH1hAEN48cKKRgc6qUrhkoqujc amr958I+LOZ88ayhQnRAdbJMnVwz9q8flI/wZ0bVoXM234iiblvcouGstfQlIrqL uETC4pQBdkS/vQ2FFzd/hZFoFWWvHnD072YPNwWR5PSB8mca/YO4TkBWs+52Iuct K8EutjCcPJXEPgRXz1EkrN8hAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUBiMv6hes DPe9taa2+F+8nTZVNWswHwYDVR0jBBgwFoAU4TxHTdRFcajO9AZpTgStasYbJWYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEMzEzLzBGMjA3OTc2NkVG NTExRUU4NERBNjk4MkM0RjlBRTAyLzRUeEhUZFJGY2FqTzlBWnBUZ1N0YXNZYkpX WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNFR4SFRkUkZjYWpPOUFacFRnU3Rhc1liSldZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDMxMy8wRjIwNzk3NjZFRjUxMUVFODREQTY5ODJDNEY5QUUwMi82NThDRjlGMjcy MTQxMUVFQUM3MDc5MTBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmeKZDANBgkqhkiG9w0BAQsFAAOCAQEAqWN6iptqogRHuVFY I+yZyX27sDWGDlUqNUYj8Ys1Kh6/+gXNSwuDB8vmfV04tNGOC2XS7bfBduznJRwQ yxRTpcIGAcBYa8B/aGkQ/NIk2CTdEaRC2Qn+RAqXvmErdmUqRT1d4LVQrjEglnzF 8lZXTveeJWOBYRKOFY5rM6+VTCl9KALf2id31nECd/o7Lvw+4uT9L6FCDyQOCUop 1Y3PNDBDOX6YHuIu9rpFK+hcmcQT4pAzeXLwRtj86ATn8NsBVjnJkduC6DXxlc0Z xJTgue8scAllSdTp0oLhYPEobw1U2EzOL+UfeWGyyPHgWwyReLp9tKoCBteOSjUy 5J7uFQ== -----END CERTIFICATE-----Generated at Fri May 31 10:42:50 2024 by rpki-client on console-fra.rpki-client.org