$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/2E7C802A261711EEB93AAC74C4F9AE02.roa File: 2E7C802A261711EEB93AAC74C4F9AE02.roa (raw, json) Hash identifier: ci6hyF3t5tI7K8Pi8BH/1vF4QKnpok6GZyzzrAxuZzM= Subject key identifier: E1:AE:CA:FC:58:53:4B:A9:E1:C4:72:70:CC:A5:F7:92:7B:F1:4F:2E Certificate issuer: /CN=A919EA3B/serialNumber=42AC1887DF2C9FF468C00EBC06559AE1790B7D41 Certificate serial: 04 Authority key identifier: 42:AC:18:87:DF:2C:9F:F4:68:C0:0E:BC:06:55:9A:E1:79:0B:7D:41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/2E7C802A261711EEB93AAC74C4F9AE02.roa Signing time: Wed 19 Jul 2023 09:32:30 +0000 ROA not before: Wed 19 Jul 2023 09:32:30 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 138960 IP address blocks: 103.137.196.0/23 maxlen: 23 103.137.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.crl rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EA3B/serialNumber=42AC1887DF2C9FF468C00EBC06559AE1790B7D41 Validity Not Before: Jul 19 09:32:30 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=64b7adae-e8ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3a:82:7c:80:59:ac:a9:00:f2:f5:32:09:e5: be:d6:aa:26:e2:c2:82:3b:68:4e:a9:12:82:ee:a2: 8b:38:40:ec:64:95:93:95:b0:4e:34:61:31:4e:9b: a4:f3:ba:04:ef:e4:51:3c:4b:7b:ef:74:1c:fc:cd: 8a:17:2e:c0:15:58:1a:bf:80:cb:9a:d1:3d:2e:c8: 70:15:9c:2e:a2:cd:0a:ff:50:b0:b3:bd:68:a3:3a: 16:aa:ac:06:35:6e:6b:ae:88:d2:40:77:5f:eb:30: 7a:0e:ca:6d:21:b2:95:90:8e:2b:11:ed:13:21:1c: 0b:e6:8c:db:7b:f5:c8:9c:00:5d:06:c4:69:13:0f: 68:54:34:0e:8e:df:f9:f0:7f:09:20:6a:72:93:22: 10:fb:ba:4f:b0:9e:d3:90:ac:3b:54:f9:4f:8f:2d: a9:63:01:03:2d:cf:ed:a1:58:c4:9c:67:d9:34:a9: cd:24:6f:f1:8f:af:0e:48:3d:83:90:e0:62:1a:8e: 6b:6f:f5:8d:78:e8:05:35:1b:6c:b4:a4:7b:11:a9: 2b:13:b7:70:73:e1:c5:8c:a3:0f:41:15:8f:ef:8c: 76:7c:fb:be:3a:5f:94:59:c4:21:4f:68:31:48:3c: 6b:35:d4:fb:d6:6e:80:9f:ef:29:a4:41:67:df:e8: 4a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:AE:CA:FC:58:53:4B:A9:E1:C4:72:70:CC:A5:F7:92:7B:F1:4F:2E X509v3 Authority Key Identifier: keyid:42:AC:18:87:DF:2C:9F:F4:68:C0:0E:BC:06:55:9A:E1:79:0B:7D:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/2E7C802A261711EEB93AAC74C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.137.196.0/23 Signature Algorithm: sha256WithRSAEncryption b6:6f:0f:09:94:31:06:bb:b0:c2:7e:1f:81:54:d4:23:b4:48: 3f:ec:23:e1:18:c0:70:e3:0c:a9:f0:da:a3:34:59:15:0f:8b: 1e:ce:0b:ac:b4:21:c8:b0:6a:97:ed:14:82:4c:08:c0:cd:89: a9:6c:75:62:b6:f8:5a:7b:c9:35:5e:0c:b3:4d:ba:cd:ce:1e: 1f:eb:31:a8:52:ab:e3:13:b4:71:ee:f6:fa:50:17:ab:a9:d0: 41:15:2a:fe:a7:9c:f1:ce:1e:c9:8b:e4:9b:7e:31:bf:69:f5: cb:a4:74:5b:7f:e2:f3:89:06:fd:34:44:0b:c6:d4:d5:01:8c: 88:3c:78:5b:d1:35:2e:8b:95:5e:d3:c7:5e:7d:90:95:99:19: ec:dd:14:ef:5c:43:20:99:b4:10:a3:54:6e:4d:8e:2a:6f:96: fc:0b:66:c4:ed:ac:ca:a9:9c:d7:43:fe:20:42:b2:03:79:ee: 22:d7:47:f6:25:72:6a:2f:78:42:71:54:d2:77:93:db:0f:5c: 72:f7:c9:d7:07:1f:88:08:3e:2b:63:dc:aa:59:0a:40:f1:b9: a7:03:fc:4a:8c:f1:b5:2b:81:86:32:d6:b5:8b:3c:3e:1a:30: d3:1a:42:88:dd:c7:ec:68:cf:64:4c:9b:27:9d:df:e9:ca:bc: 58:e2:bb:9f -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RUEzQjExMC8GA1UEBRMoNDJBQzE4ODdERjJDOUZGNDY4QzAwRUJDMDY1NTlBRTE3 OTBCN0Q0MTAeFw0yMzA3MTkwOTMyMzBaFw0yNDA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY0YjdhZGFlLWU4YWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrOoJ8gFmsqQDy9TIJ5b7WqibiwoI7aE6pEoLuoos4QOxklZOVsE40YTFOm6Tz ugTv5FE8S3vvdBz8zYoXLsAVWBq/gMua0T0uyHAVnC6izQr/ULCzvWijOhaqrAY1 bmuuiNJAd1/rMHoOym0hspWQjisR7RMhHAvmjNt79cicAF0GxGkTD2hUNA6O3/nw fwkganKTIhD7uk+wntOQrDtU+U+PLaljAQMtz+2hWMScZ9k0qc0kb/GPrw5IPYOQ 4GIajmtv9Y146AU1G2y0pHsRqSsTt3Bz4cWMow9BFY/vjHZ8+746X5RZxCFPaDFI PGs11PvWboCf7ymkQWff6EqDAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU4a7K/FhT S6nhxHJwzKX3knvxTy4wHwYDVR0jBBgwFoAUQqwYh98sn/RowA68BlWa4XkLfUEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFQTNCLzg5RDAwNjBBMjYx NjExRUVCRTc2MTA1Q0M0RjlBRTAyL1Fxd1loOThzbl9Sb3dBNjhCbFdhNFhrTGZV RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUXF3WWg5OHNuX1Jvd0E2OEJsV2E0WGtMZlVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUEzQi84OUQwMDYwQTI2MTYxMUVFQkU3NjEwNUNDNEY5QUUwMi8yRTdDODAyQTI2 MTcxMUVFQjkzQUFDNzRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWeJxDANBgkqhkiG9w0BAQsFAAOCAQEAtm8PCZQxBruwwn4f gVTUI7RIP+wj4RjAcOMMqfDaozRZFQ+LHs4LrLQhyLBql+0UgkwIwM2JqWx1Yrb4 WnvJNV4Ms026zc4eH+sxqFKr4xO0ce72+lAXq6nQQRUq/qec8c4eyYvkm34xv2n1 y6R0W3/i84kG/TREC8bU1QGMiDx4W9E1LouVXtPHXn2QlZkZ7N0U71xDIJm0EKNU bk2OKm+W/AtmxO2syqmc10P+IEKyA3nuItdH9iVyai94QnFU0neT2w9ccvfJ1wcf iAg+K2PcqlkKQPG5pwP8SozxtSuBhjLWtYs8Phow0xpCiN3H7GjPZEybJ53f6cq8 WOK7nw== -----END CERTIFICATE-----Generated at Sat Jun 1 09:10:35 2024 by rpki-client on console-fra.rpki-client.org