$ rpki-client -vvf rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/0F291AFE9D2811EC83448E6FC4F9AE02.roa File: 0F291AFE9D2811EC83448E6FC4F9AE02.roa (raw, json) Hash identifier: guTq71O2LSxBtq9wp1j3np+TPnuYZq23yDrd9yyvAgk= Subject key identifier: 24:21:E7:FC:07:F4:4E:9D:39:64:04:8C:3A:70:0D:21:FC:B9:D0:A1 Certificate issuer: /CN=A9118B32/serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995 Certificate serial: 02BE Authority key identifier: B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/0F291AFE9D2811EC83448E6FC4F9AE02.roa Signing time: Sun 17 Mar 2024 03:05:10 +0000 ROA not before: Sun 17 Mar 2024 03:05:10 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 149521 IP address blocks: 103.182.118.0/23 maxlen: 23 103.182.118.0/24 maxlen: 24 103.182.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 702 (0x2be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118B32/serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995 Validity Not Before: Mar 17 03:05:10 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65f65de6-b284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e3:80:b2:77:35:f6:ac:66:97:7e:d3:f8:9f: 6f:49:15:46:1e:79:9e:1b:f0:2a:db:30:84:ab:d6: 9a:fe:b3:26:33:d5:1c:1c:d6:7f:2b:cc:c1:dc:8c: 74:9b:77:b7:bf:ac:09:e4:82:97:24:b3:4d:23:e7: fa:35:19:ba:14:82:06:22:7c:92:40:53:c8:3b:ab: 2e:d4:77:b1:76:0e:fa:ac:e7:f6:d4:02:81:8d:5c: 74:36:81:34:46:93:6b:26:f6:da:0c:79:41:01:8b: 85:3d:52:0a:d3:ca:47:87:79:e8:b4:4d:e0:5f:a9: 1f:8d:d3:0a:04:a7:ee:ef:61:38:9d:92:91:4c:39: 4e:2d:9a:e4:2b:af:58:1a:8c:6f:ff:ab:e9:82:59: 4a:2d:83:8f:ac:4c:dd:37:59:6b:88:3c:29:dc:ad: b6:3e:c4:ca:3b:c3:f4:91:e2:3d:20:85:ef:b6:0c: 93:9f:1a:13:c4:35:19:7c:66:8d:8e:84:62:30:cf: 07:b1:4b:c4:8d:3b:78:b4:9d:92:3c:4d:71:73:c0: 59:70:c1:93:6a:11:f5:a6:a5:9f:ce:5b:e1:be:d4: 71:a5:65:88:58:c9:d5:cd:f4:a6:59:76:3f:1a:4b: 43:55:29:37:a3:ba:49:f8:ee:49:05:78:f1:e9:6a: 6b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:21:E7:FC:07:F4:4E:9D:39:64:04:8C:3A:70:0D:21:FC:B9:D0:A1 X509v3 Authority Key Identifier: keyid:B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/0F291AFE9D2811EC83448E6FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.182.118.0/23 Signature Algorithm: sha256WithRSAEncryption a7:94:39:32:85:95:ed:64:e9:a3:25:18:b9:b8:53:ad:fb:a7: e7:bd:7f:d0:17:29:56:bc:4e:e7:ab:52:e4:a1:bc:5a:47:99: 95:ad:30:60:87:38:cd:1a:9b:2f:08:69:9a:53:77:53:9c:3e: a8:e8:0b:9e:d4:ef:02:fd:e4:e6:8e:4c:70:f0:a4:ac:da:f0: 41:1d:ce:6a:e5:67:26:41:b7:a8:91:9c:24:ce:0c:f7:3c:de: a8:df:7e:02:bd:19:74:fb:31:da:2c:9c:97:36:f1:a3:b4:ee: 11:30:61:90:01:2f:bb:1d:4d:92:39:fa:34:82:1a:b7:39:6e: 40:06:34:39:71:97:4b:85:75:23:57:d9:c3:29:40:e8:ce:6b: e4:1b:d1:63:ec:d1:57:da:75:31:d3:6e:55:21:0e:4d:67:c3: c4:59:e3:da:1b:10:5e:f6:b6:48:f2:33:f2:00:2c:76:5e:2a: 6e:ca:fe:43:50:64:0c:53:f8:38:17:15:41:51:a6:f0:4b:bb: db:3b:42:17:8f:29:32:86:85:e3:6d:94:6a:01:82:4b:da:54: cb:e2:2e:d9:55:4b:14:48:22:14:a3:b7:14:a5:4e:6d:3d:3a: db:6b:88:fc:3a:a5:d2:17:90:55:b0:5b:57:ba:c8:eb:4c:99: 58:dc:75:63 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThCMzIxMTAvBgNVBAUTKEI2MTEwM0E1QzlDQzYwRUFEMTg4QTJGOUZEMTFFNjNE NTIzM0Q5OTUwHhcNMjQwMzE3MDMwNTEwWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NWY2NWRlNi1iMjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOOAsnc19qxml37T+J9vSRVGHnmeG/Aq2zCEq9aa/rMmM9UcHNZ/K8zB3Ix0 m3e3v6wJ5IKXJLNNI+f6NRm6FIIGInySQFPIO6su1Hexdg76rOf21AKBjVx0NoE0 RpNrJvbaDHlBAYuFPVIK08pHh3notE3gX6kfjdMKBKfu72E4nZKRTDlOLZrkK69Y Goxv/6vpgllKLYOPrEzdN1lriDwp3K22PsTKO8P0keI9IIXvtgyTnxoTxDUZfGaN joRiMM8HsUvEjTt4tJ2SPE1xc8BZcMGTahH1pqWfzlvhvtRxpWWIWMnVzfSmWXY/ GktDVSk3o7pJ+O5JBXjx6WprYQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCQh5/wH 9E6dOWQEjDpwDSH8udChMB8GA1UdIwQYMBaAFLYRA6XJzGDq0Yii+f0R5j1SM9mV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEIzMi9GRjc3MUJCQzlE MjUxMUVDODVGREYzNkVDNEY5QUUwMi90aEVEcGNuTVlPclJpS0w1X1JIbVBWSXoy WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RoRURwY25NWU9yUmlLTDVfUkhtUFZJejJaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MThCMzIvRkY3NzFCQkM5RDI1MTFFQzg1RkRGMzZFQzRGOUFFMDIvMEYyOTFBRkU5 RDI4MTFFQzgzNDQ4RTZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFntnYwDQYJKoZIhvcNAQELBQADggEBAKeUOTKFle1k6aMl GLm4U637p+e9f9AXKVa8TuerUuShvFpHmZWtMGCHOM0amy8IaZpTd1OcPqjoC57U 7wL95OaOTHDwpKza8EEdzmrlZyZBt6iRnCTODPc83qjffgK9GXT7MdosnJc28aO0 7hEwYZABL7sdTZI5+jSCGrc5bkAGNDlxl0uFdSNX2cMpQOjOa+Qb0WPs0VfadTHT blUhDk1nw8RZ49obEF72tkjyM/IALHZeKm7K/kNQZAxT+DgXFUFRpvBLu9s7QheP KTKGheNtlGoBgkvaVMviLtlVSxRIIhSjtxSlTm09OttriPw6pdIXkFWwW1e6yOtM mVjcdWM= -----END CERTIFICATE-----Generated at Sun May 19 03:48:50 2024 by rpki-client on console-fra.rpki-client.org