$ rpki-client -vvf rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/1BFF84B0131611E991379440C4F9AE02.roa File: 1BFF84B0131611E991379440C4F9AE02.roa (raw, json) Hash identifier: iC6LRZGwf2FGgFxAGczD/XcJVANVhOgDNLJbpYHlxpQ= Subject key identifier: 15:8D:3A:AF:54:46:0F:97:71:A4:41:1A:6B:4E:E9:E3:23:F2:7E:55 Certificate issuer: /CN=A911F7D0/serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Certificate serial: 102C Authority key identifier: 65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/1BFF84B0131611E991379440C4F9AE02.roa Signing time: Sat 24 Feb 2024 18:06:32 +0000 ROA not before: Sat 24 Feb 2024 18:06:32 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 138540 IP address blocks: 103.132.125.0/24 maxlen: 24 103.138.95.0/24 maxlen: 24 2001:df7:7d00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4140 (0x102c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F7D0/serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Validity Not Before: Feb 24 18:06:32 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65da3028-bfa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:93:33:58:6e:ba:7d:c0:ca:d6:e6:87:72:f9: 1e:9d:f1:83:50:a7:0d:2d:fb:5a:20:26:fd:43:bb: 29:2c:7e:c1:6d:7d:52:f9:7b:d9:ba:73:40:ef:9b: 53:2d:9e:0e:db:30:bb:81:fb:0e:7b:71:f5:4e:f0: 40:55:7a:33:1b:44:6e:c9:82:8d:61:f7:03:19:5a: db:0b:e0:3e:33:cd:6b:b7:12:26:fa:2f:c2:ff:c7: 81:9a:19:4a:4c:f9:24:96:3b:4f:4e:95:63:77:91: 00:9c:f0:cf:2c:e5:e6:da:d9:fd:00:5f:46:e8:cd: 77:ea:fe:03:57:97:4d:7e:fc:00:6d:99:ed:9f:8f: 7b:73:88:12:b2:7f:da:4c:a5:03:1b:11:c2:9f:33: c4:cc:84:0d:85:72:9d:34:9b:56:1f:e7:5d:8b:49: d7:7e:61:75:be:fa:6c:79:31:5c:f9:a3:79:37:22: 44:91:ad:21:d3:5f:25:43:f7:fa:8a:5f:26:14:a1: 00:a3:1e:13:fc:fb:4e:ba:cd:9b:da:24:90:98:ed: 6a:c3:a3:84:ac:38:c7:9a:fb:6b:84:90:af:0c:41: b0:de:af:f1:65:82:bd:68:fc:c3:c5:be:29:ed:2c: 04:a2:f7:ae:d9:df:2d:4b:7f:7a:48:7e:c1:24:c1: 5f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:8D:3A:AF:54:46:0F:97:71:A4:41:1A:6B:4E:E9:E3:23:F2:7E:55 X509v3 Authority Key Identifier: keyid:65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/1BFF84B0131611E991379440C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.132.125.0/24 103.138.95.0/24 IPv6: 2001:df7:7d00::/48 Signature Algorithm: sha256WithRSAEncryption 1c:a8:cd:92:24:3f:f0:db:20:c0:f0:6b:75:1d:e6:71:4c:67: 12:b4:0f:3f:44:11:25:34:4b:3d:da:ed:2c:cc:24:e4:09:06: ff:bf:0b:d5:41:07:d7:b1:4c:58:16:0b:b2:ed:85:85:72:b5: e9:a2:2b:e6:22:2d:ec:7d:3e:47:94:72:c3:66:47:f5:d9:8c: 8c:ef:0f:9d:62:3d:b1:c3:f1:80:55:8f:35:b2:60:a6:60:39: 59:90:f6:89:3e:12:a0:af:ed:a5:f4:76:b1:02:97:6c:e5:d5: 17:2e:79:22:c4:4a:7d:dc:b2:f8:4b:ff:52:b2:67:34:26:ab: 98:42:93:6c:71:8a:2d:8b:15:ab:fc:95:0c:3c:35:4e:95:7b: ff:8a:60:c6:d9:a4:85:0c:a9:cf:37:6e:f9:f4:b2:cf:d1:c9: 25:92:85:8c:a2:91:a6:65:5e:20:54:f0:db:60:16:53:6c:d5: c5:ca:cd:ca:4d:2f:2b:62:e4:ba:e9:f2:20:75:b6:3d:3b:e0: e7:c7:87:a5:5c:06:ef:eb:d4:33:32:ee:51:1b:b4:89:15:88: 60:5c:3a:03:53:9d:05:19:c9:1d:c1:34:00:2d:54:0d:76:66: c2:ca:f2:dc:e1:f3:34:86:3d:37:48:fd:73:5d:36:d9:73:c7: 4c:cf:8e:88 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICECwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY3RDAxMTAvBgNVBAUTKDY1RkNEMUYyNzREM0U3RDU4RTREMENBMjg1NThEMzRC NkIxNTJENjcwHhcNMjQwMjI0MTgwNjMyWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWRhMzAyOC1iZmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4pMzWG66fcDK1uaHcvkenfGDUKcNLftaICb9Q7spLH7BbX1S+XvZunNA75tT LZ4O2zC7gfsOe3H1TvBAVXozG0RuyYKNYfcDGVrbC+A+M81rtxIm+i/C/8eBmhlK TPkkljtPTpVjd5EAnPDPLOXm2tn9AF9G6M136v4DV5dNfvwAbZntn497c4gSsn/a TKUDGxHCnzPEzIQNhXKdNJtWH+ddi0nXfmF1vvpseTFc+aN5NyJEka0h018lQ/f6 il8mFKEAox4T/PtOus2b2iSQmO1qw6OErDjHmvtrhJCvDEGw3q/xZYK9aPzDxb4p 7SwEoveu2d8tS396SH7BJMFfvwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFBWNOq9U Rg+XcaRBGmtO6eMj8n5VMB8GA1UdIwQYMBaAFGX80fJ00+fVjk0MooVY00trFS1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjdEMC82NkEyOTk4MjEz MTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5V09UUXlpaFZqVFMyc1ZM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pmelI4blRUNTlXT1RReWloVmpUUzJzVkxXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUY3RDAvNjZBMjk5ODIxMzE0MTFFOTgzNEY3NzNCQzRGOUFFMDIvMUJGRjg0QjAx MzE2MTFFOTkxMzc5NDQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnhH0DBABnil8wDwQCAAIwCQMHACABDfd9ADANBgkqhkiG 9w0BAQsFAAOCAQEAHKjNkiQ/8NsgwPBrdR3mcUxnErQPP0QRJTRLPdrtLMwk5AkG /78L1UEH17FMWBYLsu2FhXK16aIr5iIt7H0+R5Ryw2ZH9dmMjO8PnWI9scPxgFWP NbJgpmA5WZD2iT4SoK/tpfR2sQKXbOXVFy55IsRKfdyy+Ev/UrJnNCarmEKTbHGK LYsVq/yVDDw1TpV7/4pgxtmkhQypzzdu+fSyz9HJJZKFjKKRpmVeIFTw22AWU2zV xcrNyk0vK2LkuunyIHW2PTvg58eHpVwG7+vUMzLuURu0iRWIYFw6A1OdBRnJHcE0 AC1UDXZmwsry3OHzNIY9N0j9c1022XPHTM+OiA== -----END CERTIFICATE-----Generated at Sat May 18 19:15:24 2024 by rpki-client on console-ams.rpki-client.org