$ rpki-client -vvf rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/36A82D708CAA11EB9ED48C70C4F9AE02.roa File: 36A82D708CAA11EB9ED48C70C4F9AE02.roa (raw, json) Hash identifier: 1GqTHSpHb6WGQwql+WSWEhJDz2OJJnI/BFyxw7P/f3E= Subject key identifier: AF:FA:49:C4:EF:E5:FA:68:E5:4A:05:FA:F8:17:44:E2:83:6D:0E:03 Certificate issuer: /CN=A912542C/serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE Certificate serial: 0594 Authority key identifier: DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/36A82D708CAA11EB9ED48C70C4F9AE02.roa Signing time: Sun 07 Apr 2024 01:03:08 +0000 ROA not before: Sun 07 Apr 2024 01:03:08 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 141381 IP address blocks: 103.157.244.0/23 maxlen: 23 103.157.244.0/24 maxlen: 24 103.157.245.0/24 maxlen: 24 2001:df2:33c0::/48 maxlen: 48 2001:df5:3680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1428 (0x594) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912542C/serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE Validity Not Before: Apr 7 01:03:08 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6611f0cc-6351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b6:06:a4:78:7f:cb:d3:e0:02:18:ad:70:94: 84:3b:60:d0:c9:5a:88:b8:11:3f:10:f9:14:47:54: ff:40:85:64:59:10:c3:90:90:9b:86:2e:ba:26:f4: 18:9d:a0:35:9a:0b:71:1b:33:41:7f:cd:63:5a:79: d2:d0:0a:a5:7d:3e:5d:e5:1d:e1:cf:bb:27:df:08: 63:60:ae:04:49:dd:1a:e8:69:4c:87:a3:81:38:75: 3c:f9:7f:c0:38:97:1c:ca:ee:31:3c:4e:4e:50:e4: 25:26:97:e1:70:29:ef:aa:1a:7e:de:d3:25:25:08: 74:e7:a2:3c:f2:7e:cd:79:db:d0:5c:20:07:11:f4: 2b:65:c5:d2:2c:de:8d:b6:81:1c:e6:f6:a1:1f:37: 71:f7:ad:fb:0c:fe:c8:b1:f3:4a:7c:bd:b1:17:fd: 25:81:11:07:8e:08:04:bc:1a:0c:48:15:ef:79:76: fa:ad:f8:23:30:ca:22:67:44:ef:da:d0:15:ce:d3: 4a:27:95:f7:56:09:ef:d8:7f:29:84:10:82:ab:dc: 34:0b:10:a7:db:75:90:a9:cc:cd:9b:f8:d5:7f:16: 78:be:c3:77:b0:26:c6:60:07:2b:e9:06:b6:43:bb: cb:20:c3:21:7e:27:a5:31:20:ba:64:e5:3b:29:67: 27:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FA:49:C4:EF:E5:FA:68:E5:4A:05:FA:F8:17:44:E2:83:6D:0E:03 X509v3 Authority Key Identifier: keyid:DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/36A82D708CAA11EB9ED48C70C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.157.244.0/23 IPv6: 2001:df2:33c0::/48 2001:df5:3680::/48 Signature Algorithm: sha256WithRSAEncryption eb:c3:b4:a4:1f:8f:dc:f8:d7:9e:65:ce:b6:f5:ec:e2:f4:bf: 98:67:72:b8:1d:9a:f9:c4:96:aa:62:4d:28:e0:8e:d4:d0:3a: 82:a2:ef:42:cb:04:6f:04:17:92:29:07:6f:f1:d0:eb:64:59: f4:57:93:69:cf:ca:ef:06:f3:b7:33:83:67:b4:4e:43:27:44: 09:9c:42:25:b7:e5:9a:a0:b9:3a:d9:c8:e4:72:0f:08:6c:46: ee:ac:b2:37:34:41:05:3a:59:0c:5d:9c:7b:1e:bd:47:c7:42: ac:9c:95:61:21:a1:74:1c:a0:b3:1a:20:dd:99:27:58:e2:21: 0f:63:79:12:c5:1b:e5:be:97:b6:79:ce:93:1e:16:cf:e2:37: c8:45:8e:43:0c:06:fc:37:2e:5e:77:0e:46:1f:8a:b6:88:ff: 79:62:18:c4:9f:11:bf:a6:2e:37:80:3d:b1:f4:da:da:f4:28: a2:3f:ad:4a:35:db:52:4c:00:8c:a6:fa:3b:90:d2:f1:b5:d5: 66:36:62:70:50:8e:68:41:96:ad:68:cf:05:e4:e0:c9:4d:ea: da:a4:1a:6b:11:4a:7b:0b:9a:d8:46:11:60:c6:4b:99:74:f9: c3:c1:bd:6b:a1:7c:9a:9f:c9:28:c0:e7:50:9a:4c:6e:8d:44: cd:da:f5:ac -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICBZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0MkMxMTAvBgNVBAUTKERCN0NFNTIzRTg0MEI3N0ZDOUUxOTZGNThGMTQ5NzZB Q0U0MTU0QkUwHhcNMjQwNDA3MDEwMzA4WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjExZjBjYy02MzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAorYGpHh/y9PgAhitcJSEO2DQyVqIuBE/EPkUR1T/QIVkWRDDkJCbhi66JvQY naA1mgtxGzNBf81jWnnS0AqlfT5d5R3hz7sn3whjYK4ESd0a6GlMh6OBOHU8+X/A OJccyu4xPE5OUOQlJpfhcCnvqhp+3tMlJQh056I88n7NedvQXCAHEfQrZcXSLN6N toEc5vahHzdx9637DP7IsfNKfL2xF/0lgREHjggEvBoMSBXveXb6rfgjMMoiZ0Tv 2tAVztNKJ5X3Vgnv2H8phBCCq9w0CxCn23WQqczNm/jVfxZ4vsN3sCbGYAcr6Qa2 Q7vLIMMhfielMSC6ZOU7KWcnyQIDAQABo4ICrzCCAqswHQYDVR0OBBYEFK/6ScTv 5fpo5UoF+vgXROKDbQ4DMB8GA1UdIwQYMBaAFNt85SPoQLd/yeGW9Y8Ul2rOQVS+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQyQy8xQjYzNDY2RThD QTgxMUVCQTJCRDBBNkJDNEY5QUUwMi8yM3psSS1oQXQzX0o0WmIxanhTWGFzNUJW TDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIzemxJLWhBdDNfSjRaYjFqeFNYYXM1QlZMNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU0MkMvMUI2MzQ2NkU4Q0E4MTFFQkEyQkQwQTZCQzRGOUFFMDIvMzZBODJENzA4 Q0FBMTFFQjlFRDQ4QzcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMAwEAgABMAYDBAFnnfQwGAQCAAIwEgMHACABDfIzwAMHACABDfU2gDANBgkq hkiG9w0BAQsFAAOCAQEA68O0pB+P3PjXnmXOtvXs4vS/mGdyuB2a+cSWqmJNKOCO 1NA6gqLvQssEbwQXkikHb/HQ62RZ9FeTac/K7wbztzODZ7ROQydECZxCJbflmqC5 OtnI5HIPCGxG7qyyNzRBBTpZDF2cex69R8dCrJyVYSGhdBygsxog3ZknWOIhD2N5 EsUb5b6XtnnOkx4Wz+I3yEWOQwwG/DcuXncORh+Ktoj/eWIYxJ8Rv6YuN4A9sfTa 2vQooj+tSjXbUkwAjKb6O5DS8bXVZjZicFCOaEGWrWjPBeTgyU3q2qQaaxFKewua 2EYRYMZLmXT5w8G9a6F8mp/JKMDnUJpMbo1Ezdr1rA== -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:23 2024 by rpki-client on console-fra.rpki-client.org