$ rpki-client -vvf rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/AF57B9EC2F7811EABC011040C4F9AE02.roa File: AF57B9EC2F7811EABC011040C4F9AE02.roa (raw, json) Hash identifier: UpiX7Cqqtl0g5R+6w/YacrFNgDs2XRQxBgBI8gsoR+Y= Subject key identifier: 38:37:0A:8E:35:3D:32:84:C1:68:9D:D3:EC:91:68:EF:1A:22:8D:E9 Certificate issuer: /CN=A912614B/serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1 Certificate serial: 0AAB Authority key identifier: 3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/AF57B9EC2F7811EABC011040C4F9AE02.roa Signing time: Fri 10 May 2024 20:29:41 +0000 ROA not before: Fri 10 May 2024 20:29:41 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 138904 IP address blocks: 103.136.236.0/22 maxlen: 24 2001:df0:f80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 19:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2731 (0xaab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912614B/serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1 Validity Not Before: May 10 20:29:41 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=663e83b5-2026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6c:d7:a9:8b:9e:e1:51:d9:7a:b2:fd:fa:04: fd:2e:a7:f3:bd:b7:13:d6:95:7f:7c:2e:aa:80:b3: 42:33:09:87:fc:fa:e1:3f:73:e7:12:53:6d:ef:ae: e1:2d:b7:be:2b:4e:5b:d6:bd:34:35:bf:e8:c5:01: 80:64:20:3b:53:d0:a8:1c:3c:02:08:cf:67:76:6b: 27:d3:51:1e:bd:82:28:6d:ec:c3:24:2d:e7:08:4e: f1:f5:95:6d:e0:0c:48:d3:ce:27:25:4b:93:59:13: 13:11:2e:f4:8b:cc:60:f4:3c:c7:31:a7:7e:7f:c2: bc:fa:a4:c2:dd:d2:dc:98:b9:80:46:75:6c:28:6d: c0:d2:ec:7a:a8:14:39:c6:21:ab:c5:d7:51:2d:3c: d8:9e:bb:d2:06:21:db:a8:4f:2d:e0:a4:ee:0e:4d: bf:b7:89:0d:ad:34:8f:43:b3:cb:ce:62:8f:6a:27: e2:5b:c7:2e:ba:3c:a1:d4:23:7b:71:aa:d1:ee:a9: e1:b4:15:97:5e:90:bd:53:6d:84:63:41:6c:32:02: fc:13:b0:98:32:20:61:12:76:ea:1c:84:32:e3:39: 30:39:cc:59:67:f6:42:fb:ce:7b:d3:9b:8d:14:2a: 05:da:90:f8:15:c6:b8:d1:c8:f2:ef:c7:90:dc:f8: f2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:37:0A:8E:35:3D:32:84:C1:68:9D:D3:EC:91:68:EF:1A:22:8D:E9 X509v3 Authority Key Identifier: keyid:3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/AF57B9EC2F7811EABC011040C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.136.236.0/22 IPv6: 2001:df0:f80::/48 Signature Algorithm: sha256WithRSAEncryption 12:11:0f:f8:b3:77:66:ad:58:f2:ac:fc:f3:0e:b4:cd:ad:66: b4:1d:0e:39:93:bd:0e:19:e0:8e:a3:14:4c:d5:ff:80:87:d5: 58:cc:4a:23:89:1a:8c:b1:d7:9c:9b:b2:c0:40:0e:a9:3b:d5: b2:ff:1e:79:f6:bd:d3:4b:a0:bc:65:82:e0:58:c5:db:1a:ad: 3a:69:ae:4d:7d:cc:2f:90:93:9c:89:5e:c8:05:9e:a6:66:5a: b9:36:06:bf:a8:d8:b9:00:78:01:a5:ea:c3:aa:d4:92:9d:9b: c7:3a:65:44:b4:0e:e1:8f:9c:72:ef:fc:dc:5c:d2:5b:f9:7e: af:07:d0:2d:c1:a7:02:bb:9b:7a:b4:fa:c7:a4:9a:75:65:cc: 8b:f6:9e:3e:9b:67:ba:e4:5e:22:3d:d9:95:1e:03:10:b9:34: e5:10:45:87:cf:a4:ea:d7:5a:88:af:ca:c3:91:6f:08:6c:2b: 84:2e:a7:7a:8a:55:22:e8:07:7c:79:79:0b:8f:4c:ca:0f:4d: 20:58:a5:05:85:ad:73:62:0f:45:c3:ca:97:ff:c6:61:14:ae: e8:42:47:c9:7a:94:05:21:2f:42:7f:b5:8d:70:22:d9:03:eb: f1:29:fb:3d:80:63:84:42:92:20:86:0a:52:bc:a0:10:cb:3c: 11:db:a4:99 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxNEIxMTAvBgNVBAUTKDNEQkNDQkJFN0JFOTE2Qzk2RUVBRUNEOThCRjVENTNF MUMzOTBFQTEwHhcNMjQwNTEwMjAyOTQxWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjNlODNiNS0yMDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3WzXqYue4VHZerL9+gT9LqfzvbcT1pV/fC6qgLNCMwmH/PrhP3PnElNt767h Lbe+K05b1r00Nb/oxQGAZCA7U9CoHDwCCM9ndmsn01EevYIobezDJC3nCE7x9ZVt 4AxI084nJUuTWRMTES70i8xg9DzHMad+f8K8+qTC3dLcmLmARnVsKG3A0ux6qBQ5 xiGrxddRLTzYnrvSBiHbqE8t4KTuDk2/t4kNrTSPQ7PLzmKPaifiW8cuujyh1CN7 carR7qnhtBWXXpC9U22EY0FsMgL8E7CYMiBhEnbqHIQy4zkwOcxZZ/ZC+85705uN FCoF2pD4Fca40cjy78eQ3Pjy4QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDg3Co41 PTKEwWid0+yRaO8aIo3pMB8GA1UdIwQYMBaAFD28y7576RbJburs2Yv11T4cOQ6h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjE0Qi9GMkE0OTI0RTJG NzYxMUVBOTFGRENCM0NDNEY5QUUwMi9QYnpMdm52cEZzbHU2dXpaaV9YVlBodzVE cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Biekx2bnZwRnNsdTZ1elppX1hWUGh3NURxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjYxNEIvRjJBNDkyNEUyRjc2MTFFQTkxRkRDQjNDQzRGOUFFMDIvQUY1N0I5RUMy Rjc4MTFFQUJDMDExMDQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJniOwwDwQCAAIwCQMHACABDfAPgDANBgkqhkiG9w0BAQsF AAOCAQEAEhEP+LN3Zq1Y8qz88w60za1mtB0OOZO9DhngjqMUTNX/gIfVWMxKI4ka jLHXnJuywEAOqTvVsv8eefa900ugvGWC4FjF2xqtOmmuTX3ML5CTnIleyAWepmZa uTYGv6jYuQB4AaXqw6rUkp2bxzplRLQO4Y+ccu/83FzSW/l+rwfQLcGnAruberT6 x6SadWXMi/aePptnuuReIj3ZlR4DELk05RBFh8+k6tdaiK/Kw5FvCGwrhC6neopV IugHfHl5C49Myg9NIFilBYWtc2IPRcPKl//GYRSu6EJHyXqUBSEvQn+1jXAi2QPr 8Sn7PYBjhEKSIIYKUrygEMs8EdukmQ== -----END CERTIFICATE-----Generated at Mon May 20 20:44:19 2024 by rpki-client on console-fra.rpki-client.org