$ rpki-client -vvf rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/34E1DFE8BF7011EAB745BE31C4F9AE02.roa File: 34E1DFE8BF7011EAB745BE31C4F9AE02.roa (raw, json) Hash identifier: G/yXFgT43gKUc5oHQ+jhamGmwVEFbK4r/gbDirOuDiM= Subject key identifier: 1F:F8:C1:2D:1C:0E:19:33:43:06:77:FF:B5:D6:E3:B9:75:6E:51:F2 Certificate issuer: /CN=A912A13F/serialNumber=AB1627B7A8514392E1C678B7B078855A445566E4 Certificate serial: 074D Authority key identifier: AB:16:27:B7:A8:51:43:92:E1:C6:78:B7:B0:78:85:5A:44:55:66:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/34E1DFE8BF7011EAB745BE31C4F9AE02.roa Signing time: Thu 14 Sep 2023 21:38:55 +0000 ROA not before: Thu 14 Sep 2023 21:38:55 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 138168 IP address blocks: 103.121.228.0/22 maxlen: 22 103.121.228.0/24 maxlen: 24 103.121.229.0/24 maxlen: 24 103.121.230.0/24 maxlen: 24 103.121.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.crl rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1869 (0x74d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A13F/serialNumber=AB1627B7A8514392E1C678B7B078855A445566E4 Validity Not Before: Sep 14 21:38:55 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=65037d6e-9a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:29:28:c9:df:c3:ac:3e:da:14:e4:56:78:37: 43:d1:a6:34:fd:21:f1:8d:9a:41:d5:90:ac:dc:99: b3:b9:68:0c:5a:5b:f1:09:e7:9b:ff:06:c3:a2:51: 0e:a9:c7:f9:f9:a9:2f:04:d8:87:b8:45:3b:fd:1f: 53:cc:6e:2d:3f:dd:34:07:f1:70:1c:97:2a:c4:38: 2d:45:63:f6:99:41:3f:f7:4f:3b:2b:ca:83:64:7f: fb:98:9c:d7:a7:e1:c5:2c:fc:dd:b3:88:bc:3b:14: 7e:f0:91:70:1c:56:a4:c7:d8:a4:b0:d4:01:42:b1: 9e:92:9b:df:16:cb:a1:f4:4d:26:92:e0:d9:f9:b8: 89:c7:e3:9a:90:76:a7:c4:2c:77:4b:13:bd:b3:84: 03:73:03:c0:09:35:27:1b:fb:09:8e:e6:88:11:72: 65:a9:f3:50:2d:c5:f1:4a:45:6b:b7:a7:dd:c9:55: d5:be:da:4d:65:df:47:99:80:07:b0:39:0f:9b:2c: 8d:bb:a5:5c:d4:34:c3:a2:c6:e3:fc:87:02:63:94: 43:3c:df:1d:78:84:27:ad:c2:ef:31:ca:2d:42:27: af:5e:18:33:cf:75:35:7a:94:b0:c7:52:f1:f9:01: 60:e8:8a:6e:de:c4:42:60:95:c4:31:87:35:e1:32: bd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F8:C1:2D:1C:0E:19:33:43:06:77:FF:B5:D6:E3:B9:75:6E:51:F2 X509v3 Authority Key Identifier: keyid:AB:16:27:B7:A8:51:43:92:E1:C6:78:B7:B0:78:85:5A:44:55:66:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/34E1DFE8BF7011EAB745BE31C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.121.228.0/22 Signature Algorithm: sha256WithRSAEncryption 4b:0a:a3:0c:33:c0:05:41:bc:9e:53:19:99:f3:7b:ec:83:db: 12:ae:2c:0a:80:9f:40:3d:fd:72:dd:02:d9:14:62:a4:7f:f1: 26:76:dd:61:6f:47:8e:a8:04:01:52:75:de:7e:58:af:f8:d4: 02:fa:21:06:eb:ad:5e:ab:c7:8b:37:90:50:fd:6d:20:9f:8c: 5a:54:95:ee:de:23:81:fd:d4:a3:75:67:1b:21:52:e8:46:c5: f1:37:70:6a:09:ca:83:99:aa:b2:d1:68:76:3a:db:db:b6:4e: 14:56:9e:01:60:5a:9e:9f:7c:35:c7:94:d0:7a:98:e3:b0:d2: e2:a5:be:d5:31:a4:df:a8:fe:91:bb:6f:84:ca:35:b5:5f:76: 8a:a4:ec:05:52:2e:02:bc:69:a0:07:a5:a4:f9:a9:bf:79:04: 4b:04:88:61:7b:01:c4:64:f7:c9:33:eb:30:4e:58:65:bb:15: 32:26:b3:98:fd:37:51:ba:69:96:e4:f5:b3:9e:04:f1:0f:29: 17:a3:16:3d:89:b0:5d:58:83:b2:1f:c5:2b:bc:9a:4e:98:f9: ac:b9:8a:bb:82:57:24:49:82:40:ff:e5:85:40:e9:86:66:c0: 44:6a:0f:3c:73:c4:9c:7c:21:02:d1:e1:20:03:1b:74:5c:73: 64:01:29:b1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkExM0YxMTAvBgNVBAUTKEFCMTYyN0I3QTg1MTQzOTJFMUM2NzhCN0IwNzg4NTVB NDQ1NTY2RTQwHhcNMjMwOTE0MjEzODU1WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTAzN2Q2ZS05YTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCkoyd/DrD7aFORWeDdD0aY0/SHxjZpB1ZCs3JmzuWgMWlvxCeeb/wbDolEO qcf5+akvBNiHuEU7/R9TzG4tP900B/FwHJcqxDgtRWP2mUE/9087K8qDZH/7mJzX p+HFLPzds4i8OxR+8JFwHFakx9iksNQBQrGekpvfFsuh9E0mkuDZ+biJx+OakHan xCx3SxO9s4QDcwPACTUnG/sJjuaIEXJlqfNQLcXxSkVrt6fdyVXVvtpNZd9HmYAH sDkPmyyNu6Vc1DTDosbj/IcCY5RDPN8deIQnrcLvMcotQievXhgzz3U1epSwx1Lx +QFg6Ipu3sRCYJXEMYc14TK9YQIDAQABo4IClTCCApEwHQYDVR0OBBYEFB/4wS0c DhkzQwZ3/7XW47l1blHyMB8GA1UdIwQYMBaAFKsWJ7eoUUOS4cZ4t7B4hVpEVWbk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTEzRi9BNjcyRTNCNkJG NkUxMUVBQjY1NkJGMkZDNEY5QUUwMi9xeFludDZoUlE1TGh4bmkzc0hpRldrUlZa dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F4WW50NmhSUTVMaHhuaTNzSGlGV2tSVlp1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkExM0YvQTY3MkUzQjZCRjZFMTFFQUI2NTZCRjJGQzRGOUFFMDIvMzRFMURGRThC RjcwMTFFQUI3NDVCRTMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJneeQwDQYJKoZIhvcNAQELBQADggEBAEsKowwzwAVBvJ5T GZnze+yD2xKuLAqAn0A9/XLdAtkUYqR/8SZ23WFvR46oBAFSdd5+WK/41AL6IQbr rV6rx4s3kFD9bSCfjFpUle7eI4H91KN1ZxshUuhGxfE3cGoJyoOZqrLRaHY629u2 ThRWngFgWp6ffDXHlNB6mOOw0uKlvtUxpN+o/pG7b4TKNbVfdoqk7AVSLgK8aaAH paT5qb95BEsEiGF7AcRk98kz6zBOWGW7FTIms5j9N1G6aZbk9bOeBPEPKRejFj2J sF1Yg7IfxSu8mk6Y+ay5iruCVyRJgkD/5YVA6YZmwERqDzxzxJx8IQLR4SADG3Rc c2QBKbE= -----END CERTIFICATE-----Generated at Sun May 19 00:16:12 2024 by rpki-client on console-fra.rpki-client.org