$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/204CB89672C011EC809A5933C4F9AE02.roa File: 204CB89672C011EC809A5933C4F9AE02.roa (raw, json) Hash identifier: Pf5KnCT9Yqm3ZhGKRmydd6Ca2CU4m9+AK0ym0MYtdss= Subject key identifier: 94:46:AB:AD:8A:41:5E:66:6E:46:D4:0F:6C:67:90:1E:61:76:BC:65 Certificate issuer: /CN=A912AC33/serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634 Certificate serial: 02D4 Authority key identifier: C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/204CB89672C011EC809A5933C4F9AE02.roa Signing time: Fri 15 Sep 2023 01:43:16 +0000 ROA not before: Fri 15 Sep 2023 01:43:16 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 133114 IP address blocks: 103.47.154.0/24 maxlen: 24 103.47.155.0/24 maxlen: 24 103.241.150.0/24 maxlen: 24 103.241.151.0/24 maxlen: 24 2401:e280:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 724 (0x2d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC33/serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634 Validity Not Before: Sep 15 01:43:16 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=6503b6b4-8594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9a:95:c5:9f:03:c8:d8:50:02:c0:3c:94:7d: a7:20:21:e4:59:e2:2c:79:6e:e5:68:41:47:7f:4b: 40:70:02:fe:e0:5e:b4:25:65:3f:d3:45:ff:8f:d6: d2:08:86:f0:33:67:6e:50:16:0d:53:ae:bd:20:b1: 32:69:21:7d:cf:f1:dc:db:9a:00:d1:c2:84:50:47: 99:04:e5:10:fe:21:d4:b0:72:8a:74:87:35:a1:01: 4e:3a:79:33:b4:71:43:76:7d:a9:1d:4f:9f:8d:a8: 55:5f:90:49:a2:1a:87:e0:a4:72:cf:a2:be:3c:09: 3b:46:2d:57:bf:8d:8c:0c:ec:ba:45:42:5c:22:b5: 91:81:8a:fa:fc:d1:e4:d1:26:b2:61:59:25:57:c4: 22:22:d0:2f:51:d8:4b:8b:23:8d:0f:1d:60:82:74: d0:13:24:16:f1:f3:97:0a:d9:86:03:33:ec:7a:97: 5b:7e:8b:cc:17:eb:aa:08:b8:51:b8:81:b1:b5:2d: c8:38:57:89:4a:0e:c0:4a:16:ed:32:66:02:db:ec: b9:03:37:b8:95:9e:ed:71:cf:54:a3:5d:79:e5:3b: 6b:bd:58:0c:a8:21:f2:1f:33:59:4a:8e:b2:d7:0f: fa:5b:20:5d:47:b4:ba:db:7b:f0:8a:1c:c0:d2:70: cb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:46:AB:AD:8A:41:5E:66:6E:46:D4:0F:6C:67:90:1E:61:76:BC:65 X509v3 Authority Key Identifier: keyid:C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/204CB89672C011EC809A5933C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.47.154.0/23 103.241.150.0/23 IPv6: 2401:e280:1000::/36 Signature Algorithm: sha256WithRSAEncryption c4:3b:ae:5a:32:87:fb:0a:32:24:f9:33:88:db:b7:b5:72:5d: 63:f6:cf:dd:4d:ea:75:c6:fd:7f:d5:4d:26:ef:88:d0:6a:86: 9e:c8:74:2e:ac:11:ae:fc:92:dd:e3:ed:37:bd:3f:ed:5a:84: c0:aa:1d:cc:7a:24:a8:fb:e6:d8:46:f5:8a:5d:7e:84:6b:1f: 77:0e:55:fa:80:ee:7f:5e:e8:d9:c3:87:a5:4f:5d:24:b8:23: 14:76:3e:88:dc:f9:2d:29:ab:3d:22:7c:a8:a1:f7:07:fa:e8: 1e:65:80:e2:7d:d5:e5:5b:17:dc:54:f4:68:73:c6:51:41:df: bf:f9:9b:f9:c6:bf:99:57:eb:53:cc:1b:22:f4:a6:b9:f6:4d: 20:4b:b7:be:cb:52:1e:b0:e7:11:08:50:5a:1e:8d:93:cb:b1: d0:c8:fc:4e:36:2a:66:ed:3b:a9:32:db:d4:77:18:bc:a0:bd: e8:68:8d:8f:26:2a:9f:91:29:7c:1e:6d:00:f4:8c:22:bc:f3: 9f:63:cf:3f:8b:e3:25:36:f6:52:16:54:3d:fd:49:16:34:9d: c3:88:fc:c5:35:48:4b:4c:a5:e8:9f:01:29:c8:1c:d9:2b:58: 25:03:70:bd:2c:ae:a1:ef:e5:4c:67:81:e5:71:93:b5:97:d0: 71:dd:fd:13 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICAtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDMzMxMTAvBgNVBAUTKEM5NUNFOUQxQjZCMzEwODFDMDI1RDQ2QTNBMTY3RkNG REZBNzI2MzQwHhcNMjMwOTE1MDE0MzE2WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTAzYjZiNC04NTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ZqVxZ8DyNhQAsA8lH2nICHkWeIseW7laEFHf0tAcAL+4F60JWU/00X/j9bS CIbwM2duUBYNU669ILEyaSF9z/Hc25oA0cKEUEeZBOUQ/iHUsHKKdIc1oQFOOnkz tHFDdn2pHU+fjahVX5BJohqH4KRyz6K+PAk7Ri1Xv42MDOy6RUJcIrWRgYr6/NHk 0SayYVklV8QiItAvUdhLiyONDx1ggnTQEyQW8fOXCtmGAzPsepdbfovMF+uqCLhR uIGxtS3IOFeJSg7AShbtMmYC2+y5Aze4lZ7tcc9Uo1155TtrvVgMqCHyHzNZSo6y 1w/6WyBdR7S623vwihzA0nDL2QIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFJRGq62K QV5mbkbUD2xnkB5hdrxlMB8GA1UdIwQYMBaAFMlc6dG2sxCBwCXUajoWf8/fpyY0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzMy8wNEIzMzQ4ODcy QkMxMUVDODYxMTZENUVDNEY5QUUwMi95VnpwMGJhekVJSEFKZFJxT2haX3o5LW5K alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lWenAwYmF6RUlIQUpkUnFPaFpfejktbkpqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkFDMzMvMDRCMzM0ODg3MkJDMTFFQzg2MTE2RDVFQzRGOUFFMDIvMjA0Q0I4OTY3 MkMwMTFFQzgwOUE1OTMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMBIEAgABMAwDBAFnL5oDBAFn8ZYwDgQCAAIwCAMGBCQB4oAQMA0GCSqGSIb3 DQEBCwUAA4IBAQDEO65aMof7CjIk+TOI27e1cl1j9s/dTep1xv1/1U0m74jQaoae yHQurBGu/JLd4+03vT/tWoTAqh3MeiSo++bYRvWKXX6Eax93DlX6gO5/XujZw4el T10kuCMUdj6I3PktKas9InyoofcH+ugeZYDifdXlWxfcVPRoc8ZRQd+/+Zv5xr+Z V+tTzBsi9Ka59k0gS7e+y1IesOcRCFBaHo2Ty7HQyPxONipm7TupMtvUdxi8oL3o aI2PJiqfkSl8Hm0A9IwivPOfY88/i+MlNvZSFlQ9/UkWNJ3DiPzFNUhLTKXonwEp yBzZK1glA3C9LK6h7+VMZ4HlcZO1l9Bx3f0T -----END CERTIFICATE-----Generated at Fri May 17 03:50:05 2024 by rpki-client on console-fra.rpki-client.org