$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/21151EF0A8C411EC8F560C42C4F9AE02.roa File: 21151EF0A8C411EC8F560C42C4F9AE02.roa (raw, json) Hash identifier: o4IiEMeA6RrIyI4EIGSr0hvBNlyD3kRf/X6yW/XL/pk= Subject key identifier: F3:8B:4D:33:E2:F6:1D:4B:21:2D:E7:BE:4F:DA:95:45:BC:C0:53:B1 Certificate issuer: /CN=A912AF0B/serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F Certificate serial: 0FA8 Authority key identifier: C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/21151EF0A8C411EC8F560C42C4F9AE02.roa Signing time: Wed 28 Feb 2024 18:26:07 +0000 ROA not before: Wed 28 Feb 2024 18:26:07 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 137385 IP address blocks: 103.132.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 18:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4008 (0xfa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AF0B/serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F Validity Not Before: Feb 28 18:26:07 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65df7abf-43ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4a:7a:8c:f2:fd:e2:32:15:36:2b:a1:30:cd: 5f:d9:d5:e5:20:b1:2d:d1:6e:91:26:e9:28:50:92: ea:a3:8a:36:5b:3c:8e:96:dc:78:66:ad:b7:11:a2: 18:b7:ee:c1:31:43:f2:97:31:ac:31:6f:5a:56:e6: 2b:fd:22:d7:b6:3c:d9:9e:54:dc:fc:f4:a2:a5:41: 2d:0b:09:9e:e2:97:7b:ca:63:12:55:8a:9a:cb:81: c8:76:ac:95:95:c9:88:90:a9:79:b0:d8:bd:be:41: 93:e6:d3:34:bd:78:ae:dd:2d:21:0c:f6:df:fa:99: 83:5d:d0:f5:86:b2:46:e1:1c:00:42:1d:93:8c:76: 29:d1:fd:91:e7:f1:f5:d2:7b:ed:cb:44:55:4f:c8: fe:19:52:78:73:cd:cd:33:18:ad:8f:3f:4c:59:01: c4:a4:84:be:9a:ff:50:64:df:a7:e5:5d:17:8f:1b: e9:cc:be:fd:21:5b:53:93:da:98:76:8e:cc:d7:c8: 5a:89:58:66:07:1d:bb:f0:18:6d:f0:0d:53:4c:3d: 61:e6:67:02:15:21:80:be:26:95:99:c8:02:ac:72: aa:95:5d:b8:82:84:bb:2a:bc:76:2c:0e:a2:ad:b8: bb:87:33:4b:4b:45:07:bd:6f:67:c0:c2:79:17:53: f7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:8B:4D:33:E2:F6:1D:4B:21:2D:E7:BE:4F:DA:95:45:BC:C0:53:B1 X509v3 Authority Key Identifier: keyid:C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/21151EF0A8C411EC8F560C42C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.132.183.0/24 Signature Algorithm: sha256WithRSAEncryption 57:e1:98:b1:53:4c:4d:3c:62:a6:dd:9e:8d:2e:06:90:ae:6b: fe:a3:b8:75:9c:63:1c:6e:b2:a4:4c:cd:b6:b5:c8:a4:97:ef: fc:ec:bb:d0:c2:a0:45:fd:f2:fe:ad:b3:ea:be:d0:ae:bb:00: 86:57:d2:d1:ec:e5:66:95:65:e8:0e:4f:85:31:09:63:68:17: a9:5c:7b:11:ce:ee:70:68:fd:bd:aa:b7:d7:ea:c5:5e:60:54: 8f:7a:97:bd:97:41:84:ce:6f:12:72:78:e0:f2:d8:9b:4b:4f: 24:ab:e0:30:5e:7d:9c:81:78:02:7f:19:f8:b4:f8:00:13:d7: d9:72:3a:36:50:66:e0:06:ce:e6:c3:d1:57:29:1d:9a:75:4f: 4b:14:7a:ad:82:cc:72:2a:90:3a:12:23:df:2a:e0:01:cc:cd: 81:c3:ef:ef:ed:ed:b7:98:c3:58:45:63:7b:4a:aa:5f:34:f1: 8c:60:fe:4b:4e:31:bd:57:f1:33:3e:06:69:be:12:44:d4:ea: 8e:6b:b4:6a:36:d0:25:ea:57:84:a6:9c:f0:0d:d5:d6:40:fd: f7:ce:49:12:e9:d6:18:18:4c:8b:d0:c6:7a:2e:1d:72:fd:13: a8:bb:3c:12:c6:52:54:97:1f:f9:5d:d6:64:bc:9a:52:4e:87: 4e:8a:9b:8f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICD6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFGMEIxMTAvBgNVBAUTKEM0RDc1MDlFNTMyQ0UyRjZFNENCNEU4RTVDM0MyMjZC QTMxNTRFNkYwHhcNMjQwMjI4MTgyNjA3WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWRmN2FiZi00M2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Ep6jPL94jIVNiuhMM1f2dXlILEt0W6RJukoUJLqo4o2WzyOltx4Zq23EaIY t+7BMUPylzGsMW9aVuYr/SLXtjzZnlTc/PSipUEtCwme4pd7ymMSVYqay4HIdqyV lcmIkKl5sNi9vkGT5tM0vXiu3S0hDPbf+pmDXdD1hrJG4RwAQh2TjHYp0f2R5/H1 0nvty0RVT8j+GVJ4c83NMxitjz9MWQHEpIS+mv9QZN+n5V0XjxvpzL79IVtTk9qY do7M18haiVhmBx278Bht8A1TTD1h5mcCFSGAviaVmcgCrHKqlV24goS7Krx2LA6i rbi7hzNLS0UHvW9nwMJ5F1P3WwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPOLTTPi 9h1LIS3nvk/alUW8wFOxMB8GA1UdIwQYMBaAFMTXUJ5TLOL25MtOjlw8ImujFU5v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUYwQi9CNTk0MTlEMjMy RUQxMUU5OUM5NTRDMjRDNEY5QUUwMi94TmRRbmxNczR2Ymt5MDZPWER3aWE2TVZU bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOZFFubE1zNHZia3kwNk9YRHdpYTZNVlRtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkFGMEIvQjU5NDE5RDIzMkVEMTFFOTlDOTU0QzI0QzRGOUFFMDIvMjExNTFFRjBB OEM0MTFFQzhGNTYwQzQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnhLcwDQYJKoZIhvcNAQELBQADggEBAFfhmLFTTE08Yqbd no0uBpCua/6juHWcYxxusqRMzba1yKSX7/zsu9DCoEX98v6ts+q+0K67AIZX0tHs 5WaVZegOT4UxCWNoF6lcexHO7nBo/b2qt9fqxV5gVI96l72XQYTObxJyeODy2JtL TySr4DBefZyBeAJ/Gfi0+AAT19lyOjZQZuAGzubD0VcpHZp1T0sUeq2CzHIqkDoS I98q4AHMzYHD7+/t7beYw1hFY3tKql808Yxg/ktOMb1X8TM+Bmm+EkTU6o5rtGo2 0CXqV4SmnPAN1dZA/ffOSRLp1hgYTIvQxnouHXL9E6i7PBLGUlSXH/ld1mS8mlJO h06Km48= -----END CERTIFICATE-----Generated at Thu May 16 20:25:39 2024 by rpki-client on console-ams.rpki-client.org