$ rpki-client -vvf rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/42B13940C3C011EE86C2C317C4F9AE02.roa File: 42B13940C3C011EE86C2C317C4F9AE02.roa (raw, json) Hash identifier: 0EIE+vDWHFaoFPA2AVIORwfIn3x496ZZBHkxZt3nDRw= Subject key identifier: 2D:AB:1F:F5:81:21:8B:90:2A:94:7D:C3:4A:4B:DF:87:99:A1:AC:5E Certificate issuer: /CN=A912BBC9/serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28 Certificate serial: 0832 Authority key identifier: D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/42B13940C3C011EE86C2C317C4F9AE02.roa Signing time: Mon 05 Feb 2024 00:48:22 +0000 ROA not before: Mon 05 Feb 2024 00:48:22 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 139351 IP address blocks: 103.141.158.0/24 maxlen: 24 103.141.159.0/24 maxlen: 24 2400:17a0::/48 maxlen: 48 2400:17a0:1::/48 maxlen: 48 2400:17a0:2::/48 maxlen: 48 2400:17a0:3::/48 maxlen: 48 2400:17a0:4::/48 maxlen: 48 2400:17a0:5::/48 maxlen: 48 2400:17a0:6::/48 maxlen: 48 2400:17a0:7::/48 maxlen: 48 2400:17a0:8::/48 maxlen: 48 2400:17a0:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Jul 2024 21:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2098 (0x832) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BBC9/serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28 Validity Not Before: Feb 5 00:48:22 2024 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=65c03055-d81a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:12:19:8e:15:2a:67:5f:dd:57:3d:22:cb:3f: 3a:0a:68:c0:97:f6:9f:56:48:81:9b:8b:a6:83:fa: e8:cb:85:8c:6f:48:b8:19:77:18:88:16:82:30:e1: d9:9a:87:90:47:81:a1:aa:cb:29:a3:f6:39:d7:8e: 18:1f:6c:be:9e:62:2b:2e:2a:19:df:55:43:10:27: 3a:51:84:eb:06:c2:a1:d6:66:d2:49:a6:d8:eb:4d: 14:9f:42:b9:55:67:23:79:25:d4:9a:cf:4e:fb:df: cf:1e:7d:4b:41:1f:8a:bc:e1:44:bb:f0:57:e5:1f: c3:90:2a:1c:82:4a:ba:a2:20:1c:68:6e:8f:08:37: 3f:b0:cf:b4:b5:f0:0a:10:59:55:d9:b9:ff:7b:54: 89:b3:9d:52:17:bd:73:f6:a5:c6:3a:aa:d3:0a:f2: bd:3c:03:fd:7e:87:1d:ad:68:c1:45:c3:cd:16:42: 79:38:00:35:c0:9f:41:f7:a9:d7:0e:d3:7e:69:9b: 88:18:30:a4:8c:d4:a0:fe:2a:e4:c3:8f:74:b7:dc: 8c:c0:27:d3:a5:e9:36:65:5b:3c:c0:03:d8:1b:e0: 06:46:80:08:d6:78:cf:23:cf:52:69:96:7a:43:79: 02:b5:ce:20:89:0b:7f:af:de:80:23:cf:41:c3:51: 1c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:AB:1F:F5:81:21:8B:90:2A:94:7D:C3:4A:4B:DF:87:99:A1:AC:5E X509v3 Authority Key Identifier: keyid:D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/42B13940C3C011EE86C2C317C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.141.158.0/23 IPv6: 2400:17a0::-2400:17a0:9:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 8f:1a:94:5f:81:8b:5d:8b:c3:19:b3:80:5d:2c:4e:ab:95:77: 5a:3d:c2:b6:20:7f:53:fa:d4:18:7d:8c:ea:f8:08:31:26:c8: 30:2d:22:fe:3a:90:51:93:5a:be:e5:53:1a:7d:6d:d7:b3:26: 83:f5:9a:81:e0:d1:90:e3:29:b9:4d:20:62:4f:9a:0d:4c:89: ef:4c:7d:1d:ef:47:84:79:ba:cd:dc:88:9d:05:74:79:a3:40: 49:72:bd:22:5d:42:ad:e0:70:72:c1:2e:c5:08:5c:97:19:46: 0e:f8:d9:bb:bf:eb:a7:b0:a7:3f:13:ec:30:1c:f7:71:ff:d7: c4:d1:c2:a7:c8:36:4f:6e:16:f4:65:da:a9:63:36:81:05:16: b9:11:9a:54:4a:ac:35:35:ce:c7:8f:38:76:c7:98:6c:3f:04: 15:c8:a1:4b:78:c7:40:33:2d:e8:b2:76:0e:58:93:a1:96:f1: 4e:9c:d3:eb:ab:52:22:af:96:ba:e0:3c:4b:aa:92:c3:3d:fe: 5e:b1:b0:cf:73:5b:3c:7e:84:52:cd:e2:1f:0b:dc:a7:e2:0a: 2c:2d:6f:dc:ef:83:0a:10:fe:85:d4:4b:85:c2:98:d6:9f:ff: a7:95:fb:e2:f8:4b:51:08:8b:de:b6:8e:2d:6b:87:e6:7c:59: ac:03:29:8a -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICCDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJCQzkxMTAvBgNVBAUTKEQzQjcyMTVFMTY2MEExOUVGRDJFNzcyRjlCQTdBN0JE QzZFRTBEMjgwHhcNMjQwMjA1MDA0ODIyWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWMwMzA1NS1kODFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoxIZjhUqZ1/dVz0iyz86CmjAl/afVkiBm4umg/roy4WMb0i4GXcYiBaCMOHZ moeQR4Ghqsspo/Y5144YH2y+nmIrLioZ31VDECc6UYTrBsKh1mbSSabY600Un0K5 VWcjeSXUms9O+9/PHn1LQR+KvOFEu/BX5R/DkCocgkq6oiAcaG6PCDc/sM+0tfAK EFlV2bn/e1SJs51SF71z9qXGOqrTCvK9PAP9focdrWjBRcPNFkJ5OAA1wJ9B96nX DtN+aZuIGDCkjNSg/irkw490t9yMwCfTpek2ZVs8wAPYG+AGRoAI1njPI89SaZZ6 Q3kCtc4giQt/r96AI89Bw1Ec7QIDAQABo4ICrzCCAqswHQYDVR0OBBYEFC2rH/WB IYuQKpR9w0pL34eZoaxeMB8GA1UdIwQYMBaAFNO3IV4WYKGe/S53L5unp73G7g0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkJDOS84M0ZGOUZFQ0FB ODExMUVBQjQyQTA0MzNDNEY5QUUwMi8wN2NoWGhaZ29aNzlMbmN2bTZlbnZjYnVE U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3Y2hYaFpnb1o3OUxuY3ZtNmVudmNidURTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkJCQzkvODNGRjlGRUNBQTgxMTFFQUI0MkEwNDMzQzRGOUFFMDIvNDJCMTM5NDBD M0MwMTFFRTg2QzJDMzE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMAwEAgABMAYDBAFnjZ4wGAQCAAIwEjAQAwUFJAAXoAMHASQAF6AACDANBgkq hkiG9w0BAQsFAAOCAQEAjxqUX4GLXYvDGbOAXSxOq5V3Wj3CtiB/U/rUGH2M6vgI MSbIMC0i/jqQUZNavuVTGn1t17Mmg/WageDRkOMpuU0gYk+aDUyJ70x9He9HhHm6 zdyInQV0eaNASXK9Il1CreBwcsEuxQhclxlGDvjZu7/rp7CnPxPsMBz3cf/XxNHC p8g2T24W9GXaqWM2gQUWuRGaVEqsNTXOx484dseYbD8EFcihS3jHQDMt6LJ2DliT oZbxTpzT66tSIq+WuuA8S6qSwz3+XrGwz3NbPH6EUs3iHwvcp+IKLC1v3O+DChD+ hdRLhcKY1p//p5X74vhLUQiL3raOLWuH5nxZrAMpig== -----END CERTIFICATE-----Generated at Mon Jun 24 23:52:04 2024 by rpki-client on console-fra.rpki-client.org