$ rpki-client -vvf rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/2E53CDEC139C11EF8D2CFD84C4F9AE02.roa File: 2E53CDEC139C11EF8D2CFD84C4F9AE02.roa (raw, json) Hash identifier: fphiTj344DMgLwq6G0nys3hIn88s+iOZ8JrAAtNe+RI= Subject key identifier: 23:30:AE:B3:82:F8:79:FF:3B:78:67:99:B8:F4:70:4B:05:4B:A0:C2 Certificate issuer: /CN=A912C039/serialNumber=38B5F7A72F64ECD25885F8B4758502E23DA838BB Certificate serial: 0958 Authority key identifier: 38:B5:F7:A7:2F:64:EC:D2:58:85:F8:B4:75:85:02:E2:3D:A8:38:BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/2E53CDEC139C11EF8D2CFD84C4F9AE02.roa Signing time: Thu 16 May 2024 16:05:23 +0000 ROA not before: Thu 16 May 2024 16:05:23 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 138964 IP address blocks: 103.137.200.0/22 maxlen: 22 103.137.200.0/24 maxlen: 24 103.137.201.0/24 maxlen: 24 103.137.202.0/24 maxlen: 24 103.137.203.0/24 maxlen: 24 2407:efc0::/32 maxlen: 32 2407:efc0::/33 maxlen: 40 2407:efc0::/48 maxlen: 48 2407:efc0:1::/48 maxlen: 48 2407:efc0:8000::/33 maxlen: 37 2407:efc0:8000::/34 maxlen: 40 2407:efc0:c000::/35 maxlen: 40 2407:efc0:e000::/36 maxlen: 40 2407:efc0:f000::/37 maxlen: 40 2407:efc0:f800::/38 maxlen: 38 2407:efc0:f800::/39 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.crl rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:49:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2392 (0x958) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C039/serialNumber=38B5F7A72F64ECD25885F8B4758502E23DA838BB Validity Not Before: May 16 16:05:23 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66462ec3-30fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0a:77:b7:cf:96:9a:13:c6:ea:8d:fd:8d:33: 04:31:34:4f:fc:47:b1:de:95:38:62:40:94:8b:02: 85:a0:d3:a6:4e:c9:31:fc:97:1d:31:6e:fd:ca:06: ba:40:3e:f3:5c:11:0a:6c:65:32:96:20:33:ce:05: 9f:68:6f:b3:32:a8:9b:99:b9:c5:49:54:72:50:55: c5:6c:57:51:d6:f6:27:62:18:df:99:f9:e1:c1:cf: b5:ef:6e:29:5c:7d:42:dc:e2:ce:39:ae:24:d6:e8: b2:31:4b:b1:6d:8b:66:18:22:9b:9b:16:38:f2:05: a5:07:f0:20:98:ea:57:9b:49:3c:1b:6d:e5:ac:c7: cd:27:8f:43:1e:4c:4a:e2:24:ec:10:52:80:ad:8a: 63:47:bd:3d:f3:89:3f:e9:71:73:29:5a:a1:ab:d3: 2c:ee:81:32:60:21:39:2d:eb:1f:24:d8:5a:46:81: b4:23:c7:a2:38:5a:d8:ac:77:91:2c:1c:4e:73:d8: 5c:a0:60:d0:08:3a:b6:27:75:26:68:0f:f3:d6:8d: d5:97:0b:31:0b:04:02:9b:14:5c:03:38:48:37:7a: 22:de:be:d0:55:db:f5:5f:c8:45:e3:1d:16:8e:f2: eb:49:9b:1c:54:e2:ba:43:39:ba:9e:dc:e6:f0:24: 40:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:30:AE:B3:82:F8:79:FF:3B:78:67:99:B8:F4:70:4B:05:4B:A0:C2 X509v3 Authority Key Identifier: keyid:38:B5:F7:A7:2F:64:EC:D2:58:85:F8:B4:75:85:02:E2:3D:A8:38:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/2E53CDEC139C11EF8D2CFD84C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.137.200.0/22 IPv6: 2407:efc0::/32 Signature Algorithm: sha256WithRSAEncryption 10:8a:61:d9:80:6d:49:68:65:24:11:72:f8:b8:82:7f:94:b1: d1:00:82:2e:cf:e0:b7:7f:2a:7f:c1:63:df:f4:a6:30:3e:21: 79:c0:3b:9d:9e:5b:6a:e2:b0:49:47:6c:2f:75:d1:7e:ad:4a: 3e:15:56:a3:d5:1f:cc:c9:75:ab:00:4a:60:7b:c1:ab:0a:48: 69:9e:34:8d:91:d2:9f:9d:84:ef:89:6c:61:e3:06:89:40:42: 83:ee:d3:58:2e:4d:40:cf:e0:43:5e:6e:2c:98:c5:1a:15:bc: 0b:39:9d:92:8d:4f:85:01:99:8e:f7:b8:40:43:b3:47:d5:4e: e4:ea:6d:95:31:e8:aa:1d:93:0f:9e:11:6f:5b:07:f6:c1:0e: e2:41:59:0c:0a:1c:ce:ab:28:46:3c:9e:40:bb:80:be:40:6a: d7:7f:70:58:59:af:d9:60:83:89:d2:1e:48:4d:47:86:6c:2b: c8:6e:83:21:a0:3a:c6:df:50:fd:bb:e8:05:45:20:af:dc:f8: 9b:24:a5:62:65:04:fb:5f:96:f1:ee:6b:65:9d:8f:48:32:d6: f1:c4:5c:2a:2b:95:56:8c:5c:c0:f7:72:97:10:1b:aa:d8:d8: 8d:25:19:30:c8:7f:87:88:d4:da:68:ac:1f:16:81:df:1b:61: b5:43:66:2b -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMwMzkxMTAvBgNVBAUTKDM4QjVGN0E3MkY2NEVDRDI1ODg1RjhCNDc1ODUwMkUy M0RBODM4QkIwHhcNMjQwNTE2MTYwNTIzWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQ2MmVjMy0zMGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQp3t8+WmhPG6o39jTMEMTRP/Eex3pU4YkCUiwKFoNOmTskx/JcdMW79yga6 QD7zXBEKbGUyliAzzgWfaG+zMqibmbnFSVRyUFXFbFdR1vYnYhjfmfnhwc+1724p XH1C3OLOOa4k1uiyMUuxbYtmGCKbmxY48gWlB/AgmOpXm0k8G23lrMfNJ49DHkxK 4iTsEFKArYpjR70984k/6XFzKVqhq9Ms7oEyYCE5LesfJNhaRoG0I8eiOFrYrHeR LBxOc9hcoGDQCDq2J3UmaA/z1o3VlwsxCwQCmxRcAzhIN3oi3r7QVdv1X8hF4x0W jvLrSZscVOK6Qzm6ntzm8CRADQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFCMwrrOC +Hn/O3hnmbj0cEsFS6DCMB8GA1UdIwQYMBaAFDi196cvZOzSWIX4tHWFAuI9qDi7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzAzOS9DMjVEMDJGRTc4 OUQxMUVBQkRBNkYwNUZDNEY5QUUwMi9PTFgzcHk5azdOSlloZmkwZFlVQzRqMm9P THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09MWDNweTlrN05KWWhmaTBkWVVDNGoyb09Mcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkMwMzkvQzI1RDAyRkU3ODlEMTFFQUJEQTZGMDVGQzRGOUFFMDIvMkU1M0NERUMx MzlDMTFFRjhEMkNGRDg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnicgwDQQCAAIwBwMFACQH78AwDQYJKoZIhvcNAQELBQAD ggEBABCKYdmAbUloZSQRcvi4gn+UsdEAgi7P4Ld/Kn/BY9/0pjA+IXnAO52eW2ri sElHbC910X6tSj4VVqPVH8zJdasASmB7wasKSGmeNI2R0p+dhO+JbGHjBolAQoPu 01guTUDP4ENebiyYxRoVvAs5nZKNT4UBmY73uEBDs0fVTuTqbZUx6Kodkw+eEW9b B/bBDuJBWQwKHM6rKEY8nkC7gL5Aatd/cFhZr9lgg4nSHkhNR4ZsK8hugyGgOsbf UP276AVFIK/c+JskpWJlBPtflvHua2Wdj0gy1vHEXCorlVaMXMD3cpcQG6rY2I0l GTDIf4eI1NporB8Wgd8bYbVDZis= -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:27 2024 by rpki-client on console-fra.rpki-client.org