$ rpki-client -vvf rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/57A5ACF20FE911EBB5AE5524C4F9AE02.roa File: 57A5ACF20FE911EBB5AE5524C4F9AE02.roa (raw, json) Hash identifier: db0uZkZWuJQaQM8R/3bIEhp6I+FLcCb/1k0tn5JacmM= Subject key identifier: F2:07:BF:C1:EF:F2:E8:EA:FD:35:76:C6:AF:44:96:D9:7D:3E:F3:35 Certificate issuer: /CN=A912D70A/serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9 Certificate serial: 0B23 Authority key identifier: ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/57A5ACF20FE911EBB5AE5524C4F9AE02.roa Signing time: Thu 16 May 2024 20:28:58 +0000 ROA not before: Thu 16 May 2024 20:28:58 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 27281 IP address blocks: 103.229.8.0/24 maxlen: 24 103.229.9.0/24 maxlen: 24 103.229.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2851 (0xb23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D70A/serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9 Validity Not Before: May 16 20:28:58 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66466c8a-51d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:29:bf:fe:df:78:18:27:78:7f:b0:86:09:04: d8:d7:31:54:42:99:bd:4f:8d:f9:78:35:21:42:37: 1b:8a:0f:87:bf:59:20:67:8c:a9:e4:6d:5d:3a:4b: 2c:d0:32:c5:c4:25:95:d3:d3:b8:34:85:41:b0:f0: e4:99:44:bf:a1:cd:7e:2d:7b:f6:28:d8:f1:8d:91: 3d:e0:25:86:2c:67:e5:e6:a3:80:8f:7c:53:50:7d: e2:fa:3e:a0:13:3f:d3:94:5f:b3:0e:f6:51:dd:a4: 1b:8b:67:a4:4c:93:42:7e:24:f0:90:b8:23:bb:af: 0a:0c:7a:79:c9:ff:68:53:08:8d:0b:11:91:9e:50: 3a:aa:08:51:3a:d7:22:a2:66:e2:16:74:bb:66:65: 36:65:fe:68:fa:80:f4:4c:61:26:71:90:e9:60:2d: a1:84:0d:1d:01:32:32:1c:2b:b0:be:be:00:4a:0c: 3b:8f:79:b9:f6:82:74:f1:ca:f5:2e:60:3f:86:05: ca:c2:9e:db:51:fb:e5:3d:76:c5:14:be:0d:b8:74: 0c:e0:34:c6:77:2b:0e:f9:eb:a4:ce:d7:56:01:9b: 9c:b1:76:0b:4b:87:98:ac:41:4e:0f:c0:5b:d8:a4: 63:99:ef:12:0f:cd:72:de:c0:d0:5a:82:5b:e8:b2: 10:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:07:BF:C1:EF:F2:E8:EA:FD:35:76:C6:AF:44:96:D9:7D:3E:F3:35 X509v3 Authority Key Identifier: keyid:ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/57A5ACF20FE911EBB5AE5524C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.229.8.0-103.229.10.255 Signature Algorithm: sha256WithRSAEncryption 00:f4:23:c5:39:33:6c:8a:e9:49:ff:0b:c2:c9:4c:2d:bd:55: d6:51:8a:55:3d:cb:c5:15:82:4e:5b:5b:fb:15:38:ac:dc:2e: 4b:aa:ff:d3:29:6a:1d:e0:7a:70:4f:2b:d4:fe:9d:da:fd:0d: 47:d9:07:aa:de:8b:2a:25:9f:10:ee:06:44:40:86:7b:ab:fb: cc:1d:cf:da:fc:d7:9f:14:08:3f:43:f3:3c:78:43:7a:54:aa: a3:58:21:ec:56:9b:b6:65:06:5a:7c:5d:2e:b8:46:a1:76:e4: e6:7c:53:6b:de:8d:8c:6b:f8:e1:b2:94:68:06:c5:6d:4b:e6: 7c:5d:e0:54:1e:d2:fc:fa:ea:76:bb:31:4b:f8:96:74:bc:40: 4c:2b:64:c4:72:e0:b7:6a:7f:5f:01:7e:05:b9:24:78:9c:21: 5a:cb:86:b4:04:5e:cf:f9:b9:a4:7f:cd:be:02:c0:f7:8e:35: e5:68:12:f9:31:c7:9d:f0:d5:b7:a3:0b:cb:53:00:80:23:5a: c6:34:fa:ed:52:2e:c7:7a:b3:00:05:8c:0d:25:2c:d2:e0:f8: 26:01:fd:4e:b8:78:b2:09:7d:b9:e3:0c:33:a5:ae:77:ff:f0: cd:2a:cc:7f:f2:99:ac:9a:87:5d:37:66:ed:f7:0f:b7:9e:21: 83:2a:aa:bf -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICCyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ3MEExMTAvBgNVBAUTKEVEMzMwODIwRkZBQkQwQUIyODQxQkE5M0U5MDJFQTY4 Mjk5MkRBQTkwHhcNMjQwNTE2MjAyODU4WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQ2NmM4YS01MWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuim//t94GCd4f7CGCQTY1zFUQpm9T435eDUhQjcbig+Hv1kgZ4yp5G1dOkss 0DLFxCWV09O4NIVBsPDkmUS/oc1+LXv2KNjxjZE94CWGLGfl5qOAj3xTUH3i+j6g Ez/TlF+zDvZR3aQbi2ekTJNCfiTwkLgju68KDHp5yf9oUwiNCxGRnlA6qghROtci ombiFnS7ZmU2Zf5o+oD0TGEmcZDpYC2hhA0dATIyHCuwvr4ASgw7j3m59oJ08cr1 LmA/hgXKwp7bUfvlPXbFFL4NuHQM4DTGdysO+eukztdWAZucsXYLS4eYrEFOD8Bb 2KRjme8SD81y3sDQWoJb6LIQjwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFPIHv8Hv 8ujq/TV2xq9Eltl9PvM1MB8GA1UdIwQYMBaAFO0zCCD/q9CrKEG6k+kC6mgpktqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDcwQS80MUFCRDI5RTFC ODYxMUVBOUM5QUYyNDNDNEY5QUUwMi83VE1JSVAtcjBLc29RYnFUNlFMcWFDbVMy cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdUTUlJUC1yMEtzb1FicVQ2UUxxYUNtUzJxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkQ3MEEvNDFBQkQyOUUxQjg2MTFFQTlDOUFGMjQzQzRGOUFFMDIvNTdBNUFDRjIw RkU5MTFFQkI1QUU1NTI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEA2flCAMEAGflCjANBgkqhkiG9w0BAQsFAAOCAQEAAPQj xTkzbIrpSf8LwslMLb1V1lGKVT3LxRWCTltb+xU4rNwuS6r/0ylqHeB6cE8r1P6d 2v0NR9kHqt6LKiWfEO4GRECGe6v7zB3P2vzXnxQIP0PzPHhDelSqo1gh7FabtmUG WnxdLrhGoXbk5nxTa96NjGv44bKUaAbFbUvmfF3gVB7S/PrqdrsxS/iWdLxATCtk xHLgt2p/XwF+BbkkeJwhWsuGtARez/m5pH/NvgLA94415WgS+THHnfDVt6MLy1MA gCNaxjT67VIux3qzAAWMDSUs0uD4JgH9Trh4sgl9ueMMM6Wud//wzSrMf/KZrJqH XTdm7fcPt54hgyqqvw== -----END CERTIFICATE-----Generated at Sat May 18 20:48:17 2024 by rpki-client on console-fra.rpki-client.org