$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/D6883996DABE11EAB12A5209C4F9AE02.roa File: D6883996DABE11EAB12A5209C4F9AE02.roa (raw, json) Hash identifier: xAsoNlMA4kaCQmzRRhRKb4SY4CmPykwmaXjyJ9sgHgU= Subject key identifier: 1B:2C:9E:38:5F:50:88:0D:F3:24:4E:03:03:7D:AB:D5:75:5C:2C:BC Certificate issuer: /CN=A912DA1F/serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0 Certificate serial: 06C1 Authority key identifier: F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/D6883996DABE11EAB12A5209C4F9AE02.roa Signing time: Thu 10 Aug 2023 21:58:39 +0000 ROA not before: Thu 10 Aug 2023 21:58:39 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 132435 IP address blocks: 103.234.100.0/22 maxlen: 22 103.234.100.0/24 maxlen: 24 103.234.101.0/24 maxlen: 24 103.234.102.0/24 maxlen: 24 103.234.103.0/24 maxlen: 24 2401:d740::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 22:21:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1729 (0x6c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1F/serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0 Validity Not Before: Aug 10 21:58:39 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64d55d8f-7483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1c:6b:27:4a:62:e9:b1:94:fd:71:59:19:64: b2:20:34:7a:ab:84:70:0b:b5:d5:a5:03:a6:5a:2d: f2:25:93:c7:fe:72:b9:db:b0:1c:74:c8:48:b4:8f: 39:b1:3f:c5:3d:a6:b9:a1:a0:b1:c3:80:f1:fe:81: c8:33:2d:95:e9:0e:d1:a3:80:ee:f9:0a:4f:08:4a: 10:82:65:bb:62:d4:8c:f7:49:fa:ab:ca:20:14:81: 42:67:84:77:f0:27:d3:65:a6:45:6e:40:bc:2e:3d: fa:c2:59:81:39:fd:bd:bb:88:c3:bc:e8:f5:e8:2a: 39:c9:23:3f:62:71:84:9c:2a:40:90:83:16:53:1e: 81:5b:9c:48:93:88:6d:7c:f6:73:4f:b1:5e:b1:c6: 5c:c1:49:f4:02:b8:97:6e:d7:56:41:e8:e4:fa:92: d3:22:98:21:c6:1b:bd:1c:b4:46:4d:86:0d:43:fa: 0d:56:f8:38:57:ff:b2:3e:7f:0a:c0:27:ce:64:90: 57:08:c6:28:08:fb:d2:fe:b5:4c:68:82:e0:c7:d9: b6:75:35:fa:14:cc:8e:d7:bf:b6:2c:6d:52:d1:18: 59:0e:c4:d6:11:3e:22:ae:b4:6c:a3:66:fc:21:e1: 1f:9f:09:f9:a8:6f:7a:58:de:9a:53:aa:6b:32:94: be:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2C:9E:38:5F:50:88:0D:F3:24:4E:03:03:7D:AB:D5:75:5C:2C:BC X509v3 Authority Key Identifier: keyid:F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/D6883996DABE11EAB12A5209C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.234.100.0/22 IPv6: 2401:d740::/32 Signature Algorithm: sha256WithRSAEncryption 4d:2f:26:54:94:2b:06:10:8f:eb:9a:61:73:a3:ac:9f:7f:47: 06:3e:d0:86:59:48:42:a1:59:88:af:8d:4e:ef:35:8e:be:da: eb:f2:0e:6d:73:6f:19:2a:34:fc:39:67:80:90:3c:88:0b:0b: 66:80:d1:f3:09:c1:88:39:5b:6a:10:65:7a:95:4f:cc:f0:68: ed:30:8d:4a:e8:c1:99:18:13:59:f1:2c:aa:84:b6:6a:e5:c1: e5:78:a3:aa:12:35:a3:33:b8:01:af:fe:bd:47:35:a0:2b:00: 90:1d:de:f7:d3:db:8c:6f:ac:33:84:db:7f:a3:94:da:b4:76: 4f:45:ba:af:4a:a7:fe:03:84:b6:8a:45:48:27:1f:f5:36:bc: db:78:59:9f:10:00:4a:8f:b5:0a:0f:d0:32:8b:50:b2:a0:09: 25:d6:ed:98:37:6f:46:b7:72:6c:35:c6:38:bc:14:71:e3:e7: 98:f9:e1:17:7b:67:fb:71:ff:c2:37:c5:b8:70:a9:e0:4d:55: c5:d8:9e:2e:01:d0:c5:cc:3b:39:62:99:9b:bc:bc:3c:e9:e5: e3:e7:34:b7:68:0f:a6:c5:b8:dc:dd:78:8e:67:ec:71:00:2c: 86:e4:1d:a7:51:f4:42:63:4b:60:f8:01:e8:9e:ce:0b:14:3a: 61:65:4c:cc -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUYxMTAvBgNVBAUTKEY5Nzg3RDJDQTE0MzJDQTZFOTMzMzJFMEVERUY2QjA3 QjI0NUQ3QjAwHhcNMjMwODEwMjE1ODM5WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGQ1NWQ4Zi03NDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hxrJ0pi6bGU/XFZGWSyIDR6q4RwC7XVpQOmWi3yJZPH/nK527AcdMhItI85 sT/FPaa5oaCxw4Dx/oHIMy2V6Q7Ro4Du+QpPCEoQgmW7YtSM90n6q8ogFIFCZ4R3 8CfTZaZFbkC8Lj36wlmBOf29u4jDvOj16Co5ySM/YnGEnCpAkIMWUx6BW5xIk4ht fPZzT7FescZcwUn0AriXbtdWQejk+pLTIpghxhu9HLRGTYYNQ/oNVvg4V/+yPn8K wCfOZJBXCMYoCPvS/rVMaILgx9m2dTX6FMyO17+2LG1S0RhZDsTWET4irrRso2b8 IeEfnwn5qG96WN6aU6prMpS+LQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFBssnjhf UIgN8yROAwN9q9V1XCy8MB8GA1UdIwQYMBaAFPl4fSyhQyym6TMy4O3vaweyRdew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRi9GQjE0QTg4MkRB QkMxMUVBQTYyMDJDODVDNEY5QUUwMi8tWGg5TEtGRExLYnBNekxnN2U5ckI3SkYx N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YaDlMS0ZETEticE16TGc3ZTlyQjdKRjE3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkRBMUYvRkIxNEE4ODJEQUJDMTFFQUE2MjAyQzg1QzRGOUFFMDIvRDY4ODM5OTZE QUJFMTFFQUIxMkE1MjA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJn6mQwDQQCAAIwBwMFACQB10AwDQYJKoZIhvcNAQELBQAD ggEBAE0vJlSUKwYQj+uaYXOjrJ9/RwY+0IZZSEKhWYivjU7vNY6+2uvyDm1zbxkq NPw5Z4CQPIgLC2aA0fMJwYg5W2oQZXqVT8zwaO0wjUrowZkYE1nxLKqEtmrlweV4 o6oSNaMzuAGv/r1HNaArAJAd3vfT24xvrDOE23+jlNq0dk9Fuq9Kp/4DhLaKRUgn H/U2vNt4WZ8QAEqPtQoP0DKLULKgCSXW7Zg3b0a3cmw1xji8FHHj55j54Rd7Z/tx /8I3xbhwqeBNVcXYni4B0MXMOzlimZu8vDzp5ePnNLdoD6bFuNzdeI5n7HEALIbk HadR9EJjS2D4AeiezgsUOmFlTMw= -----END CERTIFICATE-----Generated at Mon May 6 23:05:36 2024 by rpki-client on console-fra.rpki-client.org