$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/27F7A40AE4FD11E990830B62C4F9AE02.roa File: 27F7A40AE4FD11E990830B62C4F9AE02.roa (raw, json) Hash identifier: hFx3+x64ihawPhs2M5pI5ALUI/A0yfu143JmKs9BUpY= Subject key identifier: C8:5C:DA:17:7F:6E:9F:84:1A:51:36:9C:E2:B4:01:F3:C7:29:4D:15 Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Certificate serial: 0C2A Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/27F7A40AE4FD11E990830B62C4F9AE02.roa Signing time: Fri 19 Jan 2024 05:56:49 +0000 ROA not before: Fri 19 Jan 2024 05:56:49 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 138482 IP address blocks: 103.126.216.0/22 maxlen: 24 103.200.36.0/22 maxlen: 22 103.200.36.0/23 maxlen: 23 103.200.36.0/24 maxlen: 24 103.200.37.0/24 maxlen: 24 103.200.38.0/23 maxlen: 23 103.200.38.0/24 maxlen: 24 103.200.39.0/24 maxlen: 24 123.253.64.0/22 maxlen: 22 123.253.64.0/24 maxlen: 24 123.253.65.0/24 maxlen: 24 123.253.66.0/23 maxlen: 23 123.253.66.0/24 maxlen: 24 123.253.67.0/24 maxlen: 24 2401:1040::/32 maxlen: 32 2401:1040::/40 maxlen: 40 2401:1040:300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 19:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3114 (0xc2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Validity Not Before: Jan 19 05:56:49 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65aa0f21-b378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8c:4b:45:7a:fb:4c:31:80:4a:4c:b6:ec:f1: f6:7b:53:b7:22:e8:c1:48:56:8e:77:2c:13:bc:1b: 80:70:e1:f4:dd:d3:7a:62:30:b4:28:bc:62:22:19: 52:48:a6:a2:81:ec:bc:aa:9a:e5:98:c2:27:2a:30: 41:24:e0:53:f6:e1:9c:9c:db:08:91:fa:c5:63:13: 90:74:2e:91:04:ff:e9:45:3a:4a:87:e6:04:a2:4d: af:22:b2:ad:29:19:06:af:79:f1:95:bd:18:5a:96: 71:0e:79:47:c5:d2:fa:6d:cf:86:1e:e6:bc:7c:23: 40:a1:3f:b7:12:d8:59:21:86:7a:da:cf:a8:4b:eb: fc:dd:0c:87:b3:08:b0:54:85:a5:d9:39:65:4a:b5: ea:20:22:45:95:44:cc:64:ec:bb:cf:47:dc:2e:09: 1f:11:3d:0a:ed:45:6a:7a:7e:1e:bd:39:3b:11:13: 0f:98:ad:10:ce:db:66:96:d8:31:50:64:00:b3:58: 68:d1:61:dc:73:86:87:fa:6e:4a:14:77:e9:26:6c: 9e:9e:92:41:d3:36:e8:ce:55:ca:4c:e4:ef:77:28: fd:80:f9:ff:57:0e:2c:1e:10:69:33:d0:d6:5a:1b: b3:d1:04:74:f3:01:a6:8a:e7:65:5d:0b:45:57:89: 00:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:5C:DA:17:7F:6E:9F:84:1A:51:36:9C:E2:B4:01:F3:C7:29:4D:15 X509v3 Authority Key Identifier: keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/27F7A40AE4FD11E990830B62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.126.216.0/22 103.200.36.0/22 123.253.64.0/22 IPv6: 2401:1040::/32 Signature Algorithm: sha256WithRSAEncryption 78:0c:10:85:0a:86:67:53:d1:5c:19:30:c0:2a:9f:5b:3f:75: c3:94:d6:ad:14:a2:ee:52:34:2d:99:d3:20:8c:91:84:e7:c2: 2d:0a:35:76:41:12:e3:2f:09:9b:26:e3:3a:95:c5:5e:2e:21: f0:7b:0c:2d:2e:03:2b:cc:43:3f:ae:fb:47:ec:eb:97:81:e0: c3:c6:c9:5f:14:cf:c7:f9:e8:1b:20:b9:0f:ac:79:db:d2:b5: b1:db:fc:7e:12:c4:0e:c9:37:1c:e9:65:c1:6f:a5:38:03:4e: 92:e4:c5:76:ab:05:19:fb:3c:3e:5e:7d:2b:5f:41:73:9f:3a: bf:36:b9:4c:56:b2:bf:a2:f2:f7:ac:87:9f:80:e8:f7:aa:75: e5:f0:b3:bd:da:b6:8e:aa:b3:3a:37:31:93:82:c5:1c:ec:4b: 1a:2a:46:51:c8:d3:07:25:53:dc:02:da:7f:ee:06:fa:1f:19: 51:41:37:97:ef:c5:4b:f8:a5:1f:7a:0b:a9:2f:f0:c7:00:06: 8a:8e:8b:c1:94:21:d4:2a:de:be:c4:f7:a0:30:4f:e9:ee:b3: b2:ad:2a:0f:c6:42:ea:fc:aa:37:8b:d0:70:df:f3:12:86:36: 63:01:98:13:75:3b:75:12:a0:c6:55:9b:1c:fd:b0:25:ad:fd: 3d:8b:2b:fe -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICDCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRDNDQxMTAvBgNVBAUTKEE2NDIxRkUxM0Q4QzkzQTdCRERGRjhCNTM3MTlCNTgw ODc0OEQwREYwHhcNMjQwMTE5MDU1NjQ5WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NWFhMGYyMS1iMzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA64xLRXr7TDGASky27PH2e1O3IujBSFaOdywTvBuAcOH03dN6YjC0KLxiIhlS SKaigey8qprlmMInKjBBJOBT9uGcnNsIkfrFYxOQdC6RBP/pRTpKh+YEok2vIrKt KRkGr3nxlb0YWpZxDnlHxdL6bc+GHua8fCNAoT+3EthZIYZ62s+oS+v83QyHswiw VIWl2TllSrXqICJFlUTMZOy7z0fcLgkfET0K7UVqen4evTk7ERMPmK0Qzttmltgx UGQAs1ho0WHcc4aH+m5KFHfpJmyenpJB0zbozlXKTOTvdyj9gPn/Vw4sHhBpM9DW Whuz0QR08wGmiudlXQtFV4kAywIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFMhc2hd/ bp+EGlE2nOK0AfPHKU0VMB8GA1UdIwQYMBaAFKZCH+E9jJOnvd/4tTcZtYCHSNDf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREM0NC8yOUI2QkVEQUU0 RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2ZTkzX2kxTnhtMWdJZEkw TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BrSWY0VDJNazZlOTNfaTFOeG0xZ0lkSTBOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkRDNDQvMjlCNkJFREFFNEZDMTFFOUIxM0I0ODYwQzRGOUFFMDIvMjdGN0E0MEFF NEZEMTFFOTkwODMwQjYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAJnftgDBAJnyCQDBAJ7/UAwDQQCAAIwBwMFACQBEEAwDQYJ KoZIhvcNAQELBQADggEBAHgMEIUKhmdT0VwZMMAqn1s/dcOU1q0Uou5SNC2Z0yCM kYTnwi0KNXZBEuMvCZsm4zqVxV4uIfB7DC0uAyvMQz+u+0fs65eB4MPGyV8Uz8f5 6BsguQ+sedvStbHb/H4SxA7JNxzpZcFvpTgDTpLkxXarBRn7PD5efStfQXOfOr82 uUxWsr+i8vesh5+A6PeqdeXws73ato6qszo3MZOCxRzsSxoqRlHI0wclU9wC2n/u BvofGVFBN5fvxUv4pR96C6kv8McABoqOi8GUIdQq3r7E96AwT+nus7KtKg/GQur8 qjeL0HDf8xKGNmMBmBN1O3USoMZVmxz9sCWt/T2LK/4= -----END CERTIFICATE-----Generated at Sun May 26 19:58:49 2024 by rpki-client on console-fra.rpki-client.org