$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/743770A0C06011EE882BC34AC4F9AE02.roa File: 743770A0C06011EE882BC34AC4F9AE02.roa (raw, json) Hash identifier: eGsG0nMQjZ5HV5HzWnBAkU25QDQccx9tJTb8chY6rwU= Subject key identifier: D8:66:DF:C2:3E:42:DD:36:DA:04:A2:5F:06:8A:B8:A1:D8:2B:BD:E9 Certificate issuer: /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Certificate serial: 1433 Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/743770A0C06011EE882BC34AC4F9AE02.roa Signing time: Thu 18 Apr 2024 17:54:54 +0000 ROA not before: Thu 18 Apr 2024 17:54:54 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 9541 IP address blocks: 103.209.125.0/24 maxlen: 24 103.209.126.0/24 maxlen: 24 103.209.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 17:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5171 (0x1433) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Validity Not Before: Apr 18 17:54:54 2024 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=66215e6e-bdea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:90:a1:51:5d:4e:f0:b3:18:b4:2f:f6:e0:0c: 7c:ef:16:f1:dd:5a:62:e3:62:17:dd:71:59:29:dc: 2e:6e:a2:41:de:2f:31:75:f3:b2:4d:fd:8a:c8:31: d8:3e:1a:7e:db:4d:b3:0a:8a:05:ef:35:b6:33:fe: e5:64:50:2d:d9:4e:95:45:84:6f:5a:97:6b:35:0c: 63:8e:01:71:2b:1a:83:f5:8e:3c:28:96:d9:4c:ec: 6b:68:48:3f:05:2d:82:71:21:c9:8c:ac:f1:b5:9a: 1d:99:5b:9d:b9:73:b3:e1:5f:07:6e:4f:04:24:5a: 77:7c:1a:ee:11:47:fb:22:3b:79:8b:1e:38:3a:59: fc:f8:0a:5c:96:0f:19:e7:da:62:a1:db:78:c9:68: 00:86:61:20:11:e6:33:30:15:69:c4:af:a6:cc:9e: ef:e8:89:d8:bc:96:a2:20:16:76:47:32:61:49:02: c1:c7:b0:48:c7:1f:9f:94:dd:50:9c:cd:79:62:eb: e4:43:35:24:87:af:3c:35:e3:67:1b:da:80:4e:f7: 7c:0e:d1:14:45:82:64:0a:5b:91:7b:73:c9:cf:16: fe:1c:77:ff:6c:d0:46:b4:17:62:be:67:a0:33:b1: 7a:e7:bd:fc:d0:51:a8:af:b0:32:14:4f:e2:a1:38: f4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:66:DF:C2:3E:42:DD:36:DA:04:A2:5F:06:8A:B8:A1:D8:2B:BD:E9 X509v3 Authority Key Identifier: keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/743770A0C06011EE882BC34AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.209.125.0-103.209.127.255 Signature Algorithm: sha256WithRSAEncryption 49:41:0b:45:91:dc:c7:dc:5a:ca:86:1c:32:22:4f:09:9e:24: 9b:a0:5b:65:e2:28:5e:c3:c4:00:b1:0a:44:2d:7a:cd:38:eb: f1:9a:85:d9:d6:e5:f2:ae:2a:7f:c7:9b:13:86:9b:71:4d:53: b6:33:4b:e0:68:76:a7:8e:93:50:2a:ca:c2:1f:37:ff:b3:bd: 5c:23:80:89:95:25:e6:8c:a9:e9:ac:ef:be:12:76:7e:01:12: dd:08:6f:b7:48:04:d9:93:d8:93:a4:ce:35:c6:75:a1:53:09: 14:17:28:f5:29:df:96:a7:f8:b0:18:1c:f8:dd:af:54:78:38: 80:22:e1:3d:61:98:41:53:9d:da:3e:de:95:a7:cd:39:5b:65: 4d:18:10:69:53:d8:ab:e0:7a:17:39:9d:bf:44:7e:00:22:30: 42:45:f2:9c:df:ef:70:61:bf:3f:d9:c3:7d:66:88:77:05:34: b0:f8:be:99:66:b3:aa:92:3e:b2:2a:ae:2a:4f:a9:c8:24:4a: 03:f1:a1:e1:8a:2f:3c:39:4a:30:b1:5f:1a:9c:05:d3:b6:33: 7e:f3:5a:24:b0:59:e1:4a:be:a8:b8:59:19:48:dd:44:ed:60: 9d:ac:39:65:9b:ad:5e:77:34:97:2f:bd:98:24:a9:f9:57:25: 5c:83:af:6b -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICFDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxRDUxMTAvBgNVBAUTKDQ0OEJEOTcxQTMwNkFCMDM2Mzk5RTcxNkRDMjIxQ0Ez MzhGNThCNTkwHhcNMjQwNDE4MTc1NDU0WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjIxNWU2ZS1iZGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupChUV1O8LMYtC/24Ax87xbx3Vpi42IX3XFZKdwubqJB3i8xdfOyTf2KyDHY Php+202zCooF7zW2M/7lZFAt2U6VRYRvWpdrNQxjjgFxKxqD9Y48KJbZTOxraEg/ BS2CcSHJjKzxtZodmVuduXOz4V8Hbk8EJFp3fBruEUf7Ijt5ix44Oln8+Apclg8Z 59piodt4yWgAhmEgEeYzMBVpxK+mzJ7v6InYvJaiIBZ2RzJhSQLBx7BIxx+flN1Q nM15YuvkQzUkh688NeNnG9qATvd8DtEURYJkCluRe3PJzxb+HHf/bNBGtBdivmeg M7F657380FGor7AyFE/ioTj0NwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFNhm38I+ Qt022gSiXwaKuKHYK73pMB8GA1UdIwQYMBaAFESL2XGjBqsDY5nnFtwiHKM49YtZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDFENS9ENEJFMDBENDYz RTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3TmptZWNXM0NJY296ajFp MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JJdlpjYU1HcXdOam1lY1czQ0ljb3pqMWkxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzAxRDUvRDRCRTAwRDQ2M0U1MTFFOEI1Q0ZFNDFBQzRGOUFFMDIvNzQzNzcwQTBD MDYwMTFFRTg4MkJDMzRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAGfRfQMEB2fRADANBgkqhkiG9w0BAQsFAAOCAQEASUEL RZHcx9xayoYcMiJPCZ4km6BbZeIoXsPEALEKRC16zTjr8ZqF2dbl8q4qf8ebE4ab cU1TtjNL4Gh2p46TUCrKwh83/7O9XCOAiZUl5oyp6azvvhJ2fgES3Qhvt0gE2ZPY k6TONcZ1oVMJFBco9Snflqf4sBgc+N2vVHg4gCLhPWGYQVOd2j7elafNOVtlTRgQ aVPYq+B6Fzmdv0R+ACIwQkXynN/vcGG/P9nDfWaIdwU0sPi+mWazqpI+siquKk+p yCRKA/Gh4YovPDlKMLFfGpwF07YzfvNaJLBZ4Uq+qLhZGUjdRO1gnaw5ZZutXnc0 ly+9mCSp+VclXIOvaw== -----END CERTIFICATE-----Generated at Mon May 20 19:59:35 2024 by rpki-client on console-ams.rpki-client.org