$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/D6138A3C292A11EB9CEDCC26C4F9AE02.roa File: D6138A3C292A11EB9CEDCC26C4F9AE02.roa (raw, json) Hash identifier: J6wRwCEypaCA7yOjNTmPOdJfyJMJ+HapTPhwk9wWQrM= Subject key identifier: C6:08:CE:73:0B:FB:FE:D7:01:C9:EA:25:9C:E4:B4:D7:F3:A8:4E:DC Certificate issuer: /CN=A913AE78/serialNumber=5EE7CF439A4223232982A2CB4DE54F37C7205AA9 Certificate serial: 0666 Authority key identifier: 5E:E7:CF:43:9A:42:23:23:29:82:A2:CB:4D:E5:4F:37:C7:20:5A:A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/D6138A3C292A11EB9CEDCC26C4F9AE02.roa Signing time: Mon 11 Mar 2024 03:51:47 +0000 ROA not before: Mon 11 Mar 2024 03:51:47 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 55752 IP address blocks: 27.121.88.0/22 maxlen: 24 103.225.140.0/22 maxlen: 22 103.225.140.0/24 maxlen: 24 103.225.141.0/24 maxlen: 24 103.225.142.0/24 maxlen: 24 103.225.143.0/24 maxlen: 24 122.102.110.0/23 maxlen: 24 175.158.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 23:32:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1638 (0x666) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE78/serialNumber=5EE7CF439A4223232982A2CB4DE54F37C7205AA9 Validity Not Before: Mar 11 03:51:47 2024 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=65ee7fd3-5725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:58:dc:26:76:ce:7d:9a:92:87:21:4d:a1:9c: 1a:83:92:99:22:94:e7:a1:9c:5c:79:0c:56:69:d0: 5b:45:79:61:10:e4:ec:3a:a3:f8:b0:8c:db:f0:45: 93:41:60:62:56:36:c1:76:56:2a:ed:6f:55:76:44: 05:11:cb:81:74:b4:a4:2d:41:b1:9b:60:ca:d7:29: a5:c9:4d:b2:94:a9:f4:37:10:0c:29:bd:50:6b:12: 39:1f:87:62:70:a6:f3:5b:a5:3f:41:89:e4:5f:d6: e6:69:15:88:81:7c:f8:bf:9f:74:d9:d0:ea:34:95: 9c:c6:9d:96:09:f6:ff:a1:25:5a:4a:86:6a:40:97: 07:fc:33:e1:b4:36:4f:63:4a:1b:23:ff:a4:f2:49: 6f:43:bf:06:20:8b:8e:d3:7f:50:bf:50:6d:c6:91: f6:f2:ca:8c:18:43:01:18:6e:56:8e:e4:a3:f0:08: 40:39:ab:92:4d:11:87:95:df:44:ff:d4:07:43:d9: d0:d2:38:3b:4a:d0:aa:b6:e5:bd:2c:d7:b5:04:33: 1c:bc:92:29:71:ec:76:c3:ab:15:61:af:cf:e7:b7: 51:f5:c8:71:74:6c:ec:cd:01:e9:a3:d9:69:51:6b: 8a:6a:a3:2d:63:8e:9c:a2:af:ed:f0:8d:7b:43:7b: 07:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:08:CE:73:0B:FB:FE:D7:01:C9:EA:25:9C:E4:B4:D7:F3:A8:4E:DC X509v3 Authority Key Identifier: keyid:5E:E7:CF:43:9A:42:23:23:29:82:A2:CB:4D:E5:4F:37:C7:20:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/D6138A3C292A11EB9CEDCC26C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.121.88.0/22 103.225.140.0/22 122.102.110.0/23 175.158.108.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:83:64:8a:f6:bb:80:bf:14:c9:31:e8:d5:d5:70:8c:18:d1: a6:4d:54:93:31:e4:be:1f:ac:34:11:b4:44:69:13:2a:9d:86: 6a:e0:ca:6e:e3:65:a4:52:5f:8b:fa:5e:99:69:23:d8:60:a7: 35:e2:ce:74:90:86:07:6c:53:a3:e7:fa:32:ac:70:c5:d0:e5: 1e:2d:13:42:d8:27:bf:2a:61:49:ba:00:fc:4c:9e:35:d4:0e: c4:97:66:50:32:cb:39:ef:95:83:b4:34:a2:3e:89:88:77:fb: a0:b0:20:6f:26:b3:55:ad:fc:38:a0:92:fb:ba:27:19:3c:1a: 7a:d3:74:9e:22:ee:e9:71:42:c8:2b:c6:66:52:56:77:fc:04: 80:14:e6:f3:fb:5c:b5:ef:9a:cf:4d:14:34:68:e5:e5:99:69: 8d:27:6a:a6:ac:cc:a5:d3:d5:fe:92:bc:d7:5a:ea:c2:5f:fa: a1:5b:ee:c4:16:e4:1e:25:f3:b5:14:bd:89:82:e2:e1:90:6d: 93:92:91:e6:a7:64:db:c4:3a:bc:2b:97:7a:f3:f8:55:53:f9: 54:00:b0:47:00:d8:6b:a9:74:78:62:d7:00:02:96:9a:08:7e: 3c:f9:ad:2f:cc:6e:09:c2:09:9a:5d:82:dd:7f:67:c2:3c:3e: 8d:75:f2:f0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICBmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFNzgxMTAvBgNVBAUTKDVFRTdDRjQzOUE0MjIzMjMyOTgyQTJDQjRERTU0RjM3 QzcyMDVBQTkwHhcNMjQwMzExMDM1MTQ3WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NWVlN2ZkMy01NzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArFjcJnbOfZqShyFNoZwag5KZIpTnoZxceQxWadBbRXlhEOTsOqP4sIzb8EWT QWBiVjbBdlYq7W9VdkQFEcuBdLSkLUGxm2DK1ymlyU2ylKn0NxAMKb1QaxI5H4di cKbzW6U/QYnkX9bmaRWIgXz4v5902dDqNJWcxp2WCfb/oSVaSoZqQJcH/DPhtDZP Y0obI/+k8klvQ78GIIuO039Qv1BtxpH28sqMGEMBGG5WjuSj8AhAOauSTRGHld9E /9QHQ9nQ0jg7StCqtuW9LNe1BDMcvJIpcex2w6sVYa/P57dR9chxdGzszQHpo9lp UWuKaqMtY46coq/t8I17Q3sHvQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFMYIznML +/7XAcnqJZzktNfzqE7cMB8GA1UdIwQYMBaAFF7nz0OaQiMjKYKiy03lTzfHIFqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU3OC9GMUY0RDNDRTI5 MjkxMUVCOTRFMzhEMjZDNEY5QUUwMi9YdWZQUTVwQ0l5TXBncUxMVGVWUE44Y2dX cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h1ZlBRNXBDSXlNcGdxTExUZVZQTjhjZ1dxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0FFNzgvRjFGNEQzQ0UyOTI5MTFFQjk0RTM4RDI2QzRGOUFFMDIvRDYxMzhBM0My OTJBMTFFQjlDRURDQzI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAIbeVgDBAJn4YwDBAF6Zm4DBAKvnmwwDQYJKoZIhvcNAQEL BQADggEBAH2DZIr2u4C/FMkx6NXVcIwY0aZNVJMx5L4frDQRtERpEyqdhmrgym7j ZaRSX4v6XplpI9hgpzXiznSQhgdsU6Pn+jKscMXQ5R4tE0LYJ78qYUm6APxMnjXU DsSXZlAyyznvlYO0NKI+iYh3+6CwIG8ms1Wt/Digkvu6Jxk8GnrTdJ4i7ulxQsgr xmZSVnf8BIAU5vP7XLXvms9NFDRo5eWZaY0naqaszKXT1f6SvNda6sJf+qFb7sQW 5B4l87UUvYmC4uGQbZOSkeanZNvEOrwrl3rz+FVT+VQAsEcA2GupdHhi1wAClpoI fjz5rS/MbgnCCZpdgt1/Z8I8Po118vA= -----END CERTIFICATE-----Generated at Sat May 25 01:24:48 2024 by rpki-client on console-fra.rpki-client.org