$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/CE9692E0222311EAAED0162CC4F9AE02.roa File: CE9692E0222311EAAED0162CC4F9AE02.roa (raw, json) Hash identifier: 0vJsqwC5HbXsESUnxeD7JszICfvNMnf93j/cyz5W+wI= Subject key identifier: C4:73:3F:9C:CA:F6:14:1A:C3:A1:6C:56:06:C2:5D:69:EC:2B:0C:4C Certificate issuer: /CN=A913AE7C/serialNumber=86811BB267AEF85400DBE72970232D411A2D9AE9 Certificate serial: 0A58 Authority key identifier: 86:81:1B:B2:67:AE:F8:54:00:DB:E7:29:70:23:2D:41:1A:2D:9A:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/CE9692E0222311EAAED0162CC4F9AE02.roa Signing time: Wed 02 Aug 2023 19:57:12 +0000 ROA not before: Wed 02 Aug 2023 19:57:12 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 58655 IP address blocks: 103.12.172.0/22 maxlen: 22 103.12.172.0/24 maxlen: 24 103.12.173.0/24 maxlen: 24 103.12.174.0/24 maxlen: 24 103.12.175.0/24 maxlen: 24 2404:7500::/32 maxlen: 32 2404:7500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.crl rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2648 (0xa58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE7C/serialNumber=86811BB267AEF85400DBE72970232D411A2D9AE9 Validity Not Before: Aug 2 19:57:12 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64cab518-d7d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:59:7e:2f:2e:42:5e:58:5e:48:1e:18:7f:1c: 43:e7:95:d6:95:9c:2e:6e:98:85:87:e1:0c:0e:38: b8:af:37:4a:00:3e:07:fa:1a:0c:c2:d5:7c:d6:0b: 24:33:c7:a2:ce:9f:3f:cf:1b:28:75:47:d8:f9:ae: 71:39:9d:99:37:16:36:5a:74:ef:db:34:cc:ff:f1: 7d:65:1c:75:56:7c:52:5e:85:37:4b:48:78:9b:44: 75:cf:49:b5:bf:90:4c:15:08:40:32:c8:8c:bf:df: fe:45:20:6c:7f:ac:12:91:b4:db:2b:b9:d9:7a:ab: 5c:6a:3c:c7:7f:53:a1:03:78:bc:64:28:5f:28:89: a5:d6:0f:63:f9:ef:5a:36:84:e2:e0:92:66:ce:5e: cb:88:54:a7:93:1a:8d:28:b3:69:14:2d:13:e4:41: b4:2e:16:36:35:e4:31:ea:64:4f:29:51:bd:91:8e: 77:dd:f8:b8:9b:30:7f:48:f8:02:04:1c:27:96:d4: 93:fe:06:87:50:df:2a:bf:0d:0e:81:28:1b:73:78: 9d:6d:5c:00:36:01:42:91:ad:dc:34:b8:4b:ea:8e: 39:96:18:60:3b:b8:ec:61:1e:72:0a:5d:ee:64:39: e1:ba:7a:e1:6b:32:b3:a8:e4:ac:59:17:ef:6d:82: af:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:73:3F:9C:CA:F6:14:1A:C3:A1:6C:56:06:C2:5D:69:EC:2B:0C:4C X509v3 Authority Key Identifier: keyid:86:81:1B:B2:67:AE:F8:54:00:DB:E7:29:70:23:2D:41:1A:2D:9A:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/CE9692E0222311EAAED0162CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.12.172.0/22 IPv6: 2404:7500::/32 Signature Algorithm: sha256WithRSAEncryption 7f:32:6a:c0:ee:fd:15:0a:7e:1c:71:b2:38:91:96:72:fa:a2: 63:9c:81:e2:f8:ed:8e:7e:ea:13:f9:f9:af:af:bd:1e:d5:3b: 02:b9:d9:3e:83:1a:75:fc:ce:84:c0:b2:70:e2:87:bb:bd:48: 87:61:b3:f7:81:09:eb:14:3e:0e:c8:c4:db:30:08:1d:17:93: f2:85:9d:fc:04:29:4b:4b:0d:aa:38:d1:dc:64:e8:5d:12:e6: b6:47:17:a7:d8:f1:d9:71:12:98:76:d0:d3:47:ac:be:a4:2a: ba:ba:1f:b6:1a:11:22:72:56:8a:90:d1:20:2c:05:14:6d:95: 4f:5b:13:ec:e5:10:9b:41:98:19:7d:73:c0:ca:b0:f0:3a:19: 0e:37:53:15:e4:b0:ac:62:8b:7d:55:82:90:52:de:be:17:70: 45:2c:f3:ea:4d:80:f2:45:ae:18:f5:64:fb:38:76:96:92:aa: 24:a0:3d:3f:a3:d5:bc:6f:cc:cc:27:97:eb:41:cd:c2:14:5c: 03:9f:b4:fe:b6:7c:aa:be:14:fc:59:cf:f3:e9:f2:f0:2b:f4: ce:a9:4f:12:8c:22:cb:96:b6:db:b0:15:39:3c:b4:5a:6b:9b: d3:55:78:9f:c5:b6:ed:c9:5b:6e:94:0e:64:14:fd:05:45:38: e5:97:7f:41 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICClgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFN0MxMTAvBgNVBAUTKDg2ODExQkIyNjdBRUY4NTQwMERCRTcyOTcwMjMyRDQx MUEyRDlBRTkwHhcNMjMwODAyMTk1NzEyWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGNhYjUxOC1kN2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA11l+Ly5CXlheSB4YfxxD55XWlZwubpiFh+EMDji4rzdKAD4H+hoMwtV81gsk M8eizp8/zxsodUfY+a5xOZ2ZNxY2WnTv2zTM//F9ZRx1VnxSXoU3S0h4m0R1z0m1 v5BMFQhAMsiMv9/+RSBsf6wSkbTbK7nZeqtcajzHf1OhA3i8ZChfKIml1g9j+e9a NoTi4JJmzl7LiFSnkxqNKLNpFC0T5EG0LhY2NeQx6mRPKVG9kY533fi4mzB/SPgC BBwnltST/gaHUN8qvw0OgSgbc3idbVwANgFCka3cNLhL6o45lhhgO7jsYR5yCl3u ZDnhunrhazKzqOSsWRfvbYKvDwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFMRzP5zK 9hQaw6FsVgbCXWnsKwxMMB8GA1UdIwQYMBaAFIaBG7JnrvhUANvnKXAjLUEaLZrp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU3Qy9GMzQwN0U1NDIy MjIxMUVBODc3REQ1MkFDNEY5QUUwMi9ob0Vic21ldS1GUUEyLWNwY0NNdFFSb3Rt dWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvRWJzbWV1LUZRQTItY3BjQ010UVJvdG11ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0FFN0MvRjM0MDdFNTQyMjIyMTFFQTg3N0RENTJBQzRGOUFFMDIvQ0U5NjkyRTAy MjIzMTFFQUFFRDAxNjJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnDKwwDQQCAAIwBwMFACQEdQAwDQYJKoZIhvcNAQELBQAD ggEBAH8yasDu/RUKfhxxsjiRlnL6omOcgeL47Y5+6hP5+a+vvR7VOwK52T6DGnX8 zoTAsnDih7u9SIdhs/eBCesUPg7IxNswCB0Xk/KFnfwEKUtLDao40dxk6F0S5rZH F6fY8dlxEph20NNHrL6kKrq6H7YaESJyVoqQ0SAsBRRtlU9bE+zlEJtBmBl9c8DK sPA6GQ43UxXksKxii31VgpBS3r4XcEUs8+pNgPJFrhj1ZPs4dpaSqiSgPT+j1bxv zMwnl+tBzcIUXAOftP62fKq+FPxZz/Pp8vAr9M6pTxKMIsuWttuwFTk8tFprm9NV eJ/Ftu3JW26UDmQU/QVFOOWXf0E= -----END CERTIFICATE-----Generated at Thu May 16 22:34:44 2024 by rpki-client on console-ams.rpki-client.org