$ rpki-client -vvf rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/06D647D4057811EC8BCE3783C4F9AE02.roa File: 06D647D4057811EC8BCE3783C4F9AE02.roa (raw, json) Hash identifier: tH2fTvWFHZMzm+iLIKf6rcIULPULlPmbU+0W/u+xowk= Subject key identifier: B0:14:0B:FE:D3:6C:70:38:09:B6:55:4B:61:A9:A7:0C:62:60:75:8D Certificate issuer: /CN=A913EFAB/serialNumber=9F2BFD7D800CFA13E9048AE100B4851430126FD3 Certificate serial: 03D0 Authority key identifier: 9F:2B:FD:7D:80:0C:FA:13:E9:04:8A:E1:00:B4:85:14:30:12:6F:D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/06D647D4057811EC8BCE3783C4F9AE02.roa Signing time: Mon 21 Aug 2023 01:02:20 +0000 ROA not before: Mon 21 Aug 2023 01:02:20 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 138926 IP address blocks: 103.170.178.0/24 maxlen: 24 103.170.179.0/24 maxlen: 24 2001:df7:2380::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.crl rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 00:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 976 (0x3d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EFAB/serialNumber=9F2BFD7D800CFA13E9048AE100B4851430126FD3 Validity Not Before: Aug 21 01:02:20 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64e2b79c-ed1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:87:92:57:b5:3f:54:cd:f7:75:26:a6:7f:71: 90:c8:04:6f:99:40:69:15:28:f0:89:85:b3:1b:3a: 78:68:ca:a4:0b:b6:4d:02:42:86:dd:b6:60:50:e7: 01:df:ab:50:d9:d3:b5:3b:f9:af:c9:f7:22:9b:59: 81:2c:5e:fe:ff:53:90:dd:20:7a:e5:70:21:c7:2a: a8:dc:03:00:2a:1a:53:96:61:f7:1d:e4:c1:0c:35: db:c6:7e:29:d6:c6:18:14:30:89:c5:8d:86:b0:4e: 57:bc:c5:43:28:6f:03:75:d9:40:9e:04:3e:40:e1: 87:3a:1d:3c:41:8b:e6:1e:f8:f9:a2:f0:0f:58:50: 71:b2:02:a6:86:29:ee:a3:89:de:22:f7:da:83:8e: 10:56:dc:1b:0d:4d:a4:b1:cd:2a:c3:17:bb:42:da: 4f:e6:03:41:60:39:3f:a7:be:8d:da:00:62:11:5a: cd:61:87:43:e3:e3:e9:b6:1d:55:52:fd:29:9e:fc: 4a:9d:fa:6a:48:50:3c:61:3f:bc:b0:c7:c9:cf:52: b5:2b:bc:44:ea:8c:80:db:d9:c3:7d:c7:8a:03:49: a2:ac:cb:52:a4:25:97:af:22:a6:62:1c:aa:c6:83: e8:8c:e3:a8:55:92:67:11:e4:fd:23:c7:60:ee:77: b4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:14:0B:FE:D3:6C:70:38:09:B6:55:4B:61:A9:A7:0C:62:60:75:8D X509v3 Authority Key Identifier: keyid:9F:2B:FD:7D:80:0C:FA:13:E9:04:8A:E1:00:B4:85:14:30:12:6F:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/06D647D4057811EC8BCE3783C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.170.178.0/23 IPv6: 2001:df7:2380::/48 Signature Algorithm: sha256WithRSAEncryption 40:90:da:00:83:39:c1:e4:18:fc:c8:de:c5:13:34:52:7b:14: 33:c0:39:cc:5f:50:c0:dd:b0:9c:95:95:3f:69:6e:12:fa:ac: f4:ae:d4:4c:d3:5b:97:0e:aa:a5:ad:8b:d2:e0:49:fa:f3:b4: 19:5f:55:d5:43:3b:f3:d6:47:80:7b:8a:f1:d6:3b:80:ca:2c: 22:c9:59:97:1b:ec:12:0d:1b:e4:5e:98:03:bd:35:ff:b7:e9: a5:ea:4a:a9:12:24:e5:ee:03:b8:5c:11:bb:3b:75:d5:6d:ee: 77:fd:5b:ca:a4:d5:2f:2b:c1:84:ab:e1:f8:61:5d:9c:47:4e: 5a:62:7b:3d:6a:bf:df:a1:05:65:68:9b:de:4d:51:ed:41:c1: 01:10:3b:a1:fb:57:9f:c5:20:70:e6:77:9a:92:56:a4:99:d6: fb:9e:15:14:27:eb:96:cc:08:65:b8:7c:1f:ec:2e:0a:35:8b: 17:43:9a:79:73:45:dc:11:b6:06:00:ce:48:f0:84:96:22:6b: 3b:ad:f5:27:88:87:92:ff:60:36:1d:55:87:72:a4:0e:03:e5: 42:94:e9:9c:15:4a:7f:6d:ba:0e:48:30:3a:c6:74:21:29:33: ce:ca:df:d7:42:5b:0f:0a:e8:ac:b9:39:c2:04:88:ff:35:ca: a3:e5:e5:07 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICA9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VGQUIxMTAvBgNVBAUTKDlGMkJGRDdEODAwQ0ZBMTNFOTA0OEFFMTAwQjQ4NTE0 MzAxMjZGRDMwHhcNMjMwODIxMDEwMjIwWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGUyYjc5Yy1lZDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34eSV7U/VM33dSamf3GQyARvmUBpFSjwiYWzGzp4aMqkC7ZNAkKG3bZgUOcB 36tQ2dO1O/mvyfcim1mBLF7+/1OQ3SB65XAhxyqo3AMAKhpTlmH3HeTBDDXbxn4p 1sYYFDCJxY2GsE5XvMVDKG8DddlAngQ+QOGHOh08QYvmHvj5ovAPWFBxsgKmhinu o4neIvfag44QVtwbDU2ksc0qwxe7QtpP5gNBYDk/p76N2gBiEVrNYYdD4+Ppth1V Uv0pnvxKnfpqSFA8YT+8sMfJz1K1K7xE6oyA29nDfceKA0mirMtSpCWXryKmYhyq xoPojOOoVZJnEeT9I8dg7ne0ywIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLAUC/7T bHA4CbZVS2GppwxiYHWNMB8GA1UdIwQYMBaAFJ8r/X2ADPoT6QSK4QC0hRQwEm/T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUZBQi9FODJEMDZGRTA1 NzQxMUVDQTI0MkM1N0ZDNEY5QUUwMi9ueXY5ZllBTS1oUHBCSXJoQUxTRkZEQVNi OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL255djlmWUFNLWhQcEJJcmhBTFNGRkRBU2I5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0VGQUIvRTgyRDA2RkUwNTc0MTFFQ0EyNDJDNTdGQzRGOUFFMDIvMDZENjQ3RDQw NTc4MTFFQzhCQ0UzNzgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnqrIwDwQCAAIwCQMHACABDfcjgDANBgkqhkiG9w0BAQsF AAOCAQEAQJDaAIM5weQY/MjexRM0UnsUM8A5zF9QwN2wnJWVP2luEvqs9K7UTNNb lw6qpa2L0uBJ+vO0GV9V1UM789ZHgHuK8dY7gMosIslZlxvsEg0b5F6YA701/7fp pepKqRIk5e4DuFwRuzt11W3ud/1byqTVLyvBhKvh+GFdnEdOWmJ7PWq/36EFZWib 3k1R7UHBARA7oftXn8UgcOZ3mpJWpJnW+54VFCfrlswIZbh8H+wuCjWLF0OaeXNF 3BG2BgDOSPCEliJrO631J4iHkv9gNh1Vh3KkDgPlQpTpnBVKf226DkgwOsZ0ISkz zsrf10JbDwrorLk5wgSI/zXKo+XlBw== -----END CERTIFICATE-----Generated at Mon May 27 02:57:01 2024 by rpki-client on console-fra.rpki-client.org