$ rpki-client -vvf rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/DC41C3A4AC2311EE92AE162DC4F9AE02.roa File: DC41C3A4AC2311EE92AE162DC4F9AE02.roa (raw, json) Hash identifier: a3oIzAQ/6v1tE3Un2yhTJX2qBz4v5oVCdJt9vu/qbNg= Subject key identifier: D8:FA:93:51:2C:DA:78:CA:BB:34:8E:83:CB:67:CC:0A:F8:56:A3:3F Certificate issuer: /CN=A913F721/serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4 Certificate serial: 0A0D Authority key identifier: 1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/DC41C3A4AC2311EE92AE162DC4F9AE02.roa Signing time: Wed 17 Apr 2024 08:35:10 +0000 ROA not before: Wed 17 Apr 2024 08:35:10 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 137703 IP address blocks: 103.113.192.0/22 maxlen: 24 2404:5e40::/32 maxlen: 32 2404:5e40::/48 maxlen: 48 2404:5e40:1::/48 maxlen: 48 2404:5e40:2::/48 maxlen: 48 2404:5e40:3::/48 maxlen: 48 2404:5e40:4::/48 maxlen: 48 2404:5e40:5::/48 maxlen: 48 2404:5e40:6::/48 maxlen: 48 2404:5e40:7::/48 maxlen: 48 2404:5e40:8::/48 maxlen: 48 2404:5e40:9::/48 maxlen: 48 2404:5e40:a::/48 maxlen: 48 2404:5e40:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 20:46:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2573 (0xa0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F721/serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4 Validity Not Before: Apr 17 08:35:10 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=661f89be-3247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e5:09:5d:9f:35:9b:6f:38:a3:5b:d3:14:54: 17:d8:f2:2d:ec:5d:ed:b8:98:4e:75:16:89:fe:f0: 0e:d7:cd:5c:34:4f:b0:5a:a3:31:ab:c6:f3:0d:1e: d8:0f:8d:ba:30:fc:13:21:2d:0d:56:d9:bb:2a:ff: 70:eb:22:3b:40:e2:b9:be:6e:ee:d4:08:8d:cc:de: ac:49:98:50:67:1a:7f:e1:93:73:a3:03:37:5e:af: 18:e0:1c:f6:96:47:90:93:06:5d:59:09:63:7c:31: 8e:b0:5d:a2:10:01:29:23:1e:8a:ae:ab:4e:7d:31: 51:f2:68:ab:d5:18:23:2a:61:65:d7:5b:9c:75:d3: 04:5b:88:ef:a3:0c:aa:ed:4a:cd:dc:93:3a:59:9a: e4:6b:75:54:d1:b9:06:8c:c7:f2:22:1f:38:f1:0d: df:25:da:73:c7:d7:98:36:2e:00:b1:36:e8:15:a8: 6b:fc:27:30:d3:42:f1:f1:94:e6:8c:42:14:35:1f: e4:e3:db:dd:35:4a:e6:be:ee:16:85:4a:c2:b3:e0: 36:76:86:47:8f:0d:c2:ff:15:22:d5:ec:f7:b5:1a: 79:dc:fa:3f:9f:34:a2:ff:92:d7:58:d2:f7:cc:af: b3:43:8d:82:50:54:76:54:b9:c7:c4:ef:28:82:ab: 7c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:FA:93:51:2C:DA:78:CA:BB:34:8E:83:CB:67:CC:0A:F8:56:A3:3F X509v3 Authority Key Identifier: keyid:1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/DC41C3A4AC2311EE92AE162DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.113.192.0/22 IPv6: 2404:5e40::/32 Signature Algorithm: sha256WithRSAEncryption 3c:91:36:92:59:36:01:77:bc:ac:bc:66:39:60:d6:03:fc:30: ca:78:48:0b:65:b9:f1:5e:88:a8:b7:a0:1c:62:21:dd:9c:bc: bb:8b:6c:ea:8e:34:b8:4b:b7:60:c6:88:72:fd:ed:51:fe:eb: f2:f7:a3:cf:3e:0f:60:b9:14:8d:bf:0e:d4:6d:29:c8:1a:62: 42:d1:06:00:c0:b5:03:25:89:35:15:c4:70:33:44:72:e3:65: 31:b4:b0:50:6c:f4:82:dc:06:43:28:a1:88:0b:01:18:25:43: 2a:c3:8d:fc:5f:fa:a6:a2:31:36:1a:05:fa:17:cf:68:cc:a6: 5c:dc:fb:54:1f:43:c4:1e:76:a9:5c:cc:e2:7a:f6:ec:f0:7b: ca:2f:c2:48:ae:fd:51:02:d6:90:7a:3c:fa:30:33:98:ae:03: 66:fa:76:fb:f6:64:20:e9:e0:72:2c:93:fa:6f:b6:7d:3b:85: 1d:0a:04:29:a9:e5:f5:d6:60:71:ba:89:f7:b5:05:7b:fa:87: 88:ee:fe:25:7d:09:00:25:6c:5c:2f:42:ef:db:95:f9:21:34: 27:8c:53:2f:20:4a:45:9b:55:b6:f3:e5:9e:a4:c2:76:20:1f: 45:a6:fa:b0:87:53:0b:71:e2:1d:41:86:b5:1e:0b:0e:18:d0: d0:70:f3:28 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y3MjExMTAvBgNVBAUTKDFERDcxN0IyMjk5MzYxOTBDRUI2NjdDN0NFMUNBOUY5 QkZCNUZBQzQwHhcNMjQwNDE3MDgzNTEwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjFmODliZS0zMjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3uUJXZ81m284o1vTFFQX2PIt7F3tuJhOdRaJ/vAO181cNE+wWqMxq8bzDR7Y D426MPwTIS0NVtm7Kv9w6yI7QOK5vm7u1AiNzN6sSZhQZxp/4ZNzowM3Xq8Y4Bz2 lkeQkwZdWQljfDGOsF2iEAEpIx6KrqtOfTFR8mir1RgjKmFl11ucddMEW4jvowyq 7UrN3JM6WZrka3VU0bkGjMfyIh848Q3fJdpzx9eYNi4AsTboFahr/Ccw00Lx8ZTm jEIUNR/k49vdNUrmvu4WhUrCs+A2doZHjw3C/xUi1ez3tRp53Po/nzSi/5LXWNL3 zK+zQ42CUFR2VLnHxO8ogqt8ewIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFNj6k1Es 2njKuzSOg8tnzAr4VqM/MB8GA1UdIwQYMBaAFB3XF7Ipk2GQzrZnx84cqfm/tfrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjcyMS82NDQyNDM3QTUz QUMxMUVBOUFENTRCMkZDNEY5QUUwMi9IZGNYc2ltVFlaRE90bWZIemh5cC1iLTEt c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hkY1hzaW1UWVpET3RtZkh6aHlwLWItMS1zUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0Y3MjEvNjQ0MjQzN0E1M0FDMTFFQTlBRDU0QjJGQzRGOUFFMDIvREM0MUMzQTRB QzIzMTFFRTkyQUUxNjJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnccAwDQQCAAIwBwMFACQEXkAwDQYJKoZIhvcNAQELBQAD ggEBADyRNpJZNgF3vKy8Zjlg1gP8MMp4SAtlufFeiKi3oBxiId2cvLuLbOqONLhL t2DGiHL97VH+6/L3o88+D2C5FI2/DtRtKcgaYkLRBgDAtQMliTUVxHAzRHLjZTG0 sFBs9ILcBkMooYgLARglQyrDjfxf+qaiMTYaBfoXz2jMplzc+1QfQ8QedqlczOJ6 9uzwe8ovwkiu/VEC1pB6PPowM5iuA2b6dvv2ZCDp4HIsk/pvtn07hR0KBCmp5fXW YHG6ife1BXv6h4ju/iV9CQAlbFwvQu/blfkhNCeMUy8gSkWbVbbz5Z6kwnYgH0Wm +rCHUwtx4h1BhrUeCw4Y0NBw8yg= -----END CERTIFICATE-----Generated at Mon May 20 22:11:04 2024 by rpki-client on console-ams.rpki-client.org