$ rpki-client -vvf rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/1C6ADB02525311EA939E4652C4F9AE02.roa File: 1C6ADB02525311EA939E4652C4F9AE02.roa (raw, json) Hash identifier: rqc3Zf0W9e1QQiLDluriWxhmRtFtzlbFrwvhos4rneM= Subject key identifier: 63:3C:1E:58:8C:00:C2:62:0D:77:AA:94:87:A8:E0:9C:3A:8E:7B:FE Certificate issuer: /CN=A9144354/serialNumber=47D06BD7EA8DF2197F71270B75C964C79AB9F0CC Certificate serial: 106C Authority key identifier: 47:D0:6B:D7:EA:8D:F2:19:7F:71:27:0B:75:C9:64:C7:9A:B9:F0:CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/1C6ADB02525311EA939E4652C4F9AE02.roa Signing time: Sun 28 Jan 2024 17:55:35 +0000 ROA not before: Sun 28 Jan 2024 17:55:35 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 134926 IP address blocks: 103.127.156.0/24 maxlen: 24 103.127.157.0/24 maxlen: 24 103.127.159.0/24 maxlen: 24 2404:2340::/32 maxlen: 32 2404:2340::/36 maxlen: 36 2404:2340:1000::/36 maxlen: 36 2404:2340:2000::/36 maxlen: 36 2404:2340:3000::/36 maxlen: 36 2404:2340:4000::/36 maxlen: 36 2404:2340:5000::/36 maxlen: 36 2404:2340:6000::/36 maxlen: 36 2404:2340:7000::/36 maxlen: 36 2404:2340:8000::/36 maxlen: 36 2404:2340:9000::/36 maxlen: 36 2404:2340:a000::/36 maxlen: 36 2404:2340:b000::/36 maxlen: 36 2404:2340:c000::/36 maxlen: 36 2404:2340:d000::/36 maxlen: 36 2404:2340:e000::/36 maxlen: 36 2404:2340:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.crl rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 18:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4204 (0x106c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144354/serialNumber=47D06BD7EA8DF2197F71270B75C964C79AB9F0CC Validity Not Before: Jan 28 17:55:35 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65b69517-352a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:95:3a:a0:c1:71:53:94:d9:98:ac:30:7c:f3: 18:fd:3f:73:09:bc:2a:de:68:f5:32:ef:92:1e:f3: 22:96:9e:d3:6b:bf:55:21:8a:1b:7f:cc:34:3b:fd: 98:0d:ef:ed:5b:8b:c0:d1:fe:f4:b9:e3:96:87:9e: 4d:b2:e7:69:65:9c:95:74:0c:72:96:b0:50:5e:26: bc:34:c1:72:41:64:58:04:e8:57:7c:e9:95:67:3a: 0d:6f:3f:5c:30:80:e2:9a:e7:bc:10:c3:a8:66:e2: 1a:f2:cf:db:f2:c1:87:84:f0:64:3d:ec:fa:b7:72: c8:80:2f:9d:1b:dc:8e:cf:f3:03:25:a8:ae:e9:72: a2:b1:a5:e8:fa:8e:24:20:dc:c0:b1:56:3c:04:30: 34:19:ff:a2:eb:75:7d:3c:00:88:87:04:43:1b:c5: ec:37:3d:52:3a:99:d4:06:05:18:ed:55:66:d8:4e: fb:77:bd:2a:46:0a:6e:67:81:b0:f2:dc:36:99:5a: bd:7a:06:ad:e5:9f:54:30:7e:b9:a3:77:0c:72:9c: 58:4e:b0:ce:7a:a0:cd:b0:f9:23:55:3b:e6:69:68: 77:ec:8d:4e:5d:4a:76:25:5c:ca:48:ce:49:fb:75: 64:a9:a6:9a:3e:91:92:f8:48:a5:ca:68:54:5b:55: da:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3C:1E:58:8C:00:C2:62:0D:77:AA:94:87:A8:E0:9C:3A:8E:7B:FE X509v3 Authority Key Identifier: keyid:47:D0:6B:D7:EA:8D:F2:19:7F:71:27:0B:75:C9:64:C7:9A:B9:F0:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/1C6ADB02525311EA939E4652C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.127.156.0/23 103.127.159.0/24 IPv6: 2404:2340::/32 Signature Algorithm: sha256WithRSAEncryption 7d:9f:b6:09:3b:f8:31:80:77:6f:7e:a7:df:30:8d:ae:fc:ef: d1:3d:ab:4c:cb:ca:9d:6a:9a:9d:59:e5:10:75:c3:9a:6d:f7: a4:3c:20:21:1f:f4:f5:41:ba:90:44:d8:10:4f:ab:4f:13:52: 45:06:87:b3:11:d1:a5:96:ca:14:ce:7c:3e:6c:fa:ad:b5:c1: d0:92:cb:78:51:d6:b9:f0:d4:89:72:a3:98:c1:bb:a6:78:24: e6:6d:5a:22:cd:3b:c3:38:f0:43:a1:4a:2d:b0:47:6a:c4:9c: 26:e9:43:a4:89:25:f2:6a:3a:fe:93:37:af:22:4d:cb:e9:2e: 14:de:f9:18:80:d7:49:19:e7:c9:8e:7b:0d:c9:2c:7a:9c:16: ed:13:76:59:3f:64:5c:2f:f0:e3:4d:c8:6f:34:45:55:9c:b9: ed:e7:6c:1a:f7:f3:9d:fd:fc:d2:b0:cb:4a:f9:ae:e0:c9:2e: 0b:a7:ac:6f:38:7a:fe:77:7a:29:12:d5:5e:c5:91:37:7c:19: 9a:55:a1:f6:a3:7a:fc:25:d6:87:77:49:8d:8b:a8:3b:4f:5b: b8:3c:7c:d1:6d:a0:e0:c7:b7:8c:25:d3:b9:cb:c7:09:9a:5a: 9c:c2:63:0e:33:f7:77:25:48:af:83:56:ea:13:cc:4d:33:a7: 79:ce:73:a8 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICEGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQzNTQxMTAvBgNVBAUTKDQ3RDA2QkQ3RUE4REYyMTk3RjcxMjcwQjc1Qzk2NEM3 OUFCOUYwQ0MwHhcNMjQwMTI4MTc1NTM1WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWI2OTUxNy0zNTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5U6oMFxU5TZmKwwfPMY/T9zCbwq3mj1Mu+SHvMilp7Ta79VIYobf8w0O/2Y De/tW4vA0f70ueOWh55NsudpZZyVdAxylrBQXia8NMFyQWRYBOhXfOmVZzoNbz9c MIDimue8EMOoZuIa8s/b8sGHhPBkPez6t3LIgC+dG9yOz/MDJaiu6XKisaXo+o4k INzAsVY8BDA0Gf+i63V9PACIhwRDG8XsNz1SOpnUBgUY7VVm2E77d70qRgpuZ4Gw 8tw2mVq9egat5Z9UMH65o3cMcpxYTrDOeqDNsPkjVTvmaWh37I1OXUp2JVzKSM5J +3VkqaaaPpGS+EilymhUW1XaLQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFGM8HliM AMJiDXeqlIeo4Jw6jnv+MB8GA1UdIwQYMBaAFEfQa9fqjfIZf3EnC3XJZMeaufDM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDM1NC82MUExMjZFNDA0 RTQxMUU5OENBRkFBN0JDNEY5QUUwMi9SOUJyMS1xTjhobF9jU2NMZGNsa3g1cTU4 TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I5QnIxLXFOOGhsX2NTY0xkY2xreDVxNThNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDQzNTQvNjFBMTI2RTQwNEU0MTFFOThDQUZBQTdCQzRGOUFFMDIvMUM2QURCMDI1 MjUzMTFFQTkzOUU0NjUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAFnf5wDBABnf58wDQQCAAIwBwMFACQEI0AwDQYJKoZIhvcN AQELBQADggEBAH2ftgk7+DGAd29+p98wja7879E9q0zLyp1qmp1Z5RB1w5pt96Q8 ICEf9PVBupBE2BBPq08TUkUGh7MR0aWWyhTOfD5s+q21wdCSy3hR1rnw1Ilyo5jB u6Z4JOZtWiLNO8M48EOhSi2wR2rEnCbpQ6SJJfJqOv6TN68iTcvpLhTe+RiA10kZ 58mOew3JLHqcFu0Tdlk/ZFwv8ONNyG80RVWcue3nbBr38539/NKwy0r5ruDJLgun rG84ev53eikS1V7FkTd8GZpVofajevwl1od3SY2LqDtPW7g8fNFtoODHt4wl07nL xwmaWpzCYw4z93clSK+DVuoTzE0zp3nOc6g= -----END CERTIFICATE-----Generated at Tue May 14 19:55:11 2024 by rpki-client on console-fra.rpki-client.org