$ rpki-client -vvf rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/433FBBECF1A511E6BE0A844EC4F9AE02.roa File: 433FBBECF1A511E6BE0A844EC4F9AE02.roa (raw, json) Hash identifier: qtRsJHVpnNad1M37BWzQ5GnqWukDmT2uyK4e9+6Jmqo= Subject key identifier: 7A:81:0C:B7:51:C2:00:96:8C:C0:B2:96:3B:8F:A4:F4:B1:83:C8:8F Certificate issuer: /CN=A914749C/serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78 Certificate serial: 1ADB Authority key identifier: 8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/433FBBECF1A511E6BE0A844EC4F9AE02.roa Signing time: Wed 04 Oct 2023 16:33:38 +0000 ROA not before: Wed 04 Oct 2023 16:33:38 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 135516 IP address blocks: 103.5.212.0/23 maxlen: 23 103.192.175.0/24 maxlen: 24 103.214.207.0/24 maxlen: 24 192.140.226.0/23 maxlen: 23 192.140.226.0/24 maxlen: 24 192.140.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 16:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6875 (0x1adb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914749C/serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78 Validity Not Before: Oct 4 16:33:38 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=651d93e1-00a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:27:7b:98:4a:15:68:37:f1:31:38:e3:b6:9d: be:2f:7f:d8:36:86:95:ec:70:44:c5:04:1e:d5:d0: fd:5f:00:af:24:6e:02:ef:75:b3:07:71:fc:40:1a: 05:34:16:4e:8c:f1:c9:22:18:f2:dc:0e:b4:c1:ab: 66:58:6d:45:d3:da:a4:c4:7f:6a:1b:b7:5c:35:2a: 8f:c8:33:4f:63:ef:d7:18:9f:eb:26:e6:c4:7a:56: 6d:78:9d:57:23:46:46:1b:82:27:bc:10:f3:23:cb: aa:cc:91:6d:4f:fa:00:ad:f7:b3:d5:30:68:c6:02: 71:59:53:26:33:c6:49:c7:55:81:3b:05:c4:5e:dd: 0c:dc:42:46:14:b3:35:33:75:6a:4c:ee:18:c0:72: 7b:ba:75:00:04:54:d6:5a:37:1a:0d:f5:5d:f8:0f: 30:c4:e8:19:4d:80:ea:c6:bf:80:b3:84:46:94:0c: 9d:40:f0:6c:65:f8:95:df:20:f4:71:f8:03:26:e2: 04:3d:bf:b1:f9:0b:6d:0b:3c:4f:99:28:14:82:a4: 4b:96:aa:1e:64:09:87:b2:8f:8a:12:86:79:5f:2b: 7e:37:66:0d:b2:8f:3a:90:04:a7:b9:38:34:d7:0f: 3d:ae:9f:a9:ae:06:30:47:8a:b0:12:77:ea:1a:83: d4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:81:0C:B7:51:C2:00:96:8C:C0:B2:96:3B:8F:A4:F4:B1:83:C8:8F X509v3 Authority Key Identifier: keyid:8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/433FBBECF1A511E6BE0A844EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.5.212.0/23 103.192.175.0/24 103.214.207.0/24 192.140.226.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:ca:5a:71:fe:3c:fe:fd:dd:08:df:fa:30:5d:ad:fc:0c:8c: db:f6:a5:f8:40:72:21:0b:24:67:dc:21:e1:53:08:93:cc:88: 59:67:ae:56:79:32:20:c8:0e:59:69:a6:b2:f6:e3:56:51:5a: e6:00:03:ef:15:a0:6a:0e:e8:aa:b5:20:a9:32:a0:ac:64:0f: 50:79:cf:0a:e4:ce:13:5c:5d:11:95:0e:60:d1:c7:33:35:a7: dc:ac:b4:10:ff:62:97:fc:99:15:35:a3:50:51:a0:f7:57:d1: 6a:69:76:ad:dc:ab:0f:3b:fb:96:44:a8:7e:3a:b9:b5:d6:50: 0f:37:c8:e9:b8:16:c4:5b:d0:93:a2:a7:0e:5d:fb:96:bb:c4: 4d:15:d7:21:e8:b6:2c:62:de:cc:56:0d:1e:73:7a:c6:8b:1e: 0e:ac:6f:73:57:6e:d7:64:c0:59:24:c4:84:54:62:65:5b:6b: 22:af:68:e2:22:9f:71:c5:15:ca:8b:f7:99:a8:b6:f9:43:93: 38:5c:c0:05:e1:2e:0e:fd:3b:6e:ea:81:b9:6c:ba:63:55:18: 23:80:59:67:9b:75:34:7e:7d:67:9d:2e:b7:2e:5c:b7:ff:e4: 82:3c:75:f3:68:d6:e6:5a:a5:7e:12:da:6d:7d:b9:be:cb:ba: b0:69:aa:63 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICGtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0OUMxMTAvBgNVBAUTKDhDQjJCQkQ2NEI2QTc3NEUxNkMxMEZEQ0E2NTBBN0FE QzVCMzhENzgwHhcNMjMxMDA0MTYzMzM4WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTFkOTNlMS0wMGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxid7mEoVaDfxMTjjtp2+L3/YNoaV7HBExQQe1dD9XwCvJG4C73WzB3H8QBoF NBZOjPHJIhjy3A60watmWG1F09qkxH9qG7dcNSqPyDNPY+/XGJ/rJubEelZteJ1X I0ZGG4InvBDzI8uqzJFtT/oArfez1TBoxgJxWVMmM8ZJx1WBOwXEXt0M3EJGFLM1 M3VqTO4YwHJ7unUABFTWWjcaDfVd+A8wxOgZTYDqxr+As4RGlAydQPBsZfiV3yD0 cfgDJuIEPb+x+QttCzxPmSgUgqRLlqoeZAmHso+KEoZ5Xyt+N2YNso86kASnuTg0 1w89rp+prgYwR4qwEnfqGoPU2wIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFHqBDLdR wgCWjMCyljuPpPSxg8iPMB8GA1UdIwQYMBaAFIyyu9ZLandOFsEP3KZQp63Fs414 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ5Qy84RDc4RTU3RUYx QTIxMUU2OTQyMUI1NDVDNEY5QUUwMi9qTEs3MWt0cWQwNFd3UV9jcGxDbnJjV3pq WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMSzcxa3RxZDA0V3dRX2NwbENucmNXempYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc0OUMvOEQ3OEU1N0VGMUEyMTFFNjk0MjFCNTQ1QzRGOUFFMDIvNDMzRkJCRUNG MUE1MTFFNkJFMEE4NDRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAFnBdQDBABnwK8DBABn1s8DBAHAjOIwDQYJKoZIhvcNAQEL BQADggEBAH7KWnH+PP793Qjf+jBdrfwMjNv2pfhAciELJGfcIeFTCJPMiFlnrlZ5 MiDIDllpprL241ZRWuYAA+8VoGoO6Kq1IKkyoKxkD1B5zwrkzhNcXRGVDmDRxzM1 p9ystBD/Ypf8mRU1o1BRoPdX0Wppdq3cqw87+5ZEqH46ubXWUA83yOm4FsRb0JOi pw5d+5a7xE0V1yHotixi3sxWDR5zesaLHg6sb3NXbtdkwFkkxIRUYmVbayKvaOIi n3HFFcqL95motvlDkzhcwAXhLg79O27qgblsumNVGCOAWWebdTR+fWedLrcuXLf/ 5II8dfNo1uZapX4S2m19ub7LurBpqmM= -----END CERTIFICATE-----Generated at Sun May 26 18:02:30 2024 by rpki-client on console-fra.rpki-client.org