$ rpki-client -vvf rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/3F7E8DCAA45C11EC845FEA36C4F9AE02.roa File: 3F7E8DCAA45C11EC845FEA36C4F9AE02.roa (raw, json) Hash identifier: N4dFIKbp/UkPFYHASL0V+O/a94lreYQtC/E1dslsMzQ= Subject key identifier: B2:E3:3B:2A:A5:20:E1:9C:96:0A:68:2A:C2:F4:C4:AE:0F:77:BC:C4 Certificate issuer: /CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Certificate serial: 02A7 Authority key identifier: C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/3F7E8DCAA45C11EC845FEA36C4F9AE02.roa Signing time: Tue 05 Mar 2024 03:25:10 +0000 ROA not before: Tue 05 Mar 2024 03:25:10 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 134428 IP address blocks: 103.163.120.0/24 maxlen: 24 103.163.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 679 (0x2a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Validity Not Before: Mar 5 03:25:10 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65e69095-a676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a0:07:59:84:ed:d3:06:9b:25:71:17:56:ea: d9:a9:65:cf:6b:32:6f:be:f9:24:81:9d:b2:f3:9a: 7b:7f:9d:24:5a:4e:0a:6d:38:2e:07:72:03:78:b5: 1c:59:24:d6:aa:cb:b5:8b:87:6a:14:53:1e:c7:cf: 40:2d:8a:dc:1b:22:ee:b9:0e:cf:47:f4:4f:5e:01: 0c:1b:1d:91:93:f8:98:5e:1b:90:73:a1:8e:1b:3c: e9:74:bb:a1:a2:7b:99:d9:58:f7:ed:86:63:53:5d: 5e:e3:42:60:42:87:7a:47:33:65:04:f8:a7:8b:96: f1:c0:7f:cc:56:00:49:09:d4:0e:7f:af:b5:58:1d: 51:14:02:68:67:63:54:d1:b3:38:89:42:bb:8f:c4: 77:bb:19:a6:ce:ca:23:84:75:21:8a:fb:90:6c:64: 3b:38:70:6c:36:58:98:2e:91:fa:b5:1a:00:43:81: 2d:bd:26:7f:b8:e0:ad:75:9a:54:0d:92:2e:a9:9d: 89:8a:f5:8c:66:e9:3f:4d:9f:5d:4b:c1:46:96:1e: 18:84:31:3a:b9:2e:28:ef:37:31:2f:e3:e2:03:99: cc:85:3d:e7:c2:d4:15:c9:ac:e7:f9:40:01:40:5e: f4:19:a3:30:c8:04:2f:4a:f5:78:88:4b:63:18:5f: 10:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E3:3B:2A:A5:20:E1:9C:96:0A:68:2A:C2:F4:C4:AE:0F:77:BC:C4 X509v3 Authority Key Identifier: keyid:C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/3F7E8DCAA45C11EC845FEA36C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.163.120.0/23 Signature Algorithm: sha256WithRSAEncryption 29:09:a3:18:04:f7:66:3f:4a:f3:30:26:f1:52:07:cb:a3:8f: 87:0d:e2:cf:6d:dd:1b:6e:bc:75:d7:45:12:25:30:f3:28:a4: 37:48:82:0a:00:b1:c4:57:f2:13:ab:50:98:1e:e7:19:72:c1: ab:b6:5e:51:67:3a:f9:fe:8d:d1:96:9c:d7:79:9f:d9:7a:2e: 2d:3c:ea:92:d4:c4:a4:e6:ea:ab:50:ca:13:c4:cb:fc:1a:9e: 36:46:6a:26:ac:d5:97:a3:2c:24:dd:8e:1b:90:01:d7:f4:49: 55:c9:3c:85:79:25:bd:3a:54:aa:c3:b2:e5:55:5b:ba:37:31: a7:8a:f4:1e:bc:9a:f1:86:bf:00:f9:e0:88:73:6b:d0:7d:e7: 0f:75:c4:15:c6:99:3f:dd:bb:7e:b6:d4:2e:38:70:5a:f5:ad: 59:20:22:3a:98:f7:40:b7:4e:16:2c:b1:8d:c8:93:71:55:15: fe:34:3f:9b:1d:ae:fb:47:82:06:0e:20:72:d3:22:19:b6:0c: 11:3c:30:42:0d:04:66:1b:27:fc:9d:81:e1:4b:a0:8d:76:f2: aa:ed:a0:2e:76:55:d7:79:df:8b:9f:0d:12:c7:0c:70:15:95: 8a:0f:07:ec:62:78:e4:b9:f0:cf:bf:77:9f:3c:07:43:b7:ea: 9e:45:49:0f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENBNUMxMTAvBgNVBAUTKEM0M0QxOUM2RDM5NzExMkEyQUZFRDQ2NjYxMjJGQzU3 NkI0Nzg4NkQwHhcNMjQwMzA1MDMyNTEwWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NWU2OTA5NS1hNjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqAHWYTt0wabJXEXVurZqWXPazJvvvkkgZ2y85p7f50kWk4KbTguB3IDeLUc WSTWqsu1i4dqFFMex89ALYrcGyLuuQ7PR/RPXgEMGx2Rk/iYXhuQc6GOGzzpdLuh onuZ2Vj37YZjU11e40JgQod6RzNlBPini5bxwH/MVgBJCdQOf6+1WB1RFAJoZ2NU 0bM4iUK7j8R3uxmmzsojhHUhivuQbGQ7OHBsNliYLpH6tRoAQ4EtvSZ/uOCtdZpU DZIuqZ2JivWMZuk/TZ9dS8FGlh4YhDE6uS4o7zcxL+PiA5nMhT3nwtQVyazn+UAB QF70GaMwyAQvSvV4iEtjGF8QHwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLLjOyql IOGclgpoKsL0xK4Pd7zEMB8GA1UdIwQYMBaAFMQ9GcbTlxEqKv7UZmEi/FdrR4ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0E1Qy82NTEwRTMxMEE0 NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVTb3FfdFJtWVNMOFYydEhp RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEMFp4dE9YRVNvcV90Um1ZU0w4VjJ0SGlHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NENBNUMvNjUxMEUzMTBBNDU5MTFFQ0E4N0ZEODBEQzRGOUFFMDIvM0Y3RThEQ0FB NDVDMTFFQzg0NUZFQTM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFno3gwDQYJKoZIhvcNAQELBQADggEBACkJoxgE92Y/SvMw JvFSB8ujj4cN4s9t3RtuvHXXRRIlMPMopDdIggoAscRX8hOrUJge5xlywau2XlFn Ovn+jdGWnNd5n9l6Li086pLUxKTm6qtQyhPEy/wanjZGaias1ZejLCTdjhuQAdf0 SVXJPIV5Jb06VKrDsuVVW7o3MaeK9B68mvGGvwD54Ihza9B95w91xBXGmT/du362 1C44cFr1rVkgIjqY90C3ThYssY3Ik3FVFf40P5sdrvtHggYOIHLTIhm2DBE8MEIN BGYbJ/ydgeFLoI128qrtoC52Vdd534ufDRLHDHAVlYoPB+xieOS58M+/d588B0O3 6p5FSQ8= -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:51 2024 by rpki-client on console-ams.rpki-client.org