$ rpki-client -vvf rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/140E693613BF11ECA64D821AC4F9AE02.roa File: 140E693613BF11ECA64D821AC4F9AE02.roa (raw, json) Hash identifier: xm/w/oPJ3AzyQi0qyiNFGzq6ZLvojh9/dJGPYUqz8nw= Subject key identifier: 54:A7:99:F8:DE:1C:41:0D:C7:86:20:71:9A:9F:BF:42:AD:25:63:92 Certificate issuer: /CN=A914CBF3/serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707 Certificate serial: 0B2B Authority key identifier: E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/140E693613BF11ECA64D821AC4F9AE02.roa Signing time: Wed 10 Jan 2024 19:37:47 +0000 ROA not before: Wed 10 Jan 2024 19:37:47 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 58715 IP address blocks: 103.126.20.0/22 maxlen: 23 103.126.20.0/24 maxlen: 24 103.126.21.0/24 maxlen: 24 103.126.22.0/24 maxlen: 24 103.126.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:42:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2859 (0xb2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CBF3/serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707 Validity Not Before: Jan 10 19:37:47 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=659ef20b-d3c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:69:18:bd:9a:46:b4:fb:c8:e7:05:02:c8:76: b9:69:ff:ed:bd:dd:f9:c6:48:b1:83:e1:0c:7a:93: e5:f8:9c:37:dc:87:83:3d:37:ff:44:78:2b:fb:bf: 4e:df:48:75:48:ce:68:fd:e5:f5:0a:6a:2b:15:3b: ec:49:e6:d0:a9:22:89:db:bb:ea:25:f6:4e:99:23: 08:d4:f4:7c:ee:59:11:a0:bd:06:0a:fd:1a:f6:68: 92:11:a6:37:10:ec:af:41:80:f9:9e:b0:8d:a5:8f: a7:bd:93:ea:10:d3:68:48:b2:c9:8a:c0:ce:de:52: 5e:6b:9d:82:d7:7d:99:53:9b:a5:da:df:20:93:75: 17:6e:64:ce:6c:50:83:95:b1:e3:42:7a:ba:96:02: 55:80:fd:5a:4e:73:34:57:38:d2:4c:6b:e6:8e:8e: 40:04:85:2e:1a:99:ca:9a:47:04:7c:c5:db:06:c5: cc:d5:75:1e:f4:ee:ea:73:ce:54:e6:88:6a:01:c7: a8:6e:09:0a:ea:2d:41:7d:8f:ba:01:d5:77:c8:f6: 3a:41:17:31:93:63:2c:80:93:18:d7:32:dd:16:59: 82:d4:49:01:ce:15:9d:39:cc:81:b0:c4:5f:39:82: 4e:70:84:17:95:b1:60:c0:3a:88:03:d6:c8:7e:f4: 30:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A7:99:F8:DE:1C:41:0D:C7:86:20:71:9A:9F:BF:42:AD:25:63:92 X509v3 Authority Key Identifier: keyid:E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/140E693613BF11ECA64D821AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.126.20.0/22 Signature Algorithm: sha256WithRSAEncryption 84:fa:42:21:82:f2:fc:32:72:e2:8c:8e:fc:ac:25:b4:8f:4d: ce:7e:7f:29:de:d9:fd:ad:9e:11:82:e2:24:b3:99:cb:de:91: 03:cb:41:3e:6f:3a:31:e5:22:c6:6d:47:57:71:0f:a1:62:1e: cf:a6:70:17:dc:2d:53:76:32:2b:65:21:df:e4:ef:57:ca:82: 58:eb:e0:8e:35:13:8d:02:01:49:c6:51:bc:86:b3:b6:21:ea: a5:4b:4c:55:84:7b:ed:d4:40:8e:3b:28:b6:2f:9f:e3:17:5b: a4:cd:f1:bd:7b:05:e4:ac:b2:84:97:c8:67:5e:d5:d0:90:9d: 49:d6:17:56:12:6e:2b:ab:b8:49:d0:9c:67:5f:46:38:00:bf: a6:86:d2:b9:91:46:d4:27:c4:4b:c1:ee:ba:e6:4d:1f:35:21: 04:70:89:b2:c3:3e:e2:aa:f0:c4:e4:7f:a7:17:50:35:7f:bb: 48:7f:54:33:17:62:8e:c5:27:fd:dc:c6:cd:a9:a4:5c:23:7e: 6e:cc:c6:20:c7:a5:a0:9c:fb:25:28:f7:88:c2:6e:e9:32:51: fa:e8:9e:66:7e:12:7a:a8:9e:df:56:23:61:cf:4e:a7:49:82: 45:a4:77:7a:51:41:cf:67:9f:ad:08:fb:4a:cd:a7:4d:f0:7c: 27:b7:4e:fd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCyswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCRjMxMTAvBgNVBAUTKEUyNDQ5RTMxMjIyMDEzMUUyRTc2QzQyQzdDQ0M2REQx OTM1MTA3MDcwHhcNMjQwMTEwMTkzNzQ3WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTllZjIwYi1kM2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnWkYvZpGtPvI5wUCyHa5af/tvd35xkixg+EMepPl+Jw33IeDPTf/RHgr+79O 30h1SM5o/eX1CmorFTvsSebQqSKJ27vqJfZOmSMI1PR87lkRoL0GCv0a9miSEaY3 EOyvQYD5nrCNpY+nvZPqENNoSLLJisDO3lJea52C132ZU5ul2t8gk3UXbmTObFCD lbHjQnq6lgJVgP1aTnM0VzjSTGvmjo5ABIUuGpnKmkcEfMXbBsXM1XUe9O7qc85U 5ohqAceobgkK6i1BfY+6AdV3yPY6QRcxk2MsgJMY1zLdFlmC1EkBzhWdOcyBsMRf OYJOcIQXlbFgwDqIA9bIfvQwpwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFSnmfje HEENx4YgcZqfv0KtJWOSMB8GA1UdIwQYMBaAFOJEnjEiIBMeLnbELHzMbdGTUQcH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0JGMy8xQkM2RUIyMDEx RTcxMUVBQjkwM0FBNzlDNEY5QUUwMi80a1NlTVNJZ0V4NHVkc1FzZk14dDBaTlJC d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRrU2VNU0lnRXg0dWRzUXNmTXh0MFpOUkJ3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NENCRjMvMUJDNkVCMjAxMUU3MTFFQUI5MDNBQTc5QzRGOUFFMDIvMTQwRTY5MzYx M0JGMTFFQ0E2NEQ4MjFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnfhQwDQYJKoZIhvcNAQELBQADggEBAIT6QiGC8vwycuKM jvysJbSPTc5+fyne2f2tnhGC4iSzmcvekQPLQT5vOjHlIsZtR1dxD6FiHs+mcBfc LVN2MitlId/k71fKgljr4I41E40CAUnGUbyGs7Yh6qVLTFWEe+3UQI47KLYvn+MX W6TN8b17BeSssoSXyGde1dCQnUnWF1YSbiuruEnQnGdfRjgAv6aG0rmRRtQnxEvB 7rrmTR81IQRwibLDPuKq8MTkf6cXUDV/u0h/VDMXYo7FJ/3cxs2ppFwjfm7MxiDH paCc+yUo94jCbukyUfronmZ+Enqont9WI2HPTqdJgkWkd3pRQc9nn60I+0rNp03w fCe3Tv0= -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:58 2024 by rpki-client on console-fra.rpki-client.org