$ rpki-client -vvf rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/DE437646F8A911EB98242219C4F9AE02.roa File: DE437646F8A911EB98242219C4F9AE02.roa (raw, json) Hash identifier: omQtqSddlCkWWiLSp9GMYtV66m4WmeS8whg5yysD99c= Subject key identifier: E0:44:60:2E:6F:18:2A:20:6F:50:38:FE:76:4E:D0:23:32:7B:53:81 Certificate issuer: /CN=A914DD78/serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE Certificate serial: 09B4 Authority key identifier: D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/DE437646F8A911EB98242219C4F9AE02.roa Signing time: Tue 30 May 2023 01:22:11 +0000 ROA not before: Tue 30 May 2023 01:22:11 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 14618 IP address blocks: 103.248.128.0/24 maxlen: 24 2403:5f40:ca00::/44 maxlen: 44 2403:5f40:ca00::/48 maxlen: 48 2403:5f40:ca01::/48 maxlen: 48 2403:5f40:ca02::/48 maxlen: 48 2403:5f40:ca03::/48 maxlen: 48 2403:5f40:ca04::/48 maxlen: 48 2403:5f40:ca05::/48 maxlen: 48 2403:5f40:ca06::/48 maxlen: 48 2403:5f40:ca07::/48 maxlen: 48 2403:5f40:ca08::/48 maxlen: 48 2403:5f40:ca09::/48 maxlen: 48 2403:5f40:ca0a::/48 maxlen: 48 2403:5f40:ca0b::/48 maxlen: 48 2403:5f40:ca0c::/48 maxlen: 48 2403:5f40:ca0d::/48 maxlen: 48 2403:5f40:ca0e::/48 maxlen: 48 2403:5f40:ca0f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Apr 2024 20:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2484 (0x9b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DD78/serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE Validity Not Before: May 30 01:22:11 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64754fc2-d4e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d8:1f:a0:aa:24:b4:ae:2f:53:98:44:e4:16: 83:b1:ac:1f:ff:3c:5f:3d:89:2a:3c:61:55:47:11: d6:e5:65:c2:fb:7b:d2:b4:e2:35:fb:77:a2:f6:e4: b2:d6:48:91:8a:11:6b:f4:76:fa:75:a1:04:71:75: ae:a9:6c:88:1d:59:ea:f6:18:f9:03:1d:55:53:c4: 7a:9c:72:a3:7a:c5:9a:58:28:4e:e3:32:82:b0:91: 5d:94:8e:3b:6d:e2:64:2f:87:79:1e:60:c6:80:d5: 13:e9:a7:92:14:e7:56:18:de:5f:c9:fa:63:ea:84: 02:fc:3c:18:93:85:31:56:57:8d:41:39:db:89:ed: b2:df:98:32:48:27:a5:7e:1d:32:a7:60:25:3d:1c: c7:f5:e0:96:13:0b:4a:6b:e3:4c:44:1c:ba:5c:a0: ea:39:57:26:ca:27:6e:d5:3a:68:25:7f:ef:13:cc: 16:8b:34:5d:77:fb:64:a8:fe:1e:2c:01:d4:7b:87: f1:aa:ac:8e:44:26:aa:7c:4c:f7:d2:3d:64:81:92: 55:2c:02:0d:23:46:99:d7:80:cf:c6:d1:79:6f:9a: e5:71:2d:d5:98:77:12:1b:0f:10:08:eb:1d:26:92: 1f:91:e6:be:74:41:21:9c:69:0a:c5:31:c5:1d:04: f7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:44:60:2E:6F:18:2A:20:6F:50:38:FE:76:4E:D0:23:32:7B:53:81 X509v3 Authority Key Identifier: keyid:D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/DE437646F8A911EB98242219C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.248.128.0/24 IPv6: 2403:5f40:ca00::/44 Signature Algorithm: sha256WithRSAEncryption 19:d7:0b:6f:ea:7a:b0:c6:0e:a0:6a:09:5e:e8:2b:81:7c:aa: 12:f1:74:69:d7:43:e6:bc:ff:0b:30:6b:d6:4e:73:ce:fa:fa: 05:4a:59:39:f0:b3:00:58:47:b7:8f:2f:2c:9d:86:f4:4d:89: a5:ed:52:63:2b:b8:d8:d7:2d:ee:1c:c9:a0:5c:e1:3e:d1:88: bb:f8:56:e8:83:5d:01:41:be:e8:52:6b:c5:c2:79:25:14:1b: f3:60:bb:d9:d0:3a:1f:74:74:cd:9f:8a:bc:90:0b:80:2e:b6: 85:66:e5:ae:ef:45:a0:18:50:df:93:1d:a0:bd:d5:30:9c:5d: d7:8b:3d:8e:82:1e:50:30:5f:33:cd:e4:9f:09:68:b4:c2:ba: c7:1e:be:30:40:49:b8:fe:92:6c:9e:66:b6:49:30:93:8e:19: a2:cf:ef:55:c0:2c:61:e9:b2:06:72:d3:9d:95:11:8e:87:34: d2:d0:e5:81:0d:4f:5f:69:ad:4e:cb:90:29:4c:6f:22:c1:43: 5c:d1:33:22:6b:88:dd:b9:9c:e0:91:1a:43:2a:06:d7:b9:41: 73:6d:e1:df:71:4f:d1:57:d9:0d:7a:0f:3e:50:f2:54:fe:b5: d5:4b:24:35:19:b5:80:20:34:b5:44:3b:b9:26:12:1c:05:16: f9:da:75:eb -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERENzgxMTAvBgNVBAUTKEQzQzY2QzI2QTlGRDFCOUU3QzQ1NUJEREIzNTE1OTY4 OEQwMTQwRkUwHhcNMjMwNTMwMDEyMjExWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDc1NGZjMi1kNGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA49gfoKoktK4vU5hE5BaDsawf/zxfPYkqPGFVRxHW5WXC+3vStOI1+3ei9uSy 1kiRihFr9Hb6daEEcXWuqWyIHVnq9hj5Ax1VU8R6nHKjesWaWChO4zKCsJFdlI47 beJkL4d5HmDGgNUT6aeSFOdWGN5fyfpj6oQC/DwYk4UxVleNQTnbie2y35gySCel fh0yp2AlPRzH9eCWEwtKa+NMRBy6XKDqOVcmyidu1TpoJX/vE8wWizRdd/tkqP4e LAHUe4fxqqyORCaqfEz30j1kgZJVLAINI0aZ14DPxtF5b5rlcS3VmHcSGw8QCOsd JpIfkea+dEEhnGkKxTHFHQT3QwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOBEYC5v GCogb1A4/nZO0CMye1OBMB8GA1UdIwQYMBaAFNPGbCap/RuefEVb3bNRWWiNAUD+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REQ3OC9ENEU5NjQ5QzQy RjgxMUVBQjQ2MEU5M0ZDNEY5QUUwMi8wOFpzSnFuOUc1NThSVnZkczFGWmFJMEJR UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA4WnNKcW45RzU1OFJWdmRzMUZaYUkwQlFQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NERENzgvRDRFOTY0OUM0MkY4MTFFQUI0NjBFOTNGQzRGOUFFMDIvREU0Mzc2NDZG OEE5MTFFQjk4MjQyMjE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABn+IAwDwQCAAIwCQMHBCQDX0DKADANBgkqhkiG9w0BAQsF AAOCAQEAGdcLb+p6sMYOoGoJXugrgXyqEvF0addD5rz/CzBr1k5zzvr6BUpZOfCz AFhHt48vLJ2G9E2Jpe1SYyu42Nct7hzJoFzhPtGIu/hW6INdAUG+6FJrxcJ5JRQb 82C72dA6H3R0zZ+KvJALgC62hWblru9FoBhQ35MdoL3VMJxd14s9joIeUDBfM83k nwlotMK6xx6+MEBJuP6SbJ5mtkkwk44Zos/vVcAsYemyBnLTnZURjoc00tDlgQ1P X2mtTsuQKUxvIsFDXNEzImuI3bmc4JEaQyoG17lBc23h33FP0VfZDXoPPlDyVP61 1UskNRm1gCA0tUQ7uSYSHAUW+dp16w== -----END CERTIFICATE-----Generated at Sun Apr 14 22:02:43 2024 by rpki-client on console-ams.rpki-client.org