$ rpki-client -vvf rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/436B3BEC822D11EBB19C1844C4F9AE02.roa File: 436B3BEC822D11EBB19C1844C4F9AE02.roa (raw, json) Hash identifier: eZsMbIYCNANfm1H6l8fPlIIihvMzp3IStvDQqRzqYhc= Subject key identifier: 43:89:10:61:8D:C1:2F:41:40:10:C2:BC:E4:22:1B:9F:F7:5C:84:5F Certificate issuer: /CN=A914E215/serialNumber=D20E52D09CEBE6B57050358CA2930D8939772911 Certificate serial: 0588 Authority key identifier: D2:0E:52:D0:9C:EB:E6:B5:70:50:35:8C:A2:93:0D:89:39:77:29:11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/436B3BEC822D11EBB19C1844C4F9AE02.roa Signing time: Mon 25 Mar 2024 00:22:43 +0000 ROA not before: Mon 25 Mar 2024 00:22:43 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 137967 IP address blocks: 103.163.168.0/23 maxlen: 23 103.163.168.0/24 maxlen: 24 103.163.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1416 (0x588) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E215/serialNumber=D20E52D09CEBE6B57050358CA2930D8939772911 Validity Not Before: Mar 25 00:22:43 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=6600c3d3-8d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:17:8b:9d:47:cd:74:64:b0:d1:3a:44:00:38: 4b:76:95:32:8e:f2:4a:c2:f9:87:2d:86:65:c9:9f: b7:e5:94:34:2b:06:bd:b8:82:0a:b5:18:4d:95:58: f2:c1:8c:d6:7f:3d:65:48:08:17:6e:6d:56:1d:98: 53:1e:35:2e:9e:e4:a8:c0:a8:ed:15:e9:13:ac:a6: 2b:7a:f5:08:17:c2:b2:76:12:b1:0f:01:1e:83:ee: 77:d4:1c:59:94:70:74:fc:e9:a7:65:7d:9f:2a:5b: bf:65:6a:6d:0d:42:e7:de:1f:fb:d8:37:2d:8e:68: 30:ca:1b:14:1a:3a:22:34:6c:46:f6:cd:ef:b3:8b: 5d:e9:4e:de:b8:dc:58:7c:5c:e3:5d:fa:80:e4:67: a0:2e:44:ad:ee:63:f0:a4:83:8d:13:2f:d2:ef:f2: 55:b0:a6:ad:be:cc:8b:ff:7e:7d:47:68:c6:46:cf: 45:8c:87:f3:19:85:2e:3b:ed:2f:45:1e:97:c6:ed: 52:9f:05:5e:ad:87:30:fd:b9:cc:32:41:9c:cb:12: 89:ed:1f:81:10:16:6f:28:2b:6e:c0:24:f6:6a:57: 8f:05:88:a6:16:ff:bb:ee:5d:7d:aa:d0:d4:9c:95: aa:e0:57:3a:d4:f6:18:3b:1f:4d:1a:4f:51:1b:c0: 17:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:89:10:61:8D:C1:2F:41:40:10:C2:BC:E4:22:1B:9F:F7:5C:84:5F X509v3 Authority Key Identifier: keyid:D2:0E:52:D0:9C:EB:E6:B5:70:50:35:8C:A2:93:0D:89:39:77:29:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/436B3BEC822D11EBB19C1844C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.163.168.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:01:e0:ce:fd:10:93:77:2a:fa:bd:01:d9:01:ee:40:dc:8e: db:cf:e2:fe:a9:05:7e:bf:28:1c:9b:1a:31:17:bf:5a:84:8c: 69:e5:a0:49:aa:f6:bb:fe:70:64:9d:b9:e4:b3:21:6e:d5:fb: c8:a3:89:24:e7:a0:a3:53:7b:e7:45:5f:bf:e4:c8:af:1c:1c: 02:3e:f2:f8:11:e0:0e:ae:67:64:f3:0f:0f:df:c8:f0:50:dd: f3:bf:e7:bd:1a:d1:7d:53:33:a3:ba:ff:15:f2:62:24:3b:7e: b0:ce:8e:a4:cb:76:28:42:83:a9:6b:79:88:14:ed:f5:25:1f: 89:54:07:77:f8:08:16:e0:fe:64:2a:dd:a2:63:8c:e6:1d:61: e2:47:f8:69:d5:42:23:b7:44:12:95:19:32:ac:d6:27:30:bf: 3a:a5:b7:68:8c:e9:26:d8:bc:44:5b:60:82:43:cf:ab:3f:cd: 72:86:32:a1:82:e9:f8:98:a5:e6:a9:51:6e:c6:4f:7f:d8:50: 22:d5:c8:3b:1f:52:d4:b8:dc:57:f9:86:9b:2a:10:1c:41:6b: 7a:83:4b:97:1a:29:0f:e4:4a:1b:09:30:20:db:ef:b9:86:91: 60:7b:5c:df:e9:2b:00:be:5f:8f:f6:78:bb:ea:36:e8:83:fa: 17:18:33:6e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUyMTUxMTAvBgNVBAUTKEQyMEU1MkQwOUNFQkU2QjU3MDUwMzU4Q0EyOTMwRDg5 Mzk3NzI5MTEwHhcNMjQwMzI1MDAyMjQzWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjAwYzNkMy04ZDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ReLnUfNdGSw0TpEADhLdpUyjvJKwvmHLYZlyZ+35ZQ0Kwa9uIIKtRhNlVjy wYzWfz1lSAgXbm1WHZhTHjUunuSowKjtFekTrKYrevUIF8KydhKxDwEeg+531BxZ lHB0/OmnZX2fKlu/ZWptDULn3h/72DctjmgwyhsUGjoiNGxG9s3vs4td6U7euNxY fFzjXfqA5GegLkSt7mPwpIONEy/S7/JVsKatvsyL/359R2jGRs9FjIfzGYUuO+0v RR6Xxu1SnwVerYcw/bnMMkGcyxKJ7R+BEBZvKCtuwCT2alePBYimFv+77l19qtDU nJWq4Fc61PYYOx9NGk9RG8AX3QIDAQABo4IClTCCApEwHQYDVR0OBBYEFEOJEGGN wS9BQBDCvOQiG5/3XIRfMB8GA1UdIwQYMBaAFNIOUtCc6+a1cFA1jKKTDYk5dykR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTIxNS85MjJEQkI5NDgy MkIxMUVCQkJDNzVFNDJDNEY5QUUwMi8wZzVTMEp6cjVyVndVRFdNb3BNTmlUbDNL UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBnNVMwSnpyNXJWd1VEV01vcE1OaVRsM0tSRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEUyMTUvOTIyREJCOTQ4MjJCMTFFQkJCQzc1RTQyQzRGOUFFMDIvNDM2QjNCRUM4 MjJEMTFFQkIxOUMxODQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFno6gwDQYJKoZIhvcNAQELBQADggEBAAsB4M79EJN3Kvq9 AdkB7kDcjtvP4v6pBX6/KBybGjEXv1qEjGnloEmq9rv+cGSdueSzIW7V+8ijiSTn oKNTe+dFX7/kyK8cHAI+8vgR4A6uZ2TzDw/fyPBQ3fO/570a0X1TM6O6/xXyYiQ7 frDOjqTLdihCg6lreYgU7fUlH4lUB3f4CBbg/mQq3aJjjOYdYeJH+GnVQiO3RBKV GTKs1icwvzqlt2iM6SbYvERbYIJDz6s/zXKGMqGC6fiYpeapUW7GT3/YUCLVyDsf UtS43Ff5hpsqEBxBa3qDS5caKQ/kShsJMCDb77mGkWB7XN/pKwC+X4/2eLvqNuiD +hcYM24= -----END CERTIFICATE-----Generated at Fri May 17 01:06:59 2024 by rpki-client on console-fra.rpki-client.org