$ rpki-client -vvf rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D25A6970F40911EA8A5C9E70C4F9AE02.roa File: D25A6970F40911EA8A5C9E70C4F9AE02.roa (raw, json) Hash identifier: AszckkIo7xo3rKnWp1vwStrZWGfITs2JKvmhphBQlP0= Subject key identifier: EC:47:20:15:60:1D:8E:AA:6A:F9:0F:C3:0B:38:D7:94:E0:EB:5A:FF Certificate issuer: /CN=A914ED2B/serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE Certificate serial: 0683 Authority key identifier: 0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D25A6970F40911EA8A5C9E70C4F9AE02.roa Signing time: Tue 08 Aug 2023 22:19:12 +0000 ROA not before: Tue 08 Aug 2023 22:19:12 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 141155 IP address blocks: 103.155.119.0/24 maxlen: 24 2406:6dc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1667 (0x683) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ED2B/serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE Validity Not Before: Aug 8 22:19:12 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=64d2bf60-1446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:72:78:e5:01:e7:10:6c:f4:fc:b4:a1:17:01: 96:02:33:ca:60:ee:d0:57:35:8a:8f:aa:ba:e5:60: 72:85:c2:04:41:eb:71:e4:21:5a:c8:34:29:4a:73: 4a:fe:d9:0c:7b:5b:cf:91:6c:8a:40:8b:a5:e2:00: 6a:52:91:7c:81:12:24:c8:a1:31:b1:cc:29:d1:d9: 0c:06:d3:68:db:69:c4:54:96:19:ff:48:93:f7:f2: e1:43:27:b7:d8:cb:8b:d7:86:26:34:45:aa:2b:20: 76:07:db:c1:f2:52:25:52:0b:eb:7b:ee:20:09:f8: 80:8b:5d:8b:09:29:34:bf:51:28:e0:1e:6b:97:f3: d4:3c:7a:eb:cc:62:c7:a0:73:79:d1:22:65:87:1e: 01:0c:b2:50:34:a1:de:34:28:bc:08:97:65:d9:93: 47:64:ca:94:c0:2c:08:3a:3e:a2:eb:62:72:a9:9f: 1d:44:47:7f:8e:bf:75:71:7e:9f:c6:da:05:a9:3d: 15:87:ce:26:c5:f0:e6:24:7d:96:01:ae:dc:ce:e0: 76:25:87:dd:b6:eb:24:4e:38:19:f0:f4:d9:fb:89: 3e:78:d6:7b:8f:c2:b1:7b:f6:e3:94:75:a0:92:f1: 66:76:6a:f5:47:12:3b:43:0f:40:23:10:f2:f9:fc: 0e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:47:20:15:60:1D:8E:AA:6A:F9:0F:C3:0B:38:D7:94:E0:EB:5A:FF X509v3 Authority Key Identifier: keyid:0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D25A6970F40911EA8A5C9E70C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.155.119.0/24 IPv6: 2406:6dc0::/32 Signature Algorithm: sha256WithRSAEncryption 12:47:f2:02:97:69:75:ee:80:50:f3:9b:87:87:21:da:03:a9: 8f:b3:c0:dc:aa:e5:35:f0:93:cb:6b:13:92:0b:d7:15:e0:20: b7:f7:da:7e:b5:84:29:f2:36:be:2d:91:fe:43:ca:2a:92:97: 06:91:32:db:26:14:09:f4:f7:bf:cd:37:27:18:34:d9:eb:9b: 97:88:0e:1d:6c:07:0d:95:55:d1:d6:7b:5a:6e:9b:3e:da:7d: e2:60:92:72:7f:64:00:ef:6a:fe:14:e9:bc:ec:fc:82:aa:3b: 59:35:8c:5c:23:b8:ae:ad:81:ee:09:e1:2e:ca:1e:1b:67:93: 18:d6:3f:25:a9:b2:28:c6:f6:07:e0:30:b7:2e:95:80:fa:b7: b5:3c:8b:aa:78:a2:ee:fd:04:5c:07:95:33:73:2b:c1:cc:3c: fb:9e:bb:37:87:e0:37:c6:fa:16:a6:c9:54:80:a8:07:c1:72: 02:36:5f:d2:fc:0f:fc:36:dd:6b:eb:18:3b:21:36:45:cf:29: 73:59:d6:3d:9b:c5:7e:be:e0:05:aa:13:cc:c5:40:fd:d2:c6: 38:1a:01:66:36:ec:f3:f1:b7:be:b6:79:fc:71:50:0e:9c:e0: 43:10:7a:15:36:fa:81:a6:fb:3a:4a:10:2b:d1:ff:f0:62:1b: 85:b9:6b:50 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVEMkIxMTAvBgNVBAUTKDBGRDk3QTE4NDFDOTk3NEYxRjQ5MDQyRURBM0U3Mjg0 MjFBQUU1RkUwHhcNMjMwODA4MjIxOTEyWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGQyYmY2MC0xNDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXJ45QHnEGz0/LShFwGWAjPKYO7QVzWKj6q65WByhcIEQetx5CFayDQpSnNK /tkMe1vPkWyKQIul4gBqUpF8gRIkyKExscwp0dkMBtNo22nEVJYZ/0iT9/LhQye3 2MuL14YmNEWqKyB2B9vB8lIlUgvre+4gCfiAi12LCSk0v1Eo4B5rl/PUPHrrzGLH oHN50SJlhx4BDLJQNKHeNCi8CJdl2ZNHZMqUwCwIOj6i62JyqZ8dREd/jr91cX6f xtoFqT0Vh84mxfDmJH2WAa7czuB2JYfdtuskTjgZ8PTZ+4k+eNZ7j8Kxe/bjlHWg kvFmdmr1RxI7Qw9AIxDy+fwOHQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFOxHIBVg HY6qavkPwws415Tg61r/MB8GA1UdIwQYMBaAFA/ZehhByZdPH0kELto+coQhquX+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUQyQi84QjY3MDBBNkY0 MDgxMUVBOTBBQzU2NkZDNEY5QUUwMi9EOWw2R0VISmwwOGZTUVF1Mmo1eWhDR3E1 ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q5bDZHRUhKbDA4ZlNRUXUyajV5aENHcTVmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVEMkIvOEI2NzAwQTZGNDA4MTFFQTkwQUM1NjZGQzRGOUFFMDIvRDI1QTY5NzBG NDA5MTFFQThBNUM5RTcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBABnm3cwDQQCAAIwBwMFACQGbcAwDQYJKoZIhvcNAQELBQAD ggEBABJH8gKXaXXugFDzm4eHIdoDqY+zwNyq5TXwk8trE5IL1xXgILf32n61hCny Nr4tkf5DyiqSlwaRMtsmFAn097/NNycYNNnrm5eIDh1sBw2VVdHWe1pumz7afeJg knJ/ZADvav4U6bzs/IKqO1k1jFwjuK6tge4J4S7KHhtnkxjWPyWpsijG9gfgMLcu lYD6t7U8i6p4ou79BFwHlTNzK8HMPPueuzeH4DfG+hamyVSAqAfBcgI2X9L8D/w2 3WvrGDshNkXPKXNZ1j2bxX6+4AWqE8zFQP3SxjgaAWY27PPxt762efxxUA6c4EMQ ehU2+oGm+zpKECvR//BiG4W5a1A= -----END CERTIFICATE-----Generated at Thu May 16 23:48:40 2024 by rpki-client on console-fra.rpki-client.org