$ rpki-client -vvf rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/7740AE687F8A11EE89807F7CC4F9AE02.roa File: 7740AE687F8A11EE89807F7CC4F9AE02.roa (raw, json) Hash identifier: dVsIJDCH333fzQ/eAIRQ3XZlbGzq9l+J1Bz9II0K16E= Subject key identifier: A7:ED:91:D4:DD:FE:66:85:A3:F0:FD:1B:3C:73:7A:9F:18:48:FF:F2 Certificate issuer: /CN=A914EF21/serialNumber=F4C0641374975A58B54EC02C1049732EC8A70ACB Certificate serial: 02 Authority key identifier: F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/7740AE687F8A11EE89807F7CC4F9AE02.roa Signing time: Fri 10 Nov 2023 05:31:58 +0000 ROA not before: Fri 10 Nov 2023 05:31:58 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 139060 IP address blocks: 103.139.20.0/24 maxlen: 24 103.139.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.crl rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 02:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EF21/serialNumber=F4C0641374975A58B54EC02C1049732EC8A70ACB Validity Not Before: Nov 10 05:31:58 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=654dc04e-07f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:54:c3:d3:b6:fa:26:81:89:05:a0:76:61:67: c2:83:7c:cb:d4:37:8c:e5:c2:11:32:fe:eb:31:05: 7c:97:6b:e8:6c:a2:3a:cd:f1:4e:ca:b2:54:1f:62: 64:70:b1:20:9f:a9:dd:5b:61:6a:ec:9a:df:26:9f: 46:de:49:e8:34:c9:a2:56:76:60:de:1f:1c:80:14: 00:2a:e4:fc:a7:f7:20:ae:23:47:03:e9:fd:6b:25: f6:e1:9f:bf:cb:39:71:90:e5:c5:88:d0:53:29:db: 6f:9a:f2:7c:49:38:6b:1c:af:04:68:07:69:4e:8e: c0:7b:83:fc:3a:7b:7f:37:00:8b:01:16:8f:66:6f: 50:e1:c1:cd:e4:b9:48:ab:bd:f6:23:19:e9:30:2b: 39:a3:5f:7d:f3:ab:88:a1:c1:bf:28:5a:9e:74:3c: 7f:aa:08:75:06:25:8e:60:86:fd:75:b1:7f:24:78: 3c:53:c5:8c:68:e7:23:52:00:8d:96:93:d1:81:a4: 29:df:df:99:33:33:95:39:8b:99:d9:0e:9d:21:fa: 70:55:08:87:56:c3:99:0a:d5:a6:c5:d7:72:d2:ec: 1f:66:e5:d1:6a:72:d8:d3:8d:29:9a:e1:21:8c:bf: 0c:fb:9f:01:62:6c:e8:c2:7e:73:56:b4:f5:4e:69: d1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:ED:91:D4:DD:FE:66:85:A3:F0:FD:1B:3C:73:7A:9F:18:48:FF:F2 X509v3 Authority Key Identifier: keyid:F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/7740AE687F8A11EE89807F7CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.139.20.0/23 Signature Algorithm: sha256WithRSAEncryption 91:1e:44:e2:28:37:df:20:b4:31:94:59:53:50:f1:78:5b:6f: ec:2f:b8:92:3c:aa:17:fe:84:51:05:76:24:fb:f1:a5:de:8a: 8e:96:7a:22:bd:de:e4:e5:74:04:89:69:b5:7e:ec:da:97:8b: cb:83:cc:73:a2:e5:8d:e3:ef:62:23:b5:6e:09:cb:82:64:6e: 70:48:7f:7d:c5:92:a9:d1:f3:3a:37:94:eb:4e:74:1a:15:4f: e5:37:e8:fc:69:71:7b:cb:c2:06:25:4c:38:70:d5:99:be:7a: 4b:2f:77:a6:f7:29:01:7e:95:2b:fd:05:18:d5:e1:bf:5c:c9: 84:a1:6c:fe:85:23:83:ba:ae:d8:93:15:a9:8a:5e:1e:a6:3c: f8:00:c8:c1:5b:28:46:d1:41:56:a1:06:fd:90:a6:e2:39:01: 24:fa:ef:bb:2b:1d:7c:07:24:34:6d:d3:3e:8c:d2:e5:66:10: 77:f9:db:59:d0:ed:22:94:81:fa:07:73:e6:fc:df:b1:2c:f9: 3a:eb:93:5c:a5:19:0e:1e:40:ef:90:b2:42:72:0e:54:b7:0f: 6d:52:0b:80:b1:22:01:90:33:e3:2c:ca:1b:4e:b8:40:df:b8: d5:73:07:d9:17:fb:41:74:9f:31:64:ae:a3:ae:13:ac:dc:f7: 93:90:93:3a -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RUYyMTExMC8GA1UEBRMoRjRDMDY0MTM3NDk3NUE1OEI1NEVDMDJDMTA0OTczMkVD OEE3MEFDQjAeFw0yMzExMTAwNTMxNThaFw0yNDA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1NGRjMDRlLTA3ZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpVMPTtvomgYkFoHZhZ8KDfMvUN4zlwhEy/usxBXyXa+hsojrN8U7KslQfYmRw sSCfqd1bYWrsmt8mn0beSeg0yaJWdmDeHxyAFAAq5Pyn9yCuI0cD6f1rJfbhn7/L OXGQ5cWI0FMp22+a8nxJOGscrwRoB2lOjsB7g/w6e383AIsBFo9mb1Dhwc3kuUir vfYjGekwKzmjX33zq4ihwb8oWp50PH+qCHUGJY5ghv11sX8keDxTxYxo5yNSAI2W k9GBpCnf35kzM5U5i5nZDp0h+nBVCIdWw5kK1abF13LS7B9m5dFqctjTjSma4SGM vwz7nwFibOjCfnNWtPVOadHlAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUp+2R1N3+ ZoWj8P0bPHN6nxhI//IwHwYDVR0jBBgwFoAU9MBkE3SXWli1TsAsEElzLsinCssw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFRjIxL0VBREJCNDEyMDE4 MzExRUNCNTY0MTYyOUM0RjlBRTAyLzlNQmtFM1NYV2xpMVRzQXNFRWx6THNpbkNz cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOU1Ca0UzU1hXbGkxVHNBc0VFbHpMc2luQ3NzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUYyMS9FQURCQjQxMjAxODMxMUVDQjU2NDE2MjlDNEY5QUUwMi83NzQwQUU2ODdG OEExMUVFODk4MDdGN0NDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWeLFDANBgkqhkiG9w0BAQsFAAOCAQEAkR5E4ig33yC0MZRZ U1DxeFtv7C+4kjyqF/6EUQV2JPvxpd6KjpZ6Ir3e5OV0BIlptX7s2peLy4PMc6Ll jePvYiO1bgnLgmRucEh/fcWSqdHzOjeU6050GhVP5Tfo/Glxe8vCBiVMOHDVmb56 Sy93pvcpAX6VK/0FGNXhv1zJhKFs/oUjg7qu2JMVqYpeHqY8+ADIwVsoRtFBVqEG /ZCm4jkBJPrvuysdfAckNG3TPozS5WYQd/nbWdDtIpSB+gdz5vzfsSz5OuuTXKUZ Dh5A75CyQnIOVLcPbVILgLEiAZAz4yzKG064QN+41XMH2Rf7QXSfMWSuo64TrNz3 k5CTOg== -----END CERTIFICATE-----Generated at Sat Jun 1 04:59:01 2024 by rpki-client on console-fra.rpki-client.org