$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/053B88AA81ED11EEABC08274C4F9AE02.roa File: 053B88AA81ED11EEABC08274C4F9AE02.roa (raw, json) Hash identifier: mfHNkl5nVUvbcaaUK0YKT8MQxMa6m2sz1Z5tbp2JIhM= Subject key identifier: 9A:32:23:06:18:74:BC:D9:D8:77:E0:3F:D2:76:1F:C1:AC:85:B8:AC Certificate issuer: /CN=A914FA25/serialNumber=00389A8657AE098804472F8E68D705E2EFDBD7C0 Certificate serial: 76 Authority key identifier: 00:38:9A:86:57:AE:09:88:04:47:2F:8E:68:D7:05:E2:EF:DB:D7:C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADiahleuCYgERy-OaNcF4u_b18A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/053B88AA81ED11EEABC08274C4F9AE02.roa Signing time: Tue 30 Apr 2024 20:28:56 +0000 ROA not before: Tue 30 Apr 2024 20:28:56 +0000 ROA not after: Thu 29 Aug 2024 00:00:00 +0000 asID: 137496 IP address blocks: 103.110.160.0/22 maxlen: 22 103.110.160.0/23 maxlen: 23 103.110.160.0/24 maxlen: 24 103.110.161.0/24 maxlen: 24 2402:8dc0::/32 maxlen: 32 2402:8dc0::/48 maxlen: 48 2402:8dc0:1::/48 maxlen: 48 2402:8dc0:2::/48 maxlen: 48 2402:8dc0:3::/48 maxlen: 48 2402:8dc0:4::/48 maxlen: 48 2402:8dc0:10::/48 maxlen: 48 2402:8dc0:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.crl rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADiahleuCYgERy-OaNcF4u_b18A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 19:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FA25/serialNumber=00389A8657AE098804472F8E68D705E2EFDBD7C0 Validity Not Before: Apr 30 20:28:56 2024 GMT Not After : Aug 29 00:00:00 2024 GMT Subject: CN=66315487-d31e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:27:84:13:b1:3e:d5:4b:5c:2b:71:aa:ab:6c: 56:ed:38:46:05:31:bd:3d:03:65:76:e5:50:d8:57: 07:88:9a:0c:09:cc:42:f7:9a:1f:25:eb:07:90:74: a5:e0:8f:74:c5:6d:f0:6a:d8:cd:87:55:39:ee:3a: fb:83:aa:ae:af:8f:14:a7:be:9c:03:12:a9:ac:1c: 5b:95:82:96:18:d7:71:e2:91:80:d0:30:8f:2f:9c: 57:be:76:26:5a:2e:07:b1:12:ea:7b:94:6d:81:dd: aa:32:8d:55:3e:2b:98:5e:8b:f8:c2:9c:f4:e3:b9: a4:ba:aa:23:77:be:03:06:ae:27:90:ed:9e:47:e3: 7a:a5:ea:cc:28:11:38:74:02:67:09:96:d1:ac:97: e6:15:7b:44:95:fc:99:e8:09:32:21:7e:4f:ff:7e: c9:3c:21:70:78:2e:82:55:d1:a9:bb:40:6a:12:a4: 8f:c3:94:3a:6a:b2:fc:70:cc:56:4d:f9:cc:b1:67: 04:5e:17:9d:c1:ec:7a:1e:6a:36:b9:5d:c9:ed:85: a0:cc:6c:13:ea:74:91:6f:37:6f:e0:e2:5f:b3:02: ed:25:e0:3f:bc:e0:5f:de:72:21:c0:fa:d7:5c:6f: 1d:73:1d:5a:51:16:43:6e:79:70:32:dc:a7:f0:51: 40:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:32:23:06:18:74:BC:D9:D8:77:E0:3F:D2:76:1F:C1:AC:85:B8:AC X509v3 Authority Key Identifier: keyid:00:38:9A:86:57:AE:09:88:04:47:2F:8E:68:D7:05:E2:EF:DB:D7:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADiahleuCYgERy-OaNcF4u_b18A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/053B88AA81ED11EEABC08274C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.110.160.0/22 IPv6: 2402:8dc0::/32 Signature Algorithm: sha256WithRSAEncryption 3d:9e:b5:34:a3:86:f4:43:6f:92:50:ad:c7:d6:95:60:fd:f5: 2b:02:04:79:3f:db:f0:45:3b:9d:18:30:e4:23:13:ab:d5:ed: 1e:e0:a2:1d:3b:72:ba:c7:82:61:d4:90:8c:5a:0d:08:15:f9: 1c:95:78:f4:90:1d:bd:60:a9:75:86:4c:45:93:c9:55:ce:98: d8:ad:87:a8:23:12:7e:86:f7:81:c4:c1:3f:5b:d2:26:d7:90: 27:61:ce:00:a5:9f:65:b0:90:a0:25:d2:c9:bb:46:89:62:16: 4a:ac:e4:66:21:ec:52:c5:8f:da:15:76:c6:3a:4a:29:f6:c9: e9:cd:3a:48:e3:32:eb:26:41:eb:b9:37:14:55:da:1b:d0:50: 44:62:c3:05:a8:c4:06:41:08:e3:ed:f3:eb:1c:92:4e:2d:38: 42:42:f7:d3:63:9f:0f:51:80:d2:46:57:d8:5e:16:ff:61:cb: 67:43:fb:8b:b2:8b:83:76:e0:f2:c4:96:00:de:7b:ed:ff:7f: 17:ac:b6:54:08:88:62:ca:ea:1c:18:18:c3:a4:60:97:7c:0c: c7:50:2c:bd:fe:33:2e:9f:be:43:e7:0c:7b:df:7d:5e:83:83: 52:b8:9c:b0:97:8f:bd:b7:71:d3:7a:a2:83:05:c2:5f:a6:1d: bc:42:bd:c3 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RkEyNTExMC8GA1UEBRMoMDAzODlBODY1N0FFMDk4ODA0NDcyRjhFNjhENzA1RTJF RkRCRDdDMDAeFw0yNDA0MzAyMDI4NTZaFw0yNDA4MjkwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MzE1NDg3LWQzMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4J4QTsT7VS1wrcaqrbFbtOEYFMb09A2V25VDYVweImgwJzEL3mh8l6weQdKXg j3TFbfBq2M2HVTnuOvuDqq6vjxSnvpwDEqmsHFuVgpYY13HikYDQMI8vnFe+diZa LgexEup7lG2B3aoyjVU+K5hei/jCnPTjuaS6qiN3vgMGrieQ7Z5H43ql6swoETh0 AmcJltGsl+YVe0SV/JnoCTIhfk//fsk8IXB4LoJV0am7QGoSpI/DlDpqsvxwzFZN +cyxZwReF53B7Hoeaja5XcnthaDMbBPqdJFvN2/g4l+zAu0l4D+84F/eciHA+tdc bx1zHVpRFkNueXAy3KfwUUCNAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUmjIjBhh0 vNnYd+A/0nYfwayFuKwwHwYDVR0jBBgwFoAUADiahleuCYgERy+OaNcF4u/b18Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRGQTI1LzJCQkNCQ0FBMURB QzExRUFBRjRBMzc2M0M0RjlBRTAyL0FEaWFobGV1Q1lnRVJ5LU9hTmNGNHVfYjE4 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQURpYWhsZXVDWWdFUnktT2FOY0Y0dV9iMThBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkEyNS8yQkJDQkNBQTFEQUMxMUVBQUY0QTM3NjNDNEY5QUUwMi8wNTNCODhBQTgx RUQxMUVFQUJDMDgyNzRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAmduoDANBAIAAjAHAwUAJAKNwDANBgkqhkiG9w0BAQsFAAOC AQEAPZ61NKOG9ENvklCtx9aVYP31KwIEeT/b8EU7nRgw5CMTq9XtHuCiHTtyuseC YdSQjFoNCBX5HJV49JAdvWCpdYZMRZPJVc6Y2K2HqCMSfob3gcTBP1vSJteQJ2HO AKWfZbCQoCXSybtGiWIWSqzkZiHsUsWP2hV2xjpKKfbJ6c06SOMy6yZB67k3FFXa G9BQRGLDBajEBkEI4+3z6xySTi04QkL302OfD1GA0kZX2F4W/2HLZ0P7i7KLg3bg 8sSWAN577f9/F6y2VAiIYsrqHBgYw6Rgl3wMx1Asvf4zLp++Q+cMe999XoODUric sJePvbdx03qigwXCX6YdvEK9ww== -----END CERTIFICATE-----Generated at Tue May 14 20:52:13 2024 by rpki-client on console-fra.rpki-client.org