$ rpki-client -vvf rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/4D6224A80C4A11EAABCEF428C4F9AE02.roa File: 4D6224A80C4A11EAABCEF428C4F9AE02.roa (raw, json) Hash identifier: ReXGjvFy+TWrsr7RgwOcoe4seJnPX23TJX01LZAfVPM= Subject key identifier: 82:AE:AA:70:38:18:61:D2:3B:93:9B:E8:89:10:54:43:79:4D:1E:78 Certificate issuer: /CN=A9153049/serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074 Certificate serial: 0B50 Authority key identifier: F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/4D6224A80C4A11EAABCEF428C4F9AE02.roa Signing time: Wed 28 Feb 2024 19:57:30 +0000 ROA not before: Wed 28 Feb 2024 19:57:30 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 137435 IP address blocks: 103.108.112.0/22 maxlen: 22 103.108.112.0/24 maxlen: 24 103.108.113.0/24 maxlen: 24 103.108.114.0/24 maxlen: 24 103.108.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 19:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2896 (0xb50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153049/serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074 Validity Not Before: Feb 28 19:57:30 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65df902a-f4bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:09:85:10:19:30:64:11:ba:56:f4:21:04:14: ca:a3:fa:aa:fa:d6:8d:0b:f4:69:55:b6:4e:1f:81: cc:f2:d9:76:c7:04:ef:87:63:fc:ab:34:cb:6b:a7: e2:74:79:b6:9c:3c:8b:47:c1:3d:ee:dc:30:f6:7d: 92:73:97:e7:5d:7d:fa:cd:f3:be:f1:0d:73:10:fd: 71:cf:a0:42:e9:28:a5:cf:aa:d7:24:0c:be:ff:76: bc:21:f9:42:cc:17:66:f4:33:39:a3:66:fb:97:ce: 04:b7:47:22:15:43:f7:31:23:17:6a:7d:4b:b6:35: af:13:89:98:7a:85:11:23:45:73:bc:d5:a1:52:a2: f0:43:bf:56:14:f7:98:01:83:f7:90:ca:8e:2b:2c: e5:7d:54:0b:26:21:e5:e7:88:d8:ea:3b:f3:81:3c: 1d:77:df:95:ac:85:59:c5:ea:ff:55:27:cc:f6:a4: 4a:4a:6f:64:47:86:2c:3c:54:c4:6a:03:15:68:b9: 51:4d:51:20:0a:6c:03:30:ce:7d:8d:11:f9:ec:4e: 64:06:8e:74:29:1f:19:ef:dc:53:8f:e2:95:2e:d2: 67:7b:e9:4f:42:21:bf:16:32:e4:44:02:51:c1:75: 22:b5:4d:86:ec:23:26:74:5e:d8:59:fa:cd:f8:a0: fd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:AE:AA:70:38:18:61:D2:3B:93:9B:E8:89:10:54:43:79:4D:1E:78 X509v3 Authority Key Identifier: keyid:F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/4D6224A80C4A11EAABCEF428C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.108.112.0/22 Signature Algorithm: sha256WithRSAEncryption 05:d2:da:ea:59:1a:15:eb:8b:8b:c4:ad:84:28:1d:65:d4:85: 02:bd:d0:20:93:06:39:26:fe:40:76:b2:3a:4b:c2:4c:94:17: 7d:8a:67:f9:90:31:ce:ac:d8:0a:44:e6:f9:a5:5e:e0:76:8b: 9c:9e:f7:a8:74:2c:f4:69:e8:5c:9e:8d:1b:ef:39:5b:40:fc: c3:a3:d5:73:c7:49:68:7a:24:e6:0d:e6:48:33:5f:6c:30:2e: 1d:90:08:5c:34:f0:df:06:e6:05:d0:5b:2d:23:e7:26:3c:b6: db:51:76:8a:6f:41:7e:6d:1c:7b:81:4d:c5:03:42:0f:80:ff: 0e:6d:dc:8e:dc:44:72:0c:42:d6:7e:a4:a4:65:32:b3:b1:39: be:25:ea:20:ca:30:92:28:23:bf:e4:11:b1:d7:f2:4f:13:51: ea:cd:a4:47:a1:23:ed:d5:23:be:1e:11:cb:ba:fa:a7:cf:d9: f6:51:b4:14:53:c1:13:3d:30:ba:b5:69:9e:13:b1:a2:36:29: be:ab:6e:ed:4e:33:c0:91:b3:30:89:67:5d:e4:42:ca:4d:21: 32:3c:ef:a5:a4:56:aa:8c:36:66:06:b1:68:1b:b2:f6:e8:70: bf:0f:7a:c3:0f:bb:ec:bf:9f:16:1c:57:2e:f9:4b:34:5d:06: 91:e1:75:2f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMwNDkxMTAvBgNVBAUTKEY2MkQyQTY4NURDRUM5N0UxNTgzOTAyQThFRjlFRTUx NzA3ODIwNzQwHhcNMjQwMjI4MTk1NzMwWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWRmOTAyYS1mNGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAmFEBkwZBG6VvQhBBTKo/qq+taNC/RpVbZOH4HM8tl2xwTvh2P8qzTLa6fi dHm2nDyLR8E97tww9n2Sc5fnXX36zfO+8Q1zEP1xz6BC6Silz6rXJAy+/3a8IflC zBdm9DM5o2b7l84Et0ciFUP3MSMXan1LtjWvE4mYeoURI0VzvNWhUqLwQ79WFPeY AYP3kMqOKyzlfVQLJiHl54jY6jvzgTwdd9+VrIVZxer/VSfM9qRKSm9kR4YsPFTE agMVaLlRTVEgCmwDMM59jRH57E5kBo50KR8Z79xTj+KVLtJne+lPQiG/FjLkRAJR wXUitU2G7CMmdF7YWfrN+KD9TQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIKuqnA4 GGHSO5Ob6IkQVEN5TR54MB8GA1UdIwQYMBaAFPYtKmhdzsl+FYOQKo757lFweCB0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzA0OS9BREFDNTI4MjA5 RDYxMUVBOUVCMzM4MUNDNEY5QUUwMi85aTBxYUYzT3lYNFZnNUFxanZudVVYQjRJ SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlpMHFhRjNPeVg0Vmc1QXFqdm51VVhCNElIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTMwNDkvQURBQzUyODIwOUQ2MTFFQTlFQjMzODFDQzRGOUFFMDIvNEQ2MjI0QTgw QzRBMTFFQUFCQ0VGNDI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnbHAwDQYJKoZIhvcNAQELBQADggEBAAXS2upZGhXri4vE rYQoHWXUhQK90CCTBjkm/kB2sjpLwkyUF32KZ/mQMc6s2ApE5vmlXuB2i5ye96h0 LPRp6FyejRvvOVtA/MOj1XPHSWh6JOYN5kgzX2wwLh2QCFw08N8G5gXQWy0j5yY8 tttRdopvQX5tHHuBTcUDQg+A/w5t3I7cRHIMQtZ+pKRlMrOxOb4l6iDKMJIoI7/k EbHX8k8TUerNpEehI+3VI74eEcu6+qfP2fZRtBRTwRM9MLq1aZ4TsaI2Kb6rbu1O M8CRszCJZ13kQspNITI876WkVqqMNmYGsWgbsvbocL8PesMPu+y/nxYcVy75SzRd BpHhdS8= -----END CERTIFICATE-----Generated at Tue May 28 21:49:41 2024 by rpki-client on console-fra.rpki-client.org