$ rpki-client -vvf rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/854ACCD2DFEA11ECB7DF0A2EC4F9AE02.roa File: 854ACCD2DFEA11ECB7DF0A2EC4F9AE02.roa (raw, json) Hash identifier: u4ixDiIah0HRlbgq6Gff8MvIftonQjJ2hGXt/sRAB/s= Subject key identifier: 32:34:B2:4D:FB:CA:68:A4:17:DE:0B:3C:DA:AA:DB:CA:26:DC:B7:D1 Certificate issuer: /CN=A9156DB4/serialNumber=F2D126F142086A26E3C584A70AB3E527B3038182 Certificate serial: 02C5 Authority key identifier: F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/854ACCD2DFEA11ECB7DF0A2EC4F9AE02.roa Signing time: Wed 03 Apr 2024 04:05:37 +0000 ROA not before: Wed 03 Apr 2024 04:05:37 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 134087 IP address blocks: 103.182.168.0/23 maxlen: 23 2001:df0:7ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 709 (0x2c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156DB4/serialNumber=F2D126F142086A26E3C584A70AB3E527B3038182 Validity Not Before: Apr 3 04:05:37 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660cd591-3ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ec:40:27:56:34:35:b1:70:eb:29:ce:b3:33: 03:52:38:97:37:33:6a:a7:99:72:a1:78:74:d4:47: e9:96:5f:4f:12:93:cd:ff:e0:42:b0:27:1b:5c:d4: 3d:49:94:96:02:cb:1f:c1:f9:2b:cb:4c:f2:6d:cf: b3:3c:67:e4:d6:1b:90:6d:1d:e2:ea:99:29:96:aa: 8d:63:c1:5c:aa:a4:07:09:65:55:c5:5d:f4:f5:d2: 9f:59:54:46:53:1c:13:d8:92:79:ca:e8:f9:f9:f0: 4b:ab:4d:cd:95:98:68:d4:9f:64:6b:3a:0a:e6:16: ba:ae:41:2b:5a:ad:87:ca:66:41:21:68:b5:16:28: 73:38:9c:5b:ce:3d:69:d7:44:fe:9c:6f:a1:e3:22: 7d:e1:ea:46:6d:88:ba:96:25:fb:5a:94:12:0b:ff: 24:58:73:0d:f6:1c:6d:3d:b0:38:93:e4:01:54:cb: 92:25:13:fc:77:f5:a6:a4:03:8e:dc:15:fe:d6:9e: 9c:1e:a6:57:23:44:d3:5e:31:03:8d:b9:48:33:14: 19:9e:9b:4f:dc:d3:c1:80:61:97:d5:c0:30:9b:66: d1:c7:f2:27:06:65:24:b4:a4:7d:36:15:cb:f6:57: 13:e8:fe:e7:37:04:29:df:cc:fd:21:39:ef:d2:62: 20:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:34:B2:4D:FB:CA:68:A4:17:DE:0B:3C:DA:AA:DB:CA:26:DC:B7:D1 X509v3 Authority Key Identifier: keyid:F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/854ACCD2DFEA11ECB7DF0A2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.182.168.0/23 IPv6: 2001:df0:7ec0::/48 Signature Algorithm: sha256WithRSAEncryption 55:1e:d2:5b:02:da:99:bf:13:d3:3f:d1:66:57:b2:97:20:cc: 99:d7:72:3c:34:9a:b1:a7:d9:2c:d5:19:de:02:b0:7e:2f:1e: 82:56:34:11:08:3c:c1:c4:04:65:0b:e5:01:07:24:49:73:11: 6a:61:a6:76:4e:17:69:5d:93:4e:eb:cb:b6:23:2f:1b:c1:cb: 5b:0a:9f:59:1a:5e:a0:71:19:3a:39:14:53:80:7f:80:e1:93: 34:a5:0a:68:82:d3:23:8c:c0:ed:91:1c:63:db:59:03:96:21: 73:10:74:7e:6b:df:b9:29:33:45:18:42:19:7b:bc:fb:e3:37: c9:ed:b6:ee:9e:6f:63:88:86:d5:b7:85:63:a5:9d:db:b4:89: 3b:88:d6:e6:9b:15:2f:63:76:93:de:77:85:59:f0:3f:a4:31: d7:c4:29:9b:80:d8:dc:de:3a:89:95:8d:6d:44:a8:ec:47:36: f1:4f:32:d1:8c:d7:7d:d3:c9:d1:f6:d1:47:2f:35:5b:96:16: bc:de:8d:7a:23:c0:57:4b:8f:5e:08:1b:3a:2b:4d:28:d0:fe: b5:3e:1b:de:98:6f:cd:9f:11:3f:a1:7b:ae:ec:53:b4:fd:75: 32:48:ec:60:49:06:56:64:67:d8:06:09:b7:15:f2:c4:56:70: 96:8b:3a:4e -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZEQjQxMTAvBgNVBAUTKEYyRDEyNkYxNDIwODZBMjZFM0M1ODRBNzBBQjNFNTI3 QjMwMzgxODIwHhcNMjQwNDAzMDQwNTM3WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjBjZDU5MS0zZWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2uxAJ1Y0NbFw6ynOszMDUjiXNzNqp5lyoXh01Efpll9PEpPN/+BCsCcbXNQ9 SZSWAssfwfkry0zybc+zPGfk1huQbR3i6pkplqqNY8FcqqQHCWVVxV309dKfWVRG UxwT2JJ5yuj5+fBLq03NlZho1J9kazoK5ha6rkErWq2HymZBIWi1FihzOJxbzj1p 10T+nG+h4yJ94epGbYi6liX7WpQSC/8kWHMN9hxtPbA4k+QBVMuSJRP8d/WmpAOO 3BX+1p6cHqZXI0TTXjEDjblIMxQZnptP3NPBgGGX1cAwm2bRx/InBmUktKR9NhXL 9lcT6P7nNwQp38z9ITnv0mIgfwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDI0sk37 ymikF94LPNqq28om3LfRMB8GA1UdIwQYMBaAFPLRJvFCCGom48WEpwqz5SezA4GC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkRCNC9FODREQjk4QTlE OUExMUVDQkE5MjhGNDVDNEY5QUUwMi84dEVtOFVJSWFpYmp4WVNuQ3JQbEo3TURn WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh0RW04VUlJYWlianhZU25DclBsSjdNRGdZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTZEQjQvRTg0REI5OEE5RDlBMTFFQ0JBOTI4RjQ1QzRGOUFFMDIvODU0QUNDRDJE RkVBMTFFQ0I3REYwQTJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFntqgwDwQCAAIwCQMHACABDfB+wDANBgkqhkiG9w0BAQsF AAOCAQEAVR7SWwLamb8T0z/RZleylyDMmddyPDSasafZLNUZ3gKwfi8eglY0EQg8 wcQEZQvlAQckSXMRamGmdk4XaV2TTuvLtiMvG8HLWwqfWRpeoHEZOjkUU4B/gOGT NKUKaILTI4zA7ZEcY9tZA5YhcxB0fmvfuSkzRRhCGXu8++M3ye227p5vY4iG1beF Y6Wd27SJO4jW5psVL2N2k953hVnwP6Qx18Qpm4DY3N46iZWNbUSo7Ec28U8y0YzX fdPJ0fbRRy81W5YWvN6NeiPAV0uPXggbOitNKND+tT4b3phvzZ8RP6F7ruxTtP11 MkjsYEkGVmRn2AYJtxXyxFZwlos6Tg== -----END CERTIFICATE-----Generated at Sun May 19 03:48:51 2024 by rpki-client on console-fra.rpki-client.org