$ rpki-client -vvf rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/72603CD6D28811EAB7D79A47C4F9AE02.roa File: 72603CD6D28811EAB7D79A47C4F9AE02.roa (raw, json) Hash identifier: 55v8+5WnNCdQgy/pYZyJsyT33va4H3HoMwf1KQsvvdg= Subject key identifier: 3D:9C:4A:FF:6B:0E:A2:BE:22:85:BF:80:89:D0:FA:1B:85:3C:CE:EE Certificate issuer: /CN=A915D3E8/serialNumber=24BFA36352F84F1A8FA469DEB0E836E8035AE466 Certificate serial: 0754 Authority key identifier: 24:BF:A3:63:52:F8:4F:1A:8F:A4:69:DE:B0:E8:36:E8:03:5A:E4:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/72603CD6D28811EAB7D79A47C4F9AE02.roa Signing time: Mon 18 Mar 2024 22:41:36 +0000 ROA not before: Mon 18 Mar 2024 22:41:36 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 55781 IP address blocks: 103.71.132.0/24 maxlen: 24 202.68.209.0/24 maxlen: 24 202.68.210.0/24 maxlen: 24 202.68.211.0/24 maxlen: 24 202.68.220.0/24 maxlen: 24 202.68.222.0/24 maxlen: 24 202.68.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.crl rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1876 (0x754) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D3E8/serialNumber=24BFA36352F84F1A8FA469DEB0E836E8035AE466 Validity Not Before: Mar 18 22:41:36 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65f8c320-96f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ec:5f:66:3d:9b:2c:46:5f:2e:1a:79:56:52: 25:ed:c3:10:6d:b8:ee:46:01:bc:f4:93:3d:45:66: a9:f8:c1:d2:3b:54:a9:a8:78:b7:e2:ef:56:57:12: 32:45:b6:d3:25:07:f5:eb:5c:90:00:f5:8e:57:d2: ad:8e:61:f2:62:79:e0:0d:d2:cf:0a:82:8f:db:34: 44:4d:ba:a1:a2:99:8b:2e:59:9a:fd:c9:41:9a:6d: 32:2b:fd:e4:64:52:0a:fb:27:06:ec:c8:fd:d7:52: ab:ca:f2:9d:48:20:8a:05:80:85:0e:bb:78:32:d6: 98:43:89:6c:70:71:bf:a3:26:d6:ba:35:d2:5f:5c: 53:12:b4:61:66:fc:13:81:63:7b:b0:a8:68:98:b2: ca:c7:13:0b:5c:3a:50:64:44:83:93:17:28:b8:80: 86:9e:95:d6:34:16:20:f4:e1:3f:4e:a3:ad:19:8a: f4:f5:91:8d:1f:ce:81:63:69:1c:bb:22:d3:09:a4: ac:22:17:73:68:11:73:bc:44:20:29:01:8f:b9:36: b9:41:70:dd:16:1e:01:51:d4:96:78:ba:11:3f:79: 03:51:51:e0:83:e4:a1:66:99:df:06:78:9a:15:11: e6:6c:c3:d6:06:f8:7b:33:f4:4f:76:de:01:f1:9b: ac:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9C:4A:FF:6B:0E:A2:BE:22:85:BF:80:89:D0:FA:1B:85:3C:CE:EE X509v3 Authority Key Identifier: keyid:24:BF:A3:63:52:F8:4F:1A:8F:A4:69:DE:B0:E8:36:E8:03:5A:E4:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/72603CD6D28811EAB7D79A47C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.71.132.0/24 202.68.209.0-202.68.211.255 202.68.220.0/24 202.68.222.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:b3:bd:40:ee:4b:01:b1:75:ae:c6:e8:b4:f5:c2:5f:08:d0: 58:19:b9:d8:09:33:6b:e2:9f:94:1f:56:33:ea:3d:18:69:3f: fd:80:80:25:2a:d5:be:19:57:71:49:ad:c0:d1:a5:26:02:38: 56:06:c2:bb:8b:ab:6d:24:e3:9a:b5:5f:2b:58:ba:56:9c:8f: 77:c1:39:37:22:ab:9a:03:6d:eb:e9:96:b0:50:74:c5:d4:e5: e5:82:a6:63:16:41:cc:12:5c:d4:af:69:4a:79:e6:88:57:54: 93:42:18:97:4d:76:c1:e1:9c:04:aa:20:ea:4a:f6:0b:95:fd: 3b:3b:72:9f:4b:a6:31:b6:03:16:20:72:46:f1:56:72:ad:20: be:28:e4:cf:be:ea:c3:d9:ff:87:51:86:f4:38:f6:56:31:84: 5e:86:16:c0:96:62:38:03:f0:be:3d:89:54:45:c2:89:c5:f4: eb:56:78:73:9d:26:e5:4c:f5:16:99:fd:01:77:e4:2b:ff:c1: 3d:37:44:7d:46:e0:35:31:91:17:d1:c6:7a:f2:6a:6a:92:97: dd:49:d3:66:d3:63:58:17:1a:e8:a3:e0:f1:31:8a:77:b8:27: a2:25:d0:b0:b2:55:32:22:b5:42:42:57:8a:d4:7f:62:0b:77: 93:a7:18:58 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICB1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQzRTgxMTAvBgNVBAUTKDI0QkZBMzYzNTJGODRGMUE4RkE0NjlERUIwRTgzNkU4 MDM1QUU0NjYwHhcNMjQwMzE4MjI0MTM2WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NWY4YzMyMC05NmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+xfZj2bLEZfLhp5VlIl7cMQbbjuRgG89JM9RWap+MHSO1SpqHi34u9WVxIy RbbTJQf161yQAPWOV9KtjmHyYnngDdLPCoKP2zRETbqhopmLLlma/clBmm0yK/3k ZFIK+ycG7Mj911KryvKdSCCKBYCFDrt4MtaYQ4lscHG/oybWujXSX1xTErRhZvwT gWN7sKhomLLKxxMLXDpQZESDkxcouICGnpXWNBYg9OE/TqOtGYr09ZGNH86BY2kc uyLTCaSsIhdzaBFzvEQgKQGPuTa5QXDdFh4BUdSWeLoRP3kDUVHgg+ShZpnfBnia FRHmbMPWBvh7M/RPdt4B8ZusDwIDAQABo4ICrzCCAqswHQYDVR0OBBYEFD2cSv9r DqK+IoW/gInQ+huFPM7uMB8GA1UdIwQYMBaAFCS/o2NS+E8aj6Rp3rDoNugDWuRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDNFOC8zRjFGMEREQUQy ODcxMUVBOUU3M0U2NDZDNEY5QUUwMi9KTC1qWTFMNFR4cVBwR25lc09nMjZBTmE1 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMLWpZMUw0VHhxUHBHbmVzT2cyNkFOYTVHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQzRTgvM0YxRjBEREFEMjg3MTFFQTlFNzNFNjQ2QzRGOUFFMDIvNzI2MDNDRDZE Mjg4MTFFQUI3RDc5QTQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMCYEAgABMCADBABnR4QwDAMEAMpE0QMEAspE0AMEAMpE3AMEAcpE3jANBgkq hkiG9w0BAQsFAAOCAQEAK7O9QO5LAbF1rsbotPXCXwjQWBm52Akza+KflB9WM+o9 GGk//YCAJSrVvhlXcUmtwNGlJgI4VgbCu4urbSTjmrVfK1i6VpyPd8E5NyKrmgNt 6+mWsFB0xdTl5YKmYxZBzBJc1K9pSnnmiFdUk0IYl012weGcBKog6kr2C5X9Ozty n0umMbYDFiByRvFWcq0gvijkz77qw9n/h1GG9Dj2VjGEXoYWwJZiOAPwvj2JVEXC icX061Z4c50m5Uz1Fpn9AXfkK//BPTdEfUbgNTGRF9HGevJqapKX3UnTZtNjWBca 6KPg8TGKd7gnoiXQsLJVMiK1QkJXitR/Ygt3k6cYWA== -----END CERTIFICATE-----Generated at Thu May 16 22:58:18 2024 by rpki-client on console-fra.rpki-client.org