$ rpki-client -vvf rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/4F038F1007C511EFB3AD2E14C4F9AE02.roa File: 4F038F1007C511EFB3AD2E14C4F9AE02.roa (raw, json) Hash identifier: xBdixNbP361rXzc/XoDu9mGkluefiKE80EL1xZzlP+s= Subject key identifier: CA:7C:19:31:35:A7:91:62:EF:67:74:4E:CA:87:E5:CA:9C:2D:62:30 Certificate issuer: /CN=A9165772/serialNumber=EA8B043E868F75573BCC4540AD4954102DC922B8 Certificate serial: 04 Authority key identifier: EA:8B:04:3E:86:8F:75:57:3B:CC:45:40:AD:49:54:10:2D:C9:22:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6osEPoaPdVc7zEVArUlUEC3JIrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/4F038F1007C511EFB3AD2E14C4F9AE02.roa Signing time: Wed 01 May 2024 14:15:49 +0000 ROA not before: Wed 01 May 2024 14:15:49 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 134185 IP address blocks: 103.157.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.crl rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6osEPoaPdVc7zEVArUlUEC3JIrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Sep 2024 04:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165772/serialNumber=EA8B043E868F75573BCC4540AD4954102DC922B8 Validity Not Before: May 1 14:15:49 2024 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=66324e95-dbf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:95:d9:6f:33:bc:d4:aa:f6:b7:ec:e9:1b:90: 3e:ee:c6:d0:85:7d:3c:ba:5d:57:0d:c4:73:22:cd: 87:0e:51:f3:65:ae:7b:ce:11:ea:8b:49:c6:38:d1: ad:55:82:df:ab:c3:4e:79:f4:24:ee:54:47:a2:41: 15:9e:15:c5:5e:09:20:fb:52:83:bb:0f:ec:cb:26: 10:04:df:f6:d9:6d:aa:0a:0f:1b:17:63:74:5d:b8: 0b:3a:a0:6b:7f:cb:d8:8d:6a:a5:43:3f:33:10:4e: d2:10:23:e7:1f:e4:7c:7a:3e:5b:c4:1b:8c:b3:3d: fc:4e:3e:53:95:e1:80:8f:da:cd:5a:a8:2a:ca:ac: 2b:ab:cf:b4:e8:f3:22:6d:72:d8:e8:32:21:53:5b: 4e:21:38:b9:1b:3c:32:f0:76:b9:e0:c7:a5:9b:23: ee:d4:ea:f6:0b:5e:44:07:b7:26:51:20:d3:82:c6: 4c:17:11:0d:b5:4b:1f:17:f4:0f:c2:0d:52:a1:c9: ce:4f:30:23:4f:81:cc:a7:e6:da:03:86:cd:84:f4: ea:68:d1:2f:31:f0:5e:30:5f:b1:c9:98:73:0c:cf: 15:dc:40:c4:c2:70:9b:f7:21:a8:38:e4:da:9f:a0: 45:48:89:f9:de:d4:e9:9c:8b:0d:af:1d:b1:f6:77: ce:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7C:19:31:35:A7:91:62:EF:67:74:4E:CA:87:E5:CA:9C:2D:62:30 X509v3 Authority Key Identifier: keyid:EA:8B:04:3E:86:8F:75:57:3B:CC:45:40:AD:49:54:10:2D:C9:22:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6osEPoaPdVc7zEVArUlUEC3JIrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/4F038F1007C511EFB3AD2E14C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.157.56.0/24 Signature Algorithm: sha256WithRSAEncryption 80:ae:e4:84:2d:47:4e:8c:1b:33:a4:9b:61:ca:dc:03:f5:07: 77:df:12:fb:02:8e:7a:2f:25:79:b2:6c:56:9d:2e:b7:1a:d4: ad:e4:8a:93:04:b6:4e:78:0c:79:4d:13:9a:6f:e1:08:67:36: 31:50:f4:f8:b2:63:df:02:bf:bb:ff:c0:8f:15:1d:a4:e8:ca: b7:14:1c:77:33:5f:32:16:d1:d7:0a:be:a2:eb:bf:55:db:4a: b7:af:4c:cf:56:eb:0f:d8:08:cd:6d:35:0b:1c:ba:a1:ed:46: c0:4d:e5:c9:cf:a2:85:cc:eb:ca:39:e2:cc:d2:a2:3b:4e:8b: 8d:1d:d0:6e:7a:b2:4e:93:e7:10:a5:f6:7e:45:55:d6:17:16: 95:cb:d8:fd:75:c9:ff:59:18:18:de:3d:f0:fd:5a:0a:dc:f7: 7f:c6:86:3d:16:a9:66:0b:a6:de:1d:32:d4:28:16:d4:14:d4: ee:45:3b:26:16:9b:ce:3e:be:96:7e:1d:e9:03:48:57:96:20: 56:f0:bd:7e:0a:e4:59:4f:e4:15:2d:ba:38:56:37:74:b9:0a: fc:f7:cd:00:7f:87:71:ef:56:4f:79:85:25:37:3b:c5:96:6a: 69:d6:e3:86:fd:12:65:ae:c1:d3:eb:b1:2d:3e:58:4c:8d:9d: f8:57:5b:0f -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NTc3MjExMC8GA1UEBRMoRUE4QjA0M0U4NjhGNzU1NzNCQ0M0NTQwQUQ0OTU0MTAy REM5MjJCODAeFw0yNDA1MDExNDE1NDlaFw0yNDEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MzI0ZTk1LWRiZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBldlvM7zUqva37OkbkD7uxtCFfTy6XVcNxHMizYcOUfNlrnvOEeqLScY40a1V gt+rw0559CTuVEeiQRWeFcVeCSD7UoO7D+zLJhAE3/bZbaoKDxsXY3RduAs6oGt/ y9iNaqVDPzMQTtIQI+cf5Hx6PlvEG4yzPfxOPlOV4YCP2s1aqCrKrCurz7To8yJt ctjoMiFTW04hOLkbPDLwdrngx6WbI+7U6vYLXkQHtyZRINOCxkwXEQ21Sx8X9A/C DVKhyc5PMCNPgcyn5toDhs2E9Opo0S8x8F4wX7HJmHMMzxXcQMTCcJv3Iag45Nqf oEVIifne1Omciw2vHbH2d85/AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUynwZMTWn kWLvZ3ROyoflypwtYjAwHwYDVR0jBBgwFoAU6osEPoaPdVc7zEVArUlUEC3JIrgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1NzcyLzA0QkQxQTZDMDdD NDExRUY4NTJEQ0M3REM0RjlBRTAyLzZvc0VQb2FQZFZjN3pFVkFyVWxVRUMzSkly Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNm9zRVBvYVBkVmM3ekVWQXJVbFVFQzNKSXJnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTc3Mi8wNEJEMUE2QzA3QzQxMUVGODUyRENDN0RDNEY5QUUwMi80RjAzOEYxMDA3 QzUxMUVGQjNBRDJFMTRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGedODANBgkqhkiG9w0BAQsFAAOCAQEAgK7khC1HTowbM6Sb YcrcA/UHd98S+wKOei8lebJsVp0utxrUreSKkwS2TngMeU0Tmm/hCGc2MVD0+LJj 3wK/u//AjxUdpOjKtxQcdzNfMhbR1wq+ouu/VdtKt69Mz1brD9gIzW01Cxy6oe1G wE3lyc+ihczryjnizNKiO06LjR3QbnqyTpPnEKX2fkVV1hcWlcvY/XXJ/1kYGN49 8P1aCtz3f8aGPRapZgum3h0y1CgW1BTU7kU7Jhabzj6+ln4d6QNIV5YgVvC9fgrk WU/kFS26OFY3dLkK/PfNAH+Hce9WT3mFJTc7xZZqadbjhv0SZa7B0+uxLT5YTI2d +FdbDw== -----END CERTIFICATE-----Generated at Tue Sep 17 06:07:28 2024 by rpki-client on console-fra.rpki-client.org