$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/C40A344CD95011EEBD100C30C4F9AE02.roa File: C40A344CD95011EEBD100C30C4F9AE02.roa (raw, json) Hash identifier: 3frzZsCe2cSKeF4zvhR7l2dt+O/9DB/apzghXZSwN0o= Subject key identifier: D3:C6:40:AB:54:29:EB:98:5C:6F:BE:2A:91:F0:F2:40:8D:C1:09:8B Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Certificate serial: 090E Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/C40A344CD95011EEBD100C30C4F9AE02.roa Signing time: Sun 03 Mar 2024 11:26:51 +0000 ROA not before: Sun 03 Mar 2024 11:26:51 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 134995 IP address blocks: 103.204.223.0/24 maxlen: 24 2402:6640::/32 maxlen: 32 2402:6640:5::/48 maxlen: 48 2402:6640:10::/48 maxlen: 48 2402:6640:11::/48 maxlen: 48 2402:6640:17::/48 maxlen: 48 2402:6640:18::/48 maxlen: 48 2402:6640:19::/48 maxlen: 48 2402:6640:20::/48 maxlen: 48 2402:6640:21::/48 maxlen: 48 2402:6640:22::/48 maxlen: 48 2402:6640:23::/48 maxlen: 48 2402:6640:24::/48 maxlen: 48 2402:6640:25::/48 maxlen: 48 2402:6640:26::/48 maxlen: 48 2402:6640:30::/48 maxlen: 48 2402:6640:fce::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 18:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2318 (0x90e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Validity Not Before: Mar 3 11:26:51 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65e45e7a-72c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8f:fe:cb:32:85:9e:a2:f9:7c:ea:65:a5:c1: d5:85:e0:03:a6:e5:d5:84:86:fe:8e:bc:87:21:d1: 32:bb:3a:f7:c4:0a:ce:f2:4d:2a:25:27:58:1e:f6: 01:b7:f4:df:79:ae:02:b4:ab:e0:d6:aa:9a:ed:c3: e9:8c:90:4e:f3:b2:ff:4d:83:af:43:f8:4a:25:e6: be:1e:30:c1:d1:e0:df:61:d6:96:f9:cf:6a:98:0a: e5:73:22:bd:f7:e5:ff:bf:cf:8c:ba:00:65:30:53: 9a:d4:a1:b1:24:3b:76:a1:09:71:3b:4c:b4:58:9e: d6:b6:f6:9b:07:85:b3:45:2a:9c:72:ec:e0:30:4d: 53:aa:98:e5:d8:98:52:00:fc:be:cf:55:79:5a:13: 33:fb:f9:90:de:31:2e:2b:9e:1f:21:4b:02:97:d7: 54:a9:35:63:ed:f2:83:6e:b1:da:5a:f8:b8:c7:c4: d0:e2:e4:c7:59:84:59:65:01:55:f8:89:e5:dc:aa: 50:20:18:9c:70:8c:a0:ad:fd:2f:b4:e7:cd:3f:48: 05:5a:b9:3c:de:5c:83:88:80:73:2f:f2:40:19:4b: 9e:cd:fc:d3:eb:c3:b0:dc:b8:8a:43:d6:1f:7c:e3: f2:c3:29:d8:2d:d8:fb:04:5e:4f:f5:a0:f3:a1:9b: 0c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C6:40:AB:54:29:EB:98:5C:6F:BE:2A:91:F0:F2:40:8D:C1:09:8B X509v3 Authority Key Identifier: keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/C40A344CD95011EEBD100C30C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.204.223.0/24 IPv6: 2402:6640::/32 Signature Algorithm: sha256WithRSAEncryption 79:52:50:3b:c0:ac:7a:e7:6a:fa:7e:28:ff:aa:1e:b3:46:1a: aa:22:33:a9:26:01:23:41:4f:4d:f5:50:c7:8c:dc:a0:b4:2f: a0:61:1e:46:0e:74:e4:18:4d:e7:b6:c4:c1:f0:d3:5a:f3:79: 13:59:94:62:de:03:cc:8c:74:53:25:e5:d0:d0:4b:19:19:48: 90:6a:d5:61:1d:ff:54:ed:f2:f0:29:b9:3b:e9:55:f4:f2:06: f6:b6:96:e0:9c:0c:5a:4b:b9:49:2c:a3:7f:57:8b:be:6e:1e: aa:f8:19:a2:36:a8:86:9d:73:64:b4:96:fe:7d:e2:f1:31:73: 14:b9:b6:d3:77:91:c4:98:fe:68:79:3d:6b:f4:bc:d3:9e:2b: 60:d9:31:8d:4d:a9:91:4e:b0:8e:98:84:af:0c:c9:c9:48:a8: 14:f1:d0:bc:fc:68:1c:56:d9:e9:26:e0:4f:51:28:74:16:3c: 8b:d1:b3:4a:1c:53:d1:41:b9:30:6c:56:34:dd:d0:32:22:e0: b6:be:32:9a:97:d4:86:57:ee:1e:76:f4:10:6b:ae:59:3d:64: ca:42:bb:9f:c8:53:8b:82:64:5a:26:9f:62:66:7a:04:49:e5: 2b:9b:f7:8c:45:b5:1c:c5:6d:37:35:fb:40:59:1c:a2:82:a7: b7:0a:ad:4e -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGMEMxMTAvBgNVBAUTKDRFNjE0MkJENjFCM0VCNTg5N0NFMDFFOEQ0NTcxMURB NTBEQ0Y1NjUwHhcNMjQwMzAzMTEyNjUxWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWU0NWU3YS03MmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqY/+yzKFnqL5fOplpcHVheADpuXVhIb+jryHIdEyuzr3xArO8k0qJSdYHvYB t/Tfea4CtKvg1qqa7cPpjJBO87L/TYOvQ/hKJea+HjDB0eDfYdaW+c9qmArlcyK9 9+X/v8+MugBlMFOa1KGxJDt2oQlxO0y0WJ7WtvabB4WzRSqccuzgME1Tqpjl2JhS APy+z1V5WhMz+/mQ3jEuK54fIUsCl9dUqTVj7fKDbrHaWvi4x8TQ4uTHWYRZZQFV +Inl3KpQIBiccIygrf0vtOfNP0gFWrk83lyDiIBzL/JAGUuezfzT68Ow3LiKQ9Yf fOPywynYLdj7BF5P9aDzoZsMDwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFNPGQKtU KeuYXG++KpHw8kCNwQmLMB8GA1UdIwQYMBaAFE5hQr1hs+tYl84B6NRXEdpQ3PVl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0YwQy8wQTU4QTE5QTcw QUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYxaVh6Z0hvMUZjUjJsRGM5 V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtRkN2V0d6NjFpWHpnSG8xRmNSMmxEYzlXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjdGMEMvMEE1OEExOUE3MEFCMTFFOTgzMTdBNTdCQzRGOUFFMDIvQzQwQTM0NENE OTUwMTFFRUJEMTAwQzMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBABnzN8wDQQCAAIwBwMFACQCZkAwDQYJKoZIhvcNAQELBQAD ggEBAHlSUDvArHrnavp+KP+qHrNGGqoiM6kmASNBT031UMeM3KC0L6BhHkYOdOQY Tee2xMHw01rzeRNZlGLeA8yMdFMl5dDQSxkZSJBq1WEd/1Tt8vApuTvpVfTyBva2 luCcDFpLuUkso39Xi75uHqr4GaI2qIadc2S0lv594vExcxS5ttN3kcSY/mh5PWv0 vNOeK2DZMY1NqZFOsI6YhK8MyclIqBTx0Lz8aBxW2ekm4E9RKHQWPIvRs0ocU9FB uTBsVjTd0DIi4La+MpqX1IZX7h529BBrrlk9ZMpCu5/IU4uCZFomn2JmegRJ5Sub 94xFtRzFbTc1+0BZHKKCp7cKrU4= -----END CERTIFICATE-----Generated at Sun May 26 19:58:53 2024 by rpki-client on console-fra.rpki-client.org