$ rpki-client -vvf rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/2B06C42E490511EB9EF9E26EC4F9AE02.roa File: 2B06C42E490511EB9EF9E26EC4F9AE02.roa (raw, json) Hash identifier: Jx1XT/NDlIfU9t6IWQuH2SzV/+QiuFttvW41+UxOlNc= Subject key identifier: 3E:4A:5B:E0:62:7B:3E:0D:9D:B5:15:C6:06:B5:7E:C8:6B:34:2F:E9 Certificate issuer: /CN=A916A703/serialNumber=72A19F6BAFA6EEEE66DC3B1A6C67822E5330CF78 Certificate serial: 0634 Authority key identifier: 72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/2B06C42E490511EB9EF9E26EC4F9AE02.roa Signing time: Wed 15 May 2024 00:03:32 +0000 ROA not before: Wed 15 May 2024 00:03:32 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 139012 IP address blocks: 103.138.124.0/23 maxlen: 23 103.138.124.0/24 maxlen: 24 103.138.125.0/24 maxlen: 24 2404:cd40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.crl rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 23:49:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1588 (0x634) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A703/serialNumber=72A19F6BAFA6EEEE66DC3B1A6C67822E5330CF78 Validity Not Before: May 15 00:03:32 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6643fbd4-2c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:68:a0:d3:0a:fd:b3:9b:ee:7f:b1:f8:47:0a: 12:73:4a:f6:a2:f3:14:40:2e:ae:dc:84:4f:39:be: c0:31:4d:a9:54:cd:16:d0:da:2a:7e:c3:4b:e8:18: 1e:88:23:b3:c6:cc:5b:0e:2d:5d:09:77:6a:14:e6: 5f:dd:f4:cf:2f:c3:ec:4c:70:df:00:8f:78:25:97: 5c:f3:6b:d5:b4:13:80:08:6d:13:f4:38:5e:59:57: b4:a9:b5:f1:9a:03:78:20:eb:9f:cf:64:bc:ed:37: de:13:5f:37:c1:46:68:ff:87:22:29:40:7f:17:a1: 29:48:84:f1:5d:98:ca:ab:86:de:ae:de:77:6f:f6: 06:2b:1c:75:64:6e:29:26:e1:f4:f8:2f:3b:d4:c3: 8b:5c:b8:e7:c2:b2:70:1e:c5:80:65:87:22:87:95: cf:b2:f0:12:1d:86:0f:cd:50:1b:be:c2:97:c1:91: 06:27:18:45:56:e1:ac:e7:a7:bd:7d:43:e4:6c:1b: 61:a9:82:e0:b8:77:82:33:02:b1:83:5b:83:2c:58: 29:c6:31:6f:86:82:57:1c:3a:aa:91:c3:52:88:f5: f8:f9:82:24:77:d1:f1:6b:cd:6f:7f:0b:c4:b6:a0: 0d:50:88:84:72:2e:ee:76:78:e1:15:bb:65:f9:63: 38:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4A:5B:E0:62:7B:3E:0D:9D:B5:15:C6:06:B5:7E:C8:6B:34:2F:E9 X509v3 Authority Key Identifier: keyid:72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/2B06C42E490511EB9EF9E26EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.124.0/23 IPv6: 2404:cd40::/32 Signature Algorithm: sha256WithRSAEncryption 4f:c8:96:a7:e7:2e:c4:d3:ae:1a:e5:48:17:f1:93:e0:6e:27: 55:09:c7:2f:4f:7a:4d:b1:c0:d7:c1:25:a7:8a:4c:1b:9c:8a: a1:3c:1b:0f:46:8e:b3:e0:c3:c6:e0:f1:93:e1:43:85:e7:2c: b7:b6:52:e5:6c:35:89:f2:91:3a:1b:f5:ee:94:42:7e:2a:81: 8a:3f:85:b8:ab:40:8e:f8:e1:ca:c4:cc:2f:52:b6:70:18:21: f7:91:49:ab:98:c1:5a:8e:1e:45:d2:60:81:6a:28:8f:11:8a: 37:d6:fb:2b:d9:e3:9c:77:fa:87:0f:dd:4a:e1:4e:79:a0:d2: 96:65:99:0d:da:10:b6:3c:12:a7:f7:3a:5d:3c:ad:2c:57:9b: b0:ac:af:a7:36:53:6d:c9:80:dc:b1:4f:ee:22:dc:50:af:64: 68:40:66:c4:f9:ae:bd:a0:8c:d1:b7:27:6d:5d:c7:df:3f:de: 4e:a4:8e:89:42:30:ec:51:a4:5d:e8:44:0d:fd:f2:0d:87:ae: 53:69:65:e0:68:0c:12:bf:47:5b:10:b7:83:af:b9:6f:b7:43: 7f:d1:9d:10:fc:70:6f:e7:40:9a:de:5a:73:ec:7f:1d:00:f1: 08:b2:99:0c:ed:e5:ee:ca:e0:3d:d7:f9:6c:37:4a:da:a0:c0: c5:0d:f7:14 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE3MDMxMTAvBgNVBAUTKDcyQTE5RjZCQUZBNkVFRUU2NkRDM0IxQTZDNjc4MjJF NTMzMENGNzgwHhcNMjQwNTE1MDAwMzMyWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQzZmJkNC0yYzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Wig0wr9s5vuf7H4RwoSc0r2ovMUQC6u3IRPOb7AMU2pVM0W0NoqfsNL6Bge iCOzxsxbDi1dCXdqFOZf3fTPL8PsTHDfAI94JZdc82vVtBOACG0T9DheWVe0qbXx mgN4IOufz2S87TfeE183wUZo/4ciKUB/F6EpSITxXZjKq4bert53b/YGKxx1ZG4p JuH0+C871MOLXLjnwrJwHsWAZYcih5XPsvASHYYPzVAbvsKXwZEGJxhFVuGs56e9 fUPkbBthqYLguHeCMwKxg1uDLFgpxjFvhoJXHDqqkcNSiPX4+YIkd9Hxa81vfwvE tqANUIiEci7udnjhFbtl+WM4VQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFD5KW+Bi ez4NnbUVxga1fshrNC/pMB8GA1UdIwQYMBaAFHKhn2uvpu7uZtw7Gmxngi5TMM94 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTcwMy83QzgzQkRFQTQ5 MDMxMUVCODQ0N0IyNkJDNEY5QUUwMi9jcUdmYTYtbTd1NW0zRHNhYkdlQ0xsTXd6 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NxR2ZhNi1tN3U1bTNEc2FiR2VDTGxNd3ozZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkE3MDMvN0M4M0JERUE0OTAzMTFFQjg0NDdCMjZCQzRGOUFFMDIvMkIwNkM0MkU0 OTA1MTFFQjlFRjlFMjZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFninwwDQQCAAIwBwMFACQEzUAwDQYJKoZIhvcNAQELBQAD ggEBAE/IlqfnLsTTrhrlSBfxk+BuJ1UJxy9Pek2xwNfBJaeKTBuciqE8Gw9GjrPg w8bg8ZPhQ4XnLLe2UuVsNYnykTob9e6UQn4qgYo/hbirQI744crEzC9StnAYIfeR SauYwVqOHkXSYIFqKI8RijfW+yvZ45x3+ocP3UrhTnmg0pZlmQ3aELY8Eqf3Ol08 rSxXm7Csr6c2U23JgNyxT+4i3FCvZGhAZsT5rr2gjNG3J21dx98/3k6kjolCMOxR pF3oRA398g2HrlNpZeBoDBK/R1sQt4OvuW+3Q3/RnRD8cG/nQJreWnPsfx0A8Qiy mQzt5e7K4D3X+Ww3StqgwMUN9xQ= -----END CERTIFICATE-----Generated at Mon May 27 00:39:34 2024 by rpki-client on console-ams.rpki-client.org