$ rpki-client -vvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/21E1440A1E7711EFB69BE070C4F9AE02.roa File: 21E1440A1E7711EFB69BE070C4F9AE02.roa (raw, json) Hash identifier: 1CGn0bRl6SYprd3mKyUCCF319GY/fNXyjXxR5AOcfg0= Subject key identifier: C7:1B:E7:22:DC:C6:50:A8:16:1E:EE:37:77:91:F2:F7:50:65:BA:64 Certificate issuer: /CN=A917357E/serialNumber=8352A734E82144F322C50B728A4F765A33D72256 Certificate serial: 0168 Authority key identifier: 83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/21E1440A1E7711EFB69BE070C4F9AE02.roa Signing time: Thu 30 May 2024 11:25:06 +0000 ROA not before: Thu 30 May 2024 11:25:06 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 152605 IP address blocks: 103.151.46.0/23 maxlen: 24 2400:3fa0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.crl rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Jul 2024 01:48:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917357E/serialNumber=8352A734E82144F322C50B728A4F765A33D72256 Validity Not Before: May 30 11:25:06 2024 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=66586212-4e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fc:a8:0e:5d:5d:5c:fa:13:3a:c7:c3:d5:3e: 6b:df:75:dc:b1:99:66:6a:f0:fe:7e:40:3e:aa:ec: 8e:03:08:21:7a:f2:80:01:74:56:eb:d3:2a:86:0e: 85:59:d6:c9:42:6b:d9:1c:d8:27:81:6f:9c:23:3f: 32:7d:9b:0b:fb:47:58:0f:9f:c4:01:01:5c:83:3b: a3:80:dc:9b:de:92:c2:84:fd:bf:b9:cc:67:ee:8c: d9:83:7d:ea:68:c7:58:7c:a7:09:6d:be:78:b4:e2: 6a:aa:42:f4:b9:ee:2d:36:f8:ed:62:7a:23:c6:fb: af:f1:dd:92:53:d7:a7:6f:3d:70:cc:e6:7e:5e:f3: 42:62:c4:bb:2b:4c:ce:36:a7:c9:78:ff:fd:94:b9: a3:3e:b2:4f:69:fb:42:42:57:f3:3b:42:1d:99:04: 66:ef:2b:d2:55:14:89:17:71:5b:83:98:95:77:53: bf:1a:19:d6:50:e6:ee:dd:59:f4:2a:aa:66:1c:8b: 10:91:b3:0b:2b:fb:48:41:15:76:8d:fa:4b:43:11: c0:6d:9b:cd:ca:1a:83:b6:55:54:70:a4:b2:d7:9f: d5:f7:30:71:91:42:6c:25:16:6e:a8:87:13:a3:dd: 04:04:3f:fc:43:23:4a:c6:74:39:b4:5b:e3:34:f8: 79:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:1B:E7:22:DC:C6:50:A8:16:1E:EE:37:77:91:F2:F7:50:65:BA:64 X509v3 Authority Key Identifier: keyid:83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/21E1440A1E7711EFB69BE070C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.46.0/23 IPv6: 2400:3fa0::/32 Signature Algorithm: sha256WithRSAEncryption 5c:88:50:90:b8:e2:59:dc:18:1a:7f:29:0d:5a:16:d5:ab:c6: 90:bd:62:e7:34:fd:6e:ce:e2:98:4d:90:a7:3e:9b:cf:5b:d5: 1d:5d:3d:98:29:fc:d4:31:c2:9b:a4:ae:ea:dc:1c:4e:de:41: 1b:37:5e:20:53:73:27:28:7f:46:6e:f6:4f:03:74:55:21:84: cb:3f:4f:b4:34:da:80:98:b9:f5:4c:63:f6:a2:31:02:c8:a5: 39:67:ae:0b:b0:06:6a:08:f3:f8:6f:9c:dd:29:6b:1a:53:33: 5d:fb:6c:b4:b4:09:c3:eb:f9:e9:ca:af:54:67:9d:b1:58:ea: 51:31:a3:bf:f1:1f:d2:da:35:99:f9:99:d9:e7:87:2e:b0:5d: 3b:f5:35:ff:e3:27:6c:e2:70:2d:65:86:af:20:22:af:c6:a7: 95:b5:ae:2b:37:2c:8f:41:8e:ee:16:db:dc:a4:47:5c:43:ef: 81:15:d3:22:da:1d:99:ac:79:e5:f9:39:82:ce:92:4f:88:4c: 98:f8:9c:76:5c:33:fe:cd:17:30:97:0f:d5:f6:4f:07:42:8b: c3:94:7f:50:00:dc:34:3a:d9:d3:e6:14:fb:a4:36:ba:05:3b: 05:30:17:87:10:ba:69:04:69:71:01:96:36:c7:7e:6d:1f:93: 4b:2e:a3:91 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM1N0UxMTAvBgNVBAUTKDgzNTJBNzM0RTgyMTQ0RjMyMkM1MEI3MjhBNEY3NjVB MzNENzIyNTYwHhcNMjQwNTMwMTEyNTA2WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU4NjIxMi00ZTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPyoDl1dXPoTOsfD1T5r33XcsZlmavD+fkA+quyOAwghevKAAXRW69Mqhg6F WdbJQmvZHNgngW+cIz8yfZsL+0dYD5/EAQFcgzujgNyb3pLChP2/ucxn7ozZg33q aMdYfKcJbb54tOJqqkL0ue4tNvjtYnojxvuv8d2SU9enbz1wzOZ+XvNCYsS7K0zO NqfJeP/9lLmjPrJPaftCQlfzO0IdmQRm7yvSVRSJF3Fbg5iVd1O/GhnWUObu3Vn0 KqpmHIsQkbMLK/tIQRV2jfpLQxHAbZvNyhqDtlVUcKSy15/V9zBxkUJsJRZuqIcT o90EBD/8QyNKxnQ5tFvjNPh5twIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFMcb5yLc xlCoFh7uN3eR8vdQZbpkMB8GA1UdIwQYMBaAFINSpzToIUTzIsULcopPdloz1yJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzU3RS82MDJENzZEODVE NzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9nMUtuTk9naFJQTWl4UXR5aWs5MldqUFhJ bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cxS25OT2doUlBNaXhRdHlpazkyV2pQWElsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzM1N0UvNjAyRDc2RDg1RDczMTFFQ0EzMjQ4ODUzQzRGOUFFMDIvMjFFMTQ0MEEx RTc3MTFFRkI2OUJFMDcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnly4wDQQCAAIwBwMFACQAP6AwDQYJKoZIhvcNAQELBQAD ggEBAFyIUJC44lncGBp/KQ1aFtWrxpC9Yuc0/W7O4phNkKc+m89b1R1dPZgp/NQx wpukrurcHE7eQRs3XiBTcycof0Zu9k8DdFUhhMs/T7Q02oCYufVMY/aiMQLIpTln rguwBmoI8/hvnN0paxpTM137bLS0CcPr+enKr1RnnbFY6lExo7/xH9LaNZn5mdnn hy6wXTv1Nf/jJ2zicC1lhq8gIq/Gp5W1ris3LI9Bju4W29ykR1xD74EV0yLaHZms eeX5OYLOkk+ITJj4nHZcM/7NFzCXD9X2TwdCi8OUf1AA3DQ62dPmFPukNroFOwUw F4cQumkEaXEBljbHfm0fk0suo5E= -----END CERTIFICATE-----Generated at Tue Jun 25 04:13:30 2024 by rpki-client on console-ams.rpki-client.org