$ rpki-client -vvf rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/41C460BE1BE911ED81DB667EC4F9AE02.roa File: 41C460BE1BE911ED81DB667EC4F9AE02.roa (raw, json) Hash identifier: /Qco0nziFzpExGqN+EyfPbk9Kt6i6YYpujtFQ0tbQpc= Subject key identifier: 94:08:E3:23:63:5F:6C:DD:E3:05:2C:09:E7:99:1B:EC:F9:D2:08:CD Certificate issuer: /CN=A917414E/serialNumber=AF67132D837D576FFF777227A3725D601ED9105D Certificate serial: 018D Authority key identifier: AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/41C460BE1BE911ED81DB667EC4F9AE02.roa Signing time: Sat 29 Jul 2023 03:03:18 +0000 ROA not before: Sat 29 Jul 2023 03:03:18 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 137967 IP address blocks: 103.189.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917414E/serialNumber=AF67132D837D576FFF777227A3725D601ED9105D Validity Not Before: Jul 29 03:03:18 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64c48175-636d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:37:44:06:bc:b1:0f:db:61:02:c8:63:d9:73: 96:38:bf:c1:6e:0b:42:33:eb:76:1f:a4:89:a9:23: 5b:fb:7d:92:80:9f:c2:7b:86:79:70:a8:5c:ab:9c: 22:e9:86:75:3e:c4:37:a4:26:50:0e:05:46:a7:bf: 5c:d5:52:df:b7:89:6d:60:f6:07:fd:50:ad:d5:f6: 04:d4:d1:8b:8f:05:aa:b1:8a:38:f4:af:cd:c0:01: 1e:8b:92:b4:6c:99:e8:a5:cc:39:d5:73:02:a3:86: 59:80:60:b0:4e:3e:37:fe:3e:9a:09:5b:e1:b7:f1: 5a:0c:e1:90:58:8f:82:07:39:ff:d7:27:0e:f3:d7: 9c:41:31:07:22:df:26:b7:48:fb:e4:53:48:90:39: 56:3f:79:f5:81:87:a2:41:3f:9a:da:75:6f:ee:72: bb:29:ac:b6:9a:a7:58:1d:98:53:46:c7:2b:28:d9: 56:c0:4b:60:c8:11:70:73:e0:a5:f2:f0:cb:26:df: e1:73:c3:b5:80:28:da:13:85:7d:2b:37:cf:58:d4: a7:4e:e7:f0:bb:9c:6a:c1:a0:94:16:0a:39:7f:f6: 3c:65:d3:73:72:b2:2d:c5:8c:5b:76:69:45:32:3d: 44:a5:01:e2:bf:ca:0d:1c:7f:30:92:f8:2b:d8:d9: 1d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:08:E3:23:63:5F:6C:DD:E3:05:2C:09:E7:99:1B:EC:F9:D2:08:CD X509v3 Authority Key Identifier: keyid:AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/41C460BE1BE911ED81DB667EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.189.11.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:2d:4d:22:5d:3b:3c:7f:1e:8a:8e:cd:e3:ab:b2:61:4f:04: 15:1a:65:07:49:82:88:70:bf:50:59:e7:b0:e4:20:87:38:13: a9:90:90:33:35:92:06:f9:16:a0:cc:ca:ec:86:da:fc:53:17: 20:2f:09:aa:b2:4f:ac:8f:db:12:26:04:f4:b8:ab:e9:2d:b5: c3:05:40:13:92:a1:b1:d1:b2:70:9b:3f:b5:f5:51:ae:9c:12: b8:f6:92:48:a6:ee:f1:72:30:0d:29:e5:6f:3f:5f:d6:c5:09: 0d:eb:08:56:5d:f5:fc:2c:2e:70:f7:74:c0:b1:fc:a3:8e:c9: 70:a6:fc:81:b9:a6:67:e1:d4:56:9a:b2:ef:e2:79:e8:f2:71: 10:86:55:ba:63:5f:62:26:63:a6:fa:f7:34:13:38:c2:79:8c: 19:a4:1c:b7:72:e3:a1:4f:1e:84:fb:39:93:4b:3c:13:c9:cd: b4:49:5e:c1:76:a5:d6:be:a4:27:4e:66:7a:d7:46:02:22:ed: bf:84:24:af:a5:b2:f6:52:d5:3c:3e:f3:99:0a:9c:ee:db:19: 1f:89:ac:f2:41:df:45:40:00:b4:5f:cd:7e:3f:b5:33:99:3c: 4e:bb:ba:87:00:b7:33:a5:d5:46:24:41:3d:ac:d6:28:dc:57: ec:ae:5f:0a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQxNEUxMTAvBgNVBAUTKEFGNjcxMzJEODM3RDU3NkZGRjc3NzIyN0EzNzI1RDYw MUVEOTEwNUQwHhcNMjMwNzI5MDMwMzE4WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGM0ODE3NS02MzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAozdEBryxD9thAshj2XOWOL/BbgtCM+t2H6SJqSNb+32SgJ/Ce4Z5cKhcq5wi 6YZ1PsQ3pCZQDgVGp79c1VLft4ltYPYH/VCt1fYE1NGLjwWqsYo49K/NwAEei5K0 bJnopcw51XMCo4ZZgGCwTj43/j6aCVvht/FaDOGQWI+CBzn/1ycO89ecQTEHIt8m t0j75FNIkDlWP3n1gYeiQT+a2nVv7nK7Kay2mqdYHZhTRscrKNlWwEtgyBFwc+Cl 8vDLJt/hc8O1gCjaE4V9KzfPWNSnTufwu5xqwaCUFgo5f/Y8ZdNzcrItxYxbdmlF Mj1EpQHiv8oNHH8wkvgr2Nkd6QIDAQABo4IClTCCApEwHQYDVR0OBBYEFJQI4yNj X2zd4wUsCeeZG+z50gjNMB8GA1UdIwQYMBaAFK9nEy2DfVdv/3dyJ6NyXWAe2RBd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDE0RS80QzVFMkZCOEUz RkYxMUVDQUMyMTA1NzJDNEY5QUUwMi9yMmNUTFlOOVYyX19kM0lubzNKZFlCN1pF RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IyY1RMWU45VjJfX2QzSW5vM0pkWUI3WkVGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzQxNEUvNEM1RTJGQjhFM0ZGMTFFQ0FDMjEwNTcyQzRGOUFFMDIvNDFDNDYwQkUx QkU5MTFFRDgxREI2NjdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnvQswDQYJKoZIhvcNAQELBQADggEBAGstTSJdOzx/HoqO zeOrsmFPBBUaZQdJgohwv1BZ57DkIIc4E6mQkDM1kgb5FqDMyuyG2vxTFyAvCaqy T6yP2xImBPS4q+kttcMFQBOSobHRsnCbP7X1Ua6cErj2kkim7vFyMA0p5W8/X9bF CQ3rCFZd9fwsLnD3dMCx/KOOyXCm/IG5pmfh1Faasu/ieejycRCGVbpjX2ImY6b6 9zQTOMJ5jBmkHLdy46FPHoT7OZNLPBPJzbRJXsF2pda+pCdOZnrXRgIi7b+EJK+l svZS1Tw+85kKnO7bGR+JrPJB30VAALRfzX4/tTOZPE67uocAtzOl1UYkQT2s1ijc V+yuXwo= -----END CERTIFICATE-----Generated at Sun May 19 04:56:55 2024 by rpki-client on console-fra.rpki-client.org