$ rpki-client -vvf rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/5DE13E6AAF1211EB8138312CC4F9AE02.roa File: 5DE13E6AAF1211EB8138312CC4F9AE02.roa (raw, json) Hash identifier: WJyfu5rloud4g1tWUexr17hivm8d1zYiub4ff246Cbo= Subject key identifier: 43:7D:A0:DF:62:E1:07:F2:CF:AC:02:5C:20:1D:11:D3:5E:16:EB:8F Certificate issuer: /CN=A9179B50/serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22 Certificate serial: 04B3 Authority key identifier: 3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/5DE13E6AAF1211EB8138312CC4F9AE02.roa Signing time: Thu 03 Aug 2023 00:21:15 +0000 ROA not before: Thu 03 Aug 2023 00:21:15 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 138029 IP address blocks: 103.119.104.0/23 maxlen: 23 103.119.106.0/23 maxlen: 23 103.119.106.0/24 maxlen: 24 103.119.107.0/24 maxlen: 24 2403:4240::/32 maxlen: 32 2403:4240:a000::/36 maxlen: 36 2403:4240:b000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1203 (0x4b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179B50/serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22 Validity Not Before: Aug 3 00:21:15 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64caf2fb-4be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7f:d0:72:49:11:1e:f9:2f:ae:aa:a8:ff:06: f3:0d:f0:3c:f8:e5:22:1f:d0:22:53:4e:fa:2a:5b: ad:2c:8b:4f:eb:3b:2d:ad:fa:13:bd:32:1e:a3:1f: e3:a1:c3:cf:95:50:d9:1c:3c:60:d5:d8:aa:6c:af: 3b:8a:90:9d:83:dc:db:5b:2f:b1:ad:9b:ac:79:fc: 0d:8f:ae:2d:6d:63:45:88:09:2f:5a:a0:b4:08:7b: 84:e7:2d:dc:cd:03:4f:62:a9:f4:2d:e0:98:0e:19: 9e:d1:4c:65:08:09:70:de:f8:57:7f:d9:8e:c4:eb: 8a:85:cd:80:61:eb:0f:66:fb:a9:01:a5:e3:92:48: 05:c2:9c:52:66:f1:2f:23:37:ff:a0:44:7c:c0:ba: 50:6b:b0:48:ba:9b:af:8b:53:f3:4d:e2:6a:43:be: ef:f1:72:dd:a2:64:a8:3a:60:cc:2a:41:cf:a5:57: b9:2b:d7:17:6e:d0:23:df:e6:43:0f:9a:c7:55:d1: 3c:a8:a9:d9:3c:11:cc:a5:4e:70:71:30:70:8c:54: 94:53:9e:18:6f:15:4a:2d:4d:41:1c:67:87:fe:64: 1d:25:34:98:e0:84:4c:32:68:cb:56:56:4c:e8:81: 9d:a8:ab:7c:37:05:28:ef:50:2b:69:a1:e5:18:1a: 73:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:7D:A0:DF:62:E1:07:F2:CF:AC:02:5C:20:1D:11:D3:5E:16:EB:8F X509v3 Authority Key Identifier: keyid:3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/5DE13E6AAF1211EB8138312CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.119.104.0/22 IPv6: 2403:4240::/32 Signature Algorithm: sha256WithRSAEncryption 4c:5e:cf:23:4f:74:65:d7:a9:2e:c9:15:8f:36:64:6a:ba:13: 1b:aa:c8:fe:10:d4:1f:1f:4b:ab:e5:b9:78:64:e8:db:fe:43: 13:b3:f7:ee:1b:89:e4:0d:af:d9:33:fe:30:94:d8:10:aa:63: 88:d3:bc:5b:cc:65:23:b7:3c:74:f9:d1:49:75:06:4b:52:1c: 61:21:ca:78:fb:0a:96:34:4f:f5:e7:0d:8d:62:69:90:fe:2e: ce:0a:fc:1c:06:7f:6c:6b:7f:8e:04:d3:3e:79:ce:ec:1e:91: 0b:62:86:8d:ed:d2:67:0c:95:4c:35:5d:85:46:36:99:5f:ef: 4c:99:05:86:fd:bf:6c:d4:8f:88:c9:f3:98:69:7c:26:59:34: 61:2e:c2:8c:15:d6:20:07:30:79:09:ff:86:ec:af:21:9c:d5: 7c:70:5c:f3:98:cb:9e:6d:96:45:43:6d:d4:55:ae:8c:49:64: 26:31:99:9a:a1:bb:64:c2:81:1f:af:7e:b2:4d:ed:c9:13:56: 73:88:71:41:b0:11:27:da:f6:7b:e5:c8:74:b6:c9:03:2f:99: 50:74:37:45:7a:60:ec:6f:c0:ae:45:9c:fa:61:78:23:92:ff: 77:bc:02:f4:dc:5a:6f:23:09:42:fc:1a:b3:24:f7:51:35:42: c2:81:56:85 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlCNTAxMTAvBgNVBAUTKDNEQUZGRkJDN0U5MTJFOUZGQ0QyQTJFMEQ5MjA4RUJD OTk3MDlCMjIwHhcNMjMwODAzMDAyMTE1WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGNhZjJmYi00YmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyX/QckkRHvkvrqqo/wbzDfA8+OUiH9AiU076KlutLItP6zstrfoTvTIeox/j ocPPlVDZHDxg1diqbK87ipCdg9zbWy+xrZusefwNj64tbWNFiAkvWqC0CHuE5y3c zQNPYqn0LeCYDhme0UxlCAlw3vhXf9mOxOuKhc2AYesPZvupAaXjkkgFwpxSZvEv Izf/oER8wLpQa7BIupuvi1PzTeJqQ77v8XLdomSoOmDMKkHPpVe5K9cXbtAj3+ZD D5rHVdE8qKnZPBHMpU5wcTBwjFSUU54YbxVKLU1BHGeH/mQdJTSY4IRMMmjLVlZM 6IGdqKt8NwUo71AraaHlGBpzcQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFEN9oN9i 4Qfyz6wCXCAdEdNeFuuPMB8GA1UdIwQYMBaAFD2v/7x+kS6f/NKi4NkgjryZcJsi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUI1MC9DNkMwNDlCMkFF RkUxMUVCODA5MzI2M0VDNEY5QUUwMi9QYV9fdkg2UkxwXzgwcUxnMlNDT3ZKbHdt eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BhX192SDZSTHBfODBxTGcyU0NPdkpsd215SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzlCNTAvQzZDMDQ5QjJBRUZFMTFFQjgwOTMyNjNFQzRGOUFFMDIvNURFMTNFNkFB RjEyMTFFQjgxMzgzMTJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnd2gwDQQCAAIwBwMFACQDQkAwDQYJKoZIhvcNAQELBQAD ggEBAExezyNPdGXXqS7JFY82ZGq6ExuqyP4Q1B8fS6vluXhk6Nv+QxOz9+4bieQN r9kz/jCU2BCqY4jTvFvMZSO3PHT50Ul1BktSHGEhynj7CpY0T/XnDY1iaZD+Ls4K /BwGf2xrf44E0z55zuwekQtiho3t0mcMlUw1XYVGNplf70yZBYb9v2zUj4jJ85hp fCZZNGEuwowV1iAHMHkJ/4bsryGc1XxwXPOYy55tlkVDbdRVroxJZCYxmZqhu2TC gR+vfrJN7ckTVnOIcUGwESfa9nvlyHS2yQMvmVB0N0V6YOxvwK5FnPpheCOS/3e8 AvTcWm8jCUL8GrMk91E1QsKBVoU= -----END CERTIFICATE-----Generated at Fri May 17 01:47:18 2024 by rpki-client on console-fra.rpki-client.org