$ rpki-client -vvf rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/674743FCB5E411EDA143B259C4F9AE02.roa File: 674743FCB5E411EDA143B259C4F9AE02.roa (raw, json) Hash identifier: 99SzWTchwz/heq5hSs3tXaMqMVZV43TqEvRt9UZciB0= Subject key identifier: 21:4F:EE:20:C6:89:45:FC:3D:6C:2C:0D:5F:11:0A:76:59:DD:44:BE Certificate issuer: /CN=A917A608/serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7 Certificate serial: 0BBD Authority key identifier: 21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/674743FCB5E411EDA143B259C4F9AE02.roa Signing time: Tue 30 Apr 2024 19:58:09 +0000 ROA not before: Tue 30 Apr 2024 19:58:09 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 138954 IP address blocks: 103.137.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.crl rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 19:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3005 (0xbbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A608/serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7 Validity Not Before: Apr 30 19:58:09 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66314d51-c46e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7d:96:3b:5e:12:16:98:ac:14:de:c4:f1:b9: e4:e2:c1:5c:9c:1c:36:1e:67:51:d0:be:01:e6:46: c4:d7:83:74:28:89:9f:4b:14:3a:5b:fa:66:a7:68: d3:67:4a:10:a2:af:7a:a3:c2:d3:da:ee:61:69:af: 47:21:ff:e9:7b:6c:fd:fe:dd:43:87:fe:83:7f:71: 4b:0d:87:f8:fc:28:10:66:96:2e:d7:62:a2:e7:ea: 79:6f:5f:ff:a9:d7:a8:79:8e:23:ac:48:3f:b3:36: 9e:d5:b4:8b:e2:3e:df:76:42:2d:ba:1b:2f:d7:98: 68:c8:d3:88:9b:5d:5f:d6:4b:27:b5:79:89:c2:5e: 4a:36:6c:7c:a4:5c:a0:41:7e:d6:27:82:1d:97:53: 3a:cd:96:e3:b1:e3:5b:d8:fb:d6:9d:d0:c2:3a:61: 60:a1:10:5c:98:cf:69:4e:1f:bc:18:56:85:90:22: a6:a4:60:ed:d4:02:48:97:13:f8:2d:bf:2f:27:d0: ad:1a:7c:0f:e2:0e:69:f3:4e:e1:ee:aa:bf:1d:2a: 82:9a:cb:5f:be:0a:21:f4:12:ad:27:d6:5f:bc:5b: 09:21:f4:50:bc:a4:19:cc:cd:f2:83:1b:ab:77:2a: 44:e0:ad:24:da:40:c4:dc:b7:fc:7a:ab:1c:35:ac: 79:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4F:EE:20:C6:89:45:FC:3D:6C:2C:0D:5F:11:0A:76:59:DD:44:BE X509v3 Authority Key Identifier: keyid:21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/674743FCB5E411EDA143B259C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.137.162.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:af:cf:04:69:be:07:1a:62:0a:2f:23:8e:f9:01:53:e7:25: 02:3f:36:94:2e:75:de:16:01:26:b8:d7:c7:7d:8c:9b:68:41: 5b:26:1c:4f:ac:d7:a6:89:a8:80:ad:84:4a:f2:19:37:0f:d8: 99:b8:4d:37:af:dd:4d:51:ea:b4:4f:93:2b:69:93:b7:d9:fa: 7d:67:3b:0c:1e:f0:9d:a1:f2:1b:ba:01:e6:35:06:ff:f3:ea: 5e:c5:1f:a1:8a:bf:92:e8:23:85:23:d9:f6:06:b9:ec:cf:99: fe:7d:3f:0a:d6:1f:5d:c7:68:63:db:0f:99:b2:d8:6b:3b:5f: 62:da:b6:f9:c7:bf:aa:14:73:d2:4e:dc:34:f5:aa:ec:53:90: 90:37:86:d5:9a:b6:96:9b:22:84:18:d8:10:c4:15:93:82:44: 73:e8:5c:b7:43:b9:03:46:8b:79:25:12:c8:a8:95:b9:c3:93: 49:99:1a:c9:55:91:72:0e:e4:d4:e9:1f:26:1a:65:61:54:8e: 53:f6:75:af:b5:b0:1b:80:14:d7:25:8b:42:7d:c2:f5:fd:55: 90:93:73:07:85:09:5b:a1:b8:e4:1b:a8:d3:d7:35:45:dc:91: b7:8d:55:e1:f4:2c:46:40:c0:3e:c9:22:b1:70:3f:04:65:a3: a9:6c:06:36 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2MDgxMTAvBgNVBAUTKDIxMUM1NTBCNTNFQjIwNDc1MTg1QkFCQ0RFN0U3MERG Njc0NDQ4QjcwHhcNMjQwNDMwMTk1ODA5WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMxNGQ1MS1jNDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr32WO14SFpisFN7E8bnk4sFcnBw2HmdR0L4B5kbE14N0KImfSxQ6W/pmp2jT Z0oQoq96o8LT2u5haa9HIf/pe2z9/t1Dh/6Df3FLDYf4/CgQZpYu12Ki5+p5b1// qdeoeY4jrEg/szae1bSL4j7fdkItuhsv15hoyNOIm11f1ksntXmJwl5KNmx8pFyg QX7WJ4Idl1M6zZbjseNb2PvWndDCOmFgoRBcmM9pTh+8GFaFkCKmpGDt1AJIlxP4 Lb8vJ9CtGnwP4g5p807h7qq/HSqCmstfvgoh9BKtJ9ZfvFsJIfRQvKQZzM3ygxur dypE4K0k2kDE3Lf8eqscNax5GQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCFP7iDG iUX8PWwsDV8RCnZZ3US+MB8GA1UdIwQYMBaAFCEcVQtT6yBHUYW6vN5+cN9nREi3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTYwOC83NDgwRkM4ODAy RTcxMUVBQjA0NTA0MThDNEY5QUUwMi9JUnhWQzFQcklFZFJoYnE4M241dzMyZEVT TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lSeFZDMVBySUVkUmhicTgzbjV3MzJkRVNMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E2MDgvNzQ4MEZDODgwMkU3MTFFQUIwNDUwNDE4QzRGOUFFMDIvNjc0NzQzRkNC NUU0MTFFREExNDNCMjU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABniaIwDQYJKoZIhvcNAQELBQADggEBAF6vzwRpvgcaYgov I475AVPnJQI/NpQudd4WASa418d9jJtoQVsmHE+s16aJqICthEryGTcP2Jm4TTev 3U1R6rRPkytpk7fZ+n1nOwwe8J2h8hu6AeY1Bv/z6l7FH6GKv5LoI4Uj2fYGuezP mf59PwrWH13HaGPbD5my2Gs7X2LatvnHv6oUc9JO3DT1quxTkJA3htWatpabIoQY 2BDEFZOCRHPoXLdDuQNGi3klEsiolbnDk0mZGslVkXIO5NTpHyYaZWFUjlP2da+1 sBuAFNcli0J9wvX9VZCTcweFCVuhuOQbqNPXNUXckbeNVeH0LEZAwD7JIrFwPwRl o6lsBjY= -----END CERTIFICATE-----Generated at Thu May 16 21:45:28 2024 by rpki-client on console-fra.rpki-client.org