$ rpki-client -vvf rpki.apnic.net/member_repository/A917B6E8/D8E0DD3E01DA11EDA2AE1545C4F9AE02/4BE3F42AD78511EEA090E379C4F9AE02.roa File: 4BE3F42AD78511EEA090E379C4F9AE02.roa (raw, json) Hash identifier: imEV3Spjp+MTHUrUnASghoK4PxCSAmWp5fKa0+YXT/E= Subject key identifier: 5A:A7:0B:D5:23:28:8E:52:7F:F1:07:57:6D:33:C9:3A:79:5C:9B:78 Certificate issuer: /CN=A917B6E8/serialNumber=D239928966D8984EA2FA453FC53F9886B5ADCB95 Certificate serial: 01D9 Authority key identifier: D2:39:92:89:66:D8:98:4E:A2:FA:45:3F:C5:3F:98:86:B5:AD:CB:95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jmSiWbYmE6i-kU_xT-YhrWty5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B6E8/D8E0DD3E01DA11EDA2AE1545C4F9AE02/4BE3F42AD78511EEA090E379C4F9AE02.roa Signing time: Wed 01 May 2024 05:07:17 +0000 ROA not before: Wed 01 May 2024 05:07:17 +0000 ROA not after: Thu 29 Aug 2024 00:00:00 +0000 asID: 17483 IP address blocks: 103.226.230.0/24 maxlen: 24 103.226.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B6E8/D8E0DD3E01DA11EDA2AE1545C4F9AE02/0jmSiWbYmE6i-kU_xT-YhrWty5U.crl rsync://rpki.apnic.net/member_repository/A917B6E8/D8E0DD3E01DA11EDA2AE1545C4F9AE02/0jmSiWbYmE6i-kU_xT-YhrWty5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jmSiWbYmE6i-kU_xT-YhrWty5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B6E8/serialNumber=D239928966D8984EA2FA453FC53F9886B5ADCB95 Validity Not Before: May 1 05:07:17 2024 GMT Not After : Aug 29 00:00:00 2024 GMT Subject: CN=6631ce04-6e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cc:6a:ff:26:04:13:05:f9:c9:b1:a9:a4:5a: e6:49:33:ed:59:39:da:8f:62:14:96:99:18:6e:de: a4:6a:3b:58:dd:76:70:53:c8:16:00:ee:57:2f:de: 6f:e4:8f:4b:34:e3:c9:f5:ff:95:b9:69:95:b7:64: c1:79:f4:a3:04:76:46:c8:9f:5f:b2:4e:18:68:65: 88:a2:48:b9:7c:f8:0e:18:b2:c4:6a:0d:01:3a:13: fb:51:29:db:61:15:6d:6a:af:79:cb:37:3f:63:88: a4:0e:fd:e1:af:2e:c1:5c:86:b7:e2:b7:99:72:fa: 61:da:a9:2b:17:61:3e:c4:50:ee:ad:03:a7:8a:fa: c7:e5:96:f8:3b:f0:de:28:a3:a7:ee:2a:5e:4f:39: 4f:70:78:e3:c4:3b:d8:03:6b:78:d7:78:5c:06:36: 9d:fb:b7:7d:b4:99:e8:fd:76:8e:ba:c0:d9:56:09: 47:a3:80:fc:1e:da:26:a0:d8:42:3e:97:59:3e:96: 1e:9c:d4:51:1b:a8:fe:c8:3b:a8:77:5a:86:93:6a: d1:8f:75:e7:ff:66:d3:99:52:53:88:22:84:99:18: f5:92:e9:17:32:f9:9d:2a:fd:7a:9a:9b:21:5a:38: 99:aa:bf:86:b9:0f:be:69:e4:1a:cd:49:c2:23:b2: a5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A7:0B:D5:23:28:8E:52:7F:F1:07:57:6D:33:C9:3A:79:5C:9B:78 X509v3 Authority Key Identifier: keyid:D2:39:92:89:66:D8:98:4E:A2:FA:45:3F:C5:3F:98:86:B5:AD:CB:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B6E8/D8E0DD3E01DA11EDA2AE1545C4F9AE02/0jmSiWbYmE6i-kU_xT-YhrWty5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jmSiWbYmE6i-kU_xT-YhrWty5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B6E8/D8E0DD3E01DA11EDA2AE1545C4F9AE02/4BE3F42AD78511EEA090E379C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.226.230.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:3d:44:e7:86:dc:c2:f2:3a:25:7a:19:06:2e:57:c8:be:98: d0:fb:e2:be:dc:ac:4a:9c:3e:7f:13:76:be:80:60:7b:b0:dd: 8c:8c:28:44:06:d0:ca:f1:f1:86:f8:2c:d8:02:0d:c1:8e:04: 23:2f:3b:4b:d8:89:84:55:37:15:75:72:64:2a:47:61:33:5a: 6a:76:94:13:02:30:d5:8d:7a:21:07:0a:33:27:15:5c:b8:1f: 3b:84:f1:e9:e7:45:37:42:2b:15:f8:63:ff:5a:8b:a2:b3:24: 52:aa:a7:76:cf:b7:3c:1c:40:23:bf:fe:4e:c1:1d:c0:d2:e8: dc:4e:71:c6:db:42:06:23:dd:50:85:8d:61:02:7b:9b:3d:4a: bd:f2:74:39:3a:6e:dc:53:85:4f:5b:87:24:0b:94:04:99:0c: c7:11:1e:af:c7:ce:31:1b:9f:0c:1b:84:62:7d:48:0f:91:80: 2a:73:be:ad:4f:21:bf:dd:07:82:8c:eb:26:ac:e5:fd:7b:54: 9a:71:bf:b0:03:e6:00:21:f9:78:87:31:27:b8:86:52:f9:84: 00:4c:db:fe:bd:77:63:bf:11:bb:e8:37:95:e3:47:63:a9:cb: 05:1b:29:ff:f6:3b:d6:fa:c6:3b:c9:51:fa:fc:c5:9e:6f:15: d4:d4:7c:cb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I2RTgxMTAvBgNVBAUTKEQyMzk5Mjg5NjZEODk4NEVBMkZBNDUzRkM1M0Y5ODg2 QjVBRENCOTUwHhcNMjQwNTAxMDUwNzE3WhcNMjQwODI5MDAwMDAwWjAYMRYwFAYD VQQDEw02NjMxY2UwNC02ZTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsxq/yYEEwX5ybGppFrmSTPtWTnaj2IUlpkYbt6kajtY3XZwU8gWAO5XL95v 5I9LNOPJ9f+VuWmVt2TBefSjBHZGyJ9fsk4YaGWIoki5fPgOGLLEag0BOhP7USnb YRVtaq95yzc/Y4ikDv3hry7BXIa34reZcvph2qkrF2E+xFDurQOnivrH5Zb4O/De KKOn7ipeTzlPcHjjxDvYA2t413hcBjad+7d9tJno/XaOusDZVglHo4D8HtomoNhC PpdZPpYenNRRG6j+yDuod1qGk2rRj3Xn/2bTmVJTiCKEmRj1kukXMvmdKv16mpsh WjiZqr+GuQ++aeQazUnCI7KlKQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFqnC9Uj KI5Sf/EHV20zyTp5XJt4MB8GA1UdIwQYMBaAFNI5kolm2JhOovpFP8U/mIa1rcuV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjZFOC9EOEUwREQzRTAx REExMUVEQTJBRTE1NDVDNEY5QUUwMi8wam1TaVdiWW1FNmkta1VfeFQtWWhyV3R5 NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBqbVNpV2JZbUU2aS1rVV94VC1ZaHJXdHk1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0I2RTgvRDhFMEREM0UwMURBMTFFREEyQUUxNTQ1QzRGOUFFMDIvNEJFM0Y0MkFE Nzg1MTFFRUEwOTBFMzc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn4uYwDQYJKoZIhvcNAQELBQADggEBAA89ROeG3MLyOiV6 GQYuV8i+mND74r7crEqcPn8Tdr6AYHuw3YyMKEQG0Mrx8Yb4LNgCDcGOBCMvO0vY iYRVNxV1cmQqR2EzWmp2lBMCMNWNeiEHCjMnFVy4HzuE8ennRTdCKxX4Y/9ai6Kz JFKqp3bPtzwcQCO//k7BHcDS6NxOccbbQgYj3VCFjWECe5s9Sr3ydDk6btxThU9b hyQLlASZDMcRHq/HzjEbnwwbhGJ9SA+RgCpzvq1PIb/dB4KM6yas5f17VJpxv7AD 5gAh+XiHMSe4hlL5hABM2/69d2O/EbvoN5XjR2OpywUbKf/2O9b6xjvJUfr8xZ5v FdTUfMs= -----END CERTIFICATE-----Generated at Wed May 15 05:22:35 2024 by rpki-client on console-fra.rpki-client.org