$ rpki-client -vvf rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/A46E4EAC205911EAAB6ECF1FC4F9AE02.roa File: A46E4EAC205911EAAB6ECF1FC4F9AE02.roa (raw, json) Hash identifier: w3YKqghHb1h7kbYmw/tNdN2OCnl/DQNVargpyltOq60= Subject key identifier: 92:5F:4E:AF:4B:A3:2D:5A:DF:B9:7E:B7:A7:CF:71:B1:CB:5C:77:38 Certificate issuer: /CN=A917F224/serialNumber=BB65E34F4FDEA92B59A32547A338208A60891E09 Certificate serial: 0ACF Authority key identifier: BB:65:E3:4F:4F:DE:A9:2B:59:A3:25:47:A3:38:20:8A:60:89:1E:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/A46E4EAC205911EAAB6ECF1FC4F9AE02.roa Signing time: Mon 12 Feb 2024 19:57:44 +0000 ROA not before: Mon 12 Feb 2024 19:57:44 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 136400 IP address blocks: 103.86.124.0/24 maxlen: 24 103.86.125.0/24 maxlen: 24 103.86.126.0/24 maxlen: 24 103.86.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.crl rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2767 (0xacf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F224/serialNumber=BB65E34F4FDEA92B59A32547A338208A60891E09 Validity Not Before: Feb 12 19:57:44 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65ca7838-7a89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:10:55:96:f5:66:87:db:9c:fe:58:b6:d1:cf: 24:2d:ce:1f:a8:13:89:e4:7d:d7:63:5d:70:6c:55: d4:38:13:3b:4a:a4:a8:32:d1:3c:69:1e:b5:4f:6d: e8:dc:1e:d3:e4:46:d2:2c:16:57:f4:e3:4e:87:f5: 54:b4:8a:03:02:b2:19:ea:8e:70:cf:51:71:a8:6f: 56:a8:26:1a:ab:89:ba:e1:30:63:f0:25:9b:db:04: 18:9d:86:42:7e:7a:7d:de:59:35:cd:7b:63:ca:e3: 53:67:3b:d6:f6:89:fe:dd:39:f3:70:68:55:a1:c9: 0b:e9:6d:96:0d:2d:23:a6:a4:43:35:0d:56:41:26: b4:a9:4a:76:66:4b:13:1a:8f:cc:f5:d3:4e:81:eb: 23:b3:f2:48:d7:f0:d8:e3:7a:36:70:19:bb:eb:8d: 7a:03:fb:e1:79:09:1a:41:5d:f0:90:9c:16:88:1b: 9d:e9:d5:e5:bb:41:6f:3c:06:45:27:7e:b8:79:61: 36:7e:4f:f1:8a:4b:da:42:f4:e2:c6:04:45:12:59: 42:ab:56:10:f1:2d:86:3e:bb:d4:cf:7c:b2:7c:a5: 21:d0:a6:d5:fe:2d:c3:c1:86:e1:85:ab:a4:b3:6e: 78:cc:82:12:6f:bc:d4:f6:77:cc:10:58:5c:6f:34: 5b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:5F:4E:AF:4B:A3:2D:5A:DF:B9:7E:B7:A7:CF:71:B1:CB:5C:77:38 X509v3 Authority Key Identifier: keyid:BB:65:E3:4F:4F:DE:A9:2B:59:A3:25:47:A3:38:20:8A:60:89:1E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/A46E4EAC205911EAAB6ECF1FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.86.124.0/22 Signature Algorithm: sha256WithRSAEncryption 45:94:df:7a:38:43:76:f1:a9:9c:a1:f5:bc:06:61:24:a4:ff: 42:4c:65:cc:9f:69:b1:3f:fe:61:37:2f:13:6c:43:62:aa:97: 52:9f:b7:8b:4e:e4:1a:c7:c0:06:19:52:e4:59:b4:48:31:f4: 27:26:fb:e5:67:fe:62:9e:a5:f7:30:d3:51:bd:e1:b9:88:b1: 34:08:e5:12:52:6e:2f:e2:b9:e4:a2:f7:00:0a:59:0f:df:20: 9a:1c:9f:7b:5f:14:70:63:ad:9b:1c:07:1c:56:9f:7b:a6:17: e3:f6:a6:3e:f9:4d:7e:c1:d5:60:f3:ff:c9:ee:88:d9:d6:e5: f5:90:5b:a5:75:c4:19:40:8e:f2:04:4a:7e:9c:0b:bb:53:01: 68:3b:b3:3f:9a:89:14:5b:e8:14:1f:be:92:ad:c1:2c:9d:3e: aa:0a:1e:b9:13:bf:6a:df:4c:11:45:ea:d5:4a:5b:61:86:7a: 2a:5b:f1:ae:a4:2c:01:69:96:34:1a:97:8f:1a:1b:03:f7:6d: be:a0:4d:71:3d:59:f3:fc:77:d6:5d:4f:f1:47:37:56:d9:4d: 2b:45:3b:46:25:e2:c7:4e:01:45:fa:0e:45:a5:81:f0:b4:3f: 35:46:dc:f5:04:c7:2a:0c:53:1d:8f:70:78:b2:fd:67:a7:d9: 61:cb:a8:b2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyMjQxMTAvBgNVBAUTKEJCNjVFMzRGNEZERUE5MkI1OUEzMjU0N0EzMzgyMDhB NjA4OTFFMDkwHhcNMjQwMjEyMTk1NzQ0WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NWNhNzgzOC03YTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9RBVlvVmh9uc/li20c8kLc4fqBOJ5H3XY11wbFXUOBM7SqSoMtE8aR61T23o 3B7T5EbSLBZX9ONOh/VUtIoDArIZ6o5wz1FxqG9WqCYaq4m64TBj8CWb2wQYnYZC fnp93lk1zXtjyuNTZzvW9on+3TnzcGhVockL6W2WDS0jpqRDNQ1WQSa0qUp2ZksT Go/M9dNOgesjs/JI1/DY43o2cBm76416A/vheQkaQV3wkJwWiBud6dXlu0FvPAZF J364eWE2fk/xikvaQvTixgRFEllCq1YQ8S2GPrvUz3yyfKUh0KbV/i3DwYbhhauk s254zIISb7zU9nfMEFhcbzRbCQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJJfTq9L oy1a37l+t6fPcbHLXHc4MB8GA1UdIwQYMBaAFLtl409P3qkrWaMlR6M4IIpgiR4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjIyNC82RTlCQTQxQTIw NTgxMUVBQjcxNzcyMUJDNEY5QUUwMi91MlhqVDBfZXFTdFpveVZIb3pnZ2ltQ0pI Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UyWGpUMF9lcVN0Wm95VkhvemdnaW1DSkhnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0YyMjQvNkU5QkE0MUEyMDU4MTFFQUI3MTc3MjFCQzRGOUFFMDIvQTQ2RTRFQUMy MDU5MTFFQUFCNkVDRjFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnVnwwDQYJKoZIhvcNAQELBQADggEBAEWU33o4Q3bxqZyh 9bwGYSSk/0JMZcyfabE//mE3LxNsQ2Kql1Kft4tO5BrHwAYZUuRZtEgx9Ccm++Vn /mKepfcw01G94bmIsTQI5RJSbi/iueSi9wAKWQ/fIJocn3tfFHBjrZscBxxWn3um F+P2pj75TX7B1WDz/8nuiNnW5fWQW6V1xBlAjvIESn6cC7tTAWg7sz+aiRRb6BQf vpKtwSydPqoKHrkTv2rfTBFF6tVKW2GGeipb8a6kLAFpljQal48aGwP3bb6gTXE9 WfP8d9ZdT/FHN1bZTStFO0Yl4sdOAUX6DkWlgfC0PzVG3PUExyoMUx2PcHiy/Wen 2WHLqLI= -----END CERTIFICATE-----Generated at Thu May 16 21:45:28 2024 by rpki-client on console-fra.rpki-client.org