$ rpki-client -vvf rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/48E696FE9ED611ECAC3B1777C4F9AE02.roa File: 48E696FE9ED611ECAC3B1777C4F9AE02.roa (raw, json) Hash identifier: lcnwa99qC1/CfBKm/j9U4Xa9EJ5wsMYeaygJQi9rO/Y= Subject key identifier: 6B:23:6E:C4:77:37:9D:70:53:FB:B2:8E:8B:15:A9:A5:0D:7B:04:39 Certificate issuer: /CN=A918235E/serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6 Certificate serial: 022C Authority key identifier: AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/48E696FE9ED611ECAC3B1777C4F9AE02.roa Signing time: Mon 19 Jun 2023 04:01:52 +0000 ROA not before: Mon 19 Jun 2023 04:01:52 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 63984 IP address blocks: 103.57.151.0/24 maxlen: 24 103.68.104.0/24 maxlen: 24 103.204.82.0/23 maxlen: 23 103.204.82.0/24 maxlen: 24 103.204.83.0/24 maxlen: 24 2400:6120::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 556 (0x22c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918235E/serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6 Validity Not Before: Jun 19 04:01:52 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=648fd32f-97b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0c:79:90:6b:75:cc:60:c6:c6:10:8d:8a:20: a6:6d:91:b9:0f:6b:b5:35:37:1b:31:dc:bf:42:72: 20:f6:41:30:1b:4d:7b:a9:5d:7a:c6:01:f0:91:55: d6:ac:49:13:37:ed:12:f1:bb:1d:f1:c6:e4:c3:1f: 7d:8a:63:41:2f:c1:6a:fe:4d:1f:c3:19:69:ae:6d: 11:26:5e:8d:bd:05:16:20:2a:99:a0:ea:e7:1e:96: a3:15:bc:1d:a4:75:b8:dc:aa:77:aa:3e:f1:fc:41: d9:df:84:b9:36:c9:55:97:95:1a:90:3e:7d:d9:93: ca:ca:27:fe:9e:2a:18:36:e1:cb:43:11:a5:12:14: 04:9d:94:10:70:0a:fb:f6:bc:60:48:fd:2c:7a:2c: 03:c5:56:23:bf:8c:02:4d:14:4d:51:a0:b5:bc:6b: cf:fe:80:ac:49:9a:b5:b8:fa:a0:c7:a2:33:15:de: 10:f6:31:3c:d6:8a:52:82:c8:e9:9e:81:e2:3b:92: f0:87:95:1e:7d:9c:86:af:0e:ae:cd:88:e0:fd:45: cd:03:a8:7b:07:b3:18:d3:a9:83:ae:08:e5:48:c7: 3f:51:cb:d0:4d:42:7f:e5:f3:70:dd:d1:f7:62:09: 26:4f:60:65:a1:2d:57:4d:4b:72:59:8a:01:bb:c1: 19:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:23:6E:C4:77:37:9D:70:53:FB:B2:8E:8B:15:A9:A5:0D:7B:04:39 X509v3 Authority Key Identifier: keyid:AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/48E696FE9ED611ECAC3B1777C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.57.151.0/24 103.68.104.0/24 103.204.82.0/23 IPv6: 2400:6120::/32 Signature Algorithm: sha256WithRSAEncryption ac:24:b0:6a:3a:40:d1:17:09:4a:8f:e6:87:b7:f3:d4:3b:ac: 5b:ae:f8:8d:65:d1:7e:4b:03:5d:93:30:5b:e1:36:ec:37:b3: 4e:1f:fc:45:6b:24:b1:e9:ed:ad:a4:13:c1:72:17:7f:74:e4: db:2c:ee:94:14:ad:65:93:14:20:38:96:a8:10:9a:c5:af:de: b6:68:c7:60:43:7b:0a:c5:64:91:27:91:a7:fa:ee:a3:ba:c7: c8:ef:88:2c:c1:13:32:6b:6d:43:7d:3d:8e:20:ec:b7:b1:71: 56:5e:2a:a1:d8:c9:c2:e0:46:29:37:f5:41:14:73:bb:00:dc: 46:2e:f9:f9:cd:18:32:91:27:86:17:46:be:d6:5c:62:24:07: 0d:d8:9f:90:b9:45:8b:10:dc:42:4c:a2:87:37:85:f8:0c:a5: 16:35:2c:f7:6d:cf:8c:b1:d2:25:5e:a3:7c:2e:03:33:b1:bb: 30:09:e6:ab:1c:b3:42:a2:77:eb:09:c7:75:fc:07:f1:a2:eb: 6f:b8:0a:ca:2a:a7:b8:f9:e0:1e:8b:a0:1a:61:48:55:e0:3d: e2:39:5c:4a:2a:10:79:3c:ca:85:ed:de:2e:ab:1f:22:6c:fa: 66:d3:a1:d7:be:d3:97:7c:c2:ef:d7:e0:ed:ff:9a:7c:61:f3: 13:dd:c4:4e -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIzNUUxMTAvBgNVBAUTKEFBRUZEQ0E5MjVEQUM5OEZEQUQxOEM4NTdGOUYxREU1 ODZBMDUxQjYwHhcNMjMwNjE5MDQwMTUyWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDhmZDMyZi05N2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5gx5kGt1zGDGxhCNiiCmbZG5D2u1NTcbMdy/QnIg9kEwG017qV16xgHwkVXW rEkTN+0S8bsd8cbkwx99imNBL8Fq/k0fwxlprm0RJl6NvQUWICqZoOrnHpajFbwd pHW43Kp3qj7x/EHZ34S5NslVl5UakD592ZPKyif+nioYNuHLQxGlEhQEnZQQcAr7 9rxgSP0seiwDxVYjv4wCTRRNUaC1vGvP/oCsSZq1uPqgx6IzFd4Q9jE81opSgsjp noHiO5Lwh5UefZyGrw6uzYjg/UXNA6h7B7MY06mDrgjlSMc/UcvQTUJ/5fNw3dH3 YgkmT2BloS1XTUtyWYoBu8EZlQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFGsjbsR3 N51wU/uyjosVqaUNewQ5MB8GA1UdIwQYMBaAFKrv3Kkl2smP2tGMhX+fHeWGoFG2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjM1RS85NjkwRUUwQzlF RDMxMUVDOEY0OEI5NzRDNEY5QUUwMi9xdV9jcVNYYXlZX2EwWXlGZjU4ZDVZYWdV YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F1X2NxU1hheVlfYTBZeUZmNThkNVlhZ1ViWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODIzNUUvOTY5MEVFMEM5RUQzMTFFQzhGNDhCOTc0QzRGOUFFMDIvNDhFNjk2RkU5 RUQ2MTFFQ0FDM0IxNzc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBABnOZcDBABnRGgDBAFnzFIwDQQCAAIwBwMFACQAYSAwDQYJ KoZIhvcNAQELBQADggEBAKwksGo6QNEXCUqP5oe389Q7rFuu+I1l0X5LA12TMFvh Nuw3s04f/EVrJLHp7a2kE8FyF3905Nss7pQUrWWTFCA4lqgQmsWv3rZox2BDewrF ZJEnkaf67qO6x8jviCzBEzJrbUN9PY4g7LexcVZeKqHYycLgRik39UEUc7sA3EYu +fnNGDKRJ4YXRr7WXGIkBw3Yn5C5RYsQ3EJMooc3hfgMpRY1LPdtz4yx0iVeo3wu AzOxuzAJ5qscs0Kid+sJx3X8B/Gi62+4Csoqp7j54B6LoBphSFXgPeI5XEoqEHk8 yoXt3i6rHyJs+mbTode+05d8wu/X4O3/mnxh8xPdxE4= -----END CERTIFICATE-----Generated at Sun May 19 03:48:52 2024 by rpki-client on console-fra.rpki-client.org