$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/76053AC29ED311EBB06C4E4DC4F9AE02.roa File: 76053AC29ED311EBB06C4E4DC4F9AE02.roa (raw, json) Hash identifier: 3hRCIGv8J6ZPD7eqCFcSdXHz6UnDLueLvhKMUoFXKZg= Subject key identifier: 92:D0:EA:EF:80:12:FD:49:59:A2:7B:7D:78:A5:B4:D1:A7:6B:47:DA Certificate issuer: /CN=A9187E80/serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597 Certificate serial: 0553 Authority key identifier: 7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/76053AC29ED311EBB06C4E4DC4F9AE02.roa Signing time: Wed 03 Apr 2024 01:03:51 +0000 ROA not before: Wed 03 Apr 2024 01:03:51 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 48024 IP address blocks: 103.136.124.0/22 maxlen: 23 103.136.124.0/24 maxlen: 24 103.136.125.0/24 maxlen: 24 103.136.126.0/24 maxlen: 24 103.136.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1363 (0x553) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E80/serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597 Validity Not Before: Apr 3 01:03:51 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=660caaf7-ec13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:57:14:8c:4c:1e:e9:57:70:ce:5e:f4:55:75: 68:db:d7:f0:a4:40:69:45:c0:2c:d0:77:1e:69:7d: 64:c7:8f:52:15:c7:1e:e4:ea:e3:75:6a:e9:4a:1c: 86:14:af:7d:3c:55:4c:29:58:b1:d9:42:49:b3:75: f4:6e:42:54:48:b2:03:ea:3e:da:d9:c1:9e:1e:ba: d4:ba:9d:8b:20:72:87:0d:62:38:4e:62:23:f4:76: 28:ad:ca:15:b2:98:91:09:2f:3d:44:1f:73:5e:6a: 80:99:79:aa:2e:98:00:38:47:0b:0c:79:42:0d:b8: a5:51:26:9d:0a:d9:22:ae:2e:98:c2:10:3d:3d:50: 66:4d:1e:28:44:61:96:0a:17:51:68:dd:03:ef:63: c6:71:bd:17:03:38:3e:17:d9:01:5c:53:99:09:e9: 3a:0e:ce:a8:32:7d:ce:7f:0e:be:a0:05:a2:32:00: e1:bb:0d:d2:b5:28:ed:f1:8f:38:aa:cf:21:30:14: a0:66:50:02:89:12:46:d8:c9:d2:07:36:f8:91:0a: e2:ac:03:43:16:76:cb:ab:68:fa:07:26:5d:39:5f: cc:a8:1f:5c:bf:07:97:3c:be:fa:d7:5d:84:60:d6: 46:6c:2e:72:64:41:57:81:09:20:e0:c7:6d:90:d9: 84:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D0:EA:EF:80:12:FD:49:59:A2:7B:7D:78:A5:B4:D1:A7:6B:47:DA X509v3 Authority Key Identifier: keyid:7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/76053AC29ED311EBB06C4E4DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.136.124.0/22 Signature Algorithm: sha256WithRSAEncryption a5:ac:cc:f3:65:d3:cd:a0:88:dd:8a:05:24:2d:79:e8:a2:08: f0:e1:ab:ad:a4:82:7e:98:2b:b7:f4:ae:b6:4b:b9:bd:ca:13: 9e:14:a0:c3:c1:71:c5:61:6a:8f:1c:bd:a8:e3:9b:51:01:0c: 29:c8:5c:35:0c:2b:76:9c:c1:65:d4:f8:27:2c:f3:3c:4a:7d: 2a:53:93:e0:59:e5:a8:0e:89:fb:47:5b:f7:e7:a5:8b:3a:a7: d7:1b:7a:b8:79:54:27:9f:45:36:c3:c5:03:06:37:55:62:9a: d4:fe:87:f0:73:e5:8b:71:3a:bd:b9:e5:05:ed:2f:eb:25:5c: 64:6f:bb:70:6f:24:9c:26:ea:a7:09:16:5c:41:47:af:18:99: 31:ff:96:c1:8b:fb:1e:6e:9a:2d:ad:bf:94:d5:6a:83:cc:90: 40:68:7a:11:ae:1c:ba:b8:ae:07:38:af:fd:98:f1:8a:96:e9: 93:24:cc:5d:91:79:11:f7:a5:1b:6f:be:1f:33:6a:1b:af:18: 34:dd:0b:b2:c2:ea:3e:12:aa:af:b0:29:05:40:4f:fc:82:f8: f7:66:53:78:cd:99:19:7f:8e:ff:6f:ee:40:fd:74:3a:37:69: a5:01:8e:6d:8e:22:91:45:c2:21:c2:7e:7f:c2:93:f0:6a:a4: d2:5b:d6:0c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdFODAxMTAvBgNVBAUTKDdDQjBFNTgyNTEwMUM2NjU0NDNGMkNGQUIxOUU4NEQx QTc3OTc1OTcwHhcNMjQwNDAzMDEwMzUxWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjBjYWFmNy1lYzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1FcUjEwe6Vdwzl70VXVo29fwpEBpRcAs0HceaX1kx49SFcce5OrjdWrpShyG FK99PFVMKVix2UJJs3X0bkJUSLID6j7a2cGeHrrUup2LIHKHDWI4TmIj9HYorcoV spiRCS89RB9zXmqAmXmqLpgAOEcLDHlCDbilUSadCtkiri6YwhA9PVBmTR4oRGGW ChdRaN0D72PGcb0XAzg+F9kBXFOZCek6Ds6oMn3Ofw6+oAWiMgDhuw3StSjt8Y84 qs8hMBSgZlACiRJG2MnSBzb4kQrirANDFnbLq2j6ByZdOV/MqB9cvweXPL76112E YNZGbC5yZEFXgQkg4MdtkNmEOQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJLQ6u+A Ev1JWaJ7fXiltNGna0faMB8GA1UdIwQYMBaAFHyw5YJRAcZlRD8s+rGehNGneXWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0U4MC9EMjc4Q0E2NDlF NzcxMUVCOEMyNURCNkNDNEY5QUUwMi9mTERsZ2xFQnhtVkVQeXo2c1o2RTBhZDVk WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMRGxnbEVCeG1WRVB5ejZzWjZFMGFkNWRaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODdFODAvRDI3OENBNjQ5RTc3MTFFQjhDMjVEQjZDQzRGOUFFMDIvNzYwNTNBQzI5 RUQzMTFFQkIwNkM0RTREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJniHwwDQYJKoZIhvcNAQELBQADggEBAKWszPNl082giN2K BSQteeiiCPDhq62kgn6YK7f0rrZLub3KE54UoMPBccVhao8cvajjm1EBDCnIXDUM K3acwWXU+Ccs8zxKfSpTk+BZ5agOiftHW/fnpYs6p9cberh5VCefRTbDxQMGN1Vi mtT+h/Bz5YtxOr255QXtL+slXGRvu3BvJJwm6qcJFlxBR68YmTH/lsGL+x5umi2t v5TVaoPMkEBoehGuHLq4rgc4r/2Y8YqW6ZMkzF2ReRH3pRtvvh8zahuvGDTdC7LC 6j4Sqq+wKQVAT/yC+PdmU3jNmRl/jv9v7kD9dDo3aaUBjm2OIpFFwiHCfn/Ck/Bq pNJb1gw= -----END CERTIFICATE-----Generated at Sun May 5 02:33:37 2024 by rpki-client on console-fra.rpki-client.org