$ rpki-client -vvf rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/85521A14F2B911ECB45D2B31C4F9AE02.roa File: 85521A14F2B911ECB45D2B31C4F9AE02.roa (raw, json) Hash identifier: SiYgwC+PUmmba0EBPwfjQr39jpSXM2qs2QlF2h+k8fg= Subject key identifier: D1:1B:68:7E:98:30:6A:C3:4A:28:79:88:57:C0:10:96:9A:3B:EF:24 Certificate issuer: /CN=A918AF08/serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614 Certificate serial: 0B33 Authority key identifier: 7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/85521A14F2B911ECB45D2B31C4F9AE02.roa Signing time: Wed 26 Jul 2023 18:56:30 +0000 ROA not before: Wed 26 Jul 2023 18:56:30 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 137422 IP address blocks: 103.233.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 19:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2867 (0xb33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AF08/serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614 Validity Not Before: Jul 26 18:56:30 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64c16c5d-b18e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2f:78:48:ba:42:76:47:09:8e:68:ee:46:4e: 50:1c:be:f5:ea:ed:1a:b1:bb:5d:f2:54:1b:e8:ac: 5b:60:31:28:b0:f6:83:d0:20:cf:49:af:57:31:dc: 6c:59:3b:a1:b2:33:dd:8f:9c:91:c7:f9:5f:5a:8c: 31:90:48:a5:15:a6:8d:a4:6e:d2:cf:80:ef:36:08: b6:e6:65:76:93:f4:28:a6:29:60:d8:a9:e2:e8:e2: 14:d7:84:69:18:e8:0c:b8:5f:89:d3:90:61:df:9f: a1:7a:46:5b:35:f1:6e:0e:73:27:6c:89:f2:d9:c6: c1:9e:cb:d3:6b:10:68:73:5f:f7:0a:53:ca:23:66: 91:29:a5:c3:0e:6c:02:60:27:a7:04:05:7a:24:df: fc:04:6b:99:c9:a7:47:51:0c:9a:3e:24:70:97:c5: 16:41:d8:03:13:2a:21:63:07:e2:2e:ed:8d:ce:6b: ee:f9:7a:b6:6b:a6:c8:33:99:42:ea:6d:2a:15:2a: 6d:05:a4:ac:4b:2d:c6:17:b2:70:5f:30:a7:44:80: 8a:71:9d:ec:8b:3e:34:f2:22:16:9c:30:80:af:b9: 51:86:bd:bc:27:64:03:2e:4f:e8:17:1a:aa:95:e3: 24:b7:8f:3f:9c:a0:18:a2:e0:30:49:38:a8:cf:dc: f6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1B:68:7E:98:30:6A:C3:4A:28:79:88:57:C0:10:96:9A:3B:EF:24 X509v3 Authority Key Identifier: keyid:7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/85521A14F2B911ECB45D2B31C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.233.202.0/24 Signature Algorithm: sha256WithRSAEncryption 75:8b:f7:6a:01:09:10:78:c7:69:84:02:d2:30:cd:8b:be:e8: 69:c5:7f:0f:0e:70:e7:22:20:7c:4a:70:76:c5:c1:12:cc:cd: a6:e3:13:6e:76:f7:08:86:ee:2a:50:a2:87:60:0c:15:8b:4c: d8:ee:59:4c:dd:43:4a:12:d4:57:b2:22:f0:f5:97:cf:cd:24: ab:06:d0:80:60:90:1f:d2:13:f6:b5:e7:0f:d5:aa:62:15:09: 18:aa:4a:b9:e3:37:57:76:8d:71:3c:6f:e2:16:47:94:0b:ad: ec:d0:41:09:4e:10:5d:63:12:3a:14:80:fc:ec:8d:41:5c:06: c3:91:17:fc:2d:f0:fe:76:64:2c:8f:e1:bf:0a:bf:72:c4:0a: 48:9e:65:c2:ce:93:c4:6e:c9:6d:95:fa:6a:32:0b:f9:9f:98: 29:39:83:c9:f1:ff:8b:f8:c1:79:2a:e6:16:3a:7f:ac:a1:36: 75:e1:72:e6:ea:c5:17:8b:c6:3e:12:9c:24:ea:f5:bc:cb:6a: bb:5f:03:25:bd:b4:c2:f1:8d:5e:1d:3f:1f:1b:14:1a:e4:fc: d8:59:12:20:39:17:c9:54:7e:16:0f:e6:2e:11:75:e8:81:54: d7:6e:91:22:27:a1:f5:69:89:19:17:68:65:11:c7:d6:bf:9a: eb:a0:19:34 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFGMDgxMTAvBgNVBAUTKDdFRTBDNkEyOEI3NTlGNzJENURDOUE1ODk1MDM4QkJB Qjk0QTg2MTQwHhcNMjMwNzI2MTg1NjMwWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGMxNmM1ZC1iMThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxy94SLpCdkcJjmjuRk5QHL716u0asbtd8lQb6KxbYDEosPaD0CDPSa9XMdxs WTuhsjPdj5yRx/lfWowxkEilFaaNpG7Sz4DvNgi25mV2k/Qopilg2Kni6OIU14Rp GOgMuF+J05Bh35+hekZbNfFuDnMnbIny2cbBnsvTaxBoc1/3ClPKI2aRKaXDDmwC YCenBAV6JN/8BGuZyadHUQyaPiRwl8UWQdgDEyohYwfiLu2Nzmvu+Xq2a6bIM5lC 6m0qFSptBaSsSy3GF7JwXzCnRICKcZ3siz408iIWnDCAr7lRhr28J2QDLk/oFxqq leMkt48/nKAYouAwSTioz9z2hwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNEbaH6Y MGrDSih5iFfAEJaaO+8kMB8GA1UdIwQYMBaAFH7gxqKLdZ9y1dyaWJUDi7q5SoYU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUYwOC9CMEY1Mzc2Q0ZB QzAxMUU5OTREOTIwNjVDNEY5QUUwMi9mdURHb290MW4zTFYzSnBZbFFPTHVybEto aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1REdvb3QxbjNMVjNKcFlsUU9MdXJsS2hoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEFGMDgvQjBGNTM3NkNGQUMwMTFFOTk0RDkyMDY1QzRGOUFFMDIvODU1MjFBMTRG MkI5MTFFQ0I0NUQyQjMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn6cowDQYJKoZIhvcNAQELBQADggEBAHWL92oBCRB4x2mE AtIwzYu+6GnFfw8OcOciIHxKcHbFwRLMzabjE2529wiG7ipQoodgDBWLTNjuWUzd Q0oS1FeyIvD1l8/NJKsG0IBgkB/SE/a15w/VqmIVCRiqSrnjN1d2jXE8b+IWR5QL rezQQQlOEF1jEjoUgPzsjUFcBsORF/wt8P52ZCyP4b8Kv3LECkieZcLOk8RuyW2V +moyC/mfmCk5g8nx/4v4wXkq5hY6f6yhNnXhcubqxReLxj4SnCTq9bzLartfAyW9 tMLxjV4dPx8bFBrk/NhZEiA5F8lUfhYP5i4RdeiBVNdukSInofVpiRkXaGURx9a/ muugGTQ= -----END CERTIFICATE-----Generated at Thu May 16 19:49:59 2024 by rpki-client on console-fra.rpki-client.org