$ rpki-client -vvf rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/C3A5D7A482EC11EAB62A4C48C4F9AE02.roa File: C3A5D7A482EC11EAB62A4C48C4F9AE02.roa (raw, json) Hash identifier: q1ApTHxLsyicIuq74JapzwARIYHL5ZRNFnIa8LoI33Q= Subject key identifier: 5A:E1:41:ED:25:A7:53:B6:9F:27:C6:28:C2:82:C1:14:AA:D0:63:4E Certificate issuer: /CN=A918AF08/serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614 Certificate serial: 0B34 Authority key identifier: 7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/C3A5D7A482EC11EAB62A4C48C4F9AE02.roa Signing time: Wed 26 Jul 2023 18:56:31 +0000 ROA not before: Wed 26 Jul 2023 18:56:30 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 137885 IP address blocks: 103.66.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 19:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2868 (0xb34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AF08/serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614 Validity Not Before: Jul 26 18:56:30 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64c16c5e-9f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8c:d0:3c:b2:20:fa:8c:e7:43:0f:37:e0:5e: c5:e4:46:43:d5:16:36:09:7f:56:bb:a5:13:44:33: d3:ab:82:c8:13:c1:4c:dd:0c:a3:dc:3b:34:78:b6: da:74:a2:8d:0f:7d:a1:da:3c:85:e7:e2:2e:57:f9: 27:31:a4:13:c4:3a:ea:59:33:d6:e5:78:4d:38:3e: d9:9a:f6:f5:22:eb:13:02:b8:a2:46:88:13:57:7f: f5:cf:df:67:9e:bd:7f:ab:2c:26:12:3d:53:f0:89: 74:be:e9:02:4c:97:14:a0:17:c7:ec:50:1a:b3:fa: 7a:92:22:1d:01:bf:28:65:01:de:5d:3c:cb:fe:31: 5b:84:a8:e4:a2:4d:13:42:2b:18:4a:84:19:79:93: 28:54:a5:41:61:e9:7e:7c:cf:46:9a:5c:28:cf:83: 07:08:ac:d8:1b:f5:06:fc:36:14:84:e9:ea:5c:ac: c0:c3:f1:b7:fb:2a:a2:b8:57:f4:41:20:f6:51:6a: f5:06:e0:3e:74:47:b0:a3:c8:37:eb:84:f6:90:71: a1:45:99:25:80:63:ae:23:6c:ff:bc:ad:a3:65:78: f2:03:86:03:3b:fc:14:2e:a8:dc:2f:ad:6c:17:49: 68:4e:3c:6e:1c:23:3a:50:1d:76:fa:6e:f3:56:3c: 15:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E1:41:ED:25:A7:53:B6:9F:27:C6:28:C2:82:C1:14:AA:D0:63:4E X509v3 Authority Key Identifier: keyid:7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/C3A5D7A482EC11EAB62A4C48C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.66.131.0/24 Signature Algorithm: sha256WithRSAEncryption 03:28:bc:05:41:63:8d:d6:c8:3d:02:c5:a5:61:6d:ca:58:90: 76:c0:c2:96:9a:d8:6d:fd:ff:16:80:13:d8:06:db:41:7c:af: b2:56:41:7f:ec:05:73:2d:9b:b3:1f:2a:d7:e2:32:ed:dd:50: bd:7b:11:b3:70:94:f7:51:2f:d5:8b:91:59:70:56:46:87:56: 2d:5d:55:d4:a7:cd:be:30:f2:8e:c5:53:2b:de:64:76:81:ac: 5d:35:77:b6:49:4d:4c:96:0e:4a:67:10:eb:70:62:af:03:9c: 7a:e5:82:be:1d:01:8b:17:5d:10:60:6a:2e:6d:08:df:40:0a: 5f:40:e7:1d:fc:dd:72:f0:74:f6:d9:da:15:8b:c9:04:d1:c4: bb:b7:54:ed:4d:97:dd:95:2d:40:89:ae:d7:ba:3e:e1:5c:eb: f1:27:ee:94:8e:a8:2b:4b:b7:49:07:b2:6e:23:4d:27:7e:c1: 4e:13:83:14:85:5d:03:72:f4:8b:89:39:0f:95:a5:ff:70:ea: ed:1d:8b:56:35:18:e1:57:c9:eb:1c:35:67:67:e0:27:2e:0d: 9e:5f:de:76:8d:d1:06:1c:7a:f3:b8:fb:22:f6:b2:a5:b7:cd: cf:70:66:53:72:1b:eb:ad:9a:b8:39:f9:d9:b8:3f:5f:c3:b7: e1:d6:1a:5a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFGMDgxMTAvBgNVBAUTKDdFRTBDNkEyOEI3NTlGNzJENURDOUE1ODk1MDM4QkJB Qjk0QTg2MTQwHhcNMjMwNzI2MTg1NjMwWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGMxNmM1ZS05ZjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArIzQPLIg+oznQw834F7F5EZD1RY2CX9Wu6UTRDPTq4LIE8FM3Qyj3Ds0eLba dKKND32h2jyF5+IuV/knMaQTxDrqWTPW5XhNOD7Zmvb1IusTAriiRogTV3/1z99n nr1/qywmEj1T8Il0vukCTJcUoBfH7FAas/p6kiIdAb8oZQHeXTzL/jFbhKjkok0T QisYSoQZeZMoVKVBYel+fM9Gmlwoz4MHCKzYG/UG/DYUhOnqXKzAw/G3+yqiuFf0 QSD2UWr1BuA+dEewo8g364T2kHGhRZklgGOuI2z/vK2jZXjyA4YDO/wULqjcL61s F0loTjxuHCM6UB12+m7zVjwVYwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFrhQe0l p1O2nyfGKMKCwRSq0GNOMB8GA1UdIwQYMBaAFH7gxqKLdZ9y1dyaWJUDi7q5SoYU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUYwOC9CMEY1Mzc2Q0ZB QzAxMUU5OTREOTIwNjVDNEY5QUUwMi9mdURHb290MW4zTFYzSnBZbFFPTHVybEto aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1REdvb3QxbjNMVjNKcFlsUU9MdXJsS2hoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEFGMDgvQjBGNTM3NkNGQUMwMTFFOTk0RDkyMDY1QzRGOUFFMDIvQzNBNUQ3QTQ4 MkVDMTFFQUI2MkE0QzQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnQoMwDQYJKoZIhvcNAQELBQADggEBAAMovAVBY43WyD0C xaVhbcpYkHbAwpaa2G39/xaAE9gG20F8r7JWQX/sBXMtm7MfKtfiMu3dUL17EbNw lPdRL9WLkVlwVkaHVi1dVdSnzb4w8o7FUyveZHaBrF01d7ZJTUyWDkpnEOtwYq8D nHrlgr4dAYsXXRBgai5tCN9ACl9A5x383XLwdPbZ2hWLyQTRxLu3VO1Nl92VLUCJ rte6PuFc6/En7pSOqCtLt0kHsm4jTSd+wU4TgxSFXQNy9IuJOQ+Vpf9w6u0di1Y1 GOFXyescNWdn4CcuDZ5f3naN0QYcevO4+yL2sqW3zc9wZlNyG+utmrg5+dm4P1/D t+HWGlo= -----END CERTIFICATE-----Generated at Thu May 16 19:49:59 2024 by rpki-client on console-fra.rpki-client.org