$ rpki-client -vvf rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/4BECBAFCB99811E98000600AC4F9AE02.roa File: 4BECBAFCB99811E98000600AC4F9AE02.roa (raw, json) Hash identifier: pi9D2P+4Gu3JgfphLSnyWx7XrviBMaFbhZDxyacsCno= Subject key identifier: E9:CB:FD:AF:9D:96:36:34:05:B5:2A:6B:D1:BC:0B:E7:42:61:8C:C8 Certificate issuer: /CN=A918B2F8/serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Certificate serial: 0C9E Authority key identifier: BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/4BECBAFCB99811E98000600AC4F9AE02.roa Signing time: Fri 20 Oct 2023 18:46:27 +0000 ROA not before: Fri 20 Oct 2023 18:46:27 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 134722 IP address blocks: 103.198.52.0/23 maxlen: 23 103.198.52.0/24 maxlen: 24 103.198.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 18:46:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3230 (0xc9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B2F8/serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Validity Not Before: Oct 20 18:46:27 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=6532cb03-caf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0d:72:a1:e2:56:68:31:4a:e2:a0:ba:3f:df: 5d:30:01:1b:1d:13:96:83:2b:ec:8f:7e:f9:be:e9: c2:92:73:2c:cd:61:6b:b7:2d:6c:ff:6f:c5:52:12: 53:b9:45:ef:98:cc:47:ac:94:d0:db:fb:de:50:fd: c5:e0:50:3f:37:48:66:4e:11:de:c5:e2:97:69:f2: 5c:f3:fe:ca:0c:ee:1d:ed:48:27:a2:a6:8e:bd:5d: ef:a7:86:9f:c4:4b:b4:d3:9b:14:17:c7:a1:ad:ba: 6c:2f:56:69:f0:c9:72:be:30:90:10:86:20:9f:9e: 3d:92:e1:7f:89:0a:aa:70:cb:cd:9d:4e:35:67:c6: b5:56:31:c2:e0:41:68:26:63:b0:44:a9:cf:75:aa: c3:fb:95:d9:0e:02:44:06:8e:3c:40:09:82:64:bf: 95:6c:f7:5b:f4:ce:7c:07:01:ce:6c:0e:4d:62:fc: e3:e3:fd:ec:91:c6:a8:e3:0b:6e:ee:77:70:b8:cb: ea:6d:36:86:93:a2:c7:c9:a3:04:57:51:56:be:2e: a3:17:b1:9d:b4:c5:22:d0:be:5f:dd:d1:ce:20:63: 14:02:2d:f2:09:8a:6e:96:6a:92:6f:14:f9:6c:97: 81:2a:38:07:57:38:91:0b:15:dc:e0:95:e8:c4:33: 2f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:CB:FD:AF:9D:96:36:34:05:B5:2A:6B:D1:BC:0B:E7:42:61:8C:C8 X509v3 Authority Key Identifier: keyid:BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/4BECBAFCB99811E98000600AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.198.52.0/23 Signature Algorithm: sha256WithRSAEncryption 17:ce:e7:6b:08:59:1f:89:7f:8b:e9:01:fc:6f:2f:d7:22:b2: 1b:73:a2:9a:4a:b0:47:71:c4:e8:b4:ab:09:c0:7e:9c:5b:49: 7c:bf:d8:27:49:97:6b:58:92:74:93:2c:40:bb:44:71:b4:8c: 98:c4:17:9d:d0:3d:85:7a:76:08:1a:73:ea:75:09:81:bd:fc: 9e:db:d0:b1:a5:8c:3f:5c:d7:63:b7:85:5e:da:ac:d8:c3:6a: d3:c0:95:3a:0b:f1:af:fe:03:9e:e7:43:a2:55:69:1b:90:50: 2a:51:22:aa:a4:e8:7c:7a:5f:0a:39:ee:6b:ec:52:b1:75:cd: d3:81:74:59:be:00:25:c8:bb:81:9f:d4:0b:2a:3a:a5:71:ad: 40:6d:a7:72:8a:ee:8f:7f:35:64:70:5f:7d:69:2f:7d:06:b9: 2b:6f:37:41:78:25:e4:51:c0:de:c2:f5:a4:3c:2b:87:3e:74: 24:fd:d3:44:70:75:d3:4c:84:27:19:26:3b:41:21:20:20:bd: 4a:97:84:d3:c0:a3:2a:bf:cb:c8:9d:02:30:6f:7c:1d:ad:46: 3b:c1:bc:c4:f5:98:8e:78:c3:d6:cf:0f:62:b3:ad:b4:82:ec: 73:70:94:9f:48:24:16:5a:4d:e0:d9:6c:97:2b:9a:3c:70:cf: 83:f1:92:d8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIyRjgxMTAvBgNVBAUTKEJFQjUwRTQxMUNDM0UyQzQwNjAzQjE2QTkxNjA5RUE0 RDQwNjY0OTUwHhcNMjMxMDIwMTg0NjI3WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTMyY2IwMy1jYWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqA1yoeJWaDFK4qC6P99dMAEbHROWgyvsj375vunCknMszWFrty1s/2/FUhJT uUXvmMxHrJTQ2/veUP3F4FA/N0hmThHexeKXafJc8/7KDO4d7UgnoqaOvV3vp4af xEu005sUF8ehrbpsL1Zp8MlyvjCQEIYgn549kuF/iQqqcMvNnU41Z8a1VjHC4EFo JmOwRKnPdarD+5XZDgJEBo48QAmCZL+VbPdb9M58BwHObA5NYvzj4/3skcao4wtu 7ndwuMvqbTaGk6LHyaMEV1FWvi6jF7GdtMUi0L5f3dHOIGMUAi3yCYpulmqSbxT5 bJeBKjgHVziRCxXc4JXoxDMvzQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOnL/a+d ljY0BbUqa9G8C+dCYYzIMB8GA1UdIwQYMBaAFL61DkEcw+LEBgOxapFgnqTUBmSV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjJGOC9ERkVFNjFERUI5 OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRzUUdBN0Zxa1dDZXBOUUda SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZyVU9RUnpENHNRR0E3RnFrV0NlcE5RR1pKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEIyRjgvREZFRTYxREVCOTk3MTFFOUIwOTkwRTBBQzRGOUFFMDIvNEJFQ0JBRkNC OTk4MTFFOTgwMDA2MDBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnxjQwDQYJKoZIhvcNAQELBQADggEBABfO52sIWR+Jf4vp AfxvL9cishtzoppKsEdxxOi0qwnAfpxbSXy/2CdJl2tYknSTLEC7RHG0jJjEF53Q PYV6dggac+p1CYG9/J7b0LGljD9c12O3hV7arNjDatPAlToL8a/+A57nQ6JVaRuQ UCpRIqqk6Hx6Xwo57mvsUrF1zdOBdFm+ACXIu4Gf1AsqOqVxrUBtp3KK7o9/NWRw X31pL30GuStvN0F4JeRRwN7C9aQ8K4c+dCT900RwddNMhCcZJjtBISAgvUqXhNPA oyq/y8idAjBvfB2tRjvBvMT1mI54w9bPD2KzrbSC7HNwlJ9IJBZaTeDZbJcrmjxw z4Pxktg= -----END CERTIFICATE-----Generated at Wed May 22 20:08:12 2024 by rpki-client on console-ams.rpki-client.org