$ rpki-client -vvf rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/5B1FA3C818D511ED8F4BCB4DC4F9AE02.roa File: 5B1FA3C818D511ED8F4BCB4DC4F9AE02.roa (raw, json) Hash identifier: E1cCwKG6WTfj7b+/qvoencyLjoCHhOfUSf7dhgaIAgY= Subject key identifier: F2:5A:46:43:02:64:BD:7A:AC:16:A1:4F:A4:5C:D9:0E:D6:25:04:B9 Certificate issuer: /CN=A918BCEE/serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6 Certificate serial: 01B5 Authority key identifier: F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/5B1FA3C818D511ED8F4BCB4DC4F9AE02.roa Signing time: Wed 13 Mar 2024 04:06:25 +0000 ROA not before: Wed 13 Mar 2024 04:06:25 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 140952 IP address blocks: 103.209.253.0/24 maxlen: 24 103.209.254.0/24 maxlen: 24 2404:5d80:7400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 04:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BCEE/serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6 Validity Not Before: Mar 13 04:06:25 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65f12640-d9dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:df:f6:01:ab:6a:b5:06:8d:70:4d:d6:d6:21: 81:14:d8:8f:ba:b9:1f:f8:aa:c0:c0:19:60:4d:cb: 4a:28:19:0c:a7:5c:78:31:49:14:f4:c3:63:ba:6c: 12:c5:25:10:98:49:98:79:c6:c3:ac:a6:ad:19:35: 8f:77:b2:19:e5:c7:cf:08:42:71:20:e6:85:47:79: e2:ee:6d:1a:ce:bc:09:c6:e1:7d:7c:17:e5:4b:3e: 5d:0c:fb:0f:b1:2d:e1:14:ef:46:8d:7b:1f:18:4b: 5e:9a:b8:1e:4e:32:94:26:5b:d5:e1:95:82:18:e0: 96:0f:46:43:68:56:ac:78:13:84:e4:53:c7:02:fc: a5:b1:34:83:bc:d1:e0:b5:75:36:1e:79:a9:a2:ff: 4c:43:fa:3b:73:69:c7:6e:bd:d1:f0:32:1d:c5:de: dc:d8:9c:bd:b2:e7:31:6c:d8:f1:7d:78:c4:27:e1: 83:7a:8c:3e:8b:34:16:47:e8:c1:1e:1d:26:da:84: b9:8c:8b:2d:50:be:eb:36:fc:8f:a6:cb:ec:72:ea: a0:20:c7:17:96:64:61:c3:04:bd:04:a8:7b:3f:1f: 8d:4f:89:9c:ed:60:07:dd:5d:91:c4:c1:e4:21:d1: 2a:8e:60:ee:87:e1:dc:7f:5a:49:bb:db:1f:40:31: 4c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:5A:46:43:02:64:BD:7A:AC:16:A1:4F:A4:5C:D9:0E:D6:25:04:B9 X509v3 Authority Key Identifier: keyid:F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/5B1FA3C818D511ED8F4BCB4DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.209.253.0-103.209.254.255 IPv6: 2404:5d80:7400::/40 Signature Algorithm: sha256WithRSAEncryption b1:6b:2d:49:83:fd:ae:f1:ce:f7:8b:27:e1:0e:f8:4e:16:9b: 5a:c3:53:dc:27:30:0f:50:0e:80:97:a3:38:8f:3e:d9:54:d0: 6e:09:e7:f1:ad:b0:41:f1:35:e0:4f:65:97:00:5e:ad:4e:1b: 2f:ad:70:01:21:d9:e4:ce:bf:98:1f:97:0d:9e:21:92:fc:d4: fc:84:b9:8a:8d:7a:68:4d:b7:ea:40:98:4f:fc:f3:60:9d:cf: c6:dc:6f:76:d8:5d:5b:c7:de:9a:63:aa:2b:92:c0:41:8d:09: 79:a6:db:e9:2f:95:dc:65:6b:c7:48:fa:2c:e5:8f:9e:05:43: ed:7e:40:3e:72:5c:af:03:e8:f6:81:68:79:1d:05:ad:d8:f1: 60:a7:1f:c4:a0:50:b8:2d:a0:ea:23:d7:5c:2c:78:6e:47:71: a2:29:ec:73:4f:4f:51:3e:ad:66:61:34:31:ea:4a:25:4a:27: c9:d9:fb:b0:4d:4b:cf:d5:79:65:e2:ad:1c:43:92:3e:3f:0e: 4b:d2:3e:f2:d7:e7:55:a0:24:2e:8f:de:91:2b:77:12:65:28: 06:10:83:a9:89:4e:e5:06:af:46:8f:a6:d0:fc:76:d9:9a:a3: 8b:3c:9a:39:77:9e:4d:46:c0:e2:c3:a0:1b:92:36:d3:1c:07: c9:fb:3b:c8 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJDRUUxMTAvBgNVBAUTKEY0MEJFOEI1QUQxNkIxODQ3RkMwRDRGNDcwOEY5RDQx NDkzMUFCQTYwHhcNMjQwMzEzMDQwNjI1WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NWYxMjY0MC1kOWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAut/2AatqtQaNcE3W1iGBFNiPurkf+KrAwBlgTctKKBkMp1x4MUkU9MNjumwS xSUQmEmYecbDrKatGTWPd7IZ5cfPCEJxIOaFR3ni7m0azrwJxuF9fBflSz5dDPsP sS3hFO9GjXsfGEtemrgeTjKUJlvV4ZWCGOCWD0ZDaFaseBOE5FPHAvylsTSDvNHg tXU2Hnmpov9MQ/o7c2nHbr3R8DIdxd7c2Jy9sucxbNjxfXjEJ+GDeow+izQWR+jB Hh0m2oS5jIstUL7rNvyPpsvscuqgIMcXlmRhwwS9BKh7Px+NT4mc7WAH3V2RxMHk IdEqjmDuh+Hcf1pJu9sfQDFM/wIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFPJaRkMC ZL16rBahT6Rc2Q7WJQS5MB8GA1UdIwQYMBaAFPQL6LWtFrGEf8DU9HCPnUFJMaum MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkNFRS82OEMzNTYzMDEz RkYxMUVEQTNGMzM5NDFDNEY5QUUwMi85QXZvdGEwV3NZUl93TlQwY0ktZFFVa3hx NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlBdm90YTBXc1lSX3dOVDBjSS1kUVVreHE2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEJDRUUvNjhDMzU2MzAxM0ZGMTFFREEzRjMzOTQxQzRGOUFFMDIvNUIxRkEzQzgx OEQ1MTFFRDhGNEJDQjREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMBQEAgABMA4wDAMEAGfR/QMEAGfR/jAOBAIAAjAIAwYAJARdgHQwDQYJKoZI hvcNAQELBQADggEBALFrLUmD/a7xzveLJ+EO+E4Wm1rDU9wnMA9QDoCXoziPPtlU 0G4J5/GtsEHxNeBPZZcAXq1OGy+tcAEh2eTOv5gflw2eIZL81PyEuYqNemhNt+pA mE/882Cdz8bcb3bYXVvH3ppjqiuSwEGNCXmm2+kvldxla8dI+izlj54FQ+1+QD5y XK8D6PaBaHkdBa3Y8WCnH8SgULgtoOoj11wseG5HcaIp7HNPT1E+rWZhNDHqSiVK J8nZ+7BNS8/VeWXirRxDkj4/DkvSPvLX51WgJC6P3pErdxJlKAYQg6mJTuUGr0aP ptD8dtmao4s8mjl3nk1GwOLDoBuSNtMcB8n7O8g= -----END CERTIFICATE-----Generated at Tue May 21 05:35:03 2024 by rpki-client on console-ams.rpki-client.org