$ rpki-client -vvf rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/AE94F8108CDD11ED8F7B6515C4F9AE02.roa File: AE94F8108CDD11ED8F7B6515C4F9AE02.roa (raw, json) Hash identifier: PCkpJGGyaL0qMyeq5nDVBcrPUQ3t5Mx881bY2sCX7Tk= Subject key identifier: 7C:4C:EF:58:9B:B4:2F:B4:1E:81:D1:40:6F:62:90:3F:12:33:5A:31 Certificate issuer: /CN=A918CA19/serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201 Certificate serial: CA Authority key identifier: C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/AE94F8108CDD11ED8F7B6515C4F9AE02.roa Signing time: Wed 31 Jan 2024 05:46:12 +0000 ROA not before: Wed 31 Jan 2024 05:46:11 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 150709 IP address blocks: 103.65.118.0/23 maxlen: 23 103.65.118.0/24 maxlen: 24 103.65.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 02:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CA19/serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201 Validity Not Before: Jan 31 05:46:11 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65b9dea3-aa9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b8:b1:d7:f6:1b:9d:05:79:98:f2:3a:2e:e2: e5:38:41:dd:71:12:79:52:75:8f:c2:ca:ce:da:90: a2:20:81:a7:ad:7f:20:7a:0b:32:2d:28:f0:91:73: 0e:0b:fa:4b:90:2a:5c:bb:4a:28:bd:eb:85:7c:12: 13:60:70:8d:e7:29:76:27:ea:75:05:e3:33:d3:78: 99:10:f2:bc:22:bd:d5:08:e2:89:ba:37:7e:88:dc: e5:4a:89:52:13:d3:89:21:56:27:ba:12:e7:ca:3d: d7:a6:c6:4e:c1:2a:97:fc:04:06:9f:97:87:ce:72: cb:7a:58:84:5d:1c:86:f8:86:44:92:a2:7c:27:77: 41:e8:e1:ee:8d:52:53:46:d0:0d:d6:ef:9d:2d:bb: c5:87:95:a2:47:d6:95:c8:84:33:e4:16:90:2a:d7: 04:51:e8:59:6d:2a:7e:ea:3b:05:0c:16:e7:eb:c5: a7:60:78:61:15:eb:fa:a5:1c:42:ca:b9:69:55:90: 99:22:66:7b:36:81:ce:58:19:f3:0d:93:1e:15:35: 6f:91:d3:f1:e0:c4:7e:3d:99:4b:43:16:61:fc:79: 17:95:a8:59:8b:34:c6:07:cc:32:a6:4a:6c:d1:25: 8f:ad:38:6b:ad:6c:0d:48:d4:a7:86:3f:ea:03:7b: e3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4C:EF:58:9B:B4:2F:B4:1E:81:D1:40:6F:62:90:3F:12:33:5A:31 X509v3 Authority Key Identifier: keyid:C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/AE94F8108CDD11ED8F7B6515C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.65.118.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:c1:7b:21:38:9c:20:0a:d3:74:57:49:d7:9a:1b:6b:07:a7: 0f:cb:ca:ca:87:22:94:ff:66:29:4e:b9:a8:13:41:7e:3d:72: 40:83:45:d1:11:61:c4:50:0a:7d:79:6c:6c:a5:3d:d6:15:ee: 09:ac:3c:3c:a2:4e:05:8c:ef:f3:56:a9:11:a8:5e:1d:19:ca: c5:d8:93:3a:0b:c5:73:eb:4f:19:6f:82:7e:76:8d:5e:3e:a9: 56:37:7e:4f:44:03:07:27:26:56:b1:4f:bf:b5:16:ed:f1:6a: 58:e9:56:3f:3c:ac:ae:51:c8:da:7e:12:1a:58:d5:ef:72:60: 2a:bc:3c:3c:19:72:9a:02:85:21:69:75:37:9f:ae:16:f8:64: 5b:c7:e9:8a:b2:43:13:a1:95:a8:2e:86:fe:76:4a:bd:b5:c1: 15:20:9b:69:f9:51:6f:ce:7d:ca:09:4d:cb:e3:ea:b0:be:39: 93:72:cf:50:e0:b0:20:fc:5a:3a:0c:ae:c2:4b:50:d2:89:2f: 95:86:a3:1b:41:04:61:8a:01:ca:6e:73:cc:57:10:6a:d4:4a: 0d:13:d0:63:17:56:78:b3:47:fa:17:59:0d:d1:78:a3:50:2d: 15:26:59:84:a3:c9:5f:e4:bd:b1:7c:d3:15:0e:15:7b:01:e3: 1c:6c:7a:1d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBMTkxMTAvBgNVBAUTKEM0RjkzMjJFRUU5NjcwOUU0MjIxQzZERDNDRUNCODQw Mzg0RjAyMDEwHhcNMjQwMTMxMDU0NjExWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWI5ZGVhMy1hYTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk7ix1/YbnQV5mPI6LuLlOEHdcRJ5UnWPwsrO2pCiIIGnrX8gegsyLSjwkXMO C/pLkCpcu0ooveuFfBITYHCN5yl2J+p1BeMz03iZEPK8Ir3VCOKJujd+iNzlSolS E9OJIVYnuhLnyj3XpsZOwSqX/AQGn5eHznLLeliEXRyG+IZEkqJ8J3dB6OHujVJT RtAN1u+dLbvFh5WiR9aVyIQz5BaQKtcEUehZbSp+6jsFDBbn68WnYHhhFev6pRxC yrlpVZCZImZ7NoHOWBnzDZMeFTVvkdPx4MR+PZlLQxZh/HkXlahZizTGB8wypkps 0SWPrThrrWwNSNSnhj/qA3vjawIDAQABo4IClTCCApEwHQYDVR0OBBYEFHxM71ib tC+0HoHRQG9ikD8SM1oxMB8GA1UdIwQYMBaAFMT5Mi7ulnCeQiHG3TzsuEA4TwIB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0ExOS9GODAyQTQyNDhD RDkxMUVEOTkwOTdEMEZDNEY5QUUwMi94UGt5THU2V2NKNUNJY2JkUE95NFFEaFBB Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQa3lMdTZXY0o1Q0ljYmRQT3k0UURoUEFnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OENBMTkvRjgwMkE0MjQ4Q0Q5MTFFRDk5MDk3RDBGQzRGOUFFMDIvQUU5NEY4MTA4 Q0REMTFFRDhGN0I2NTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnQXYwDQYJKoZIhvcNAQELBQADggEBAFrBeyE4nCAK03RX SdeaG2sHpw/LysqHIpT/ZilOuagTQX49ckCDRdERYcRQCn15bGylPdYV7gmsPDyi TgWM7/NWqRGoXh0ZysXYkzoLxXPrTxlvgn52jV4+qVY3fk9EAwcnJlaxT7+1Fu3x aljpVj88rK5RyNp+EhpY1e9yYCq8PDwZcpoChSFpdTefrhb4ZFvH6YqyQxOhlagu hv52Sr21wRUgm2n5UW/OfcoJTcvj6rC+OZNyz1DgsCD8WjoMrsJLUNKJL5WGoxtB BGGKAcpuc8xXEGrUSg0T0GMXVnizR/oXWQ3ReKNQLRUmWYSjyV/kvbF80xUOFXsB 4xxseh0= -----END CERTIFICATE-----Generated at Mon May 27 06:19:22 2024 by rpki-client on console-fra.rpki-client.org