$ rpki-client -vvf rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/C564E80017E911EF9D471E18C4F9AE02.roa File: C564E80017E911EF9D471E18C4F9AE02.roa (raw, json) Hash identifier: Q/69ePRbisNpHiEdg/AGJ0JZCRTMD/uYjUaXppEDwMU= Subject key identifier: 28:23:B4:91:31:B8:97:FC:DB:EA:B6:76:DB:F4:58:34:21:68:0C:00 Certificate issuer: /CN=A918D699/serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609 Certificate serial: 0D Authority key identifier: A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/C564E80017E911EF9D471E18C4F9AE02.roa Signing time: Thu 23 May 2024 00:35:54 +0000 ROA not before: Thu 23 May 2024 00:35:54 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 134688 IP address blocks: 103.10.72.0/22 maxlen: 24 103.195.52.0/23 maxlen: 24 103.207.154.0/23 maxlen: 23 121.46.120.0/22 maxlen: 24 203.128.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Sep 2024 04:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D699/serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609 Validity Not Before: May 23 00:35:54 2024 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=664e8f69-37ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4a:44:f8:e5:99:6f:ef:98:1c:a1:34:31:c5: fc:1a:1b:7f:79:02:03:7c:57:46:b7:74:92:38:e4: df:94:46:77:97:e6:84:0f:f9:e9:5c:25:55:2f:1f: 02:47:01:ac:11:42:c7:8a:03:f1:93:8a:0d:29:1b: b6:e8:ae:bd:86:e8:f0:e5:ac:4f:ca:68:6a:4f:6e: 31:a5:69:5d:02:e5:02:3f:96:87:a5:c5:19:71:81: 5b:9a:43:f1:fb:91:e3:31:23:c9:ed:fa:8f:99:bf: 90:93:85:a7:40:3e:9d:0f:64:15:be:fb:ec:12:b5: 1b:34:51:f5:8f:b9:a9:46:9a:4b:c6:0d:28:5e:d9: a0:05:e4:bf:b6:7e:cb:78:0d:c1:4b:a7:3d:ca:e3: 5d:b8:13:33:31:f9:3f:52:68:69:f9:05:c9:3c:9b: ae:14:c1:33:ff:74:20:1f:e8:50:64:90:07:80:b7: 41:4b:b4:78:1c:4b:77:34:83:c0:8b:61:65:2d:99: 8d:88:5b:ab:2d:86:60:98:4c:b0:57:85:42:73:8c: 65:a3:f3:41:9b:26:e5:e9:17:45:75:a1:d2:08:3f: fe:d6:36:24:e7:84:3b:2a:d7:10:93:0d:29:0d:4c: a9:62:d5:f1:7f:0b:c3:ff:0f:99:e9:1c:ff:bb:f7: 80:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:23:B4:91:31:B8:97:FC:DB:EA:B6:76:DB:F4:58:34:21:68:0C:00 X509v3 Authority Key Identifier: keyid:A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/C564E80017E911EF9D471E18C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.10.72.0/22 103.195.52.0/23 103.207.154.0/23 121.46.120.0/22 203.128.232.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:a9:7a:0f:09:02:83:01:d6:32:52:e5:fc:f7:68:7f:e6:18: 2d:7a:46:7d:13:c1:9b:25:f8:3b:58:4a:41:97:78:3f:56:95: a2:e2:a6:de:a9:68:43:aa:f5:43:06:e4:cc:ad:a0:bf:4a:77: a0:5a:8c:82:3c:4c:1a:08:1e:1c:24:b9:a9:13:19:5f:bf:97: c4:74:87:11:52:e2:26:12:9a:b5:a4:7d:c2:0a:dc:a5:7e:cb: 8e:58:94:58:83:c2:3e:bd:31:16:2e:3b:f8:4b:29:95:3f:e4: 72:22:2f:6e:82:1e:f0:0e:d0:ab:37:c1:13:df:96:c7:18:33: b9:07:8f:b4:6b:c8:67:80:d1:5a:7c:b2:93:a9:49:4b:b2:a1: b7:ae:4e:dc:77:e4:37:72:9c:6f:30:9a:b3:ef:56:92:90:26: d3:40:37:39:13:20:02:e8:52:dd:1f:02:d7:a0:24:b3:d3:e2: 21:1c:18:9a:19:ef:e8:b0:54:81:52:51:96:b2:b6:5f:1d:fc: 16:55:fc:b4:d2:46:8b:78:ac:7f:16:52:31:e4:61:26:c5:30: 90:20:ee:4a:f5:f7:fd:e0:6c:21:e4:33:2b:c6:58:9c:be:5b: 43:95:4c:87:85:1f:77:e0:8f:3a:d1:fb:be:cf:81:a2:14:bd: c9:8c:9b:99 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDY5OTExMC8GA1UEBRMoQTc0Q0U3REFENUZCNTA0REIxNkJCRTcwQzJGOURGMEFB OUYwMDYwOTAeFw0yNDA1MjMwMDM1NTRaFw0yNDEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NGU4ZjY5LTM3ZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+SkT45Zlv75gcoTQxxfwaG395AgN8V0a3dJI45N+URneX5oQP+elcJVUvHwJH AawRQseKA/GTig0pG7borr2G6PDlrE/KaGpPbjGlaV0C5QI/loelxRlxgVuaQ/H7 keMxI8nt+o+Zv5CThadAPp0PZBW+++wStRs0UfWPualGmkvGDShe2aAF5L+2fst4 DcFLpz3K4124EzMx+T9SaGn5Bck8m64UwTP/dCAf6FBkkAeAt0FLtHgcS3c0g8CL YWUtmY2IW6sthmCYTLBXhUJzjGWj80GbJuXpF0V1odIIP/7WNiTnhDsq1xCTDSkN TKli1fF/C8P/D5npHP+794AJAgMBAAGjggKtMIICqTAdBgNVHQ4EFgQUKCO0kTG4 l/zb6rZ22/RYNCFoDAAwHwYDVR0jBBgwFoAUp0zn2tX7UE2xa75wwvnfCqnwBgkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThENjk5LzU1ODZFRjZBMTdF OTExRUZBMkNENTAxN0M0RjlBRTAyL3Awem4ydFg3VUUyeGE3NXd3dm5mQ3Fud0Jn ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcDB6bjJ0WDdVRTJ4YTc1d3d2bmZDcW53QmdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDY5OS81NTg2RUY2QTE3RTkxMUVGQTJDRDUwMTdDNEY5QUUwMi9DNTY0RTgwMDE3 RTkxMUVGOUQ0NzFFMThDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA3BggrBgEFBQcBBwEB/wQo MCYwJAQCAAEwHgMEAmcKSAMEAWfDNAMEAWfPmgMEAnkueAMEAsuA6DANBgkqhkiG 9w0BAQsFAAOCAQEAX6l6DwkCgwHWMlLl/Pdof+YYLXpGfRPBmyX4O1hKQZd4P1aV ouKm3qloQ6r1QwbkzK2gv0p3oFqMgjxMGggeHCS5qRMZX7+XxHSHEVLiJhKataR9 wgrcpX7LjliUWIPCPr0xFi47+EsplT/kciIvboIe8A7QqzfBE9+WxxgzuQePtGvI Z4DRWnyyk6lJS7Kht65O3HfkN3KcbzCas+9WkpAm00A3ORMgAuhS3R8C16Aks9Pi IRwYmhnv6LBUgVJRlrK2Xx38FlX8tNJGi3isfxZSMeRhJsUwkCDuSvX3/eBsIeQz K8ZYnL5bQ5VMh4Ufd+CPOtH7vs+BohS9yYybmQ== -----END CERTIFICATE-----Generated at Tue Sep 17 08:11:56 2024 by rpki-client on console-ams.rpki-client.org