$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/57B4ADB0066A11ECA8CBA567C4F9AE02.roa File: 57B4ADB0066A11ECA8CBA567C4F9AE02.roa (raw, json) Hash identifier: cONz8cH8mojxxlKu64pZjClYHipImbveB+2cct1tdEI= Subject key identifier: 22:53:9F:17:7E:1C:27:43:81:95:F9:87:79:9C:0D:60:98:68:A9:8A Certificate issuer: /CN=A918D7D0/serialNumber=FE907DA7A7F99379A6FD463DD17D25B4D501DFE8 Certificate serial: 06C8 Authority key identifier: FE:90:7D:A7:A7:F9:93:79:A6:FD:46:3D:D1:7D:25:B4:D5:01:DF:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/57B4ADB0066A11ECA8CBA567C4F9AE02.roa Signing time: Sun 24 Sep 2023 21:02:08 +0000 ROA not before: Sun 24 Sep 2023 21:02:08 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 137823 IP address blocks: 103.115.24.0/22 maxlen: 22 103.115.24.0/23 maxlen: 23 103.115.24.0/24 maxlen: 24 103.115.25.0/24 maxlen: 24 103.115.26.0/23 maxlen: 23 103.115.26.0/24 maxlen: 24 103.115.27.0/24 maxlen: 24 2402:dbc0::/32 maxlen: 32 2402:dbc0:4000::/34 maxlen: 34 2402:dbc0:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.crl rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 19:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1736 (0x6c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D7D0/serialNumber=FE907DA7A7F99379A6FD463DD17D25B4D501DFE8 Validity Not Before: Sep 24 21:02:08 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=6510a3d0-10b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a0:ea:dd:f3:a6:ac:1c:32:2b:38:71:cc:59: 9a:25:7b:21:12:ff:12:48:7d:b1:b8:a0:97:2d:f5: 20:73:3c:e9:59:22:63:7c:14:b3:3c:fb:1c:49:c1: 15:34:34:fa:ff:b6:03:51:7d:69:b6:8f:df:51:94: 98:64:f4:7c:51:1a:82:93:d2:ce:47:08:bc:75:6c: 25:4e:c6:e3:a5:e3:95:db:f8:6d:59:62:c3:54:79: ae:38:d7:4a:77:21:73:be:39:f4:8e:4d:c2:53:4b: b3:ed:30:b8:9a:60:20:7c:d7:81:b1:17:c0:bd:2c: 82:65:cb:38:2e:71:af:d0:ca:b1:91:e9:59:81:61: 91:a7:78:98:5d:29:5b:69:a5:25:dd:7d:6f:b1:e7: 99:d1:b1:b4:a9:6b:9e:1c:ad:5e:16:1e:74:52:4f: 20:e9:a7:86:a1:4a:dc:34:82:83:49:a5:35:87:ed: 02:bc:da:ac:0b:be:98:ed:6f:2f:5e:99:35:97:f0: 02:23:fb:b6:94:2d:b8:ac:23:6b:30:05:74:5e:18: a2:4d:be:a2:5a:cf:61:5a:a6:a8:10:86:e7:b4:5f: f0:8b:e3:cb:5b:cc:8e:9f:16:28:12:71:ba:96:48: 1f:6b:2d:c5:dc:91:ef:0a:ee:e3:0e:02:3b:e6:cb: a5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:53:9F:17:7E:1C:27:43:81:95:F9:87:79:9C:0D:60:98:68:A9:8A X509v3 Authority Key Identifier: keyid:FE:90:7D:A7:A7:F9:93:79:A6:FD:46:3D:D1:7D:25:B4:D5:01:DF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/57B4ADB0066A11ECA8CBA567C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.115.24.0/22 IPv6: 2402:dbc0::/32 Signature Algorithm: sha256WithRSAEncryption 72:06:4d:e6:91:37:f2:ca:1f:2e:4c:b1:3f:da:bb:a1:9a:86: 1f:94:7a:17:cf:b1:3c:26:44:22:38:d6:a2:3b:45:f4:b5:ce: e5:7e:a9:d3:38:c2:07:03:9a:c1:4d:41:a7:b7:4b:53:f3:03: be:40:a9:2c:6a:50:d3:19:04:aa:24:92:21:79:ac:b4:9e:e7: 5c:3d:59:2c:9c:5e:68:22:0f:6b:c9:cd:d0:1c:a9:39:90:c6: 4c:26:d5:ad:a1:32:c5:c5:f7:c3:a1:52:0f:86:43:17:e2:86: 68:56:b3:c8:7e:43:ac:8b:e8:41:5f:ad:23:c8:75:78:1a:2d: 9e:7f:55:b5:96:28:26:ba:00:b4:94:40:ae:15:86:8b:e8:88: 14:36:62:44:b3:a3:7e:86:c1:a0:02:5e:65:6c:11:44:2a:4a: e1:a5:42:2b:79:42:31:fe:65:fd:e6:f3:d8:52:9e:d2:84:68: 29:73:b2:6b:1d:ae:f8:8f:29:62:32:04:1b:6a:83:db:7b:27: 34:0e:9f:f6:8b:b6:6a:17:99:ce:68:2e:23:03:91:9c:fd:52: 22:32:9a:54:15:4d:7a:a3:0e:d9:25:81:cb:92:56:bf:a1:6f: 6f:fc:e8:fb:1b:ed:cd:8b:8b:e9:71:09:53:45:bd:06:13:26: 54:5a:1a:4e -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3RDAxMTAvBgNVBAUTKEZFOTA3REE3QTdGOTkzNzlBNkZENDYzREQxN0QyNUI0 RDUwMURGRTgwHhcNMjMwOTI0MjEwMjA4WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTEwYTNkMC0xMGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6Dq3fOmrBwyKzhxzFmaJXshEv8SSH2xuKCXLfUgczzpWSJjfBSzPPscScEV NDT6/7YDUX1pto/fUZSYZPR8URqCk9LORwi8dWwlTsbjpeOV2/htWWLDVHmuONdK dyFzvjn0jk3CU0uz7TC4mmAgfNeBsRfAvSyCZcs4LnGv0MqxkelZgWGRp3iYXSlb aaUl3X1vseeZ0bG0qWueHK1eFh50Uk8g6aeGoUrcNIKDSaU1h+0CvNqsC76Y7W8v Xpk1l/ACI/u2lC24rCNrMAV0XhiiTb6iWs9hWqaoEIbntF/wi+PLW8yOnxYoEnG6 lkgfay3F3JHvCu7jDgI75sulVwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFCJTnxd+ HCdDgZX5h3mcDWCYaKmKMB8GA1UdIwQYMBaAFP6Qfaen+ZN5pv1GPdF9JbTVAd/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDdEMC85ODJCMkQ1QTAw ODIxMUVBQjcxRjRBMkJDNEY5QUUwMi9fcEI5cDZmNWszbW1fVVk5MFgwbHROVUIz LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19wQjlwNmY1azNtbV9VWTkwWDBsdE5VQjMtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEQ3RDAvOTgyQjJENUEwMDgyMTFFQUI3MUY0QTJCQzRGOUFFMDIvNTdCNEFEQjAw NjZBMTFFQ0E4Q0JBNTY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJncxgwDQQCAAIwBwMFACQC28AwDQYJKoZIhvcNAQELBQAD ggEBAHIGTeaRN/LKHy5MsT/au6Gahh+UehfPsTwmRCI41qI7RfS1zuV+qdM4wgcD msFNQae3S1PzA75AqSxqUNMZBKokkiF5rLSe51w9WSycXmgiD2vJzdAcqTmQxkwm 1a2hMsXF98OhUg+GQxfihmhWs8h+Q6yL6EFfrSPIdXgaLZ5/VbWWKCa6ALSUQK4V hovoiBQ2YkSzo36GwaACXmVsEUQqSuGlQit5QjH+Zf3m89hSntKEaClzsmsdrviP KWIyBBtqg9t7JzQOn/aLtmoXmc5oLiMDkZz9UiIymlQVTXqjDtklgcuSVr+hb2/8 6Psb7c2Li+lxCVNFvQYTJlRaGk4= -----END CERTIFICATE-----Generated at Thu May 16 20:25:48 2024 by rpki-client on console-ams.rpki-client.org