$ rpki-client -vvf rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/210E6234639E11EB81185C31C4F9AE02.roa File: 210E6234639E11EB81185C31C4F9AE02.roa (raw, json) Hash identifier: klti8QmIaGN+WiHCDDLPd4nUSBr6DU2JWtB/rkLW9Bk= Subject key identifier: 45:B1:B9:0C:71:E5:86:94:CD:B9:08:26:28:F5:C8:76:E6:35:28:AF Certificate issuer: /CN=A918E1CC/serialNumber=7ADE40935A007E0B5BE1761405064EC943AFE0C1 Certificate serial: 05C8 Authority key identifier: 7A:DE:40:93:5A:00:7E:0B:5B:E1:76:14:05:06:4E:C9:43:AF:E0:C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/210E6234639E11EB81185C31C4F9AE02.roa Signing time: Tue 13 Feb 2024 00:12:24 +0000 ROA not before: Tue 13 Feb 2024 00:12:24 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 140037 IP address blocks: 103.147.166.0/23 maxlen: 23 103.147.166.0/24 maxlen: 24 103.147.167.0/24 maxlen: 24 2001:df0:a0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1480 (0x5c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E1CC/serialNumber=7ADE40935A007E0B5BE1761405064EC943AFE0C1 Validity Not Before: Feb 13 00:12:24 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65cab3e8-5dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3f:6b:cd:89:90:76:54:fa:e9:b0:11:53:90: 20:d2:17:b0:2d:f8:80:62:b9:4a:b5:ba:ca:77:82: 4d:65:bf:1f:ef:cb:32:53:07:e6:0c:9c:98:91:20: 2f:3c:b6:1e:22:b6:94:c9:e7:01:9c:d9:36:de:a6: c9:ab:11:dc:3b:cf:ab:fd:70:5c:1f:42:8c:df:94: c8:94:0c:d1:9d:05:77:e6:45:d4:65:85:e0:ad:c2: 70:d0:84:36:37:cf:db:f8:9c:cd:ba:1d:61:9e:bc: 16:ce:67:78:6c:96:e9:e0:9d:b5:ab:74:c8:8b:7a: 45:de:d4:cf:6f:68:41:e7:9f:8a:80:4f:cf:d8:59: 60:6c:60:5c:1e:cf:7b:fc:c7:ab:6c:67:97:43:d0: d6:3d:60:de:dd:18:42:3c:39:d6:5e:36:a3:46:c9: e4:57:4d:9d:62:57:d1:b7:c1:5d:7a:32:05:9d:e0: f7:3e:fc:3e:b3:3b:f0:e6:ef:09:cc:ad:68:dd:8b: e0:37:4a:78:f6:e4:2a:9d:f6:58:e5:77:cd:e0:15: 7a:78:dc:ee:dd:74:28:b1:f5:03:ad:5a:9e:ef:25: dc:fe:e3:c9:27:7c:bc:c6:da:6c:81:df:a3:86:15: b2:75:96:48:35:c9:e9:bc:ab:93:60:f7:67:97:bc: 6c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B1:B9:0C:71:E5:86:94:CD:B9:08:26:28:F5:C8:76:E6:35:28:AF X509v3 Authority Key Identifier: keyid:7A:DE:40:93:5A:00:7E:0B:5B:E1:76:14:05:06:4E:C9:43:AF:E0:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/210E6234639E11EB81185C31C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.147.166.0/23 IPv6: 2001:df0:a0c0::/48 Signature Algorithm: sha256WithRSAEncryption 2f:df:3c:35:07:cf:35:63:bc:9b:5e:93:ee:3a:98:58:ad:49: 44:b3:a6:b9:58:d2:af:0b:d4:51:4c:db:b7:e8:e9:d2:5f:9f: 13:4f:a8:7b:04:aa:70:07:1d:f8:42:ff:33:74:3e:2a:a5:53: 49:09:23:12:79:b1:d6:4b:f5:f5:23:1c:55:c9:13:49:1b:fe: ea:73:29:ae:ec:c3:f2:cb:a8:c0:16:14:ae:6e:89:6c:50:71: 45:66:b1:dc:fe:31:47:f2:e5:7f:83:3a:01:79:47:1b:e5:2c: f7:8d:a1:8c:4f:21:69:15:13:5b:93:a7:df:5f:14:31:58:d2: 63:84:e5:57:a2:2c:dc:d5:c5:80:45:e0:04:2a:ba:be:75:dc: 71:1e:38:97:15:62:66:77:3d:0d:e1:8a:2e:f7:08:22:d3:e6: ea:74:2f:a6:7f:2c:6e:ec:bc:e8:97:e6:f3:96:6f:68:36:b7: 65:b3:2b:86:b5:ec:8c:a3:99:50:67:98:d3:c6:d2:18:f8:f3: 3d:12:1d:84:73:e6:35:ad:31:60:66:b8:e1:75:65:0e:12:84: 72:ff:39:5e:4f:3e:49:cb:bb:bc:f9:6f:92:6e:08:ec:4d:b0: bc:19:b5:cc:66:3b:80:1c:e8:1a:ee:71:0c:c1:7e:44:69:d9: 81:03:7e:a7 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUxQ0MxMTAvBgNVBAUTKDdBREU0MDkzNUEwMDdFMEI1QkUxNzYxNDA1MDY0RUM5 NDNBRkUwQzEwHhcNMjQwMjEzMDAxMjI0WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWNhYjNlOC01ZGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0T9rzYmQdlT66bARU5Ag0hewLfiAYrlKtbrKd4JNZb8f78syUwfmDJyYkSAv PLYeIraUyecBnNk23qbJqxHcO8+r/XBcH0KM35TIlAzRnQV35kXUZYXgrcJw0IQ2 N8/b+JzNuh1hnrwWzmd4bJbp4J21q3TIi3pF3tTPb2hB55+KgE/P2FlgbGBcHs97 /MerbGeXQ9DWPWDe3RhCPDnWXjajRsnkV02dYlfRt8FdejIFneD3Pvw+szvw5u8J zK1o3YvgN0p49uQqnfZY5XfN4BV6eNzu3XQosfUDrVqe7yXc/uPJJ3y8xtpsgd+j hhWydZZINcnpvKuTYPdnl7xsaQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFEWxuQxx 5YaUzbkIJij1yHbmNSivMB8GA1UdIwQYMBaAFHreQJNaAH4LW+F2FAUGTslDr+DB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTFDQy81RkVGREE4RTYz OUMxMUVCOTBCODMwMTNDNEY5QUUwMi9ldDVBazFvQWZndGI0WFlVQlFaT3lVT3Y0 TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V0NUFrMW9BZmd0YjRYWVVCUVpPeVVPdjRNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEUxQ0MvNUZFRkRBOEU2MzlDMTFFQjkwQjgzMDEzQzRGOUFFMDIvMjEwRTYyMzQ2 MzlFMTFFQjgxMTg1QzMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnk6YwDwQCAAIwCQMHACABDfCgwDANBgkqhkiG9w0BAQsF AAOCAQEAL988NQfPNWO8m16T7jqYWK1JRLOmuVjSrwvUUUzbt+jp0l+fE0+oewSq cAcd+EL/M3Q+KqVTSQkjEnmx1kv19SMcVckTSRv+6nMpruzD8suowBYUrm6JbFBx RWax3P4xR/Llf4M6AXlHG+Us942hjE8haRUTW5On318UMVjSY4TlV6Is3NXFgEXg BCq6vnXccR44lxViZnc9DeGKLvcIItPm6nQvpn8sbuy86Jfm85ZvaDa3ZbMrhrXs jKOZUGeY08bSGPjzPRIdhHPmNa0xYGa44XVlDhKEcv85Xk8+Scu7vPlvkm4I7E2w vBm1zGY7gBzoGu5xDMF+RGnZgQN+pw== -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:45 2024 by rpki-client on console-ams.rpki-client.org