$ rpki-client -vvf rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/3EA26CE6396011EABC88BD55C4F9AE02.roa File: 3EA26CE6396011EABC88BD55C4F9AE02.roa (raw, json) Hash identifier: jt3q3eu5PH5pGOuIsdjdUutobUCzp2vYtDeECsWMzEc= Subject key identifier: F7:B2:08:9B:3F:F8:E5:BB:77:76:9A:7C:FF:ED:7C:2A:1D:F5:12:83 Certificate issuer: /CN=A918E843/serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC Certificate serial: 0A74 Authority key identifier: 5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/3EA26CE6396011EABC88BD55C4F9AE02.roa Signing time: Tue 16 Apr 2024 20:29:26 +0000 ROA not before: Tue 16 Apr 2024 20:29:26 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 57976 IP address blocks: 59.153.40.0/22 maxlen: 24 103.4.114.0/24 maxlen: 24 103.4.115.0/24 maxlen: 24 103.198.32.0/23 maxlen: 24 103.198.32.0/25 maxlen: 25 202.9.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:22:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2676 (0xa74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E843/serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC Validity Not Before: Apr 16 20:29:26 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=661edfa5-e08f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:af:ad:8b:b3:f0:7b:a0:c1:cd:1c:f6:23:78: 66:c1:80:ad:02:11:95:bb:2b:7b:7b:a1:aa:30:b2: 29:f8:bd:5f:2f:0c:9a:78:10:b4:08:40:9c:5e:39: 94:0c:ec:c9:2b:15:3f:28:ce:79:b1:e2:af:33:fd: e4:15:a0:f9:37:be:ba:98:38:2c:7e:4b:67:b4:4a: 1b:34:30:94:c4:7a:d8:ed:d5:c4:ad:9a:db:3b:6a: b6:11:32:63:e9:0d:3b:0f:e0:41:0e:b9:fb:61:c8: f9:58:83:c8:23:98:bc:56:6c:99:39:ee:8d:7d:6c: 62:a2:66:63:e7:d0:29:1c:6b:72:66:a8:ed:d2:d6: 7d:c8:76:19:80:5a:a1:d5:cd:64:d8:34:53:93:5d: b7:92:71:16:61:80:fb:35:a1:66:6d:20:e7:5e:2b: 09:b0:70:13:e8:35:b6:ad:9a:32:02:d5:9a:8f:6d: f4:a7:fa:65:f1:40:86:28:cd:61:8e:b0:7a:74:7d: 8b:df:5a:67:03:94:25:cb:00:f6:b3:ea:14:a8:ff: 63:07:25:81:7c:22:61:0e:32:4a:29:e7:05:34:e1: a2:b8:15:ca:68:a7:2c:b4:e6:25:1a:27:92:c6:28: d3:13:fb:72:d9:ef:35:0e:b6:22:15:92:b9:93:8f: 68:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B2:08:9B:3F:F8:E5:BB:77:76:9A:7C:FF:ED:7C:2A:1D:F5:12:83 X509v3 Authority Key Identifier: keyid:5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/3EA26CE6396011EABC88BD55C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.153.40.0/22 103.4.114.0/23 103.198.32.0/23 202.9.66.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:ed:7f:cf:47:0b:84:98:17:3c:3b:49:22:b6:cf:3b:a4:56: cd:c2:85:af:e3:20:85:10:72:c5:fc:0a:b7:fa:53:ff:0b:25: 8d:23:9e:67:13:cd:f7:d6:ee:94:65:aa:05:c5:6d:35:f4:a1: e5:ce:2c:d8:ae:fc:8b:d4:e7:a3:bb:19:f6:fa:e7:77:f9:23: 5f:24:b7:1a:61:40:4a:6b:4c:67:ea:cf:fe:b1:b2:69:b5:2b: 61:74:9b:85:b3:ca:5b:2d:d5:7e:6c:5a:7f:ae:fa:3c:b3:11: 5e:2b:bd:a4:a1:24:17:b0:16:92:21:af:84:c9:b7:b2:44:45: 6f:82:27:16:82:7e:94:d5:f0:cc:aa:a3:ab:8e:45:b6:73:be: fb:69:33:cf:bd:ce:de:d8:9e:ea:9b:75:7a:7d:b3:84:ac:75: d5:a4:47:bf:aa:8e:c5:bd:76:33:65:25:e4:a8:a2:f4:23:ea: 09:f2:87:45:7a:39:55:83:10:bb:43:32:73:8a:d8:78:0c:d5: 9a:55:c1:45:6d:61:b3:3e:88:62:a4:c5:90:59:3e:00:3c:0c: 2d:c0:97:0d:6f:4a:8e:b9:08:2b:5a:b4:17:63:0e:ad:00:18: ca:12:7d:d3:12:32:bd:19:91:99:fe:8c:85:38:ab:39:fd:52: 5c:eb:33:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICCnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4NDMxMTAvBgNVBAUTKDVDRkJBMjg5MTZFQUMwN0IyMzU5MDk0ODU1RDg5RTE2 QTA4MTRCQUMwHhcNMjQwNDE2MjAyOTI2WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjFlZGZhNS1lMDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwK+ti7Pwe6DBzRz2I3hmwYCtAhGVuyt7e6GqMLIp+L1fLwyaeBC0CECcXjmU DOzJKxU/KM55seKvM/3kFaD5N766mDgsfktntEobNDCUxHrY7dXErZrbO2q2ETJj 6Q07D+BBDrn7Ycj5WIPII5i8VmyZOe6NfWxiomZj59ApHGtyZqjt0tZ9yHYZgFqh 1c1k2DRTk123knEWYYD7NaFmbSDnXisJsHAT6DW2rZoyAtWaj230p/pl8UCGKM1h jrB6dH2L31pnA5QlywD2s+oUqP9jByWBfCJhDjJKKecFNOGiuBXKaKcstOYlGieS xijTE/ty2e81DrYiFZK5k49opwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFPeyCJs/ +OW7d3aafP/tfCod9RKDMB8GA1UdIwQYMBaAFFz7ookW6sB7I1kJSFXYnhaggUus MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg0My85NTdCQ0I0NDM5 NUYxMUVBQkI4NTQ3NTVDNEY5QUUwMi9YUHVpaVJicXdIc2pXUWxJVmRpZUZxQ0JT NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hQdWlpUmJxd0hzaldRbElWZGllRnFDQlM2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU4NDMvOTU3QkNCNDQzOTVGMTFFQUJCODU0NzU1QzRGOUFFMDIvM0VBMjZDRTYz OTYwMTFFQUJDODhCRDU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAI7mSgDBAFnBHIDBAFnxiADBAHKCUIwDQYJKoZIhvcNAQEL BQADggEBAAztf89HC4SYFzw7SSK2zzukVs3Cha/jIIUQcsX8Crf6U/8LJY0jnmcT zffW7pRlqgXFbTX0oeXOLNiu/IvU56O7Gfb653f5I18ktxphQEprTGfqz/6xsmm1 K2F0m4Wzylst1X5sWn+u+jyzEV4rvaShJBewFpIhr4TJt7JERW+CJxaCfpTV8Myq o6uORbZzvvtpM8+9zt7YnuqbdXp9s4SsddWkR7+qjsW9djNlJeSoovQj6gnyh0V6 OVWDELtDMnOK2HgM1ZpVwUVtYbM+iGKkxZBZPgA8DC3Alw1vSo65CCtatBdjDq0A GMoSfdMSMr0ZkZn+jIU4qzn9UlzrM4s= -----END CERTIFICATE-----Generated at Tue May 14 21:48:41 2024 by rpki-client on console-ams.rpki-client.org