$ rpki-client -vvf rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/7CDBE740C7FD11EAB795396AC4F9AE02.roa File: 7CDBE740C7FD11EAB795396AC4F9AE02.roa (raw, json) Hash identifier: m5S5/2Sc1GXzQaY2Bfm+HphMpT1ySFy33p55zUYwl9Y= Subject key identifier: C6:49:AD:3C:EB:CB:99:F8:15:42:A0:69:3D:45:2C:75:77:09:EB:8C Certificate issuer: /CN=A918EBC3/serialNumber=AC56070DBE5EE6DBBF6711973847233127917A2F Certificate serial: 0759 Authority key identifier: AC:56:07:0D:BE:5E:E6:DB:BF:67:11:97:38:47:23:31:27:91:7A:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/7CDBE740C7FD11EAB795396AC4F9AE02.roa Signing time: Tue 02 Jan 2024 21:59:56 +0000 ROA not before: Tue 02 Jan 2024 21:59:56 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 135060 IP address blocks: 103.126.144.0/22 maxlen: 22 103.126.144.0/24 maxlen: 24 103.126.145.0/24 maxlen: 24 103.126.146.0/24 maxlen: 24 103.126.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:37:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1881 (0x759) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EBC3/serialNumber=AC56070DBE5EE6DBBF6711973847233127917A2F Validity Not Before: Jan 2 21:59:56 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6594875c-801b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5e:2b:6b:b5:9c:33:c9:75:0c:75:54:cd:f4: 59:6f:7e:bb:29:c1:ab:be:2f:00:c3:2b:41:76:78: 79:eb:18:6f:77:14:b7:e7:a2:81:64:d2:d5:ad:5e: 3f:26:e1:9f:cf:41:80:96:f2:59:3f:45:52:57:8c: 2e:b0:bd:fa:a7:08:32:4b:33:65:08:f7:0b:4e:0e: 23:34:2a:bd:52:64:7b:85:7c:45:ca:34:d2:1a:c0: c2:a3:7f:b7:d7:64:85:a9:36:e4:5e:98:5f:e3:bb: 97:c1:70:5d:f8:fc:4a:67:a9:ba:86:51:3b:eb:b8: 96:bd:2f:f3:cc:aa:34:09:6a:21:32:71:bd:3b:42: d0:74:75:a0:86:c1:b4:3d:71:a3:1e:2c:ab:10:d1: 1d:ae:53:5b:40:4f:3d:db:2f:5c:12:de:13:ad:28: 80:60:3e:28:80:ae:2c:cb:47:46:52:70:eb:07:df: a7:4e:72:8f:b2:cc:c7:81:99:3b:af:ed:85:49:71: 8f:c9:78:4a:6c:d7:28:7c:12:a3:71:86:23:1f:42: 40:96:eb:c4:3c:09:a9:d2:b5:df:31:9a:44:c8:d8: a5:b7:94:2f:af:fe:22:26:72:3e:f7:5e:5f:b3:ef: c9:b7:93:ec:59:87:f2:fb:b5:52:92:37:23:d9:97: 37:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:49:AD:3C:EB:CB:99:F8:15:42:A0:69:3D:45:2C:75:77:09:EB:8C X509v3 Authority Key Identifier: keyid:AC:56:07:0D:BE:5E:E6:DB:BF:67:11:97:38:47:23:31:27:91:7A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/7CDBE740C7FD11EAB795396AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.126.144.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:97:f8:d9:5a:9d:fe:9a:e7:1d:c8:ed:eb:ea:3e:6f:89:9c: ff:45:7d:a7:e9:d4:22:9f:9e:1e:78:c9:af:12:e9:3f:9c:51: 99:c1:54:29:4e:d0:7c:0f:bc:d0:23:f5:7b:2a:b7:83:28:9e: 70:23:3d:76:f4:27:72:8d:8a:b6:eb:e4:1b:cb:49:84:e1:8b: a9:d7:0e:50:a2:aa:73:f4:54:25:2d:20:30:b2:47:77:67:22: 0c:15:f5:3b:f9:4c:09:be:07:78:75:bb:84:2f:79:60:31:cd: 5b:20:13:29:cf:6b:e3:3b:e5:d8:79:9a:02:9d:b1:05:07:f8: 91:1b:9f:48:54:e0:c2:a8:6f:92:87:48:1b:06:ed:58:72:5b: 88:f9:d5:b7:15:d3:2f:9a:0e:d4:ce:f8:85:08:3e:80:ee:cc: 0c:66:e0:39:33:d1:c8:ba:37:60:7f:54:c8:1a:31:f3:e9:5a: 05:2b:a6:05:b8:cb:29:2b:fa:d2:55:b4:d7:e5:82:aa:2e:78: f4:a0:cf:c7:2a:8b:51:4b:52:bb:d4:62:de:8a:a3:bc:19:88: d5:e6:04:58:0a:d7:8a:a5:ee:d4:d3:e7:73:19:96:2c:34:33: 97:3b:2c:1f:19:ba:f3:51:63:90:dd:bd:c6:dd:5e:0d:0c:b0: 8f:a9:91:75 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVCQzMxMTAvBgNVBAUTKEFDNTYwNzBEQkU1RUU2REJCRjY3MTE5NzM4NDcyMzMx Mjc5MTdBMkYwHhcNMjQwMTAyMjE1OTU2WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTk0ODc1Yy04MDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA614ra7WcM8l1DHVUzfRZb367KcGrvi8AwytBdnh56xhvdxS356KBZNLVrV4/ JuGfz0GAlvJZP0VSV4wusL36pwgySzNlCPcLTg4jNCq9UmR7hXxFyjTSGsDCo3+3 12SFqTbkXphf47uXwXBd+PxKZ6m6hlE767iWvS/zzKo0CWohMnG9O0LQdHWghsG0 PXGjHiyrENEdrlNbQE892y9cEt4TrSiAYD4ogK4sy0dGUnDrB9+nTnKPsszHgZk7 r+2FSXGPyXhKbNcofBKjcYYjH0JAluvEPAmp0rXfMZpEyNilt5Qvr/4iJnI+915f s+/Jt5PsWYfy+7VSkjcj2Zc3UQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMZJrTzr y5n4FUKgaT1FLHV3CeuMMB8GA1UdIwQYMBaAFKxWBw2+Xubbv2cRlzhHIzEnkXov MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUJDMy8wRDQxRkU1Q0M3 RkMxMUVBOTYyQjAwNjlDNEY5QUUwMi9yRllIRGI1ZTV0dV9aeEdYT0Vjak1TZVJl aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JGWUhEYjVlNXR1X1p4R1hPRWNqTVNlUmVpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVCQzMvMEQ0MUZFNUNDN0ZDMTFFQTk2MkIwMDY5QzRGOUFFMDIvN0NEQkU3NDBD N0ZEMTFFQUI3OTUzOTZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnfpAwDQYJKoZIhvcNAQELBQADggEBAGyX+Nlanf6a5x3I 7evqPm+JnP9Ffafp1CKfnh54ya8S6T+cUZnBVClO0HwPvNAj9Xsqt4MonnAjPXb0 J3KNirbr5BvLSYThi6nXDlCiqnP0VCUtIDCyR3dnIgwV9Tv5TAm+B3h1u4QveWAx zVsgEynPa+M75dh5mgKdsQUH+JEbn0hU4MKob5KHSBsG7VhyW4j51bcV0y+aDtTO +IUIPoDuzAxm4Dkz0ci6N2B/VMgaMfPpWgUrpgW4yykr+tJVtNflgqouePSgz8cq i1FLUrvUYt6Ko7wZiNXmBFgK14ql7tTT53MZliw0M5c7LB8ZuvNRY5DdvcbdXg0M sI+pkXU= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:10 2024 by rpki-client on console-fra.rpki-client.org