$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/452D6C36BD1411EAA4875216C4F9AE02.roa File: 452D6C36BD1411EAA4875216C4F9AE02.roa (raw, json) Hash identifier: bh3z16gZ2VSFsHisnqXivod3jWj16xVb8JpTHoh3XV4= Subject key identifier: 94:40:A6:D6:B4:58:7A:A7:66:A4:3B:9F:B8:8D:5E:B4:50:79:3C:0A Certificate issuer: /CN=A918EF4E/serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA Certificate serial: 198E Authority key identifier: 8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/452D6C36BD1411EAA4875216C4F9AE02.roa Signing time: Fri 12 Apr 2024 16:54:25 +0000 ROA not before: Fri 12 Apr 2024 16:54:25 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 58411 IP address blocks: 103.210.232.0/24 maxlen: 24 103.210.233.0/24 maxlen: 24 103.210.234.0/24 maxlen: 24 103.210.235.0/24 maxlen: 24 160.20.52.0/24 maxlen: 24 160.20.53.0/24 maxlen: 24 160.20.54.0/24 maxlen: 24 160.20.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6542 (0x198e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF4E/serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA Validity Not Before: Apr 12 16:54:25 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=66196741-ac75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:60:0e:01:b0:30:ea:07:79:4b:b0:52:16:cd: 3f:5c:07:b4:a0:7b:48:ce:e5:11:3e:de:b9:92:8d: de:d2:bc:b4:e4:a6:06:a3:22:0d:c6:0d:27:76:ad: b4:3a:b4:77:52:f1:a4:0c:f5:49:de:66:91:9f:9a: 95:c8:a1:ba:73:b8:c9:9a:37:e3:de:a5:c5:8d:a6: c6:33:2b:3d:72:8f:bf:4f:c2:e4:ab:5f:6a:78:0a: b1:f4:ce:e8:cc:3f:95:0a:c4:8c:f1:3d:38:67:1b: 72:3f:fa:5d:08:54:77:cd:4f:11:fc:08:7d:f0:e3: f5:89:21:e6:47:53:fc:fe:c0:03:8c:ed:76:64:22: 94:19:76:36:06:f6:f8:e5:16:79:f2:e5:8f:a4:96: b5:1e:32:03:5e:f8:30:22:f5:92:78:63:59:1b:6c: 4a:58:3d:bb:48:7c:0f:45:f5:dc:e1:6d:31:57:74: 34:34:49:25:d5:4d:21:1b:4e:d5:04:77:f6:29:66: 19:a4:f1:ac:47:23:b3:71:88:c3:b0:da:0d:23:29: 7e:d7:03:65:15:57:93:50:72:49:d0:05:bf:7d:ec: 94:8a:7f:18:ad:23:03:9d:a6:e1:fb:8a:a2:e7:e7: a2:74:5e:bf:16:7e:d0:18:49:d3:31:b1:a3:bb:c3: d5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:40:A6:D6:B4:58:7A:A7:66:A4:3B:9F:B8:8D:5E:B4:50:79:3C:0A X509v3 Authority Key Identifier: keyid:8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/452D6C36BD1411EAA4875216C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.210.232.0/22 160.20.52.0/22 Signature Algorithm: sha256WithRSAEncryption 15:37:65:89:e0:3c:81:33:b1:1c:4d:29:b8:87:f8:e5:3f:32: 40:9b:49:55:59:76:48:d5:01:3d:bd:ba:9e:02:a8:13:02:89: 7b:68:c3:a6:ec:d5:2b:ef:c3:1d:37:44:bd:4b:06:75:5f:fe: fd:43:d8:18:41:9b:fe:c8:03:bc:be:3d:52:2d:81:39:50:3f: 78:b9:db:b9:8c:e1:19:09:f8:5d:f7:2d:a0:b4:12:0d:08:1d: 4a:ef:8f:5d:76:cf:35:1a:06:c6:39:4d:2b:05:42:28:0a:4c: ec:94:52:b0:ed:95:ec:58:c1:21:4d:7f:f6:8c:66:1d:c2:ef: dd:b3:b7:da:24:33:0f:3a:d3:f5:73:35:9f:c2:ef:81:71:67: 7f:97:ea:52:31:0a:7b:6e:31:3b:75:9e:63:29:53:67:7b:4f: 8e:f6:b2:23:8b:50:56:01:61:13:46:2c:d5:45:e9:af:f2:90: af:4d:88:f8:f5:d2:31:c4:d8:e0:3a:61:fe:df:23:af:82:51: a0:96:3e:6c:7d:36:3c:39:13:84:28:31:69:93:a0:c6:6a:11: ca:8a:f6:f5:6c:7f:72:ce:fa:d2:60:ae:00:36:19:f9:28:98: 26:05:8b:37:f8:f2:b7:c7:a9:94:ea:08:b7:2b:77:64:6e:4b: 2e:d6:90:30 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICGY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGNEUxMTAvBgNVBAUTKDhDQjkyQjEyRTZGOTg2RDMxM0Q1M0YzQ0FBQjA3RUJF MzI1NUFFQkEwHhcNMjQwNDEyMTY1NDI1WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjE5Njc0MS1hYzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02AOAbAw6gd5S7BSFs0/XAe0oHtIzuURPt65ko3e0ry05KYGoyINxg0ndq20 OrR3UvGkDPVJ3maRn5qVyKG6c7jJmjfj3qXFjabGMys9co+/T8Lkq19qeAqx9M7o zD+VCsSM8T04ZxtyP/pdCFR3zU8R/Ah98OP1iSHmR1P8/sADjO12ZCKUGXY2Bvb4 5RZ58uWPpJa1HjIDXvgwIvWSeGNZG2xKWD27SHwPRfXc4W0xV3Q0NEkl1U0hG07V BHf2KWYZpPGsRyOzcYjDsNoNIyl+1wNlFVeTUHJJ0AW/feyUin8YrSMDnabh+4qi 5+eidF6/Fn7QGEnTMbGju8PVjQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJRApta0 WHqnZqQ7n7iNXrRQeTwKMB8GA1UdIwQYMBaAFIy5KxLm+YbTE9U/PKqwfr4yVa66 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY0RS9CRjQ3QkY4QzQx MzIxMUU3OTJBMTRFNEFDNEY5QUUwMi9qTGtyRXViNWh0TVQxVDg4cXJCLXZqSlZy cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMa3JFdWI1aHRNVDFUODhxckItdmpKVnJyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVGNEUvQkY0N0JGOEM0MTMyMTFFNzkyQTE0RTRBQzRGOUFFMDIvNDUyRDZDMzZC RDE0MTFFQUE0ODc1MjE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJn0ugDBAKgFDQwDQYJKoZIhvcNAQELBQADggEBABU3ZYng PIEzsRxNKbiH+OU/MkCbSVVZdkjVAT29up4CqBMCiXtow6bs1Svvwx03RL1LBnVf /v1D2BhBm/7IA7y+PVItgTlQP3i527mM4RkJ+F33LaC0Eg0IHUrvj112zzUaBsY5 TSsFQigKTOyUUrDtlexYwSFNf/aMZh3C792zt9okMw860/VzNZ/C74FxZ3+X6lIx CntuMTt1nmMpU2d7T472siOLUFYBYRNGLNVF6a/ykK9NiPj10jHE2OA6Yf7fI6+C UaCWPmx9Njw5E4QoMWmToMZqEcqK9vVsf3LO+tJgrgA2GfkomCYFizf48rfHqZTq CLcrd2RuSy7WkDA= -----END CERTIFICATE-----Generated at Sat May 18 17:37:33 2024 by rpki-client on console-fra.rpki-client.org