$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/203B2B7A1C9811EE995E057EC4F9AE02.roa File: 203B2B7A1C9811EE995E057EC4F9AE02.roa (raw, json) Hash identifier: 4zPuCRb6jQp/WONx/+B920AnQZg5YD/rNNquB0manEQ= Subject key identifier: 5E:65:A5:E1:EE:40:32:52:D9:4F:48:42:4A:E4:2C:DD:A0:F3:1A:86 Certificate issuer: /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF Certificate serial: 3469 Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/203B2B7A1C9811EE995E057EC4F9AE02.roa Signing time: Wed 31 Jul 2024 14:31:03 +0000 ROA not before: Wed 31 Jul 2024 14:31:03 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 4007 IP address blocks: 103.235.196.0/22 maxlen: 24 163.53.24.0/23 maxlen: 24 202.51.69.0/24 maxlen: 24 202.51.80.0/24 maxlen: 24 202.51.88.0/23 maxlen: 23 202.51.88.0/24 maxlen: 24 202.51.89.0/24 maxlen: 24 202.51.92.0/24 maxlen: 24 202.51.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:25:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13417 (0x3469) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF Validity Not Before: Jul 31 14:31:03 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66aa4aa6-554d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:78:91:f5:5c:ae:5a:8f:3e:7c:66:04:d3:37: 9e:de:32:13:f1:89:eb:cf:7e:91:59:0d:01:40:8d: 31:c6:94:d3:9c:af:2a:fa:44:80:f1:95:d3:18:32: ae:97:b4:c9:21:18:d2:e7:48:8d:16:fc:c1:4b:93: b3:1e:20:f6:f5:b0:e2:89:56:92:af:f4:a2:f6:ac: 93:34:19:dc:4f:af:9f:52:3e:8d:c4:66:aa:12:42: 15:3b:1a:fd:f9:47:10:82:b8:f4:1a:f0:77:4f:4b: 49:bf:96:ff:cb:23:66:a5:0f:21:f9:1e:16:a5:6e: 95:bf:9f:3b:54:b9:2f:44:84:9b:d2:0f:09:c0:71: f8:69:84:36:d2:b0:90:d4:f7:1c:49:1d:10:ee:7d: 5d:fe:85:1f:8d:4b:4d:02:5c:17:1b:8d:3c:b8:7b: 04:68:17:1c:dc:54:c9:ef:db:56:25:77:5f:a3:34: 7a:4a:16:eb:84:e3:36:b3:5a:4a:c3:07:7a:e2:70: ec:bb:c5:09:18:65:f6:df:4d:68:8d:d6:6d:e7:21: 8d:36:39:1d:16:9e:35:f2:1a:13:72:db:df:cf:13: fe:6f:34:51:0c:be:8c:2a:3e:d1:c6:18:7e:88:b3: 01:03:a1:35:73:7f:a8:cf:e0:51:7a:e9:30:58:c1: c1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:65:A5:E1:EE:40:32:52:D9:4F:48:42:4A:E4:2C:DD:A0:F3:1A:86 X509v3 Authority Key Identifier: keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/203B2B7A1C9811EE995E057EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.235.196.0/22 163.53.24.0/23 202.51.69.0/24 202.51.80.0/24 202.51.88.0/23 202.51.92.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:70:66:9a:29:ff:73:0e:04:06:08:52:97:c0:6d:9d:3c:19: 18:b7:30:05:94:a0:23:89:80:20:95:7a:28:9a:f5:cb:ad:b8: 64:8d:d7:19:0f:f0:50:ff:26:46:1e:c3:cf:14:7b:99:e1:5b: d1:74:e5:c4:28:b4:c3:a1:34:87:69:77:b9:74:93:f6:5d:b5: b0:a5:a6:4b:b3:62:db:aa:28:75:52:e9:57:1a:39:f8:e3:12: 2c:4c:5a:cc:f0:61:96:6c:1d:5c:82:92:6e:5d:8e:fe:b1:bc: 4e:d3:d5:77:60:d2:0d:e6:ad:81:58:54:15:56:7a:15:ed:c8: 5d:8b:eb:cb:29:73:df:c5:fd:dc:32:95:dc:fe:76:cf:10:ad: ab:a5:b7:2d:ad:62:a8:d7:70:6f:c0:35:c7:93:ee:3d:17:02: 5a:91:a6:b3:0b:09:8a:29:b8:c3:0b:ef:3c:d1:57:e9:34:42: 10:f4:08:83:d9:d2:7e:dd:a5:8e:f9:b9:e8:16:f5:f1:f5:a0: 3a:a4:8f:57:3a:13:9e:5f:18:a2:60:09:45:41:e0:8c:ca:d7: c7:9c:5a:2d:7e:bc:f8:f5:a0:d5:7b:e6:ab:ed:ef:e4:d4:d9: de:5e:76:5f:cf:01:81:ed:41:26:d5:89:7f:e9:db:d4:a6:d9: 6f:0b:b8:92 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICNGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY1NTAxMTAvBgNVBAUTKEEyNEI2QTYyMDQ0QjcwMDY1RjA1MDYzODg0NjBFNEFG MkYxN0YzRkYwHhcNMjQwNzMxMTQzMTAzWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmFhNGFhNi01NTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxniR9VyuWo8+fGYE0zee3jIT8Ynrz36RWQ0BQI0xxpTTnK8q+kSA8ZXTGDKu l7TJIRjS50iNFvzBS5OzHiD29bDiiVaSr/Si9qyTNBncT6+fUj6NxGaqEkIVOxr9 +UcQgrj0GvB3T0tJv5b/yyNmpQ8h+R4WpW6Vv587VLkvRISb0g8JwHH4aYQ20rCQ 1PccSR0Q7n1d/oUfjUtNAlwXG408uHsEaBcc3FTJ79tWJXdfozR6ShbrhOM2s1pK wwd64nDsu8UJGGX2301ojdZt5yGNNjkdFp418hoTctvfzxP+bzRRDL6MKj7Rxhh+ iLMBA6E1c3+oz+BReukwWMHB9wIDAQABo4ICszCCAq8wHQYDVR0OBBYEFF5lpeHu QDJS2U9IQkrkLN2g8xqGMB8GA1UdIwQYMBaAFKJLamIES3AGXwUGOIRg5K8vF/P/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjU1MC84QjlCRDIwMjFE ODUxMUUyQjQxMjMwREMwOEIwMkNEMi9va3RxWWdSTGNBWmZCUVk0aEdEa3J5OFg4 XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29rdHFZZ1JMY0FaZkJRWTRoR0Rrcnk4WDhfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEY1NTAvOEI5QkQyMDIxRDg1MTFFMkI0MTIzMERDMDhCMDJDRDIvMjAzQjJCN0Ex Qzk4MTFFRTk5NUUwNTdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgABMCQDBAJn68QDBAGjNRgDBADKM0UDBADKM1ADBAHKM1gDBAHKM1ww DQYJKoZIhvcNAQELBQADggEBAExwZpop/3MOBAYIUpfAbZ08GRi3MAWUoCOJgCCV eiia9cutuGSN1xkP8FD/JkYew88Ue5nhW9F05cQotMOhNIdpd7l0k/ZdtbClpkuz YtuqKHVS6VcaOfjjEixMWszwYZZsHVyCkm5djv6xvE7T1Xdg0g3mrYFYVBVWehXt yF2L68spc9/F/dwyldz+ds8Qraulty2tYqjXcG/ANceT7j0XAlqRprMLCYopuMML 7zzRV+k0QhD0CIPZ0n7dpY75uegW9fH1oDqkj1c6E55fGKJgCUVB4IzK18ecWi1+ vPj1oNV75qvt7+TU2d5edl/PAYHtQSbViX/p29Sm2W8LuJI= -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:57 2024 by rpki-client on console-ams.rpki-client.org