$ rpki-client -vvf rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/C4928820F06C11EC91459B5CC4F9AE02.roa File: C4928820F06C11EC91459B5CC4F9AE02.roa (raw, json) Hash identifier: 34rrQYul/a6yRoBhv7DIclOFH5GWbWZA8OkkSfiD2ug= Subject key identifier: A1:60:A4:AD:3E:7C:53:D7:CF:5E:10:27:0B:11:3A:54:F0:D4:3E:8C Certificate issuer: /CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1 Certificate serial: 0202 Authority key identifier: FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/C4928820F06C11EC91459B5CC4F9AE02.roa Signing time: Wed 24 Apr 2024 13:57:22 +0000 ROA not before: Wed 24 Apr 2024 13:57:22 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 140646 IP address blocks: 103.189.212.0/23 maxlen: 23 103.189.212.0/24 maxlen: 24 103.189.213.0/24 maxlen: 24 2400:88e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 514 (0x202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1 Validity Not Before: Apr 24 13:57:22 2024 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=66290fc2-3607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cb:70:67:53:29:1e:b3:fa:48:28:bb:15:51: e8:d6:75:69:ba:5b:62:c9:a1:6d:02:5c:48:67:06: 4c:0b:db:36:3a:67:bb:e4:c5:bb:f7:87:63:31:97: 0e:70:d9:ae:10:65:ee:5e:20:19:28:db:8f:19:d6: d2:8a:57:90:66:54:ea:06:b9:ba:b4:92:14:59:a8: 99:af:e3:dd:80:5a:2e:48:17:f1:9f:ee:49:bb:e6: 00:de:09:d7:e3:f5:fe:c8:56:a5:e2:48:b3:fd:be: 00:09:27:52:1c:4d:82:14:cb:bc:af:19:36:5d:6b: 9f:f2:22:6b:21:7f:fb:a5:fb:b7:41:3e:8e:a0:04: ff:55:df:9c:bb:ae:84:33:47:aa:df:37:f6:2a:07: c4:bf:9d:b2:2f:fe:3a:6e:3c:b6:28:50:a2:22:3f: cd:70:ec:bc:54:66:11:1e:d3:b9:a9:a5:03:2c:3f: 4b:3b:a2:82:49:f7:12:a1:95:a8:c5:cf:83:69:6c: 2b:0a:9e:fc:3a:e4:bc:12:ef:27:f2:6e:cc:e4:53: 0c:5c:6e:2e:4d:13:70:58:43:e0:d1:4b:fd:08:2f: 70:51:cb:80:2d:03:71:1c:54:df:14:21:b8:ad:f5: d1:0c:8e:1f:df:af:61:0f:44:b1:3d:fb:91:a6:0d: a4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:60:A4:AD:3E:7C:53:D7:CF:5E:10:27:0B:11:3A:54:F0:D4:3E:8C X509v3 Authority Key Identifier: keyid:FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/C4928820F06C11EC91459B5CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.189.212.0/23 IPv6: 2400:88e0::/32 Signature Algorithm: sha256WithRSAEncryption bf:9d:23:9d:22:88:f3:e2:bb:30:ea:27:5a:20:7e:df:90:2a: d5:60:13:20:ba:0e:20:6e:19:28:88:06:14:e0:5b:42:47:c2: 87:42:f0:28:1b:89:42:f2:42:85:e7:d1:78:20:79:9b:12:2f: a4:5c:11:4b:8c:86:4b:33:f0:4b:5c:86:e7:5b:b2:77:2d:90: 98:b4:ac:1f:37:9f:41:0e:22:4a:55:a0:2e:80:70:a6:01:e5: 61:07:75:86:9e:ba:5b:db:de:72:2b:7f:ed:a3:83:02:78:51: 33:90:e5:1f:2d:b9:e3:61:f3:2c:44:0c:47:96:c2:a5:19:6b: 9a:ec:b4:11:33:c1:31:6d:ea:ab:f8:79:6e:c6:6e:e6:a8:cf: cb:56:7a:03:fa:37:ef:89:09:bf:39:a3:83:24:11:34:ea:17: 3d:30:f6:ab:0b:52:c2:fa:3a:83:b6:a5:ea:43:49:4e:f5:91: bb:3f:51:fa:ca:61:3e:70:dd:a5:c6:88:25:5a:02:97:53:32: ec:80:66:98:c5:eb:59:54:7a:43:cd:5f:4c:c2:7c:ec:bd:d8: 9a:c5:6f:62:fd:b0:50:d9:2f:61:c5:e0:7f:16:0a:ea:f9:10: df:f0:5e:a0:63:37:dd:96:62:3f:85:a9:83:c7:8e:a3:f1:60: f7:66:c9:e5 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwM0YxMTAvBgNVBAUTKEZBRTlDMkY0RkUyMDQ1M0JFOTJGQ0FCMTgyQzA5NTgx QzgxMzJERjEwHhcNMjQwNDI0MTM1NzIyWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjI5MGZjMi0zNjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMtwZ1MpHrP6SCi7FVHo1nVpultiyaFtAlxIZwZMC9s2Ome75MW794djMZcO cNmuEGXuXiAZKNuPGdbSileQZlTqBrm6tJIUWaiZr+PdgFouSBfxn+5Ju+YA3gnX 4/X+yFal4kiz/b4ACSdSHE2CFMu8rxk2XWuf8iJrIX/7pfu3QT6OoAT/Vd+cu66E M0eq3zf2KgfEv52yL/46bjy2KFCiIj/NcOy8VGYRHtO5qaUDLD9LO6KCSfcSoZWo xc+DaWwrCp78OuS8Eu8n8m7M5FMMXG4uTRNwWEPg0Uv9CC9wUcuALQNxHFTfFCG4 rfXRDI4f369hD0SxPfuRpg2kcwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFKFgpK0+ fFPXz14QJwsROlTw1D6MMB8GA1UdIwQYMBaAFPrpwvT+IEU76S/KsYLAlYHIEy3x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTAzRi9GOEI0QkNEQ0Yw NjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JUdnBMOHF4Z3NDVmdjZ1RM ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11bkM5UDRnUlR2cEw4cXhnc0NWZ2NnVExmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTEwM0YvRjhCNEJDRENGMDY2MTFFQ0E1NEMzNzQyQzRGOUFFMDIvQzQ5Mjg4MjBG MDZDMTFFQzkxNDU5QjVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnvdQwDQQCAAIwBwMFACQAiOAwDQYJKoZIhvcNAQELBQAD ggEBAL+dI50iiPPiuzDqJ1ogft+QKtVgEyC6DiBuGSiIBhTgW0JHwodC8CgbiULy QoXn0XggeZsSL6RcEUuMhksz8EtchudbsnctkJi0rB83n0EOIkpVoC6AcKYB5WEH dYaeulvb3nIrf+2jgwJ4UTOQ5R8tueNh8yxEDEeWwqUZa5rstBEzwTFt6qv4eW7G buaoz8tWegP6N++JCb85o4MkETTqFz0w9qsLUsL6OoO2pepDSU71kbs/UfrKYT5w 3aXGiCVaApdTMuyAZpjF61lUekPNX0zCfOy92JrFb2L9sFDZL2HF4H8WCur5EN/w XqBjN92WYj+FqYPHjqPxYPdmyeU= -----END CERTIFICATE-----Generated at Sun May 19 04:56:55 2024 by rpki-client on console-fra.rpki-client.org