$ rpki-client -vvf rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/1ED5B13E30C111ECBB5A4116C4F9AE02.roa File: 1ED5B13E30C111ECBB5A4116C4F9AE02.roa (raw, json) Hash identifier: VECQZxdYNeax7w8PdOp72wQ1jo/3BdHCyClKAC1SUgo= Subject key identifier: 5B:62:11:4D:06:6C:25:6E:98:10:58:75:F7:7F:F1:2F:8F:AA:D6:44 Certificate issuer: /CN=A919608D/serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9 Certificate serial: 0FE8 Authority key identifier: D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/1ED5B13E30C111ECBB5A4116C4F9AE02.roa Signing time: Wed 10 Apr 2024 18:26:10 +0000 ROA not before: Wed 10 Apr 2024 18:26:10 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 137491 IP address blocks: 103.134.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4072 (0xfe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919608D/serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9 Validity Not Before: Apr 10 18:26:10 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=6616d9c2-6f68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:a3:73:7d:f9:3a:c4:0d:9d:e2:16:aa:66:6c: 76:88:31:4c:cc:07:b9:60:57:9c:44:fd:05:42:e8: d9:bd:88:d0:69:9b:0e:f0:1d:70:1a:60:e2:8b:dd: e4:b1:e5:0a:3f:0e:eb:95:9a:bd:58:e0:62:91:eb: d9:d8:ea:bf:f8:ee:9f:33:64:9f:04:1e:99:70:8e: 34:a2:82:1a:e8:f4:19:6f:6e:db:79:34:00:85:1d: e6:e6:13:a9:c6:67:dd:87:1f:3a:32:13:9f:5e:ed: 80:7a:30:c2:76:d3:f5:b9:dd:0e:3e:31:86:7b:75: 7e:51:42:35:7d:35:ea:4e:d9:ce:ed:f8:bb:00:3d: 05:d1:d4:5f:08:e2:c0:0f:f8:c4:dc:0d:40:1a:b7: 55:c4:98:aa:cc:17:56:10:25:0c:20:e2:48:3f:7b: 1e:00:6c:19:32:da:3d:14:0d:fb:a7:1c:0d:1d:1b: da:55:59:dd:e0:04:df:29:75:85:6f:80:ee:d7:20: 68:ae:dc:18:55:cb:98:d9:49:ca:08:0c:a9:28:23: ab:9d:e0:07:2c:2e:88:c7:05:cd:a2:3d:bf:52:3d: c5:5b:8e:f0:8c:5b:6e:14:8c:c3:26:ae:be:9e:de: 0e:94:36:f5:e1:4e:56:c3:9b:8c:1a:16:71:96:65: 4f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:62:11:4D:06:6C:25:6E:98:10:58:75:F7:7F:F1:2F:8F:AA:D6:44 X509v3 Authority Key Identifier: keyid:D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/1ED5B13E30C111ECBB5A4116C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.134.38.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:d1:26:25:1d:e3:ae:4f:dc:aa:34:46:5f:19:c6:ea:b6:57: 1d:02:64:76:42:94:86:86:a2:a5:7d:37:19:e3:c2:cc:1f:91: 29:8a:70:ad:f2:06:db:a3:2c:5e:2c:ef:8f:ce:6f:bf:e2:b3: 50:01:6f:18:5f:c5:ea:7e:fb:06:25:2e:dd:00:31:ad:83:15: 7e:cc:9c:6c:e9:f7:9a:86:85:15:c1:d0:aa:58:ff:19:f3:d9: a3:21:c2:b4:4f:56:8e:b2:d3:1b:20:1d:d3:b3:c2:ef:81:c5: 7a:34:56:f4:12:06:90:e4:24:d1:f8:59:61:7f:5f:a0:b9:0f: 3f:31:00:4c:a0:b6:c7:75:f6:4b:92:0c:cb:5c:69:dd:78:ae: 0c:7e:79:06:35:55:a3:31:92:97:22:2f:0b:8d:f4:34:87:0d: d3:96:1b:24:2c:f7:dc:48:ef:b7:ea:b5:22:a9:f6:bb:13:ec: 45:9e:cd:a2:05:e8:d5:71:83:ad:de:0e:64:7f:f5:f0:18:a2: d4:0d:a3:4b:1e:72:48:70:a6:8f:62:21:86:e3:21:52:93:8c: 80:83:42:51:8f:ac:e2:27:12:38:99:3f:22:78:83:1b:28:3c: d0:b9:61:bc:5b:81:05:1b:1d:b1:f8:f3:14:89:4c:24:95:c5: 45:9c:8e:99 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICD+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTYwOEQxMTAvBgNVBAUTKEQyRDgwODA0OUE0NkVENzk3QzIxRjlGNjAyNTIzNDU2 NDYzMUIzRjkwHhcNMjQwNDEwMTgyNjEwWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjE2ZDljMi02ZjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+KNzffk6xA2d4haqZmx2iDFMzAe5YFecRP0FQujZvYjQaZsO8B1wGmDii93k seUKPw7rlZq9WOBikevZ2Oq/+O6fM2SfBB6ZcI40ooIa6PQZb27beTQAhR3m5hOp xmfdhx86MhOfXu2AejDCdtP1ud0OPjGGe3V+UUI1fTXqTtnO7fi7AD0F0dRfCOLA D/jE3A1AGrdVxJiqzBdWECUMIOJIP3seAGwZMto9FA37pxwNHRvaVVnd4ATfKXWF b4Du1yBortwYVcuY2UnKCAypKCOrneAHLC6IxwXNoj2/Uj3FW47wjFtuFIzDJq6+ nt4OlDb14U5Ww5uMGhZxlmVPmQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFtiEU0G bCVumBBYdfd/8S+PqtZEMB8GA1UdIwQYMBaAFNLYCASaRu15fCH59gJSNFZGMbP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjA4RC84MTA3M0EzMDI4 NzcxMUU5OTQyMUM4NENDNEY5QUUwMi8wdGdJQkpwRzdYbDhJZm4yQWxJMFZrWXhz X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB0Z0lCSnBHN1hsOElmbjJBbEkwVmtZeHNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTYwOEQvODEwNzNBMzAyODc3MTFFOTk0MjFDODRDQzRGOUFFMDIvMUVENUIxM0Uz MEMxMTFFQ0JCNUE0MTE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnhiYwDQYJKoZIhvcNAQELBQADggEBAFzRJiUd465P3Ko0 Rl8Zxuq2Vx0CZHZClIaGoqV9NxnjwswfkSmKcK3yBtujLF4s74/Ob7/is1ABbxhf xep++wYlLt0AMa2DFX7MnGzp95qGhRXB0KpY/xnz2aMhwrRPVo6y0xsgHdOzwu+B xXo0VvQSBpDkJNH4WWF/X6C5Dz8xAEygtsd19kuSDMtcad14rgx+eQY1VaMxkpci LwuN9DSHDdOWGyQs99xI77fqtSKp9rsT7EWezaIF6NVxg63eDmR/9fAYotQNo0se ckhwpo9iIYbjIVKTjICDQlGPrOInEjiZPyJ4gxsoPNC5YbxbgQUbHbH48xSJTCSV xUWcjpk= -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org