$ rpki-client -vvf rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/02F03EBCD2F111ECB0DB7850C4F9AE02.roa File: 02F03EBCD2F111ECB0DB7850C4F9AE02.roa (raw, json) Hash identifier: Q0fNfLOcKzzEZus7R55E69tTYXEUxIWv89YZB7PtU84= Subject key identifier: 01:CB:3F:E5:A7:92:66:69:52:4C:DC:A2:B8:13:5C:99:BA:24:C8:E5 Certificate issuer: /CN=A91976E2/serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Certificate serial: 02B0 Authority key identifier: 71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/02F03EBCD2F111ECB0DB7850C4F9AE02.roa Signing time: Wed 15 May 2024 04:08:40 +0000 ROA not before: Wed 15 May 2024 04:08:40 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 149658 IP address blocks: 103.185.20.0/24 maxlen: 24 103.185.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Dec 2024 00:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 688 (0x2b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91976E2/serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Validity Not Before: May 15 04:08:40 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66443548-b5f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ad:07:05:e0:a7:b0:f0:7d:6e:30:f0:92:99: c3:32:05:41:a2:b7:cf:ba:67:f2:de:b7:12:13:7c: 23:2e:56:13:89:57:46:8b:7a:6f:9c:0f:2a:db:8b: 20:6d:99:42:95:98:6e:5d:01:a8:0c:3f:09:2f:96: 35:9a:ee:cf:41:d5:f6:60:99:05:7c:c9:52:12:23: 8d:a4:c9:37:c3:6f:77:86:64:2c:15:35:2c:5b:0d: d0:d5:1d:f4:49:cd:e4:c6:c8:38:02:1a:05:39:3e: c7:58:75:57:1b:ae:db:f0:ff:17:08:24:26:52:d2: 20:0a:19:be:fe:22:9f:61:0e:2f:aa:8f:16:4f:90: 93:1d:74:bc:b2:47:96:98:91:b4:3b:49:34:cc:f6: 7c:68:69:44:b2:52:fb:81:11:de:e0:c6:d6:7b:f1: cd:22:18:12:ab:5d:40:5c:77:a2:6a:de:e0:d3:76: 73:f5:a6:bd:23:56:9d:6b:3e:51:b9:f6:bf:c3:47: 5e:6f:19:3f:4d:8d:46:e2:9c:bc:2b:f3:34:c3:8b: b8:ce:41:24:ae:28:25:19:b8:e6:22:0d:58:62:17: 8d:ac:6e:3e:85:d9:b4:9c:63:31:95:d4:7d:f3:c9: 4c:a3:ca:1e:f0:77:38:2d:c3:f2:e1:1f:d6:19:d7: 4f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CB:3F:E5:A7:92:66:69:52:4C:DC:A2:B8:13:5C:99:BA:24:C8:E5 X509v3 Authority Key Identifier: keyid:71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/02F03EBCD2F111ECB0DB7850C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.185.20.0/23 Signature Algorithm: sha256WithRSAEncryption 20:0e:de:2d:b6:de:23:7e:52:2a:5c:c4:b1:01:5f:e3:85:79: 3d:61:af:f5:06:da:21:b2:7c:bd:6f:1d:a0:fc:37:1b:f0:32: 56:c7:08:be:96:e7:a7:ec:5b:2a:67:b0:08:f8:ac:5f:e3:fa: 0b:d5:c1:5b:23:a5:f0:6b:24:6c:3b:93:f8:e7:3b:ca:37:be: 20:5c:67:f1:53:22:ce:9d:69:1b:5a:ca:00:46:19:dc:e4:b8: 69:34:c4:13:c8:70:84:14:5f:ff:a7:13:a7:c2:11:d6:c7:f7: f2:83:23:8d:2f:e6:6e:88:50:03:1e:af:99:1f:f5:15:71:7d: f7:94:17:89:0f:1b:06:34:90:a0:48:d7:ac:5f:6e:4c:12:f7: 1e:f5:33:97:7c:ce:da:a4:1a:9d:97:eb:c8:4f:20:48:79:b6: 9f:ce:c9:a0:43:b0:bc:38:95:fc:fe:d6:41:18:7f:05:cf:fd: 23:a4:b1:fe:0b:44:29:0d:9a:34:cc:ea:dc:a9:fd:ae:80:31: d6:a8:dd:53:1d:24:18:25:64:bf:54:32:34:19:70:a2:db:59: 8f:20:57:5c:8a:55:34:3c:d5:e5:0c:78:a8:d3:41:26:a8:7f: 0a:72:70:28:34:12:86:8e:6e:e0:97:c0:2a:8d:5a:0e:fc:36: d5:47:3f:0c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICArAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc2RTIxMTAvBgNVBAUTKDcxMEEyRkM3MjNEMzc3QkQzQUE1RkIyNzFBNEFFODk0 RTU3QTc0NTQwHhcNMjQwNTE1MDQwODQwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQ0MzU0OC1iNWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAza0HBeCnsPB9bjDwkpnDMgVBorfPumfy3rcSE3wjLlYTiVdGi3pvnA8q24sg bZlClZhuXQGoDD8JL5Y1mu7PQdX2YJkFfMlSEiONpMk3w293hmQsFTUsWw3Q1R30 Sc3kxsg4AhoFOT7HWHVXG67b8P8XCCQmUtIgChm+/iKfYQ4vqo8WT5CTHXS8skeW mJG0O0k0zPZ8aGlEslL7gRHe4MbWe/HNIhgSq11AXHeiat7g03Zz9aa9I1adaz5R ufa/w0debxk/TY1G4py8K/M0w4u4zkEkriglGbjmIg1YYheNrG4+hdm0nGMxldR9 88lMo8oe8Hc4LcPy4R/WGddP+wIDAQABo4IClTCCApEwHQYDVR0OBBYEFAHLP+Wn kmZpUkzcorgTXJm6JMjlMB8GA1UdIwQYMBaAFHEKL8cj03e9OqX7JxpK6JTlenRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzZFMi80N0M0NEFEOEFF ODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3MDZwZnNuR2tyb2xPVjZk RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NRb3Z4eVBUZDcwNnBmc25Ha3JvbE9WNmRGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTc2RTIvNDdDNDRBRDhBRTg5MTFFQzhBOEQzMzY4QzRGOUFFMDIvMDJGMDNFQkNE MkYxMTFFQ0IwREI3ODUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnuRQwDQYJKoZIhvcNAQELBQADggEBACAO3i223iN+Uipc xLEBX+OFeT1hr/UG2iGyfL1vHaD8NxvwMlbHCL6W56fsWypnsAj4rF/j+gvVwVsj pfBrJGw7k/jnO8o3viBcZ/FTIs6daRtaygBGGdzkuGk0xBPIcIQUX/+nE6fCEdbH 9/KDI40v5m6IUAMer5kf9RVxffeUF4kPGwY0kKBI16xfbkwS9x71M5d8ztqkGp2X 68hPIEh5tp/OyaBDsLw4lfz+1kEYfwXP/SOksf4LRCkNmjTM6typ/a6AMdao3VMd JBglZL9UMjQZcKLbWY8gV1yKVTQ81eUMeKjTQSaofwpycCg0EoaObuCXwCqNWg78 NtVHPww= -----END CERTIFICATE-----Generated at Wed Nov 27 02:04:22 2024 by rpki-client on console-ams.rpki-client.org