$ rpki-client -vvf rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/4317395081E611EE9EFE132BC4F9AE02.roa File: 4317395081E611EE9EFE132BC4F9AE02.roa (raw, json) Hash identifier: nEgdbI6cuLNeRuLPJnkG4QO1ReMDMeUPyTkJXfsO5xE= Subject key identifier: 87:15:B2:F8:F1:EF:33:27:C3:A1:4E:86:86:8A:35:4D:E6:77:FF:F4 Certificate issuer: /CN=A919A7CA/serialNumber=DA1DB2CD31F454F69561D8665DC93EF812F397B0 Certificate serial: 74 Authority key identifier: DA:1D:B2:CD:31:F4:54:F6:95:61:D8:66:5D:C9:3E:F8:12:F3:97:B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/4317395081E611EE9EFE132BC4F9AE02.roa Signing time: Sat 01 Jun 2024 09:47:32 +0000 ROA not before: Sat 01 Jun 2024 09:47:32 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 20473 IP address blocks: 103.186.158.0/24 maxlen: 24 103.186.159.0/24 maxlen: 24 2400:72e0:9f00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.crl rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A7CA/serialNumber=DA1DB2CD31F454F69561D8665DC93EF812F397B0 Validity Not Before: Jun 1 09:47:32 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=665aee34-a644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:33:2d:3d:18:5d:dc:ea:34:95:8f:a5:4e:15: 19:ff:ab:82:50:1d:54:fa:f7:fe:fa:64:f4:f9:97: 5d:15:c6:b7:aa:4c:bf:b5:cc:c0:c3:29:87:16:d3: 2c:6c:32:d3:8f:8c:26:40:58:26:80:a3:0f:24:fe: 93:f6:a3:2e:a4:75:bf:f9:3d:f5:cb:a8:ec:9f:a9: c2:e1:2a:06:05:51:4f:c5:f3:81:3e:0f:78:9c:70: 8d:d2:94:50:ad:3b:f7:27:75:80:bf:9e:b2:db:14: fa:f1:a9:9b:ea:75:50:28:d0:f5:4e:d5:49:26:ce: ae:67:31:5a:7f:14:ec:15:80:02:ad:2b:fa:d0:21: a0:fb:5a:c1:1e:17:18:61:76:ed:a1:b2:cc:3d:29: 20:af:a4:72:c6:29:26:01:ae:ad:12:c0:2d:75:73: 1f:ca:60:4a:61:b1:1c:d6:3a:ee:80:b3:76:6b:f0: f0:9a:ca:0b:f9:c5:b0:17:c7:4e:3d:c4:33:63:d0: cb:28:1a:9c:67:4b:04:95:ee:09:b2:51:c3:21:7b: dd:ed:11:26:f7:76:41:6a:d4:ed:4f:fa:88:b2:30: ae:b4:15:b0:45:67:57:1c:c2:97:d6:2f:3e:f9:0b: 33:8c:ba:b9:10:8a:e6:67:05:4b:bf:e5:94:a0:2c: 94:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:15:B2:F8:F1:EF:33:27:C3:A1:4E:86:86:8A:35:4D:E6:77:FF:F4 X509v3 Authority Key Identifier: keyid:DA:1D:B2:CD:31:F4:54:F6:95:61:D8:66:5D:C9:3E:F8:12:F3:97:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/4317395081E611EE9EFE132BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.186.158.0/23 IPv6: 2400:72e0:9f00::/40 Signature Algorithm: sha256WithRSAEncryption 34:e8:9e:c0:7e:9b:4b:56:ac:a1:6e:c9:eb:6c:dc:e7:0a:88: ab:3e:a6:0e:51:b3:52:0a:39:2d:e8:e4:4e:37:a9:9a:39:91: a8:7e:27:29:a7:2f:2e:69:ea:d8:11:4e:1a:97:79:95:4d:49: 58:eb:a1:80:fc:c5:82:76:05:da:b4:8e:40:06:65:07:87:5b: e3:67:0c:3f:55:c5:50:4b:95:e9:5f:f3:02:b2:f3:b6:6c:dc: a1:00:e7:9e:8b:ee:01:47:94:72:54:f5:93:1c:24:31:7b:5d: 90:58:eb:e8:93:1d:93:cd:9a:3c:eb:58:a1:d7:f0:5d:83:02: 11:1c:fc:67:a4:53:9c:9e:f5:ad:05:1c:ba:8e:1d:56:46:1a: 0b:55:1b:a4:b0:40:be:88:b2:bb:1c:d3:5e:34:b6:53:73:e4: 80:97:5f:dc:44:c0:b0:72:4d:40:d4:8f:83:d7:a4:b6:b7:78: 7f:e1:44:17:c7:d6:5e:ce:05:23:6b:de:52:a3:2e:78:4a:9a: 72:a3:43:df:34:f2:c8:76:09:37:24:5f:ce:86:4d:31:e4:fb: 3d:86:82:a0:11:05:ca:88:a1:e5:b4:2e:45:54:ff:82:23:c3: 1b:54:9f:f4:21:4b:fa:e2:c3:50:ef:b5:ca:81:58:29:b0:8a: 66:ab:93:5e -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QTdDQTExMC8GA1UEBRMoREExREIyQ0QzMUY0NTRGNjk1NjFEODY2NURDOTNFRjgx MkYzOTdCMDAeFw0yNDA2MDEwOTQ3MzJaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NWFlZTM0LWE2NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2My09GF3c6jSVj6VOFRn/q4JQHVT69/76ZPT5l10VxreqTL+1zMDDKYcW0yxs MtOPjCZAWCaAow8k/pP2oy6kdb/5PfXLqOyfqcLhKgYFUU/F84E+D3iccI3SlFCt O/cndYC/nrLbFPrxqZvqdVAo0PVO1Ukmzq5nMVp/FOwVgAKtK/rQIaD7WsEeFxhh du2hssw9KSCvpHLGKSYBrq0SwC11cx/KYEphsRzWOu6As3Zr8PCaygv5xbAXx049 xDNj0MsoGpxnSwSV7gmyUcMhe93tESb3dkFq1O1P+oiyMK60FbBFZ1ccwpfWLz75 CzOMurkQiuZnBUu/5ZSgLJRDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUhxWy+PHv MyfDoU6Ghoo1TeZ3//QwHwYDVR0jBBgwFoAU2h2yzTH0VPaVYdhmXck++BLzl7Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlBN0NBLzRDRjdGMTU4N0VC NzExRUU5NjIzRTkxQUM0RjlBRTAyLzJoMnl6VEgwVlBhVllkaG1YY2stLUJMemw3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMmgyeXpUSDBWUGFWWWRobVhjay0tQkx6bDdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTdDQS80Q0Y3RjE1ODdFQjcxMUVFOTYyM0U5MUFDNEY5QUUwMi80MzE3Mzk1MDgx RTYxMUVFOUVGRTEzMkJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAvBggrBgEFBQcBBwEB/wQg MB4wDAQCAAEwBgMEAWe6njAOBAIAAjAIAwYAJABy4J8wDQYJKoZIhvcNAQELBQAD ggEBADTonsB+m0tWrKFuyets3OcKiKs+pg5Rs1IKOS3o5E43qZo5kah+JymnLy5p 6tgRThqXeZVNSVjroYD8xYJ2Bdq0jkAGZQeHW+NnDD9VxVBLlelf8wKy87Zs3KEA 556L7gFHlHJU9ZMcJDF7XZBY6+iTHZPNmjzrWKHX8F2DAhEc/GekU5ye9a0FHLqO HVZGGgtVG6SwQL6Isrsc0140tlNz5ICXX9xEwLByTUDUj4PXpLa3eH/hRBfH1l7O BSNr3lKjLnhKmnKjQ9808sh2CTckX86GTTHk+z2GgqARBcqIoeW0LkVU/4IjwxtU n/QhS/riw1DvtcqBWCmwimark14= -----END CERTIFICATE-----Generated at Thu Nov 21 05:06:02 2024 by rpki-client on console-fra.rpki-client.org