$ rpki-client -vvf rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/4317395081E611EE9EFE132BC4F9AE02.roa File: 4317395081E611EE9EFE132BC4F9AE02.roa (raw, json) Hash identifier: 4s4KqtM3O9MyREm28rKTbjU5mDZCAqpfugH+QXCTwx4= Subject key identifier: DF:E3:66:10:8C:FF:33:19:07:6C:1E:C8:7D:44:2A:F3:39:57:7A:E8 Certificate issuer: /CN=A919A7CA/serialNumber=DA1DB2CD31F454F69561D8665DC93EF812F397B0 Certificate serial: 07 Authority key identifier: DA:1D:B2:CD:31:F4:54:F6:95:61:D8:66:5D:C9:3E:F8:12:F3:97:B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/4317395081E611EE9EFE132BC4F9AE02.roa Signing time: Mon 13 Nov 2023 05:34:07 +0000 ROA not before: Mon 13 Nov 2023 05:34:07 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 20473 IP address blocks: 103.186.158.0/24 maxlen: 24 103.186.159.0/24 maxlen: 24 2400:72e0:9f00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.crl rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 06:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A7CA/serialNumber=DA1DB2CD31F454F69561D8665DC93EF812F397B0 Validity Not Before: Nov 13 05:34:07 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=6551b54e-5d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1e:eb:e4:79:e3:84:8f:a3:8c:11:a9:9d:b5: a2:88:08:78:16:76:e6:25:85:d0:28:2a:4f:9b:68: ee:03:1f:53:9d:84:81:c9:27:f4:da:a2:f4:9a:18: 99:5c:f5:be:9e:0d:08:3e:24:fe:0a:10:3b:9c:fb: de:c9:31:49:a2:43:bc:9d:e4:a8:b4:b5:1e:1d:3d: 86:b8:94:c1:72:57:ac:13:9c:f1:b3:2d:ee:cd:d6: 6d:78:8b:56:39:6a:4d:72:d9:b3:a2:85:a6:b0:af: 6c:c6:3c:2f:4f:b0:a9:5d:22:66:37:f2:49:53:f2: 9e:31:33:5d:40:b4:5a:03:56:24:28:ba:61:9e:7e: fd:b3:58:d1:4a:35:0d:81:98:77:3b:dd:d0:d4:79: ec:39:7a:4d:a6:f1:36:4a:74:25:5b:e0:38:94:46: f9:0a:d0:57:b8:86:2c:20:2c:74:cc:6e:63:7f:aa: 05:d6:2e:51:b7:1a:b7:a3:ee:2d:fa:56:4e:fe:db: 28:21:47:38:b3:da:6a:d6:92:d1:04:23:78:08:c3: 3a:9a:c5:06:db:2b:6e:89:47:bc:0e:ba:e1:a0:01: 3e:df:e4:f4:61:88:df:79:a5:2b:b1:90:84:20:2d: 42:ab:27:31:9b:a6:5b:73:e4:af:c5:d4:0a:40:d2: 34:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E3:66:10:8C:FF:33:19:07:6C:1E:C8:7D:44:2A:F3:39:57:7A:E8 X509v3 Authority Key Identifier: keyid:DA:1D:B2:CD:31:F4:54:F6:95:61:D8:66:5D:C9:3E:F8:12:F3:97:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/4317395081E611EE9EFE132BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.186.158.0/23 IPv6: 2400:72e0:9f00::/40 Signature Algorithm: sha256WithRSAEncryption 2b:95:b7:53:26:a2:d8:77:cf:b2:54:ca:ec:7e:47:5e:d4:1b: 1b:d9:31:9c:9e:69:a5:2f:c1:4f:4b:f4:c6:ad:cf:42:6f:4a: 0d:9d:7e:ff:de:d2:20:b0:aa:19:9e:73:16:86:94:6d:cf:3d: f0:0c:51:6b:e3:7b:5b:9a:cf:b0:13:07:b8:3b:d7:b0:0f:8d: d5:80:35:d9:54:98:fd:b9:b5:2d:9c:a5:51:80:a2:78:9a:25: cd:03:fd:ab:2a:60:ef:10:92:65:29:58:05:ce:a8:47:63:e8: b2:e8:61:5f:27:56:73:6f:da:fa:f6:bc:d4:9b:5b:b9:d0:7f: 5c:eb:14:70:0b:4f:f1:6d:d5:ce:3e:ab:f6:ef:d8:1e:32:fc: b3:e6:10:c4:39:12:41:dc:8e:0a:97:e4:c4:0a:5f:d8:d9:4e: ff:61:2c:ee:b9:6c:83:82:8c:76:5e:5f:26:d3:6d:c9:75:d1: 0d:4a:4e:1c:ef:1d:ab:fa:43:2d:da:58:1a:7c:55:be:03:c8: c3:1c:34:a7:e7:52:7e:ae:68:b7:00:bc:42:c4:17:d7:a9:1d: 5e:02:5a:cc:f0:2e:d0:5c:b0:2f:32:9f:2e:37:f8:d4:cb:28: 6b:38:ed:48:45:28:e0:1d:68:b2:1b:ea:46:4c:48:34:82:90: d1:fc:f4:76 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QTdDQTExMC8GA1UEBRMoREExREIyQ0QzMUY0NTRGNjk1NjFEODY2NURDOTNFRjgx MkYzOTdCMDAeFw0yMzExMTMwNTM0MDdaFw0yNDA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY1NTFiNTRlLTVkOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcHuvkeeOEj6OMEamdtaKICHgWduYlhdAoKk+baO4DH1OdhIHJJ/TaovSaGJlc 9b6eDQg+JP4KEDuc+97JMUmiQ7yd5Ki0tR4dPYa4lMFyV6wTnPGzLe7N1m14i1Y5 ak1y2bOihaawr2zGPC9PsKldImY38klT8p4xM11AtFoDViQoumGefv2zWNFKNQ2B mHc73dDUeew5ek2m8TZKdCVb4DiURvkK0Fe4hiwgLHTMbmN/qgXWLlG3Grej7i36 Vk7+2yghRziz2mrWktEEI3gIwzqaxQbbK26JR7wOuuGgAT7f5PRhiN95pSuxkIQg LUKrJzGbpltz5K/F1ApA0jQvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU3+NmEIz/ MxkHbB7IfUQq8zlXeugwHwYDVR0jBBgwFoAU2h2yzTH0VPaVYdhmXck++BLzl7Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlBN0NBLzRDRjdGMTU4N0VC NzExRUU5NjIzRTkxQUM0RjlBRTAyLzJoMnl6VEgwVlBhVllkaG1YY2stLUJMemw3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMmgyeXpUSDBWUGFWWWRobVhjay0tQkx6bDdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTdDQS80Q0Y3RjE1ODdFQjcxMUVFOTYyM0U5MUFDNEY5QUUwMi80MzE3Mzk1MDgx RTYxMUVFOUVGRTEzMkJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAvBggrBgEFBQcBBwEB/wQg MB4wDAQCAAEwBgMEAWe6njAOBAIAAjAIAwYAJABy4J8wDQYJKoZIhvcNAQELBQAD ggEBACuVt1Mmoth3z7JUyux+R17UGxvZMZyeaaUvwU9L9Matz0JvSg2dfv/e0iCw qhmecxaGlG3PPfAMUWvje1uaz7ATB7g717APjdWANdlUmP25tS2cpVGAoniaJc0D /asqYO8QkmUpWAXOqEdj6LLoYV8nVnNv2vr2vNSbW7nQf1zrFHALT/Ft1c4+q/bv 2B4y/LPmEMQ5EkHcjgqX5MQKX9jZTv9hLO65bIOCjHZeXybTbcl10Q1KThzvHav6 Qy3aWBp8Vb4DyMMcNKfnUn6uaLcAvELEF9epHV4CWszwLtBcsC8yny43+NTLKGs4 7UhFKOAdaLIb6kZMSDSCkNH89HY= -----END CERTIFICATE-----Generated at Sun May 5 08:39:09 2024 by rpki-client on console-fra.rpki-client.org