$ rpki-client -vvf rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/E3DD6362787A11ED89732760C4F9AE02.roa File: E3DD6362787A11ED89732760C4F9AE02.roa (raw, json) Hash identifier: UivYPIeEF4bNwEIll2XyDrhcbZqGNmj3hiIA72aeZpE= Subject key identifier: 75:8B:6F:0B:2F:56:D9:99:BC:33:94:4C:74:03:5E:2D:19:84:49:39 Certificate issuer: /CN=A919A824/serialNumber=61E4017AFF4776713CFDC8205CC2FB2178462BA1 Certificate serial: 096F Authority key identifier: 61:E4:01:7A:FF:47:76:71:3C:FD:C8:20:5C:C2:FB:21:78:46:2B:A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/E3DD6362787A11ED89732760C4F9AE02.roa Signing time: Sun 12 May 2024 16:33:08 +0000 ROA not before: Sun 12 May 2024 16:33:08 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 134780 IP address blocks: 103.149.0.0/23 maxlen: 23 103.149.0.0/24 maxlen: 24 103.149.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.crl rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2415 (0x96f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A824/serialNumber=61E4017AFF4776713CFDC8205CC2FB2178462BA1 Validity Not Before: May 12 16:33:08 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=6640ef44-7c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:00:7b:cc:77:20:84:9a:39:8c:3b:2e:40:ba: e8:cb:51:1b:69:54:bd:15:cc:dd:3d:e1:7b:6d:d7: d2:3a:72:3a:26:24:50:73:97:20:87:85:b2:2e:b3: cf:7e:30:3c:65:aa:34:82:91:40:ec:e4:2d:e9:81: b3:4e:3e:d5:b0:5d:88:0a:85:68:90:46:56:71:e7: 53:a5:cc:ec:75:2c:1f:1a:f3:ce:f7:a4:00:31:69: 78:25:22:e2:32:80:57:50:71:57:21:b7:c5:d8:75: 4a:44:ae:c7:dd:ed:df:fb:09:56:46:eb:5c:a5:af: 50:98:bc:d4:80:7e:b5:35:d7:4f:e1:9c:eb:bf:7d: f7:a7:88:88:1c:96:1e:d2:21:20:01:bc:24:e1:34: c5:9f:92:86:9e:cb:e2:9d:61:c8:2c:cf:80:ee:53: 2b:05:39:bb:47:d6:d4:ef:0c:a4:97:90:cb:9a:78: 06:4a:d8:fc:72:d7:55:7b:01:34:1b:55:b3:e9:9a: 4a:4c:f0:61:d3:e8:c6:5a:51:61:e7:88:c2:47:be: 7a:ac:21:54:fb:a2:21:60:6f:8c:14:11:55:77:e1: af:07:46:c2:5a:7d:79:37:b0:2a:ce:72:c9:c2:4b: 53:4a:98:79:a3:da:36:e6:25:44:87:c4:1e:67:06: b3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:8B:6F:0B:2F:56:D9:99:BC:33:94:4C:74:03:5E:2D:19:84:49:39 X509v3 Authority Key Identifier: keyid:61:E4:01:7A:FF:47:76:71:3C:FD:C8:20:5C:C2:FB:21:78:46:2B:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/E3DD6362787A11ED89732760C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.149.0.0/23 Signature Algorithm: sha256WithRSAEncryption 04:0c:9c:8b:c8:8e:78:80:4f:b7:50:ee:fb:28:05:a9:e2:41: d2:74:62:ec:cd:1e:00:1f:26:34:ca:76:4b:8a:da:c8:11:67: 1d:95:be:0d:dd:7b:49:73:f2:40:a6:b6:68:25:d6:12:42:9b: 3c:26:31:59:f4:9f:62:d9:6d:5f:fb:c8:20:6e:1c:65:5e:e5: ee:c4:64:2d:d0:9b:d7:ac:bc:eb:6f:aa:ec:95:46:df:5a:88: ae:21:b3:3e:3d:23:17:a0:89:02:7c:54:28:f5:e2:69:89:28: 9a:af:bc:1e:d7:e1:37:b6:0d:d6:9d:5b:1a:0b:ef:be:59:3d: a9:61:3d:f5:fa:ba:31:14:ce:7b:ca:ff:cb:3e:df:8a:07:c5: 5a:4b:60:6d:f4:f3:85:82:60:81:8f:81:16:39:bb:c2:e6:ba: 0a:cb:aa:46:a7:14:1b:ab:4d:77:e2:3e:8f:01:7b:87:d3:9a: 5b:9a:1b:8b:be:b1:3d:a8:65:5f:6f:07:15:97:b6:f3:c0:cc: 08:a5:a1:7f:bc:a7:53:13:30:ac:4c:8e:78:b6:2b:33:34:6d: 85:a5:c5:4c:ed:b1:80:a8:cf:55:8a:43:2f:cd:bc:38:cd:d0: e4:f1:b8:26:86:f1:6f:48:6e:bd:09:a8:b2:cd:e8:0f:03:29: 4f:71:a1:a0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE4MjQxMTAvBgNVBAUTKDYxRTQwMTdBRkY0Nzc2NzEzQ0ZEQzgyMDVDQzJGQjIx Nzg0NjJCQTEwHhcNMjQwNTEyMTYzMzA4WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjQwZWY0NC03YzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQB7zHcghJo5jDsuQLroy1EbaVS9FczdPeF7bdfSOnI6JiRQc5cgh4WyLrPP fjA8Zao0gpFA7OQt6YGzTj7VsF2ICoVokEZWcedTpczsdSwfGvPO96QAMWl4JSLi MoBXUHFXIbfF2HVKRK7H3e3f+wlWRutcpa9QmLzUgH61NddP4Zzrv333p4iIHJYe 0iEgAbwk4TTFn5KGnsvinWHILM+A7lMrBTm7R9bU7wykl5DLmngGStj8ctdVewE0 G1Wz6ZpKTPBh0+jGWlFh54jCR756rCFU+6IhYG+MFBFVd+GvB0bCWn15N7AqznLJ wktTSph5o9o25iVEh8QeZwazvwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHWLbwsv VtmZvDOUTHQDXi0ZhEk5MB8GA1UdIwQYMBaAFGHkAXr/R3ZxPP3IIFzC+yF4Riuh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTgyNC84QkZGM0JCNDZF N0YxMUVBOTVFRjE4NjFDNEY5QUUwMi9ZZVFCZXY5SGRuRThfY2dnWE1MN0lYaEdL NkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1llUUJldjlIZG5FOF9jZ2dYTUw3SVhoR0s2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUE4MjQvOEJGRjNCQjQ2RTdGMTFFQTk1RUYxODYxQzRGOUFFMDIvRTNERDYzNjI3 ODdBMTFFRDg5NzMyNzYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnlQAwDQYJKoZIhvcNAQELBQADggEBAAQMnIvIjniAT7dQ 7vsoBaniQdJ0YuzNHgAfJjTKdkuK2sgRZx2Vvg3de0lz8kCmtmgl1hJCmzwmMVn0 n2LZbV/7yCBuHGVe5e7EZC3Qm9esvOtvquyVRt9aiK4hsz49IxegiQJ8VCj14mmJ KJqvvB7X4Te2DdadWxoL775ZPalhPfX6ujEUznvK/8s+34oHxVpLYG3084WCYIGP gRY5u8LmugrLqkanFBurTXfiPo8Be4fTmluaG4u+sT2oZV9vBxWXtvPAzAiloX+8 p1MTMKxMjni2KzM0bYWlxUztsYCoz1WKQy/NvDjN0OTxuCaG8W9Ibr0JqLLN6A8D KU9xoaA= -----END CERTIFICATE-----Generated at Sat May 18 21:31:30 2024 by rpki-client on console-ams.rpki-client.org