$ rpki-client -vvf rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/E4B59AA2FF8311E9B1B99628C4F9AE02.roa File: E4B59AA2FF8311E9B1B99628C4F9AE02.roa (raw, json) Hash identifier: 3MI130qG7qiGy/yPcdkdZX/rmSLfxgXhGaaD2XSdx6I= Subject key identifier: 41:52:79:24:64:7F:DD:BB:A6:37:17:B5:B9:FB:88:CC:57:C2:AF:22 Certificate issuer: /CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Certificate serial: 0B6D Authority key identifier: 40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/E4B59AA2FF8311E9B1B99628C4F9AE02.roa Signing time: Fri 26 Jan 2024 19:07:21 +0000 ROA not before: Fri 26 Jan 2024 19:07:21 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 132130 IP address blocks: 103.126.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 19:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2925 (0xb6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Validity Not Before: Jan 26 19:07:21 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65b402e9-ec26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c2:7c:ce:0f:7b:f7:96:2f:25:a2:4b:d7:9b: 42:44:14:9d:c5:dc:5a:82:3b:3b:b2:13:64:0d:f3: 8f:a7:f9:ee:18:eb:b7:37:c0:33:33:4e:a3:aa:80: 9a:ec:ee:4b:36:87:bf:ce:7a:57:93:9c:ce:ac:39: 16:40:74:90:14:30:98:f1:3c:5a:1c:ea:d6:ab:5d: 76:ad:04:c5:55:75:87:10:d6:ab:e8:ea:4c:a1:c6: e9:e9:1d:63:04:89:d5:23:4a:a2:1d:a4:6f:9e:d9: af:25:1e:e0:ae:a1:b6:c1:41:cb:d7:e1:e7:c2:2c: 40:10:ec:3f:f8:03:d3:ff:d8:0f:70:11:40:ca:54: e1:a4:21:78:83:32:a9:86:24:17:46:10:40:bc:80: 2e:c6:a2:c7:11:64:ef:da:da:5a:5c:09:d2:c2:a3: e0:c0:f9:69:82:0b:f7:23:00:15:d6:f0:8f:42:a8: a1:80:4e:d7:09:16:09:ec:1f:a4:22:5d:76:0f:05: af:da:df:b8:40:10:75:ee:4e:7c:e0:66:db:ef:1d: 2e:d2:ba:5d:a9:d6:66:0f:24:f2:ba:07:c1:dc:90: 28:ba:6b:66:47:4f:c9:1c:0e:82:9c:2c:c2:98:9f: b7:ea:9a:fe:5b:0a:88:90:ec:90:7e:c1:4a:d2:8a: 37:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:52:79:24:64:7F:DD:BB:A6:37:17:B5:B9:FB:88:CC:57:C2:AF:22 X509v3 Authority Key Identifier: keyid:40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/E4B59AA2FF8311E9B1B99628C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.126.220.0/22 Signature Algorithm: sha256WithRSAEncryption 02:e9:a6:b1:1b:cc:38:a1:69:43:f4:91:d0:c5:b4:21:be:dd: 07:94:c7:43:d8:cd:33:48:08:2f:8b:b7:79:8e:5b:d8:a8:03: 92:7e:1e:e6:e0:e3:c7:03:36:6e:72:50:3f:5d:ff:80:3c:c0: 1d:e6:e2:75:c7:62:e2:b2:a7:b2:6a:d5:a5:8a:70:11:b9:a3: c1:cd:9c:e6:62:df:ab:b7:ca:58:02:59:2b:9d:4a:f9:96:dc: a3:c9:9b:93:7b:be:0e:a3:e1:c9:7c:97:3a:a7:6c:d1:e0:f8: c6:cb:40:f2:5c:32:c4:3d:42:1d:c1:f5:87:8b:d7:39:8b:a6: 40:84:9a:c2:33:80:c7:85:d4:37:e0:72:aa:b8:18:e8:42:e1: 4f:b2:c1:f8:b5:9f:1e:8e:26:75:7f:e6:fe:0d:9e:e6:d0:d8: 7b:14:2d:e9:9a:95:e2:f5:36:c0:08:ad:98:35:05:ae:60:cc: 2a:11:e1:e4:e1:d6:81:ca:7c:42:6e:e8:39:7d:f6:54:9d:11: b0:f7:4c:e8:26:c5:17:51:ba:6f:83:0d:3e:fe:e4:70:8c:e5: 18:10:40:33:d1:51:3b:96:64:89:0d:ba:a8:6c:83:c1:c9:7e: 0f:60:09:0e:be:77:01:38:b0:9e:06:a4:22:35:90:d6:d6:48: 05:98:bb:12 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJDRDkxMTAvBgNVBAUTKDQwOTlCMDA4NDM3NkE5RTA0Q0VEN0M2NzhBQkM2ODU4 REQ5Rjg1MUEwHhcNMjQwMTI2MTkwNzIxWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWI0MDJlOS1lYzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3sJ8zg9795YvJaJL15tCRBSdxdxagjs7shNkDfOPp/nuGOu3N8AzM06jqoCa 7O5LNoe/znpXk5zOrDkWQHSQFDCY8TxaHOrWq112rQTFVXWHENar6OpMocbp6R1j BInVI0qiHaRvntmvJR7grqG2wUHL1+HnwixAEOw/+APT/9gPcBFAylThpCF4gzKp hiQXRhBAvIAuxqLHEWTv2tpaXAnSwqPgwPlpggv3IwAV1vCPQqihgE7XCRYJ7B+k Il12DwWv2t+4QBB17k584Gbb7x0u0rpdqdZmDyTyugfB3JAoumtmR0/JHA6CnCzC mJ+36pr+WwqIkOyQfsFK0oo3KQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEFSeSRk f927pjcXtbn7iMxXwq8iMB8GA1UdIwQYMBaAFECZsAhDdqngTO18Z4q8aFjdn4Ua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkNEOS8xN0I3OEYxNkZG ODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFlQk03WHhuaXJ4b1dOMmZo Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FKbXdDRU4ycWVCTTdYeG5pcnhvV04yZmhSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUJDRDkvMTdCNzhGMTZGRjgyMTFFOUI0MDJGQzI0QzRGOUFFMDIvRTRCNTlBQTJG RjgzMTFFOUIxQjk5NjI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnftwwDQYJKoZIhvcNAQELBQADggEBAALpprEbzDihaUP0 kdDFtCG+3QeUx0PYzTNICC+Lt3mOW9ioA5J+Hubg48cDNm5yUD9d/4A8wB3m4nXH YuKyp7Jq1aWKcBG5o8HNnOZi36u3ylgCWSudSvmW3KPJm5N7vg6j4cl8lzqnbNHg +MbLQPJcMsQ9Qh3B9YeL1zmLpkCEmsIzgMeF1Dfgcqq4GOhC4U+ywfi1nx6OJnV/ 5v4NnubQ2HsULemaleL1NsAIrZg1Ba5gzCoR4eTh1oHKfEJu6Dl99lSdEbD3TOgm xRdRum+DDT7+5HCM5RgQQDPRUTuWZIkNuqhsg8HJfg9gCQ6+dwE4sJ4GpCI1kNbW SAWYuxI= -----END CERTIFICATE-----Generated at Sun May 26 23:05:35 2024 by rpki-client on console-ams.rpki-client.org