$ rpki-client -vvf rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/2B2B06B2401E11EBB0588F5FC4F9AE02.roa File: 2B2B06B2401E11EBB0588F5FC4F9AE02.roa (raw, json) Hash identifier: cMIcgTn0SRzNi+Iky45EfvQ9z//DEQACOWPaeefqdnE= Subject key identifier: 44:2E:68:66:94:05:54:D2:C4:60:D0:C7:4A:CE:F3:AE:74:E6:0B:16 Certificate issuer: /CN=A919C563/serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347 Certificate serial: 100A Authority key identifier: 04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/2B2B06B2401E11EBB0588F5FC4F9AE02.roa Signing time: Tue 16 Jan 2024 17:55:40 +0000 ROA not before: Tue 16 Jan 2024 17:55:40 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 135055 IP address blocks: 103.18.180.0/24 maxlen: 24 103.107.38.0/24 maxlen: 24 103.107.40.0/23 maxlen: 23 103.107.40.0/24 maxlen: 24 103.107.41.0/24 maxlen: 24 2406:eac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 18:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4106 (0x100a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C563/serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347 Validity Not Before: Jan 16 17:55:40 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65a6c31b-8a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:43:64:db:ed:55:32:35:c7:61:06:f5:6e:64: 69:95:eb:72:6e:dd:c0:23:5a:89:01:b8:af:cf:92: 0f:a1:07:8c:3c:fd:5b:2e:f5:32:b9:8b:30:8d:2f: 66:a6:ca:ec:ad:7e:f3:10:4f:fc:87:7a:d0:11:1c: fc:c9:7a:11:56:cb:5d:81:a3:af:cf:10:e9:98:9e: 36:5c:6c:50:8d:94:a6:05:8e:b7:14:ea:6d:4b:54: 03:4d:82:28:75:03:e3:9c:ec:81:dd:af:e1:31:94: b3:05:c6:f5:7f:a1:76:83:18:a3:60:0a:4b:18:fd: 31:93:cd:cd:4c:68:8f:2f:1d:3f:fa:d7:0d:b2:9d: 25:9a:e0:de:06:ef:35:b6:66:1e:07:fd:96:04:5a: aa:61:d0:ac:40:9c:61:d7:79:ae:31:81:c0:55:c6: e1:f0:98:54:74:fd:de:bb:cb:0c:14:2a:bc:7f:06: 6c:2e:4b:83:e1:a9:eb:2b:a4:91:6c:7e:9e:cc:c0: 27:4a:28:91:c7:43:fe:64:ef:58:30:09:dc:a4:f2: 7c:eb:b1:7c:cf:2c:06:3e:c5:5d:64:bb:09:ef:f8: 06:63:18:94:ca:31:3b:bb:52:91:52:10:e6:30:ed: a2:e4:41:11:de:a0:94:1c:96:a9:f1:13:b7:8a:ca: 49:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2E:68:66:94:05:54:D2:C4:60:D0:C7:4A:CE:F3:AE:74:E6:0B:16 X509v3 Authority Key Identifier: keyid:04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/2B2B06B2401E11EBB0588F5FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.18.180.0/24 103.107.38.0/24 103.107.40.0/23 IPv6: 2406:eac0::/32 Signature Algorithm: sha256WithRSAEncryption c9:c3:61:8c:d2:3a:36:a4:01:23:39:ca:17:75:d4:19:33:67: e5:fd:7e:4d:9e:a2:81:de:09:39:ca:c0:84:35:fb:82:ad:d9: 5e:d5:4a:41:86:89:80:21:d4:f8:a6:ca:18:d4:19:dc:4a:d2: 24:3e:92:6b:be:22:55:53:14:9a:8c:b2:68:41:9d:7b:7a:3c: 3d:c1:1f:a1:19:f1:82:0d:02:d3:08:71:c0:81:19:3e:47:b0: d1:b4:d1:80:1c:fc:74:4a:91:ee:54:de:96:16:7b:69:4f:7b: bb:25:d6:4f:1b:66:cc:00:70:4e:46:4c:8e:67:ac:0c:15:ac: ba:f5:ff:87:1b:4c:d5:78:dd:dc:8e:95:1b:09:21:3f:c0:d6: a9:06:03:45:d3:0b:7a:dd:1f:5d:59:b3:9c:38:44:f7:c4:62: ef:c0:2b:19:6c:78:e1:ca:3d:ce:d7:70:cc:11:c4:fa:2f:49: f4:14:7d:9e:dc:f4:92:ae:c4:e2:3f:4b:62:a7:15:c4:42:05: c8:8a:c8:cd:e5:f2:c3:74:5f:22:33:f8:7f:07:52:00:9c:88: 3c:9e:55:28:46:75:90:59:64:0b:bc:e9:71:ea:a1:9c:00:27: 76:fd:28:e3:d8:68:d4:aa:78:48:09:d7:c7:24:24:29:3f:4b: 83:9b:ed:ad -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICEAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM1NjMxMTAvBgNVBAUTKDA0QTAyNzVGNUIyQjVDMTgwRTdFMEQxMjk2RUVENjBC QzBDRjYzNDcwHhcNMjQwMTE2MTc1NTQwWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWE2YzMxYi04YTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvENk2+1VMjXHYQb1bmRpletybt3AI1qJAbivz5IPoQeMPP1bLvUyuYswjS9m psrsrX7zEE/8h3rQERz8yXoRVstdgaOvzxDpmJ42XGxQjZSmBY63FOptS1QDTYIo dQPjnOyB3a/hMZSzBcb1f6F2gxijYApLGP0xk83NTGiPLx0/+tcNsp0lmuDeBu81 tmYeB/2WBFqqYdCsQJxh13muMYHAVcbh8JhUdP3eu8sMFCq8fwZsLkuD4anrK6SR bH6ezMAnSiiRx0P+ZO9YMAncpPJ867F8zywGPsVdZLsJ7/gGYxiUyjE7u1KRUhDm MO2i5EER3qCUHJap8RO3ispJYQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFEQuaGaU BVTSxGDQx0rO86505gsWMB8GA1UdIwQYMBaAFASgJ19bK1wYDn4NEpbu1gvAz2NH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzU2My8xMUI2MzM2NDE3 QzExMUU5ODEwODBGNkNDNEY5QUUwMi9CS0FuWDFzclhCZ09mZzBTbHU3V0M4RFBZ MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JLQW5YMXNyWEJnT2ZnMFNsdTdXQzhEUFkwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUM1NjMvMTFCNjMzNjQxN0MxMTFFOTgxMDgwRjZDQzRGOUFFMDIvMkIyQjA2QjI0 MDFFMTFFQkIwNTg4RjVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBABnErQDBABnayYDBAFnaygwDQQCAAIwBwMFACQG6sAwDQYJ KoZIhvcNAQELBQADggEBAMnDYYzSOjakASM5yhd11BkzZ+X9fk2eooHeCTnKwIQ1 +4Kt2V7VSkGGiYAh1PimyhjUGdxK0iQ+kmu+IlVTFJqMsmhBnXt6PD3BH6EZ8YIN AtMIccCBGT5HsNG00YAc/HRKke5U3pYWe2lPe7sl1k8bZswAcE5GTI5nrAwVrLr1 /4cbTNV43dyOlRsJIT/A1qkGA0XTC3rdH11Zs5w4RPfEYu/AKxlseOHKPc7XcMwR xPovSfQUfZ7c9JKuxOI/S2KnFcRCBciKyM3l8sN0XyIz+H8HUgCciDyeVShGdZBZ ZAu86XHqoZwAJ3b9KOPYaNSqeEgJ18ckJCk/S4Ob7a0= -----END CERTIFICATE-----Generated at Sun May 26 19:58:55 2024 by rpki-client on console-fra.rpki-client.org