$ rpki-client -vvf rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/35A11C66086C11EFB8BD7815C4F9AE02.roa File: 35A11C66086C11EFB8BD7815C4F9AE02.roa (raw, json) Hash identifier: jx27R9R8a3ve62AOIqb5E0ou30ap1JUun3eJwYMuDqE= Subject key identifier: 74:DA:6B:C2:84:B4:9E:ED:CC:28:44:FB:76:0D:EA:A6:1C:DD:7D:2B Certificate issuer: /CN=A919C776/serialNumber=D7C4DE13686F4355853683915E541DED753AEB3A Certificate serial: 02 Authority key identifier: D7:C4:DE:13:68:6F:43:55:85:36:83:91:5E:54:1D:ED:75:3A:EB:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/35A11C66086C11EFB8BD7815C4F9AE02.roa Signing time: Thu 02 May 2024 10:10:32 +0000 ROA not before: Thu 02 May 2024 10:10:32 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 152723 IP address blocks: 103.54.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.crl rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Sep 2024 04:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C776/serialNumber=D7C4DE13686F4355853683915E541DED753AEB3A Validity Not Before: May 2 10:10:32 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66336698-d04b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:50:e7:5a:45:7d:70:0d:7a:c5:56:9c:80:45: 7c:49:a8:53:c0:44:67:b3:6d:7e:8d:da:b7:98:fc: 14:c3:f0:34:ca:ed:50:b8:38:47:28:a5:8c:a9:7f: ac:e6:22:f2:40:cb:f5:92:8b:1f:b2:ae:fa:d2:ac: ee:6e:cb:f8:92:35:1e:e1:f8:23:29:b5:a6:65:ac: b7:5a:02:dc:ce:50:ff:d5:ea:54:38:39:2e:7b:1e: ec:3f:f8:80:6e:0c:4b:21:a2:f1:41:ea:56:8f:1c: cd:d1:32:9d:f8:bc:80:28:82:bc:5a:70:7b:44:2c: 58:55:d6:73:fb:2b:89:8e:93:48:51:29:6a:5f:94: 13:3b:4b:79:6b:08:f4:e4:2c:38:b5:00:88:9e:ac: 33:98:e1:75:59:1d:a0:1a:45:ba:1e:60:d2:d0:fc: 5c:81:45:5d:aa:2a:76:7d:78:04:95:48:2b:3f:80: 7c:a9:f6:05:04:62:94:8e:d8:38:a0:d7:bd:72:5a: 2c:52:99:99:ed:86:1c:0d:1f:ad:59:10:05:c0:73: 29:ff:b7:b1:1e:ef:89:e3:36:9b:ff:a5:b4:17:71: fc:e9:b9:db:bb:00:2d:1f:c0:0d:cc:14:be:d0:03: 64:81:ba:79:19:7d:9f:18:d8:dc:8f:63:1f:b9:11: 6e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:DA:6B:C2:84:B4:9E:ED:CC:28:44:FB:76:0D:EA:A6:1C:DD:7D:2B X509v3 Authority Key Identifier: keyid:D7:C4:DE:13:68:6F:43:55:85:36:83:91:5E:54:1D:ED:75:3A:EB:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/35A11C66086C11EFB8BD7815C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.54.108.0/23 Signature Algorithm: sha256WithRSAEncryption 08:85:e7:66:ee:68:c9:ee:3c:b4:d0:8e:6b:da:68:e8:a4:51: 76:65:1e:d5:a5:17:e1:14:3d:70:a0:b4:97:57:04:19:ed:43: 09:09:23:b0:7e:8d:8b:ac:e7:88:76:b7:82:51:f1:15:0e:94: ed:26:92:68:ef:d9:4c:c7:77:66:ca:13:a9:82:3f:88:99:a6: d5:53:48:be:97:2a:37:82:6d:6c:30:6e:db:4e:d5:8c:14:5d: a0:ca:e9:45:36:22:c3:21:dc:46:a1:da:a7:ef:4a:8a:76:3b: a0:0c:05:e0:80:d4:2e:2d:d5:28:ed:94:d8:a3:0c:89:92:b9: 16:07:45:a9:6c:af:04:7f:15:ac:67:77:34:fb:2b:54:f8:c0: 02:b5:87:c8:ba:e4:2f:ef:f7:62:ae:8d:b8:b2:0d:be:58:a4: 14:d0:24:11:61:19:3e:59:75:03:27:4d:64:25:cb:84:1e:5a: af:a9:22:d9:f1:13:49:77:fe:66:b3:6e:d0:fd:79:d1:c8:39: 93:ad:bf:22:30:da:79:72:06:69:66:ac:4c:ec:ae:fa:91:5d: 0b:b1:1c:4b:9b:1a:ce:5a:63:c3:c0:35:07:96:8c:85:67:a6: 95:d2:41:29:6f:41:27:fc:cd:47:4d:b0:ff:a7:68:82:f3:80: 33:ea:43:4c -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 Qzc3NjExMC8GA1UEBRMoRDdDNERFMTM2ODZGNDM1NTg1MzY4MzkxNUU1NDFERUQ3 NTNBRUIzQTAeFw0yNDA1MDIxMDEwMzJaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MzM2Njk4LWQwNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdUOdaRX1wDXrFVpyARXxJqFPARGezbX6N2reY/BTD8DTK7VC4OEcopYypf6zm IvJAy/WSix+yrvrSrO5uy/iSNR7h+CMptaZlrLdaAtzOUP/V6lQ4OS57Huw/+IBu DEshovFB6laPHM3RMp34vIAogrxacHtELFhV1nP7K4mOk0hRKWpflBM7S3lrCPTk LDi1AIierDOY4XVZHaAaRboeYNLQ/FyBRV2qKnZ9eASVSCs/gHyp9gUEYpSO2Dig 171yWixSmZnthhwNH61ZEAXAcyn/t7Ee74njNpv/pbQXcfzpudu7AC0fwA3MFL7Q A2SBunkZfZ8Y2NyPYx+5EW4hAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUdNprwoS0 nu3MKET7dg3qphzdfSswHwYDVR0jBBgwFoAU18TeE2hvQ1WFNoORXlQd7XU66zow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlDNzc2LzkyOTdDNDUyMDg2 QjExRUY4MjZEM0IxNEM0RjlBRTAyLzE4VGVFMmh2UTFXRk5vT1JYbFFkN1hVNjZ6 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMThUZUUyaHZRMVdGTm9PUlhsUWQ3WFU2NnpvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Qzc3Ni85Mjk3QzQ1MjA4NkIxMUVGODI2RDNCMTRDNEY5QUUwMi8zNUExMUM2NjA4 NkMxMUVGQjhCRDc4MTVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWc2bDANBgkqhkiG9w0BAQsFAAOCAQEACIXnZu5oye48tNCO a9po6KRRdmUe1aUX4RQ9cKC0l1cEGe1DCQkjsH6Ni6zniHa3glHxFQ6U7SaSaO/Z TMd3ZsoTqYI/iJmm1VNIvpcqN4JtbDBu207VjBRdoMrpRTYiwyHcRqHap+9KinY7 oAwF4IDULi3VKO2U2KMMiZK5FgdFqWyvBH8VrGd3NPsrVPjAArWHyLrkL+/3Yq6N uLINvlikFNAkEWEZPll1AydNZCXLhB5ar6ki2fETSXf+ZrNu0P150cg5k62/IjDa eXIGaWasTOyu+pFdC7EcS5sazlpjw8A1B5aMhWemldJBKW9BJ/zNR02w/6dogvOA M+pDTA== -----END CERTIFICATE-----Generated at Tue Sep 17 06:07:30 2024 by rpki-client on console-fra.rpki-client.org