$ rpki-client -vvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/F148BE6E511611EE85A7E634C4F9AE02.roa File: F148BE6E511611EE85A7E634C4F9AE02.roa (raw, json) Hash identifier: A4LpXw3tE6LtFJwAxqSanLcmZLfbY18U0yu4iIEqyks= Subject key identifier: 32:D8:6A:B8:DF:6E:23:46:70:5E:D5:2A:20:74:BC:17:9B:7C:99:20 Certificate issuer: /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Certificate serial: 1443 Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/F148BE6E511611EE85A7E634C4F9AE02.roa Signing time: Wed 20 Mar 2024 17:25:08 +0000 ROA not before: Wed 20 Mar 2024 17:25:08 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 137557 IP address blocks: 103.113.44.0/22 maxlen: 22 103.113.44.0/24 maxlen: 24 2402:b740::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 17:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5187 (0x1443) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Validity Not Before: Mar 20 17:25:08 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=65fb1bf4-9d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f2:1f:94:a9:a6:fb:62:39:98:6f:38:30:d1: fa:e9:d1:f9:34:15:bf:39:43:f9:dd:a7:85:8c:d7: 0d:87:55:59:21:eb:37:f0:12:66:27:3b:1c:ed:ba: be:4b:7c:22:86:ee:35:df:5b:8c:fa:c8:9b:a8:1b: 91:59:12:b0:a6:f1:b9:3a:06:cf:8f:a2:51:61:4b: 22:a5:b6:71:e3:90:05:87:a9:a3:00:f7:70:77:d1: 4e:f7:da:d6:d2:9c:2b:8a:2c:50:5c:12:9c:01:31: c6:17:6b:3e:42:9a:26:a1:c6:b0:39:e8:a5:26:3a: 0c:8e:2f:8f:53:c9:a6:a2:e3:11:80:94:2f:0c:96: 24:41:c5:4c:a1:85:c6:d3:96:53:91:10:f2:11:2c: 8f:1d:2e:76:36:f2:54:a6:86:d5:9b:95:36:52:d5: 08:7e:41:df:87:38:e6:0c:f9:e9:a3:54:9a:81:3f: 79:2e:54:d8:fc:19:07:93:f2:cb:40:36:c8:a5:e0: f7:e5:a5:92:bb:56:07:59:6f:4f:06:77:f3:c3:41: ea:ee:d7:48:e3:75:01:fb:a5:e4:99:56:bf:42:89: b9:0b:b5:ca:5a:4f:0b:06:6f:d0:14:3e:c1:de:ec: 4f:8c:0e:fa:34:fd:2b:fe:2b:c5:74:7e:be:02:b3: a5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D8:6A:B8:DF:6E:23:46:70:5E:D5:2A:20:74:BC:17:9B:7C:99:20 X509v3 Authority Key Identifier: keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/F148BE6E511611EE85A7E634C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.113.44.0/22 IPv6: 2402:b740::/32 Signature Algorithm: sha256WithRSAEncryption 58:bf:a1:fd:68:70:3d:2d:55:aa:09:e9:f5:64:5e:4c:c4:08: c2:e4:61:db:97:bc:c2:51:ed:25:de:33:1f:92:cb:74:fb:02: 09:37:55:e3:41:1f:b9:de:1c:56:3f:8d:0d:0d:f1:ed:b7:9a: 8a:48:e3:57:a6:5d:4a:db:59:f6:bb:26:c5:14:8c:c0:b7:92: 61:14:8d:f1:1a:e2:32:93:a7:5f:a6:ca:ef:ae:7d:d2:05:c6: 37:63:ae:71:b4:3c:90:e1:39:b8:5a:78:88:6b:1d:f5:8f:30: 4c:ee:ae:a1:4b:0b:24:28:91:2a:13:e2:d6:f3:81:d5:0a:75: f5:2b:81:56:07:ae:e5:d9:b3:8c:d7:0c:f2:c8:3a:80:ea:a4: a1:b7:f1:46:37:1b:48:3c:72:70:bd:de:ca:56:27:7e:a4:5e: 04:be:75:ca:73:58:83:87:7d:21:98:44:fd:90:da:88:aa:09: c9:92:e3:94:81:37:6c:24:81:28:e1:6e:2b:5d:bd:f8:54:73: 8b:97:71:22:bb:de:d6:b3:e6:0b:0f:3a:a4:10:76:f2:84:5f: dc:9d:27:f9:6c:7f:d5:5a:c3:db:0f:d3:f3:c4:f7:95:12:b1: 23:56:9b:10:5e:90:7c:04:17:ad:fe:f8:75:a9:a9:7e:88:9c: 1b:26:c2:9a -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICFEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNGNDIxMTAvBgNVBAUTKDNGNTU2QkMwMjUxMDMzQkNFNTcyRkM2QzhBQjc2MEFD QzQ5NzA1OTMwHhcNMjQwMzIwMTcyNTA4WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWZiMWJmNC05ZDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPIflKmm+2I5mG84MNH66dH5NBW/OUP53aeFjNcNh1VZIes38BJmJzsc7bq+ S3wihu4131uM+sibqBuRWRKwpvG5OgbPj6JRYUsipbZx45AFh6mjAPdwd9FO99rW 0pwriixQXBKcATHGF2s+QpomocawOeilJjoMji+PU8mmouMRgJQvDJYkQcVMoYXG 05ZTkRDyESyPHS52NvJUpobVm5U2UtUIfkHfhzjmDPnpo1SagT95LlTY/BkHk/LL QDbIpeD35aWSu1YHWW9PBnfzw0Hq7tdI43UB+6XkmVa/Qom5C7XKWk8LBm/QFD7B 3uxPjA76NP0r/ivFdH6+ArOlgQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFDLYarjf biNGcF7VKiB0vBebfJkgMB8GA1UdIwQYMBaAFD9Va8AlEDO85XL8bIq3YKzElwWT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0Y0Mi83QTZBQkZDQzRD QzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03emxjdnhzaXJkZ3JNU1hC Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AxVnJ3Q1VRTTd6bGN2eHNpcmRnck1TWEJaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUNGNDIvN0E2QUJGQ0M0Q0M2MTFFOEJFRjAzRDc1QzRGOUFFMDIvRjE0OEJFNkU1 MTE2MTFFRTg1QTdFNjM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJncSwwDQQCAAIwBwMFACQCt0AwDQYJKoZIhvcNAQELBQAD ggEBAFi/of1ocD0tVaoJ6fVkXkzECMLkYduXvMJR7SXeMx+Sy3T7Agk3VeNBH7ne HFY/jQ0N8e23mopI41emXUrbWfa7JsUUjMC3kmEUjfEa4jKTp1+myu+ufdIFxjdj rnG0PJDhObhaeIhrHfWPMEzurqFLCyQokSoT4tbzgdUKdfUrgVYHruXZs4zXDPLI OoDqpKG38UY3G0g8cnC93spWJ36kXgS+dcpzWIOHfSGYRP2Q2oiqCcmS45SBN2wk gSjhbitdvfhUc4uXcSK73taz5gsPOqQQdvKEX9ydJ/lsf9Vaw9sP0/PE95USsSNW mxBekHwEF63++HWpqX6InBsmwpo= -----END CERTIFICATE-----Generated at Fri May 31 20:34:12 2024 by rpki-client on console-ams.rpki-client.org