$ rpki-client -vvf rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/CC70CB68724B11EDA156B97BC4F9AE02.roa File: CC70CB68724B11EDA156B97BC4F9AE02.roa (raw, json) Hash identifier: Mknc50H9prGQmPc0Hg1FmmwuzNQqJGLRT+YSmNTMqkU= Subject key identifier: B1:25:2E:4C:65:C3:C5:93:0F:BF:08:62:CE:05:0D:0F:E3:2F:B1:18 Certificate issuer: /CN=A919CFF5/serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF Certificate serial: A3 Authority key identifier: 25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/CC70CB68724B11EDA156B97BC4F9AE02.roa Signing time: Thu 05 Oct 2023 04:04:23 +0000 ROA not before: Thu 05 Oct 2023 04:04:23 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 150347 IP address blocks: 103.68.139.0/24 maxlen: 24 2400:b4a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CFF5/serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF Validity Not Before: Oct 5 04:04:23 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=651e35c7-42f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1e:78:b6:3b:7e:2b:fa:09:eb:c7:38:55:96: 84:98:e5:4c:1f:3b:81:1a:95:8d:ab:7f:61:ef:4d: 0c:bc:b5:dd:47:d3:79:91:5a:af:3b:a9:96:d8:de: 67:06:98:d0:56:56:e9:dd:a0:e3:09:77:fa:42:91: 0b:1b:f2:a4:69:32:a6:fc:17:a3:87:35:a0:76:44: b3:be:92:c5:10:19:9d:35:85:3a:98:f9:fa:51:05: 33:cc:4e:d4:f7:d8:1d:df:2e:77:b7:66:1c:d4:09: ab:4f:26:3e:5b:dd:5d:e6:bf:d6:48:88:62:d4:3d: e4:6c:bb:7e:2a:4e:22:ac:cf:29:a6:27:33:18:7f: ee:3d:b5:dc:ef:d8:20:d1:77:6e:c6:69:71:a9:fc: f6:0f:ec:87:9e:2c:15:be:e7:15:3f:5f:82:2f:7a: e6:45:f1:15:b3:f3:9e:8a:fc:ea:5e:01:48:f6:41: 9b:18:23:77:75:fd:af:42:3c:da:1d:ea:dd:c1:4a: 89:18:1c:23:19:37:0f:26:cf:75:13:dc:5d:70:f9: 8c:f2:b5:f1:ef:ab:e3:09:55:4d:ee:ad:6f:e5:98: 3f:62:e5:35:13:21:00:59:17:ea:98:6d:b8:af:b3: 24:17:05:38:0f:f2:a6:8c:19:49:ae:83:d7:08:f2: 43:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:25:2E:4C:65:C3:C5:93:0F:BF:08:62:CE:05:0D:0F:E3:2F:B1:18 X509v3 Authority Key Identifier: keyid:25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/CC70CB68724B11EDA156B97BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.68.139.0/24 IPv6: 2400:b4a0::/32 Signature Algorithm: sha256WithRSAEncryption 01:3a:99:4e:44:80:00:fc:62:80:50:73:4f:c5:23:66:91:1f: 8c:26:97:db:f9:51:41:4d:cb:63:1a:5e:80:6b:c9:14:3b:6e: b5:9c:aa:bb:1f:87:22:ef:9d:ce:f3:b5:f9:d6:dc:0b:9c:31: 20:d3:2a:9e:53:58:43:f3:e7:11:da:7f:7d:b8:a1:89:ee:b8: b0:fa:49:31:d4:27:b6:ae:57:9e:9e:07:22:08:4c:e0:c2:84: 6a:57:2a:0d:88:79:cf:e0:db:24:ca:10:e1:38:ec:51:49:5d: ce:36:b6:f4:8f:75:6b:f2:de:bb:64:d8:d6:72:dd:4c:76:39: 12:63:02:1e:af:0f:a9:5b:72:f8:fe:eb:de:b9:06:5f:5a:e8: 04:34:1c:26:b8:3f:76:ee:d6:86:45:04:ac:5b:a4:f4:51:2e: 0a:5e:19:a5:cb:f4:3a:de:aa:bf:53:7c:a3:86:a1:81:b8:98: 5f:d9:a4:a8:3a:06:f0:f9:0e:49:5b:1d:b0:86:7c:91:0f:f1: 3f:4a:67:e8:e4:3b:c5:32:a4:65:72:65:c2:2d:4e:c4:72:77: 2d:02:6f:26:c9:ee:bc:6d:03:52:85:2b:da:eb:c4:d1:38:62: 3d:f3:9a:bf:90:c1:ec:a1:fe:67:cc:3c:52:ee:d3:01:28:92: f8:5a:f6:44 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNGRjUxMTAvBgNVBAUTKDI1NjA4QjFDM0ZDQ0QzRENDRUJGOTk0QjkzMjVGM0Ey RUZFN0NDRUYwHhcNMjMxMDA1MDQwNDIzWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTFlMzVjNy00MmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtR54tjt+K/oJ68c4VZaEmOVMHzuBGpWNq39h700MvLXdR9N5kVqvO6mW2N5n BpjQVlbp3aDjCXf6QpELG/KkaTKm/BejhzWgdkSzvpLFEBmdNYU6mPn6UQUzzE7U 99gd3y53t2Yc1AmrTyY+W91d5r/WSIhi1D3kbLt+Kk4irM8ppiczGH/uPbXc79gg 0Xduxmlxqfz2D+yHniwVvucVP1+CL3rmRfEVs/OeivzqXgFI9kGbGCN3df2vQjza HerdwUqJGBwjGTcPJs91E9xdcPmM8rXx76vjCVVN7q1v5Zg/YuU1EyEAWRfqmG24 r7MkFwU4D/KmjBlJroPXCPJD1wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFLElLkxl w8WTD78IYs4FDQ/jL7EYMB8GA1UdIwQYMBaAFCVgixw/zNPczr+ZS5Ml86Lv58zv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ZGNS8zRkU1Q0E4RTcy NDgxMUVEOUJDMkJBNzZDNEY5QUUwMi9KV0NMSERfTTA5ek92NWxMa3lYem91X256 TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pXQ0xIRF9NMDl6T3Y1bExreVh6b3VfbnpPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUNGRjUvM0ZFNUNBOEU3MjQ4MTFFRDlCQzJCQTc2QzRGOUFFMDIvQ0M3MENCNjg3 MjRCMTFFREExNTZCOTdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBABnRIswDQQCAAIwBwMFACQAtKAwDQYJKoZIhvcNAQELBQAD ggEBAAE6mU5EgAD8YoBQc0/FI2aRH4wml9v5UUFNy2MaXoBryRQ7brWcqrsfhyLv nc7ztfnW3AucMSDTKp5TWEPz5xHaf324oYnuuLD6STHUJ7auV56eByIITODChGpX Kg2Iec/g2yTKEOE47FFJXc42tvSPdWvy3rtk2NZy3Ux2ORJjAh6vD6lbcvj+6965 Bl9a6AQ0HCa4P3bu1oZFBKxbpPRRLgpeGaXL9Dreqr9TfKOGoYG4mF/ZpKg6BvD5 DklbHbCGfJEP8T9KZ+jkO8UypGVyZcItTsRydy0CbybJ7rxtA1KFK9rrxNE4Yj3z mr+Qweyh/mfMPFLu0wEokvha9kQ= -----END CERTIFICATE-----Generated at Sat May 25 06:26:53 2024 by rpki-client on console-fra.rpki-client.org