$ rpki-client -vvf rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/5FFA4BEC3C0B11ED89AD755FC4F9AE02.roa File: 5FFA4BEC3C0B11ED89AD755FC4F9AE02.roa (raw, json) Hash identifier: u7yXnD3bGqVmUVwiLw2YbUnZGmEt5M03j3uj8hclD10= Subject key identifier: 2E:8A:CB:20:06:D2:D0:8A:2C:3A:B5:83:6C:D0:4E:5C:24:AC:A8:B1 Certificate issuer: /CN=A919D118/serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D Certificate serial: 0997 Authority key identifier: 08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/5FFA4BEC3C0B11ED89AD755FC4F9AE02.roa Signing time: Thu 29 Feb 2024 21:09:33 +0000 ROA not before: Thu 29 Feb 2024 21:09:33 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 137018 IP address blocks: 103.149.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 21:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2455 (0x997) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D118/serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D Validity Not Before: Feb 29 21:09:33 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65e0f28d-5053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e8:e6:c9:15:45:43:34:72:16:ce:ea:3b:f1: 17:31:9b:2b:e8:3c:d5:b7:44:6e:4d:33:7a:f9:5a: 84:91:9c:ea:cc:75:e0:c1:34:cf:84:fa:12:af:d3: e2:69:05:f6:b6:d4:5e:37:18:27:02:27:f3:50:25: e7:f8:a8:6f:c8:e9:38:e8:be:12:68:91:1f:a3:4d: 94:b0:70:e8:0d:48:c7:bd:4f:f9:b7:0d:f2:89:83: 39:26:95:f8:c5:16:e9:4e:1a:98:54:f7:8a:5f:a6: 21:56:f7:bd:87:6e:52:fd:cb:24:15:54:13:c8:7f: f6:27:22:7e:2b:cc:92:53:14:7b:51:08:cb:67:ba: c6:4b:5e:4e:3b:d7:0f:8e:ce:5e:f4:52:d7:24:f0: df:5f:cf:b1:6e:f5:b8:de:d5:a9:ad:26:f4:7d:96: 15:48:98:7d:bc:00:61:14:f7:9b:ea:96:f6:ab:b0: 99:7e:e2:dc:17:4b:01:65:6e:3b:9a:93:c1:6e:ed: 51:bf:59:5e:75:6a:cf:02:a1:5a:25:22:c3:a3:a0: 0f:3f:8e:a7:bc:93:08:b0:fa:93:b7:08:58:39:72: 72:5e:6e:a7:06:44:26:79:1f:dd:ff:6e:00:00:29: 69:24:16:58:f9:54:ed:bb:38:bc:4a:eb:45:53:55: 67:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8A:CB:20:06:D2:D0:8A:2C:3A:B5:83:6C:D0:4E:5C:24:AC:A8:B1 X509v3 Authority Key Identifier: keyid:08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/5FFA4BEC3C0B11ED89AD755FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.149.60.0/24 Signature Algorithm: sha256WithRSAEncryption 06:84:5e:a7:b9:69:58:2d:3e:4e:13:95:fe:f5:5e:8c:6d:d4: 12:57:80:c7:c9:04:b5:58:b6:88:67:76:c9:88:d9:05:85:16: c2:df:db:67:90:a4:7f:15:6d:57:2b:14:9a:74:b9:29:0d:5c: ed:82:80:22:c8:06:66:d2:7d:60:9a:4b:49:cd:60:b9:2a:c5: ab:0f:7c:9b:ca:b0:4f:3b:31:05:67:09:ef:09:d7:ec:23:ab: c1:f7:34:dc:25:d1:9b:a4:aa:5e:96:e8:02:73:34:7e:b8:b4: 3c:ad:5d:c9:6b:4d:02:1b:4c:24:ff:d8:98:c8:f1:b9:eb:34: 75:f2:a6:c4:0c:98:cb:71:f8:e4:ed:f4:42:24:f1:c5:78:27: 67:fa:38:a4:63:9e:aa:08:ef:4d:c4:f4:ec:d8:29:58:92:c1: dd:0b:f1:2c:27:82:55:e8:2d:b1:70:e7:98:1c:ce:cc:cf:43: f1:46:f7:39:da:35:86:56:71:0a:cc:52:9d:cc:c0:a6:4d:3d: e9:c7:66:ca:a1:ac:97:a0:84:7e:9b:51:46:2a:a9:90:7f:34: 7c:11:13:cb:46:2c:ee:c7:97:54:29:b9:4e:21:16:e9:b6:68: 29:fb:a7:13:cf:6a:d7:67:9f:a8:09:01:f6:a5:61:19:a4:cb: bb:98:b2:ff -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQxMTgxMTAvBgNVBAUTKDA4NUUwQzUwMEYzRDQ3REQzNEIyNDRCRDM5MjlDRUZE QUREOTZDM0QwHhcNMjQwMjI5MjEwOTMzWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWUwZjI4ZC01MDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOjmyRVFQzRyFs7qO/EXMZsr6DzVt0RuTTN6+VqEkZzqzHXgwTTPhPoSr9Pi aQX2ttReNxgnAifzUCXn+KhvyOk46L4SaJEfo02UsHDoDUjHvU/5tw3yiYM5JpX4 xRbpThqYVPeKX6YhVve9h25S/cskFVQTyH/2JyJ+K8ySUxR7UQjLZ7rGS15OO9cP js5e9FLXJPDfX8+xbvW43tWprSb0fZYVSJh9vABhFPeb6pb2q7CZfuLcF0sBZW47 mpPBbu1Rv1ledWrPAqFaJSLDo6APP46nvJMIsPqTtwhYOXJyXm6nBkQmeR/d/24A AClpJBZY+VTtuzi8SutFU1VnvQIDAQABo4IClTCCApEwHQYDVR0OBBYEFC6KyyAG 0tCKLDq1g2zQTlwkrKixMB8GA1UdIwQYMBaAFAheDFAPPUfdNLJEvTkpzv2t2Ww9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDExOC9CQjgxQTUxNDYy QkYxMUVBQUEzQTg5NDVDNEY5QUUwMi9DRjRNVUE4OVI5MDBza1M5T1NuT19hM1pi RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NGNE1VQTg5UjkwMHNrUzlPU25PX2EzWmJEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUQxMTgvQkI4MUE1MTQ2MkJGMTFFQUFBM0E4OTQ1QzRGOUFFMDIvNUZGQTRCRUMz QzBCMTFFRDg5QUQ3NTVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnlTwwDQYJKoZIhvcNAQELBQADggEBAAaEXqe5aVgtPk4T lf71Xoxt1BJXgMfJBLVYtohndsmI2QWFFsLf22eQpH8VbVcrFJp0uSkNXO2CgCLI BmbSfWCaS0nNYLkqxasPfJvKsE87MQVnCe8J1+wjq8H3NNwl0Zukql6W6AJzNH64 tDytXclrTQIbTCT/2JjI8bnrNHXypsQMmMtx+OTt9EIk8cV4J2f6OKRjnqoI703E 9OzYKViSwd0L8SwnglXoLbFw55gczszPQ/FG9znaNYZWcQrMUp3MwKZNPenHZsqh rJeghH6bUUYqqZB/NHwRE8tGLO7Hl1QpuU4hFum2aCn7pxPPatdnn6gJAfalYRmk y7uYsv8= -----END CERTIFICATE-----Generated at Tue May 28 22:51:33 2024 by rpki-client on console-ams.rpki-client.org