$ rpki-client -vvf rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/89A93D5E971811E9AE51CA15C4F9AE02.roa File: 89A93D5E971811E9AE51CA15C4F9AE02.roa (raw, json) Hash identifier: BeDMtd/gRIXBSzEH/HcRt8FWJFY+DpYk+aIKlrxH1X0= Subject key identifier: DE:44:D3:0D:3A:D5:2A:BA:CF:32:DC:24:FF:D0:5F:2E:03:0D:80:2D Certificate issuer: /CN=A919EB4E/serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084 Certificate serial: 0D97 Authority key identifier: 1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/89A93D5E971811E9AE51CA15C4F9AE02.roa Signing time: Wed 20 Dec 2023 18:26:25 +0000 ROA not before: Wed 20 Dec 2023 18:26:25 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 131447 IP address blocks: 103.253.134.0/23 maxlen: 23 103.253.134.0/24 maxlen: 24 103.253.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 18:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3479 (0xd97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EB4E/serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084 Validity Not Before: Dec 20 18:26:25 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=658331d1-0b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:94:ff:d1:94:34:f5:bf:fe:fc:8b:7e:14:0f: c1:a1:bd:89:65:e7:90:10:0c:b2:f4:4c:4d:c2:c5: 65:25:b5:6d:53:93:e7:fe:b5:7d:7f:c6:d6:a6:27: 9f:71:33:09:a3:b0:09:5e:93:b1:ec:df:bb:31:d2: 95:34:1a:42:20:00:71:9e:de:51:23:7d:98:64:ac: 88:f8:db:63:65:52:b2:2c:2c:b2:84:47:27:1a:4e: 44:8a:2c:be:37:a7:ef:f1:25:d4:6f:a6:5e:af:bd: b5:9d:cd:76:dd:ce:29:77:fc:66:b3:d2:fa:f2:d0: c5:8e:f5:87:c5:19:f1:ba:28:ab:00:d6:9f:03:5e: 50:8a:62:28:b1:1a:eb:52:38:aa:8d:e5:28:b5:43: 03:eb:e0:aa:95:73:72:f3:a0:3f:a1:a6:23:d2:42: af:3c:c2:85:f6:d1:fb:8e:67:e5:a8:d2:58:d4:70: c1:43:4e:ba:aa:be:88:39:d7:e7:b7:4f:ea:fa:c8: 22:dc:fa:3e:87:53:3d:d5:68:39:45:12:83:eb:2f: 91:b2:73:18:9d:74:06:37:89:0b:af:c9:1b:80:f2: 6a:cc:ca:c5:0c:35:0d:9b:ee:3c:b9:e8:b1:74:21: 38:89:1b:f4:32:21:74:4d:be:af:f1:a3:02:58:e3: 90:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:44:D3:0D:3A:D5:2A:BA:CF:32:DC:24:FF:D0:5F:2E:03:0D:80:2D X509v3 Authority Key Identifier: keyid:1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/89A93D5E971811E9AE51CA15C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.253.134.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:af:69:94:4d:05:30:02:99:81:15:da:49:fa:a7:21:c7:c1: e8:92:8b:a3:85:77:71:1e:c5:b9:98:89:d8:80:5e:d3:d6:25: db:7b:01:23:45:ea:e4:7b:7b:b0:1f:da:9a:e5:16:ce:41:ab: 1d:9a:ae:29:89:2d:3d:0e:f5:f7:97:04:19:ed:6a:a1:70:4b: 5f:e8:4c:d4:78:83:0d:cd:4d:8e:2d:9e:dd:f3:3e:66:42:92: 41:a6:42:da:e2:49:f8:b7:6e:72:7c:52:8a:6b:2d:da:be:b3: 8b:28:c6:8a:4c:4c:6e:ed:5e:fa:38:98:38:30:3a:7b:48:52: f6:f9:f0:d4:c9:4b:31:d8:73:1b:be:cf:5f:c2:45:2e:91:09: 1d:db:1c:12:de:0b:30:06:51:7d:0e:47:ff:7c:95:67:84:80: f4:03:a4:e4:5a:d6:d2:50:ae:54:0e:e0:28:c5:84:74:3a:48: 9d:0d:e4:13:fc:12:83:d2:af:2b:14:f7:1b:de:12:fc:13:66: 79:c4:53:19:80:be:1e:b0:6c:c7:a0:10:fd:87:14:4e:eb:e3: 50:b9:fe:cf:9a:bd:bc:6d:72:61:8f:25:13:30:a8:84:02:49: 4a:49:ba:b8:60:b3:96:1c:dc:70:8e:ef:ff:5b:31:ef:89:d0: 6a:87:9d:98 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVCNEUxMTAvBgNVBAUTKDFEMzY5NEVGMTQyMUM5MTg1NEE4ODdBQ0E5NjEwQkM1 NjBBRTcwODQwHhcNMjMxMjIwMTgyNjI1WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTgzMzFkMS0wYjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJT/0ZQ09b/+/It+FA/Bob2JZeeQEAyy9ExNwsVlJbVtU5Pn/rV9f8bWpief cTMJo7AJXpOx7N+7MdKVNBpCIABxnt5RI32YZKyI+NtjZVKyLCyyhEcnGk5Eiiy+ N6fv8SXUb6Zer721nc123c4pd/xms9L68tDFjvWHxRnxuiirANafA15QimIosRrr UjiqjeUotUMD6+CqlXNy86A/oaYj0kKvPMKF9tH7jmflqNJY1HDBQ066qr6IOdfn t0/q+sgi3Po+h1M91Wg5RRKD6y+RsnMYnXQGN4kLr8kbgPJqzMrFDDUNm+48ueix dCE4iRv0MiF0Tb6v8aMCWOOQ+QIDAQABo4IClTCCApEwHQYDVR0OBBYEFN5E0w06 1Sq6zzLcJP/QXy4DDYAtMB8GA1UdIwQYMBaAFB02lO8UIckYVKiHrKlhC8VgrnCE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUI0RS9BMjg0M0MwODk3 MTcxMUU5ODVGQ0FCMTRDNEY5QUUwMi9IVGFVN3hRaHlSaFVxSWVzcVdFTHhXQ3Vj SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hUYVU3eFFoeVJoVXFJZXNxV0VMeFdDdWNJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUVCNEUvQTI4NDNDMDg5NzE3MTFFOTg1RkNBQjE0QzRGOUFFMDIvODlBOTNENUU5 NzE4MTFFOUFFNTFDQTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn/YYwDQYJKoZIhvcNAQELBQADggEBAB2vaZRNBTACmYEV 2kn6pyHHweiSi6OFd3EexbmYidiAXtPWJdt7ASNF6uR7e7Af2prlFs5Bqx2arimJ LT0O9feXBBntaqFwS1/oTNR4gw3NTY4tnt3zPmZCkkGmQtriSfi3bnJ8UoprLdq+ s4soxopMTG7tXvo4mDgwOntIUvb58NTJSzHYcxu+z1/CRS6RCR3bHBLeCzAGUX0O R/98lWeEgPQDpORa1tJQrlQO4CjFhHQ6SJ0N5BP8EoPSrysU9xveEvwTZnnEUxmA vh6wbMegEP2HFE7r41C5/s+avbxtcmGPJRMwqIQCSUpJurhgs5Yc3HCO7/9bMe+J 0GqHnZg= -----END CERTIFICATE-----Generated at Wed May 22 20:09:02 2024 by rpki-client on console-ams.rpki-client.org