$ rpki-client -vvf rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/4641C3785C2311EDA3D17465C4F9AE02.roa File: 4641C3785C2311EDA3D17465C4F9AE02.roa (raw, json) Hash identifier: iDGr4mpDxzIj5BZedVCmEUhs01yQX3/+XGo2tTl7UXw= Subject key identifier: FD:F8:51:AD:42:36:E7:36:0F:6A:61:25:97:C9:77:0A:D0:8F:9C:83 Certificate issuer: /CN=A919ECE7/serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33 Certificate serial: 05C8 Authority key identifier: 77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/4641C3785C2311EDA3D17465C4F9AE02.roa Signing time: Wed 06 Dec 2023 23:51:12 +0000 ROA not before: Wed 06 Dec 2023 23:51:12 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 55933 IP address blocks: 103.42.30.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1480 (0x5c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919ECE7/serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33 Validity Not Before: Dec 6 23:51:12 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=657108ef-185b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:30:4f:8f:c6:63:15:90:78:70:9a:2b:55:b1: b5:26:66:2c:27:96:c3:15:14:5d:64:92:45:19:b7: 8a:55:b7:90:53:67:0e:29:b2:b1:1e:f1:91:50:d3: 04:97:8f:08:6b:00:af:d6:bc:e1:56:61:5f:8c:0d: fd:4b:fa:79:af:3e:7f:8d:8f:6b:bc:a8:da:06:f2: 6c:79:6d:41:57:2c:a5:dd:a7:86:01:22:e3:98:a1: 25:35:17:87:c0:46:03:72:aa:c4:a4:ce:5e:03:97: 65:09:b5:f1:cd:1d:13:8b:8e:03:11:b0:83:20:be: aa:7b:b5:09:40:72:31:32:10:3e:19:0a:54:d8:5f: 32:ba:22:27:97:74:0c:dc:9c:35:9f:f7:b4:df:ad: 88:45:d4:f8:fe:5b:0b:15:df:c5:a0:32:f3:fe:8a: ad:c2:af:c9:1f:ed:f7:ec:e6:ae:fe:1b:2d:65:62: 99:7a:3b:aa:e7:df:e5:a2:4b:9a:d6:e0:ed:65:2d: 69:f2:6b:a6:a4:2d:1c:af:4c:cb:73:12:b1:8b:f2: 22:2e:58:6a:57:b1:31:8f:c7:97:88:0f:c9:49:37: 98:62:d5:c7:21:e3:ba:60:f7:8c:66:51:ab:bb:9d: 63:cd:7b:27:e9:1a:7f:6c:8e:b6:1d:b5:12:26:47: 44:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F8:51:AD:42:36:E7:36:0F:6A:61:25:97:C9:77:0A:D0:8F:9C:83 X509v3 Authority Key Identifier: keyid:77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/4641C3785C2311EDA3D17465C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.42.30.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:2c:6f:b1:99:17:c4:e1:de:82:1d:f5:b2:25:9d:4e:f9:e8: 43:79:dd:52:e9:e7:ec:ff:94:fd:e7:af:d7:78:f7:d5:98:fd: 75:59:61:f0:cf:43:64:bb:d7:42:07:2d:c4:35:a8:ce:d5:db: fe:af:cb:59:a0:53:49:a4:75:f0:2c:5b:f7:36:d3:e8:72:ed: ab:f6:1e:28:59:ce:f5:97:1d:e3:73:e3:f1:8b:bc:53:5c:54: c4:34:f4:e2:84:9d:9d:1b:e4:77:3e:20:5a:82:3c:0e:6d:09: 6d:8b:f8:75:d2:29:45:a4:d9:35:d9:17:23:80:a3:d0:77:db: 70:ee:3e:72:56:21:63:dc:60:ea:4c:77:83:3a:05:4c:fc:77: 65:ef:48:13:34:a1:99:4c:14:1b:d1:28:26:df:5b:2d:ec:67: 33:e4:57:eb:f4:f2:5a:56:89:77:24:70:dd:87:46:a4:f3:b3: 20:92:bf:7c:c1:c5:fe:55:2b:f1:ea:7b:fa:3e:e3:ae:01:8f: 57:42:b3:e2:f7:25:1d:bd:e0:01:d6:5d:2c:c8:08:55:ef:2a: a0:25:32:77:61:29:8e:37:b6:6f:fb:f1:a2:77:93:d9:00:c5: 11:1c:8c:d7:b0:cd:28:41:18:eb:8f:b4:5a:cc:e7:07:66:25: 30:80:0e:ce -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVDRTcxMTAvBgNVBAUTKDc3MzcwQkMwNzMwNUQxOURCREFDQ0U0QkY3MjA5RTFF QjZENDBFMzMwHhcNMjMxMjA2MjM1MTEyWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTcxMDhlZi0xODViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+jBPj8ZjFZB4cJorVbG1JmYsJ5bDFRRdZJJFGbeKVbeQU2cOKbKxHvGRUNME l48IawCv1rzhVmFfjA39S/p5rz5/jY9rvKjaBvJseW1BVyyl3aeGASLjmKElNReH wEYDcqrEpM5eA5dlCbXxzR0Ti44DEbCDIL6qe7UJQHIxMhA+GQpU2F8yuiInl3QM 3Jw1n/e0362IRdT4/lsLFd/FoDLz/oqtwq/JH+337Oau/hstZWKZejuq59/lokua 1uDtZS1p8mumpC0cr0zLcxKxi/IiLlhqV7Exj8eXiA/JSTeYYtXHIeO6YPeMZlGr u51jzXsn6Rp/bI62HbUSJkdENwIDAQABo4IClTCCApEwHQYDVR0OBBYEFP34Ua1C Nuc2D2phJZfJdwrQj5yDMB8GA1UdIwQYMBaAFHc3C8BzBdGdvazOS/cgnh621A4z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUNFNy81RTA1REJBNDVG QUMxMUVCODQ5NDQ1MkZDNEY5QUUwMi9kemNMd0hNRjBaMjlyTTVMOXlDZUhyYlVE ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R6Y0x3SE1GMFoyOXJNNUw5eUNlSHJiVURqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUVDRTcvNUUwNURCQTQ1RkFDMTFFQjg0OTQ0NTJGQzRGOUFFMDIvNDY0MUMzNzg1 QzIzMTFFREEzRDE3NDY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnKh4wDQYJKoZIhvcNAQELBQADggEBAE4sb7GZF8Th3oId 9bIlnU756EN53VLp5+z/lP3nr9d499WY/XVZYfDPQ2S710IHLcQ1qM7V2/6vy1mg U0mkdfAsW/c20+hy7av2HihZzvWXHeNz4/GLvFNcVMQ09OKEnZ0b5Hc+IFqCPA5t CW2L+HXSKUWk2TXZFyOAo9B323DuPnJWIWPcYOpMd4M6BUz8d2XvSBM0oZlMFBvR KCbfWy3sZzPkV+v08lpWiXckcN2HRqTzsyCSv3zBxf5VK/Hqe/o+464Bj1dCs+L3 JR294AHWXSzICFXvKqAlMndhKY43tm/78aJ3k9kAxREcjNewzShBGOuPtFrM5wdm JTCADs4= -----END CERTIFICATE-----Generated at Sun May 19 00:30:19 2024 by rpki-client on console-ams.rpki-client.org