$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/C714C5A6706211EDA9CCDB76C4F9AE02.roa File: C714C5A6706211EDA9CCDB76C4F9AE02.roa (raw, json) Hash identifier: cSUwwlMJ5mfc3+KfZCUgcz8ae7weryNy8ZVQhlARvAQ= Subject key identifier: 1A:85:4A:C6:00:79:57:45:F0:52:54:2C:A7:B5:4D:BE:16:CF:34:FA Certificate issuer: /CN=A91CEDD3/serialNumber=F7BB172FCAECAFBF9EBEF2508A15426433AEC9DE Certificate serial: D4 Authority key identifier: F7:BB:17:2F:CA:EC:AF:BF:9E:BE:F2:50:8A:15:42:64:33:AE:C9:DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/C714C5A6706211EDA9CCDB76C4F9AE02.roa Signing time: Fri 29 Dec 2023 04:45:46 +0000 ROA not before: Fri 29 Dec 2023 04:45:46 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 150450 IP address blocks: 103.40.2.0/23 maxlen: 23 103.40.2.0/24 maxlen: 24 103.40.3.0/24 maxlen: 24 2400:c3a0::/32 maxlen: 32 2400:c3a0::/36 maxlen: 36 2400:c3a0:1000::/36 maxlen: 36 2400:c3a0:2000::/36 maxlen: 36 2400:c3a0:3000::/36 maxlen: 36 2400:c3a0:4000::/36 maxlen: 36 2400:c3a0:5000::/36 maxlen: 36 2400:c3a0:6000::/36 maxlen: 36 2400:c3a0:7000::/36 maxlen: 36 2400:c3a0:8000::/36 maxlen: 36 2400:c3a0:9000::/36 maxlen: 36 2400:c3a0:a000::/36 maxlen: 36 2400:c3a0:b000::/36 maxlen: 36 2400:c3a0:c000::/36 maxlen: 36 2400:c3a0:d000::/36 maxlen: 36 2400:c3a0:e000::/36 maxlen: 36 2400:c3a0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.crl rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 05:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEDD3/serialNumber=F7BB172FCAECAFBF9EBEF2508A15426433AEC9DE Validity Not Before: Dec 29 04:45:46 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=658e4efa-570d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3d:80:28:01:5a:37:5a:a2:16:2a:f6:f9:18: 26:ad:b0:83:81:96:88:a1:67:26:ea:85:b3:ef:7a: 47:82:dc:79:ad:63:04:ef:33:cf:dd:f3:44:04:6d: 1d:f7:e8:05:17:a2:ec:bb:a0:ce:83:d8:7f:48:28: 21:a3:a3:ed:7b:de:2b:38:81:fb:81:a3:b3:bb:4b: 82:d7:82:b8:1d:f8:cc:bb:f2:15:e3:aa:11:d1:06: cc:67:b7:29:f5:2d:70:f2:c3:82:bf:4d:ca:f0:3d: 3c:35:64:be:13:42:ba:f8:3b:59:90:52:c2:67:41: d8:84:c1:66:c1:ee:b4:99:57:40:e8:55:8f:e6:23: 56:f8:ba:e9:c9:b6:96:1e:0a:6a:48:17:cc:a1:4a: 06:4f:26:d6:f6:d4:ab:38:bb:46:d7:94:93:82:70: d5:46:32:c0:2c:07:2e:d3:1a:b6:3c:3a:8c:d3:4e: 4e:aa:c1:f2:3e:ae:f6:31:eb:0e:ed:51:a5:50:14: 8c:ae:6d:2e:d2:c0:11:b6:03:a4:40:d0:fc:1e:f0: 17:e2:78:95:cc:e0:71:d2:91:c3:46:e6:a5:bd:2c: d0:60:38:6e:f7:34:0e:a6:a4:4c:62:6b:44:73:22: e9:b3:30:32:68:45:5a:9b:89:4e:45:63:be:5a:c2: 3a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:85:4A:C6:00:79:57:45:F0:52:54:2C:A7:B5:4D:BE:16:CF:34:FA X509v3 Authority Key Identifier: keyid:F7:BB:17:2F:CA:EC:AF:BF:9E:BE:F2:50:8A:15:42:64:33:AE:C9:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/C714C5A6706211EDA9CCDB76C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.40.2.0/23 IPv6: 2400:c3a0::/32 Signature Algorithm: sha256WithRSAEncryption 34:ba:21:ab:4c:54:39:e3:78:6c:6b:48:f0:13:c5:ce:92:d0: 47:85:e5:04:26:64:04:73:76:6d:7e:28:5d:1d:cf:8d:b1:3e: 4a:2b:6e:06:9b:cd:a9:57:23:6f:90:0c:d0:26:c6:f9:cd:51: 5c:86:e7:dd:bd:22:77:32:4a:df:89:81:f0:e9:65:f6:84:2f: 69:1f:e7:b3:94:ce:52:41:59:64:e2:79:de:54:d3:3c:a9:87: 98:63:eb:eb:6b:eb:07:8f:98:80:cd:63:b5:df:38:0c:52:49: 19:94:7c:21:3e:ae:17:fc:d2:11:9d:01:27:f0:10:33:56:4c: 5f:dd:f4:a3:46:56:5d:01:c7:c2:b1:00:8e:6b:21:f8:bc:aa: 37:0a:e5:8c:3a:4e:1c:de:86:2f:40:0a:32:cb:5d:22:5d:b0: 45:c1:b3:1e:ee:48:98:16:9f:75:ca:34:b7:72:80:37:38:eb: e1:ad:e7:c8:c6:1e:cc:48:2f:01:50:0b:47:a1:00:d3:8c:f7: 7d:e0:8e:e3:cf:d4:6c:e6:37:18:1f:53:df:d1:4a:39:20:a5: 3b:ec:55:b3:dd:1a:d4:88:e3:13:37:bc:9a:a3:74:c7:29:a9: 0e:85:cd:30:63:f5:18:a8:41:6d:75:2b:f7:25:fc:52:e1:98: 90:7d:0d:49 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VERDMxMTAvBgNVBAUTKEY3QkIxNzJGQ0FFQ0FGQkY5RUJFRjI1MDhBMTU0MjY0 MzNBRUM5REUwHhcNMjMxMjI5MDQ0NTQ2WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NThlNGVmYS01NzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvD2AKAFaN1qiFir2+RgmrbCDgZaIoWcm6oWz73pHgtx5rWME7zPP3fNEBG0d 9+gFF6Lsu6DOg9h/SCgho6Pte94rOIH7gaOzu0uC14K4HfjMu/IV46oR0QbMZ7cp 9S1w8sOCv03K8D08NWS+E0K6+DtZkFLCZ0HYhMFmwe60mVdA6FWP5iNW+LrpybaW HgpqSBfMoUoGTybW9tSrOLtG15STgnDVRjLALAcu0xq2PDqM005OqsHyPq72MesO 7VGlUBSMrm0u0sARtgOkQND8HvAX4niVzOBx0pHDRualvSzQYDhu9zQOpqRMYmtE cyLpszAyaEVam4lORWO+WsI6qwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFBqFSsYA eVdF8FJULKe1Tb4WzzT6MB8GA1UdIwQYMBaAFPe7Fy/K7K+/nr7yUIoVQmQzrsne MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUREMy9EMDY2MzMyODcw NUUxMUVEQUNBRDg4NUJDNEY5QUUwMi85N3NYTDhyc3I3LWV2dkpRaWhWQ1pET3V5 ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk3c1hMOHJzcjctZXZ2SlFpaFZDWkRPdXlkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0VERDMvRDA2NjMzMjg3MDVFMTFFREFDQUQ4ODVCQzRGOUFFMDIvQzcxNEM1QTY3 MDYyMTFFREE5Q0NEQjc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnKAIwDQQCAAIwBwMFACQAw6AwDQYJKoZIhvcNAQELBQAD ggEBADS6IatMVDnjeGxrSPATxc6S0EeF5QQmZARzdm1+KF0dz42xPkorbgabzalX I2+QDNAmxvnNUVyG5929IncySt+JgfDpZfaEL2kf57OUzlJBWWTied5U0zyph5hj 6+tr6wePmIDNY7XfOAxSSRmUfCE+rhf80hGdASfwEDNWTF/d9KNGVl0Bx8KxAI5r Ifi8qjcK5Yw6Thzehi9ACjLLXSJdsEXBsx7uSJgWn3XKNLdygDc46+Gt58jGHsxI LwFQC0ehANOM933gjuPP1GzmNxgfU9/RSjkgpTvsVbPdGtSI4xM3vJqjdMcpqQ6F zTBj9RioQW11K/cl/FLhmJB9DUk= -----END CERTIFICATE-----Generated at Sat Jun 1 07:09:21 2024 by rpki-client on console-fra.rpki-client.org