$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/053ED5AA21F011ECBA678C1DC4F9AE02.roa File: 053ED5AA21F011ECBA678C1DC4F9AE02.roa (raw, json) Hash identifier: BAnHiFVFmkVkOA24pt14UYFrEUDgx3UUzxT3cHQldVo= Subject key identifier: 42:B2:CA:F2:1A:AC:38:33:1B:65:9A:81:A9:E4:6B:29:93:9F:5E:A9 Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Certificate serial: 03D0 Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/053ED5AA21F011ECBA678C1DC4F9AE02.roa Signing time: Fri 29 Dec 2023 01:43:32 +0000 ROA not before: Fri 29 Dec 2023 01:43:32 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 17483 IP address blocks: 103.204.20.0/24 maxlen: 24 103.204.21.0/24 maxlen: 24 103.204.22.0/24 maxlen: 24 103.204.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 00:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 976 (0x3d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Validity Not Before: Dec 29 01:43:32 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=658e2444-74cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7d:41:93:24:1d:91:65:cf:cb:45:2c:ee:eb: e8:50:71:79:41:5e:0b:dd:6d:20:fd:26:75:6d:45: a6:d0:22:27:5f:02:67:47:85:ca:75:0f:bd:5a:a5: 29:40:38:cc:12:10:98:fe:0b:08:51:7b:35:47:02: bf:f5:a7:ac:5d:08:80:7e:e6:ad:84:37:53:94:5c: de:ab:46:9c:2f:94:f1:a3:91:7a:90:2f:02:e6:6e: 7f:c7:47:1e:43:44:ec:c4:b4:c5:3d:eb:b3:8f:10: 99:26:ab:95:c0:6e:13:85:fd:e8:b7:4c:26:a3:f6: f0:8b:86:ae:b9:27:f2:d0:72:87:22:ab:a3:0a:bc: bd:68:21:c7:36:9c:76:88:4c:7a:db:6a:26:d6:bd: 54:fe:55:59:f6:9e:73:64:04:34:e7:42:d5:4f:ea: 37:ca:85:12:48:6b:ed:64:5e:84:fb:ee:2a:37:e8: 4f:86:54:28:dc:55:1a:1f:d9:57:ff:f0:60:c6:4c: d4:f3:8b:87:1f:10:a3:32:8c:82:cf:03:90:3d:78: e4:3c:b6:aa:de:91:62:58:79:23:77:64:36:a1:9b: 8c:ef:65:03:3c:37:8c:b1:20:b7:72:83:c5:e8:2e: d3:5f:11:53:6d:bd:16:d2:31:21:9a:32:c4:67:cb: df:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B2:CA:F2:1A:AC:38:33:1B:65:9A:81:A9:E4:6B:29:93:9F:5E:A9 X509v3 Authority Key Identifier: keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/053ED5AA21F011ECBA678C1DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.204.20.0/22 Signature Algorithm: sha256WithRSAEncryption 49:e9:1a:53:3c:fb:60:ae:58:11:09:16:0f:f8:78:64:ab:4b: 2e:04:9a:74:d3:f2:4b:70:d4:24:89:e8:86:31:e4:3b:53:63: 0d:ab:c6:03:c5:27:6d:32:e9:a9:3f:74:38:18:f4:27:a6:a7: ec:63:35:2e:74:a4:3d:c4:0a:ea:da:48:ab:26:4c:d9:c0:14: 66:73:8a:f1:44:0f:9a:e6:a6:a3:2b:77:b3:b1:b7:15:ab:59: c5:a6:79:36:3c:26:82:96:ff:f5:02:85:58:7f:ec:cc:7b:87: aa:06:e4:c0:e9:8b:14:fa:25:90:63:db:f2:7d:bf:0f:26:94: b8:2e:6b:d0:e2:de:4d:66:5b:ce:7f:57:e7:8d:9d:1d:47:1b: 4f:53:a6:6e:b0:8d:17:ee:72:af:c1:ac:45:e8:75:72:43:f1: 10:3c:75:22:0d:3d:7e:c2:b3:72:39:b3:01:49:8d:de:c3:ab: 54:23:d9:57:21:2b:8e:3e:61:11:aa:8b:2d:64:80:c7:8a:68: 55:bc:75:a8:0b:46:a4:bc:7b:af:58:b4:d8:ac:91:14:e9:c7: db:e5:3b:68:bd:b8:53:ac:2c:8e:3a:11:53:b7:00:3f:6f:b0: 18:bc:c3:42:ee:74:a1:ca:e1:75:29:d2:a7:f8:98:c2:55:c9: e6:09:b0:34 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBEODcxMTAvBgNVBAUTKDcyNUZEOTc3Q0U3MzRCQkE5OTMzRjI5NDNEQzI2OTM5 RkEwNjA4QTcwHhcNMjMxMjI5MDE0MzMyWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NThlMjQ0NC03NGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyH1BkyQdkWXPy0Us7uvoUHF5QV4L3W0g/SZ1bUWm0CInXwJnR4XKdQ+9WqUp QDjMEhCY/gsIUXs1RwK/9aesXQiAfuathDdTlFzeq0acL5Txo5F6kC8C5m5/x0ce Q0TsxLTFPeuzjxCZJquVwG4Thf3ot0wmo/bwi4auuSfy0HKHIqujCry9aCHHNpx2 iEx622om1r1U/lVZ9p5zZAQ050LVT+o3yoUSSGvtZF6E++4qN+hPhlQo3FUaH9lX //BgxkzU84uHHxCjMoyCzwOQPXjkPLaq3pFiWHkjd2Q2oZuM72UDPDeMsSC3coPF 6C7TXxFTbb0W0jEhmjLEZ8vfqwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEKyyvIa rDgzG2WagankaymTn16pMB8GA1UdIwQYMBaAFHJf2XfOc0u6mTPylD3CaTn6Bgin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Ny9GNjgzQ0VGMjIx RUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3cVpNX0tVUGNKcE9mb0dD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NsX1pkODV6UzdxWk1fS1VQY0pwT2ZvR0NLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTBEODcvRjY4M0NFRjIyMUVCMTFFQzkyNTAxODE5QzRGOUFFMDIvMDUzRUQ1QUEy MUYwMTFFQ0JBNjc4QzFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnzBQwDQYJKoZIhvcNAQELBQADggEBAEnpGlM8+2CuWBEJ Fg/4eGSrSy4EmnTT8ktw1CSJ6IYx5DtTYw2rxgPFJ20y6ak/dDgY9Cemp+xjNS50 pD3ECuraSKsmTNnAFGZzivFED5rmpqMrd7OxtxWrWcWmeTY8JoKW//UChVh/7Mx7 h6oG5MDpixT6JZBj2/J9vw8mlLgua9Di3k1mW85/V+eNnR1HG09Tpm6wjRfucq/B rEXodXJD8RA8dSINPX7Cs3I5swFJjd7Dq1Qj2VchK44+YRGqiy1kgMeKaFW8dagL RqS8e69YtNiskRTpx9vlO2i9uFOsLI46EVO3AD9vsBi8w0LudKHK4XUp0qf4mMJV yeYJsDQ= -----END CERTIFICATE-----Generated at Sat May 25 03:06:00 2024 by rpki-client on console-fra.rpki-client.org