$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/627A6758DF2A11EEBC440C5EC4F9AE02.roa File: 627A6758DF2A11EEBC440C5EC4F9AE02.roa (raw, json) Hash identifier: T7PvEvH8O0V7Ov1UBl/OKo7NadrxHCZyLLumQSslMUE= Subject key identifier: 02:59:9F:83:76:AC:B0:E8:63:CB:F7:85:1D:BD:E1:AD:6F:40:4C:8E Certificate issuer: /CN=A9113BE5/serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8 Certificate serial: 01FA Authority key identifier: 36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/627A6758DF2A11EEBC440C5EC4F9AE02.roa Signing time: Sat 13 Apr 2024 08:25:49 +0000 ROA not before: Sat 13 Apr 2024 08:25:49 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 138622 IP address blocks: 103.189.236.0/23 maxlen: 23 103.189.236.0/24 maxlen: 24 103.189.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 04:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113BE5/serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8 Validity Not Before: Apr 13 08:25:49 2024 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=661a418d-b146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7c:2a:a6:69:9a:3b:3e:5f:ac:97:b7:14:98: 31:42:d2:e4:98:58:94:ff:61:d7:f9:53:29:99:e2: ec:dd:78:0d:3f:7d:0a:60:82:da:d9:19:6d:56:ba: ed:e8:dc:d6:f9:ba:d8:ad:2d:07:5a:67:d9:cf:f0: f5:d8:da:e4:6f:be:06:bd:5e:f7:1a:3a:91:f3:42: 03:fe:ac:df:c6:c3:c1:da:51:c6:f7:29:ad:68:b3: b7:ab:f9:c6:f0:a7:0f:aa:08:95:ba:95:8f:34:82: 14:71:c7:4f:91:ed:f1:73:4e:d3:83:b2:a9:b5:57: fd:af:38:9f:a2:8f:30:ae:67:0a:7b:73:41:84:fd: 81:8c:18:84:db:51:50:ed:b4:f3:de:05:cd:77:0f: 8e:f1:fd:fa:aa:49:7e:f5:36:81:2b:b5:a3:05:13: 51:04:a9:07:93:77:05:72:32:77:e8:c1:e1:c2:0d: fc:27:15:bb:a0:99:ef:97:16:45:75:ac:e2:2b:6a: eb:fc:4e:1c:2e:c7:71:44:5f:96:00:2b:8e:ca:4a: dd:ef:21:ec:04:01:1d:e3:70:27:14:39:88:fc:24: 11:9a:66:ea:ae:5d:17:c7:b6:fe:13:39:0b:2d:67: 00:f9:b2:3c:2f:44:ac:b9:6d:e7:84:19:53:ce:f9: 82:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:59:9F:83:76:AC:B0:E8:63:CB:F7:85:1D:BD:E1:AD:6F:40:4C:8E X509v3 Authority Key Identifier: keyid:36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/627A6758DF2A11EEBC440C5EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.189.236.0/23 Signature Algorithm: sha256WithRSAEncryption 00:5a:89:b7:82:37:4b:2f:0a:df:8b:53:5c:c3:aa:0a:68:4c: 47:99:b3:45:80:47:e5:c6:9f:67:8c:d7:8a:51:25:86:3e:43: 93:b5:3f:8a:f6:e4:4f:fc:b1:26:92:17:e9:40:d9:db:f2:a8: 84:63:93:f9:a6:69:69:6f:9a:8d:ac:90:66:d2:56:4b:48:98: 72:5b:e0:cf:f7:31:9c:75:d5:98:56:bb:45:11:2f:14:17:c5: 99:ef:1e:26:59:da:52:e8:03:c8:b9:e7:6f:42:68:de:43:f7: a7:f1:6e:18:81:af:ff:96:0e:97:be:40:85:75:ba:06:7f:ae: 55:d9:12:27:5c:d3:99:7a:8d:4e:5d:2f:7b:f6:ff:cc:fd:0e: 4b:22:ff:a9:5d:35:08:b9:c0:c9:48:cf:bf:cd:cb:05:e3:01: 3c:87:e8:25:24:b9:a6:7b:af:3f:a8:c8:c3:55:45:20:9a:ce: d6:04:94:20:0f:89:6d:47:eb:0f:de:d4:c5:d4:b8:38:e3:91: ef:fc:ad:73:b5:b7:6d:e5:a5:1d:12:a2:d0:2c:56:fc:a6:64: a1:ef:5f:8a:2e:76:a4:37:87:64:8d:2f:be:6e:90:c3:f4:07: c6:6d:81:a9:d8:5a:f5:a6:b3:6a:dd:28:ea:e9:8b:4b:0a:0d: ca:27:06:8d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNCRTUxMTAvBgNVBAUTKDM2NDZFQjFGMzcwQjdFNjNEMUYzNkRFQjM2QzI0NzZD OTZFNkJBRTgwHhcNMjQwNDEzMDgyNTQ5WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjFhNDE4ZC1iMTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1HwqpmmaOz5frJe3FJgxQtLkmFiU/2HX+VMpmeLs3XgNP30KYILa2RltVrrt 6NzW+brYrS0HWmfZz/D12Nrkb74GvV73GjqR80ID/qzfxsPB2lHG9ymtaLO3q/nG 8KcPqgiVupWPNIIUccdPke3xc07Tg7KptVf9rzifoo8wrmcKe3NBhP2BjBiE21FQ 7bTz3gXNdw+O8f36qkl+9TaBK7WjBRNRBKkHk3cFcjJ36MHhwg38JxW7oJnvlxZF daziK2rr/E4cLsdxRF+WACuOykrd7yHsBAEd43AnFDmI/CQRmmbqrl0Xx7b+EzkL LWcA+bI8L0SsuW3nhBlTzvmCaQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAJZn4N2 rLDoY8v3hR294a1vQEyOMB8GA1UdIwQYMBaAFDZG6x83C35j0fNt6zbCR2yW5rro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0JFNS82MTFDNTEyQ0Yw RjMxMUVDODRCMjlDODBDNEY5QUUwMi9Oa2JySHpjTGZtUFI4MjNyTnNKSGJKYm11 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rYnJIemNMZm1QUjgyM3JOc0pIYkpibXV1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTNCRTUvNjExQzUxMkNGMEYzMTFFQzg0QjI5QzgwQzRGOUFFMDIvNjI3QTY3NThE RjJBMTFFRUJDNDQwQzVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnvewwDQYJKoZIhvcNAQELBQADggEBAABaibeCN0svCt+L U1zDqgpoTEeZs0WAR+XGn2eM14pRJYY+Q5O1P4r25E/8sSaSF+lA2dvyqIRjk/mm aWlvmo2skGbSVktImHJb4M/3MZx11ZhWu0URLxQXxZnvHiZZ2lLoA8i5529CaN5D 96fxbhiBr/+WDpe+QIV1ugZ/rlXZEidc05l6jU5dL3v2/8z9Dksi/6ldNQi5wMlI z7/NywXjATyH6CUkuaZ7rz+oyMNVRSCaztYElCAPiW1H6w/e1MXUuDjjke/8rXO1 t23lpR0SotAsVvymZKHvX4oudqQ3h2SNL75ukMP0B8ZtganYWvWms2rdKOrpi0sK DconBo0= -----END CERTIFICATE-----Generated at Sat Jun 1 05:48:41 2024 by rpki-client on console-fra.rpki-client.org