$ rpki-client -vvf rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/F607A6C8DF8C11ED9EAE5884C4F9AE02.roa File: F607A6C8DF8C11ED9EAE5884C4F9AE02.roa (raw, json) Hash identifier: OJOp4QsqdIdHyogZJwwwl2CA1RHQVKJeYLhatS2OCss= Subject key identifier: C8:B3:DB:41:E4:E0:2D:CD:69:F1:90:A4:DC:EB:E6:7B:C4:6D:9B:23 Certificate issuer: /CN=A9126B7C/serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6 Certificate serial: 012B Authority key identifier: 04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/F607A6C8DF8C11ED9EAE5884C4F9AE02.roa Signing time: Mon 11 Nov 2024 02:56:19 +0000 ROA not before: Mon 11 Nov 2024 02:56:19 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 7029 IP address blocks: 103.140.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126B7C Validity Not Before: Nov 11 02:56:19 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67317252-e1b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f9:15:77:e0:da:45:fa:a4:cd:be:50:dd:a9: 84:76:b1:40:c5:d1:d8:ee:de:f4:c7:8e:2f:12:f6: 39:fd:9f:2c:6e:28:b4:f5:13:f8:28:0b:5f:10:80: 9d:de:0b:f6:1a:80:1a:bb:c7:26:a8:b9:76:4b:e5: c9:09:94:0a:a9:fb:77:c4:58:c0:d1:16:c2:e7:c6: 96:d3:26:f8:70:10:60:bb:b5:2a:82:06:4c:8b:63: 5b:93:40:d7:86:29:a1:39:93:ac:f5:ac:d4:71:98: ce:75:98:69:45:33:6e:5e:b8:7a:64:74:24:69:42: 8a:c7:c6:71:0c:c6:5b:a0:6f:87:a8:1c:55:2f:e1: 08:09:67:e2:69:99:aa:64:b7:e2:07:be:91:a1:13: 5d:93:20:b6:32:d0:c3:0a:30:67:5b:f5:c1:b2:f1: 48:7c:f7:29:a3:df:ee:2d:5b:73:16:6c:1a:1c:f2: 38:18:69:cc:20:33:6b:bf:7b:37:f6:bb:4b:68:cb: 82:ff:14:19:53:1f:36:e5:4d:df:c4:30:4e:d0:1b: f1:1d:e1:cd:06:1b:0f:8f:d0:8f:8a:c2:fb:35:d2: c0:f5:2d:5f:31:5c:58:e5:80:15:a9:4f:5b:a2:c9: 60:ed:2e:24:0b:30:92:63:53:1b:85:cd:01:ba:87: 84:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B3:DB:41:E4:E0:2D:CD:69:F1:90:A4:DC:EB:E6:7B:C4:6D:9B:23 X509v3 Authority Key Identifier: keyid:04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/F607A6C8DF8C11ED9EAE5884C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.114.0/23 Signature Algorithm: sha256WithRSAEncryption d8:81:2f:7c:05:b4:18:09:de:a7:ab:82:7a:44:f6:92:c1:e2: cd:ed:63:ab:ef:d1:90:a8:a1:d4:0d:3e:63:89:26:34:14:c2: a2:fd:00:5d:bf:15:13:7b:51:37:ab:f2:57:53:7b:df:ef:10: 58:0b:0c:39:ef:66:b2:e8:fe:30:b8:01:c5:5e:ea:8f:82:7c: b4:24:3e:30:47:df:a1:8b:0e:f8:48:c7:43:d7:0d:55:dd:a6: d5:e5:18:2f:dc:bd:b4:81:e1:e3:26:72:a2:52:d4:d7:d3:f1: c0:1f:67:a6:fe:29:c0:83:bc:e6:fe:25:a0:9f:ea:25:9b:6c: f1:d6:8f:e6:e1:6f:95:f3:7b:5c:c3:ce:de:7c:bf:26:72:e2: 52:2c:e1:e6:8e:d3:a7:b7:fe:a5:63:48:2c:f6:c0:00:7f:a0: 61:b0:18:e2:aa:64:2b:ab:f1:35:3d:5f:1e:e2:76:ec:44:86: 74:61:e7:37:20:c5:8e:f7:e0:d7:39:a9:cd:9f:1d:13:df:9d: 82:b8:e2:d6:15:97:3b:ee:6b:d1:35:45:4b:64:50:f9:00:dc: bb:fc:b5:2f:69:f4:cb:a7:9f:e2:83:95:e3:42:20:61:95:94: 95:a5:5c:12:11:c1:50:6a:e9:b1:27:cb:79:64:37:0b:98:9d: d7:34:6d:a0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZCN0MxMTAvBgNVBAUTKDA0RjA3NEEwQkE4NzgwNUM1MEZDNzk5M0Q0MDQxMEI4 NEExMUQyRjYwHhcNMjQxMTExMDI1NjE5WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzMxNzI1Mi1lMWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPkVd+DaRfqkzb5Q3amEdrFAxdHY7t70x44vEvY5/Z8sbii09RP4KAtfEICd 3gv2GoAau8cmqLl2S+XJCZQKqft3xFjA0RbC58aW0yb4cBBgu7UqggZMi2Nbk0DX himhOZOs9azUcZjOdZhpRTNuXrh6ZHQkaUKKx8ZxDMZboG+HqBxVL+EICWfiaZmq ZLfiB76RoRNdkyC2MtDDCjBnW/XBsvFIfPcpo9/uLVtzFmwaHPI4GGnMIDNrv3s3 9rtLaMuC/xQZUx825U3fxDBO0BvxHeHNBhsPj9CPisL7NdLA9S1fMVxY5YAVqU9b oslg7S4kCzCSY1Mbhc0BuoeEiwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMiz20Hk 4C3NafGQpNzr5nvEbZsjMB8GA1UdIwQYMBaAFATwdKC6h4BcUPx5k9QEELhKEdL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkI3Qy81MUE5NDQ1QURG ODgxMUVEQUZCRjJCN0ZDNEY5QUUwMi9CUEIwb0xxSGdGeFFfSG1UMUFRUXVFb1Iw dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JQQjBvTHFIZ0Z4UV9IbVQxQVFRdUVvUjB2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjZCN0MvNTFBOTQ0NUFERjg4MTFFREFGQkYyQjdGQzRGOUFFMDIvRjYwN0E2QzhE RjhDMTFFRDlFQUU1ODg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnjHIwDQYJKoZIhvcNAQELBQADggEBANiBL3wFtBgJ3qer gnpE9pLB4s3tY6vv0ZCoodQNPmOJJjQUwqL9AF2/FRN7UTer8ldTe9/vEFgLDDnv ZrLo/jC4AcVe6o+CfLQkPjBH36GLDvhIx0PXDVXdptXlGC/cvbSB4eMmcqJS1NfT 8cAfZ6b+KcCDvOb+JaCf6iWbbPHWj+bhb5Xze1zDzt58vyZy4lIs4eaO06e3/qVj SCz2wAB/oGGwGOKqZCur8TU9Xx7iduxEhnRh5zcgxY734Nc5qc2fHRPfnYK44tYV lzvua9E1RUtkUPkA3Lv8tS9p9Munn+KDleNCIGGVlJWlXBIRwVBq6bEny3lkNwuY ndc0baA= -----END CERTIFICATE-----Generated at Sat Apr 5 01:47:47 2025 by rpki-client