$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/2965791E5F4011ED9361C246C4F9AE02.roa File: 2965791E5F4011ED9361C246C4F9AE02.roa (raw, json) Hash identifier: wcboBkBsiOUc1fILeS4MBz6tRlg1NvPPP97/P2NtfGs= Subject key identifier: B3:65:13:87:77:C0:F4:F9:5F:83:3C:5D:C2:DA:63:6D:45:FE:DD:6C Certificate issuer: /CN=A9127C93/serialNumber=06CB7662196F644EDEC9DCFBD8799B8C73E39709 Certificate serial: F0 Authority key identifier: 06:CB:76:62:19:6F:64:4E:DE:C9:DC:FB:D8:79:9B:8C:73:E3:97:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/2965791E5F4011ED9361C246C4F9AE02.roa Signing time: Mon 29 Jan 2024 04:47:40 +0000 ROA not before: Mon 29 Jan 2024 04:47:40 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 136780 IP address blocks: 43.239.206.0/23 maxlen: 24 103.105.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.crl rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Jun 2024 05:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127C93/serialNumber=06CB7662196F644EDEC9DCFBD8799B8C73E39709 Validity Not Before: Jan 29 04:47:40 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65b72dec-73db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1b:35:11:4b:d9:11:7b:1e:20:1f:9e:85:41: eb:94:64:2e:63:18:e4:c3:8f:8a:a2:42:74:68:4e: 2b:9d:aa:50:9b:ad:7d:8a:cb:bb:c2:bd:26:49:21: 48:3b:3c:89:22:38:75:c2:3a:47:73:da:69:af:c8: e4:b4:8c:f2:e1:fc:f7:b4:72:53:66:4c:9b:88:ae: 44:e1:35:6e:74:27:48:8e:56:f1:4d:39:3c:70:94: a1:dc:06:29:1a:08:af:44:01:5f:88:33:49:ad:a8: d4:9e:15:57:73:dc:2b:3a:15:61:11:9e:81:b0:fb: db:07:00:fe:97:ed:2f:64:1b:5d:5f:b0:ca:a2:b9: e5:7f:39:0f:c9:50:c3:6a:40:84:ef:bd:e3:9c:c6: 75:4e:ac:b8:06:b1:80:80:3b:4a:ef:f6:4d:67:8e: f9:fe:f1:f9:11:b8:18:8b:fd:55:bf:ae:d6:85:ce: 1e:f7:dd:4e:c0:e2:36:51:e4:aa:38:1e:ea:96:4f: 84:00:4e:48:c8:b4:ac:70:c8:af:16:e7:c1:1a:25: 56:9d:de:ba:b2:83:5a:97:3a:b4:a8:52:14:eb:ee: 9b:85:87:25:33:50:90:db:f2:84:a4:6e:65:33:da: 88:20:63:18:42:17:3d:cf:76:7d:b0:f3:4d:c1:32: fc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:65:13:87:77:C0:F4:F9:5F:83:3C:5D:C2:DA:63:6D:45:FE:DD:6C X509v3 Authority Key Identifier: keyid:06:CB:76:62:19:6F:64:4E:DE:C9:DC:FB:D8:79:9B:8C:73:E3:97:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/2965791E5F4011ED9361C246C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.239.206.0/23 103.105.172.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:e4:03:09:6e:aa:9f:90:fd:fc:ad:eb:e2:91:ca:bd:7b:30: 67:78:6e:38:4e:1a:60:dc:b8:85:c3:22:c2:ab:b1:07:7b:29: eb:17:83:95:11:6e:7a:a2:93:f0:a1:75:7f:30:75:4b:e5:63: 6d:79:63:bd:68:13:ef:ef:b7:e5:08:46:3d:dd:8a:0e:60:45: 49:77:c6:fa:17:7f:9c:1b:22:bd:e5:ef:ef:30:c9:77:67:57: 06:fb:50:31:1e:3f:c2:99:67:f7:83:80:16:28:f1:d0:63:32: 14:42:85:04:05:e1:2f:54:b7:b6:ec:1a:dc:46:ac:b2:59:e2: e0:45:40:1c:1d:19:cf:fe:20:32:13:0a:ff:3a:c4:d2:9f:35: f3:43:c7:6e:56:cc:88:97:8f:1b:90:d9:39:a6:93:62:ba:75: 73:48:b6:7c:68:57:be:5f:aa:c6:da:38:88:20:c6:f4:39:91: 82:5f:a1:e9:a7:d7:a0:9e:14:32:0e:16:07:2b:86:d8:05:96: 48:4c:a0:af:b2:5b:14:8d:28:20:d3:62:66:d1:a5:4d:df:15: 57:f1:ff:93:d6:1c:64:f1:5d:4e:fa:02:c5:0c:4e:1b:a2:c6: 6d:8c:ca:1f:27:15:3a:12:3a:87:d6:ed:ab:b9:34:6c:62:b9: 18:14:cf:b6 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdDOTMxMTAvBgNVBAUTKDA2Q0I3NjYyMTk2RjY0NEVERUM5RENGQkQ4Nzk5QjhD NzNFMzk3MDkwHhcNMjQwMTI5MDQ0NzQwWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWI3MmRlYy03M2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Bs1EUvZEXseIB+ehUHrlGQuYxjkw4+KokJ0aE4rnapQm619isu7wr0mSSFI OzyJIjh1wjpHc9ppr8jktIzy4fz3tHJTZkybiK5E4TVudCdIjlbxTTk8cJSh3AYp GgivRAFfiDNJrajUnhVXc9wrOhVhEZ6BsPvbBwD+l+0vZBtdX7DKornlfzkPyVDD akCE773jnMZ1Tqy4BrGAgDtK7/ZNZ475/vH5EbgYi/1Vv67Whc4e991OwOI2UeSq OB7qlk+EAE5IyLSscMivFufBGiVWnd66soNalzq0qFIU6+6bhYclM1CQ2/KEpG5l M9qIIGMYQhc9z3Z9sPNNwTL8fQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLNlE4d3 wPT5X4M8XcLaY21F/t1sMB8GA1UdIwQYMBaAFAbLdmIZb2RO3snc+9h5m4xz45cJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0M5My80MDIxQTRFNjVG MjQxMUVEQjgwQzE5MjFDNEY5QUUwMi9Cc3QyWWhsdlpFN2V5ZHo3MkhtYmpIUGps d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JzdDJZaGx2WkU3ZXlkejcySG1iakhQamx3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjdDOTMvNDAyMUE0RTY1RjI0MTFFREI4MEMxOTIxQzRGOUFFMDIvMjk2NTc5MUU1 RjQwMTFFRDkzNjFDMjQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAEr784DBAJnaawwDQYJKoZIhvcNAQELBQADggEBAJrkAwlu qp+Q/fyt6+KRyr17MGd4bjhOGmDcuIXDIsKrsQd7KesXg5URbnqik/ChdX8wdUvl Y215Y71oE+/vt+UIRj3dig5gRUl3xvoXf5wbIr3l7+8wyXdnVwb7UDEeP8KZZ/eD gBYo8dBjMhRChQQF4S9Ut7bsGtxGrLJZ4uBFQBwdGc/+IDITCv86xNKfNfNDx25W zIiXjxuQ2Tmmk2K6dXNItnxoV75fqsbaOIggxvQ5kYJfoemn16CeFDIOFgcrhtgF lkhMoK+yWxSNKCDTYmbRpU3fFVfx/5PWHGTxXU76AsUMThuixm2Myh8nFToSOofW 7au5NGxiuRgUz7Y= -----END CERTIFICATE-----Generated at Thu Jun 13 08:01:35 2024 by rpki-client on console-ams.rpki-client.org