$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/B38547B48C1811ED95522F3EC4F9AE02.roa File: B38547B48C1811ED95522F3EC4F9AE02.roa (raw, json) Hash identifier: HXSaiv/+h3LslBJCo/sEGl2BDqm+Kqjgd7hBF3MDYrc= Subject key identifier: AA:9F:E7:DC:96:5E:BB:56:8B:48:1B:0D:E9:31:91:7B:B3:62:FB:C0 Certificate issuer: /CN=A9130F4B/serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50 Certificate serial: 0F73 Authority key identifier: 99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/B38547B48C1811ED95522F3EC4F9AE02.roa Signing time: Thu 30 May 2024 18:52:06 +0000 ROA not before: Thu 30 May 2024 18:52:06 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 24511 IP address blocks: 103.138.130.0/23 maxlen: 24 2405:e40::/32 maxlen: 32 2405:e40:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3955 (0xf73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F4B/serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50 Validity Not Before: May 30 18:52:06 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6658cad6-cb5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fc:1f:a6:2c:e6:ab:fa:fa:83:08:ee:13:50: b5:11:32:b8:1d:a6:79:6a:b7:25:f4:8c:9f:65:0f: 88:e1:3f:54:8c:22:98:d9:18:90:05:0d:dd:96:8b: 3b:da:6f:70:8e:bb:54:43:3d:40:ef:4d:af:94:99: cd:8c:b8:73:8d:7a:16:ff:c3:45:c0:e0:3e:16:a3: 59:51:a5:e8:31:00:38:aa:96:cd:fd:8b:0a:03:d6: 7b:78:40:d4:ab:b8:71:19:df:b8:b3:66:85:9b:d6: 2e:be:6f:7e:b7:0d:2a:a3:cc:d9:dd:f0:20:ab:46: b2:8b:95:12:94:88:61:fc:a5:51:9f:33:38:b7:32: 5b:cd:bd:38:fa:2c:69:7a:46:f6:23:25:ed:3b:80: 54:84:e9:46:96:36:e0:45:fc:12:9c:b2:d2:94:21: fc:af:8c:9f:fa:14:89:bb:97:79:d2:dd:1c:d5:2a: a7:57:c3:15:aa:f6:09:46:5b:da:f6:36:12:f6:1f: 26:3e:27:05:5e:dc:70:1e:5e:43:10:e1:8e:0f:1b: 9e:e3:af:57:f8:e6:48:98:e5:52:80:c6:c0:9b:9b: e1:89:e2:59:80:b9:3e:fa:d2:7b:3a:42:33:86:fd: 37:aa:bf:00:a5:3a:29:2a:b3:51:c2:ba:7d:64:5d: 21:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:9F:E7:DC:96:5E:BB:56:8B:48:1B:0D:E9:31:91:7B:B3:62:FB:C0 X509v3 Authority Key Identifier: keyid:99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/B38547B48C1811ED95522F3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.130.0/23 IPv6: 2405:e40::/32 Signature Algorithm: sha256WithRSAEncryption c3:9a:47:8d:12:c7:b1:6a:f9:8c:87:a3:7e:c4:1e:e5:3f:19: 5d:52:c5:62:32:b6:62:a4:93:00:f2:2c:04:ab:34:b5:b7:61: 27:ae:e1:b8:96:47:de:7d:72:4b:4e:a0:75:dc:31:38:90:f4: 79:f9:4b:91:a0:8b:ce:9c:f1:5b:ef:26:7d:75:79:80:0a:b7: 65:33:31:6a:ff:64:46:8b:87:3f:b9:07:f6:9e:e3:c2:92:a0: 91:14:22:cc:00:64:3e:c4:6b:95:23:3a:05:15:1b:2d:24:9f: a8:ad:d9:31:a2:5b:6b:1c:96:62:78:a2:0f:88:5f:db:18:4e: 9c:b7:98:e5:3b:3c:1a:79:97:61:b5:e7:ba:12:b7:6a:f9:23: 29:8a:b1:35:23:49:04:8e:ab:a1:af:93:76:f1:6e:60:de:53: ff:ef:bb:10:cb:1c:f3:6a:51:56:4e:20:d8:91:db:56:4b:c5: e6:45:9d:c8:d5:47:1d:92:fc:f7:34:6e:30:65:76:83:ca:e7: 95:04:eb:57:2b:da:f8:23:00:12:dc:e8:1c:81:f4:d2:89:d7: bb:93:f4:6c:54:da:c4:05:66:37:9b:75:66:9f:9e:93:b0:1b: fa:3f:14:53:f6:c3:4d:29:13:ad:70:1c:c7:13:2e:63:8b:79: 5a:a0:e8:e4 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICD3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBGNEIxMTAvBgNVBAUTKDk5MzBEMEZGRUI4NzA3MDFCNEU4RUI0REIzQzA4NjYy MzNGQzVCNTAwHhcNMjQwNTMwMTg1MjA2WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU4Y2FkNi1jYjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/wfpizmq/r6gwjuE1C1ETK4HaZ5arcl9IyfZQ+I4T9UjCKY2RiQBQ3dlos7 2m9wjrtUQz1A702vlJnNjLhzjXoW/8NFwOA+FqNZUaXoMQA4qpbN/YsKA9Z7eEDU q7hxGd+4s2aFm9Yuvm9+tw0qo8zZ3fAgq0ayi5USlIhh/KVRnzM4tzJbzb04+ixp ekb2IyXtO4BUhOlGljbgRfwSnLLSlCH8r4yf+hSJu5d50t0c1SqnV8MVqvYJRlva 9jYS9h8mPicFXtxwHl5DEOGODxue469X+OZImOVSgMbAm5vhieJZgLk++tJ7OkIz hv03qr8ApTopKrNRwrp9ZF0hlwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFKqf59yW XrtWi0gbDekxkXuzYvvAMB8GA1UdIwQYMBaAFJkw0P/rhwcBtOjrTbPAhmIz/FtQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEY0Qi81NzcyQUEzMDU0 RTQxMUU5ODUzNkY2NTlDNEY5QUUwMi9tVERRXy11SEJ3RzA2T3ROczhDR1lqUDhX MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21URFFfLXVIQndHMDZPdE5zOENHWWpQOFcxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzBGNEIvNTc3MkFBMzA1NEU0MTFFOTg1MzZGNjU5QzRGOUFFMDIvQjM4NTQ3QjQ4 QzE4MTFFRDk1NTIyRjNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnioIwDQQCAAIwBwMFACQFDkAwDQYJKoZIhvcNAQELBQAD ggEBAMOaR40Sx7Fq+YyHo37EHuU/GV1SxWIytmKkkwDyLASrNLW3YSeu4biWR959 cktOoHXcMTiQ9Hn5S5Ggi86c8VvvJn11eYAKt2UzMWr/ZEaLhz+5B/ae48KSoJEU IswAZD7Ea5UjOgUVGy0kn6it2TGiW2sclmJ4og+IX9sYTpy3mOU7PBp5l2G157oS t2r5IymKsTUjSQSOq6Gvk3bxbmDeU//vuxDLHPNqUVZOINiR21ZLxeZFncjVRx2S /Pc0bjBldoPK55UE61cr2vgjABLc6ByB9NKJ17uT9GxU2sQFZjebdWafnpOwG/o/ FFP2w00pE61wHMcTLmOLeVqg6OQ= -----END CERTIFICATE-----Generated at Fri May 31 20:34:00 2024 by rpki-client on console-ams.rpki-client.org