$ rpki-client -vvf rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/7142AA1A062E11EDA95B3143C4F9AE02.roa File: 7142AA1A062E11EDA95B3143C4F9AE02.roa (raw, json) Hash identifier: KsGTzviuEoxluHRk1DV0/L77oiHXprtHi86RwqnZlnI= Subject key identifier: 96:12:77:D9:9B:83:BD:0F:A0:12:76:B7:C9:CA:89:6D:40:9F:23:FC Certificate issuer: /CN=A9137AD6/serialNumber=2578CBCAFCA26B172057E37AB77A61C81032222D Certificate serial: 0252 Authority key identifier: 25:78:CB:CA:FC:A2:6B:17:20:57:E3:7A:B7:7A:61:C8:10:32:22:2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXjLyvyiaxcgV-N6t3phyBAyIi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/7142AA1A062E11EDA95B3143C4F9AE02.roa Signing time: Fri 15 Mar 2024 03:25:25 +0000 ROA not before: Fri 15 Mar 2024 03:25:25 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 132309 IP address blocks: 103.9.240.0/22 maxlen: 22 103.9.240.0/24 maxlen: 24 103.9.241.0/24 maxlen: 24 103.9.242.0/24 maxlen: 24 103.9.243.0/24 maxlen: 24 123.253.40.0/24 maxlen: 24 123.253.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.crl rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXjLyvyiaxcgV-N6t3phyBAyIi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 04:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 594 (0x252) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137AD6/serialNumber=2578CBCAFCA26B172057E37AB77A61C81032222D Validity Not Before: Mar 15 03:25:25 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65f3bfa5-dc00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:35:a3:d5:41:14:e0:f1:cb:03:b3:42:c4:f6: aa:1b:cd:af:bd:c7:85:f1:99:a3:88:26:2d:01:a3: 49:11:35:14:65:bd:e6:9c:b0:ba:cb:d8:02:28:d0: db:e7:a1:1f:80:33:d1:3d:f1:4c:51:d6:fc:68:09: 52:67:87:ed:3e:67:e1:e8:b6:63:6f:eb:0f:75:9e: 07:e6:b2:ea:25:ec:ba:09:be:01:a6:31:7c:6c:d4: d9:af:bd:c7:33:25:51:c4:77:59:9e:aa:15:e6:56: e0:ac:ce:1c:39:0d:74:a0:33:cd:af:be:7a:ce:54: fc:69:e1:eb:94:4c:2f:f8:2a:30:13:8d:ff:51:bd: a6:85:2e:35:73:9f:8e:88:60:77:aa:03:29:ea:7f: 9f:f6:df:85:a0:2c:d8:47:be:5e:98:26:e4:8d:7d: 9d:48:85:e9:13:c8:63:eb:91:7a:02:46:7f:71:7e: 30:c2:eb:c6:7f:bc:85:7d:22:f5:0a:81:96:2a:38: b0:fb:e8:2f:ee:2b:88:e3:76:f0:a3:6c:38:e5:e5: 90:a2:d8:c9:af:67:f0:c8:1e:ee:a8:dc:f8:44:13: 36:15:80:cb:a8:9f:f2:3e:77:8d:07:8f:71:30:c4: 45:5d:72:86:ed:7a:54:3e:d4:a0:e5:dc:1e:f7:7a: a9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:12:77:D9:9B:83:BD:0F:A0:12:76:B7:C9:CA:89:6D:40:9F:23:FC X509v3 Authority Key Identifier: keyid:25:78:CB:CA:FC:A2:6B:17:20:57:E3:7A:B7:7A:61:C8:10:32:22:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXjLyvyiaxcgV-N6t3phyBAyIi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/7142AA1A062E11EDA95B3143C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.9.240.0/22 123.253.40.0/24 123.253.43.0/24 Signature Algorithm: sha256WithRSAEncryption 39:4e:47:2a:60:6c:a2:a5:ef:35:fa:b7:ec:96:9d:91:d8:e2: c0:72:11:af:4d:91:e0:59:79:dc:dd:cf:85:13:4f:d2:06:5c: 36:0b:88:cc:31:c6:89:01:3e:b4:59:0e:db:73:00:1b:0a:5b: cb:40:57:d6:57:28:d9:17:88:c8:35:8c:d7:b7:88:fe:46:9d: 46:79:14:e4:20:fe:ac:a1:fe:22:a0:e8:b7:ed:26:ef:bc:b3: 5d:6e:43:79:07:f3:d6:11:a1:e1:13:75:42:82:7a:0f:21:47: a5:20:c2:e1:ce:3f:33:21:07:bf:65:93:8c:54:50:e1:f1:ac: 18:fd:fd:d8:ed:bd:8d:b3:a4:96:cc:3d:2c:ea:51:d7:ab:05: 06:89:44:2f:a3:4d:5f:a1:21:8d:6a:df:78:aa:13:ce:5d:53: ca:f5:b6:3b:99:2c:a7:f3:8e:71:df:09:54:61:63:17:ec:05: cf:d4:0a:31:d3:8c:bc:a2:76:95:64:29:6d:1e:26:f2:80:ac: e1:fe:67:cb:88:1a:5b:38:90:6e:b8:e7:33:24:b7:39:fc:cd: d5:cb:d4:10:a8:43:85:df:fe:ee:aa:8d:1d:31:6d:fd:0e:ee: 16:29:22:de:35:a5:15:84:59:c0:db:37:be:c0:72:10:2e:48: 28:6f:33:ad -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICAlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBRDYxMTAvBgNVBAUTKDI1NzhDQkNBRkNBMjZCMTcyMDU3RTM3QUI3N0E2MUM4 MTAzMjIyMkQwHhcNMjQwMzE1MDMyNTI1WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWYzYmZhNS1kYzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0DWj1UEU4PHLA7NCxPaqG82vvceF8ZmjiCYtAaNJETUUZb3mnLC6y9gCKNDb 56EfgDPRPfFMUdb8aAlSZ4ftPmfh6LZjb+sPdZ4H5rLqJey6Cb4BpjF8bNTZr73H MyVRxHdZnqoV5lbgrM4cOQ10oDPNr756zlT8aeHrlEwv+CowE43/Ub2mhS41c5+O iGB3qgMp6n+f9t+FoCzYR75emCbkjX2dSIXpE8hj65F6AkZ/cX4wwuvGf7yFfSL1 CoGWKjiw++gv7iuI43bwo2w45eWQotjJr2fwyB7uqNz4RBM2FYDLqJ/yPneNB49x MMRFXXKG7XpUPtSg5dwe93qppQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFJYSd9mb g70PoBJ2t8nKiW1AnyP8MB8GA1UdIwQYMBaAFCV4y8r8omsXIFfjerd6YcgQMiIt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FENi9BMkNFNkJEOEM3 NzYxMUVDQjczQUQ1NjZDNEY5QUUwMi9KWGpMeXZ5aWF4Y2dWLU42dDNwaHlCQXlJ aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pYakx5dnlpYXhjZ1YtTjZ0M3BoeUJBeUlpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBRDYvQTJDRTZCRDhDNzc2MTFFQ0I3M0FENTY2QzRGOUFFMDIvNzE0MkFBMUEw NjJFMTFFREE5NUIzMTQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAJnCfADBAB7/SgDBAB7/SswDQYJKoZIhvcNAQELBQADggEB ADlORypgbKKl7zX6t+yWnZHY4sByEa9NkeBZedzdz4UTT9IGXDYLiMwxxokBPrRZ DttzABsKW8tAV9ZXKNkXiMg1jNe3iP5GnUZ5FOQg/qyh/iKg6LftJu+8s11uQ3kH 89YRoeETdUKCeg8hR6UgwuHOPzMhB79lk4xUUOHxrBj9/djtvY2zpJbMPSzqUder BQaJRC+jTV+hIY1q33iqE85dU8r1tjuZLKfzjnHfCVRhYxfsBc/UCjHTjLyidpVk KW0eJvKArOH+Z8uIGls4kG645zMktzn8zdXL1BCoQ4Xf/u6qjR0xbf0O7hYpIt41 pRWEWcDbN77AchAuSChvM60= -----END CERTIFICATE-----Generated at Sat Jun 1 05:48:42 2024 by rpki-client on console-fra.rpki-client.org