$ rpki-client -vvf rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/65B35A86577011EC8F00A65AC4F9AE02.roa File: 65B35A86577011EC8F00A65AC4F9AE02.roa (raw, json) Hash identifier: jk0OlUtsonV+OqmO20RP7bvOZGqpwgHo/K8308TyxMo= Subject key identifier: 8D:E9:A4:F0:C7:68:7C:2D:5E:01:57:08:96:70:9F:73:D1:3C:43:D7 Certificate issuer: /CN=A9146304/serialNumber=4614259427464874BE7DEB7BF421272CB23DA188 Certificate serial: 0F60 Authority key identifier: 46:14:25:94:27:46:48:74:BE:7D:EB:7B:F4:21:27:2C:B2:3D:A1:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/65B35A86577011EC8F00A65AC4F9AE02.roa Signing time: Wed 12 Jul 2023 17:54:34 +0000 ROA not before: Wed 12 Jul 2023 17:54:34 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 56311 IP address blocks: 103.168.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.crl rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3936 (0xf60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146304/serialNumber=4614259427464874BE7DEB7BF421272CB23DA188 Validity Not Before: Jul 12 17:54:34 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64aee8da-709e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8c:4e:23:a4:df:e6:bf:14:0a:11:75:f8:15: 52:71:5a:83:07:23:77:e3:4f:ba:ce:d1:55:71:58: d1:0c:b7:29:54:e2:30:c9:91:4e:b0:50:dc:64:d2: 69:88:ab:26:1d:94:c6:5d:2b:5d:31:ed:6f:67:47: 69:4f:dd:7b:c5:88:40:38:a8:87:6c:89:eb:c4:66: a1:5f:4f:d1:c2:d3:d9:42:2e:14:9f:b2:11:be:de: 6f:ba:8f:ba:6c:59:91:10:95:ea:71:8e:ad:c3:8c: 65:67:a4:05:33:01:39:d5:6a:4d:5f:05:ae:41:60: 99:61:6f:d6:0b:a5:17:fa:34:46:ba:7d:55:97:d6: 4e:c3:ea:82:39:8f:c5:af:be:88:44:15:a1:bb:4c: 89:62:36:6c:dc:d7:1e:8c:9e:9f:52:83:99:b6:f1: cd:e8:b7:94:0e:56:8b:32:26:59:fe:fa:a6:dd:11: a6:4b:fc:2c:e4:c4:a7:15:1c:61:f3:cc:5c:1a:d4: b8:7c:13:3e:35:49:df:02:f4:dd:ec:4e:dd:43:e0: 54:da:79:c6:6c:dd:d6:4c:ad:4a:41:8f:93:51:e3: e1:52:c0:f9:0b:bd:8e:0f:ee:ae:7d:22:df:35:49: 66:5a:bb:d4:34:a9:3e:0b:8f:5b:29:f9:48:93:ea: ed:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E9:A4:F0:C7:68:7C:2D:5E:01:57:08:96:70:9F:73:D1:3C:43:D7 X509v3 Authority Key Identifier: keyid:46:14:25:94:27:46:48:74:BE:7D:EB:7B:F4:21:27:2C:B2:3D:A1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/65B35A86577011EC8F00A65AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.168.70.0/23 Signature Algorithm: sha256WithRSAEncryption a1:da:8a:36:df:12:c5:3e:cc:5f:ff:6f:44:e2:ff:e5:93:86: ee:7a:2a:80:21:b5:c1:29:95:d9:fa:aa:59:d1:f6:4c:c2:38: f4:fb:50:1a:df:70:5f:62:66:21:cf:e1:a0:02:fb:cf:6e:05: 73:45:8c:35:3b:8e:90:bf:fd:26:b7:cd:dd:76:5a:d6:c8:c9: 29:4f:b7:76:84:db:9f:26:94:3c:f1:e7:18:75:07:f9:95:85: 35:a3:56:25:11:d6:32:df:44:a9:72:32:f0:12:4c:e1:7e:12: 20:d9:0e:52:cc:ac:ce:c1:fa:11:1e:d9:82:98:ff:b7:5e:24: 3e:32:b4:40:12:b8:49:48:44:f2:ec:d9:6c:e5:8a:da:1f:2c: 07:e6:53:c6:65:0f:16:19:1b:c9:6d:47:2d:b4:92:e4:75:2a: 73:75:f7:91:24:0a:be:d7:90:a0:30:b7:0d:9f:b3:a0:ce:6b: cb:11:21:e7:e6:f7:8b:bb:0e:75:d7:af:4e:4c:67:a6:1f:88: b5:72:d3:cf:c1:ae:8a:f6:19:de:f4:02:2f:7b:78:ca:44:4b: 4e:80:ab:68:44:04:29:98:94:e6:97:2a:b0:2a:75:84:c3:a9: 36:21:5b:6e:be:e2:70:1a:b1:78:ae:cb:af:da:b2:e3:33:f5: c8:1c:8f:76 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICD2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzMDQxMTAvBgNVBAUTKDQ2MTQyNTk0Mjc0NjQ4NzRCRTdERUI3QkY0MjEyNzJD QjIzREExODgwHhcNMjMwNzEyMTc1NDM0WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGFlZThkYS03MDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3IxOI6Tf5r8UChF1+BVScVqDByN340+6ztFVcVjRDLcpVOIwyZFOsFDcZNJp iKsmHZTGXStdMe1vZ0dpT917xYhAOKiHbInrxGahX0/RwtPZQi4Un7IRvt5vuo+6 bFmREJXqcY6tw4xlZ6QFMwE51WpNXwWuQWCZYW/WC6UX+jRGun1Vl9ZOw+qCOY/F r76IRBWhu0yJYjZs3NcejJ6fUoOZtvHN6LeUDlaLMiZZ/vqm3RGmS/ws5MSnFRxh 88xcGtS4fBM+NUnfAvTd7E7dQ+BU2nnGbN3WTK1KQY+TUePhUsD5C72OD+6ufSLf NUlmWrvUNKk+C49bKflIk+rtJwIDAQABo4IClTCCApEwHQYDVR0OBBYEFI3ppPDH aHwtXgFXCJZwn3PRPEPXMB8GA1UdIwQYMBaAFEYUJZQnRkh0vn3re/QhJyyyPaGI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjMwNC9FNzg4QzhBMjI1 ODIxMUU5OTBCMzc4M0FDNEY5QUUwMi9SaFFsbENkR1NIUy1mZXQ3OUNFbkxMSTlv WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JoUWxsQ2RHU0hTLWZldDc5Q0VuTExJOW9ZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDYzMDQvRTc4OEM4QTIyNTgyMTFFOTkwQjM3ODNBQzRGOUFFMDIvNjVCMzVBODY1 NzcwMTFFQzhGMDBBNjVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnqEYwDQYJKoZIhvcNAQELBQADggEBAKHaijbfEsU+zF// b0Ti/+WThu56KoAhtcEpldn6qlnR9kzCOPT7UBrfcF9iZiHP4aAC+89uBXNFjDU7 jpC//Sa3zd12WtbIySlPt3aE258mlDzx5xh1B/mVhTWjViUR1jLfRKlyMvASTOF+ EiDZDlLMrM7B+hEe2YKY/7deJD4ytEASuElIRPLs2WzlitofLAfmU8ZlDxYZG8lt Ry20kuR1KnN195EkCr7XkKAwtw2fs6DOa8sRIefm94u7DnXXr05MZ6YfiLVy08/B ror2Gd70Ai97eMpES06Aq2hEBCmYlOaXKrAqdYTDqTYhW26+4nAasXiuy6/asuMz 9cgcj3Y= -----END CERTIFICATE-----Generated at Fri May 31 19:47:48 2024 by rpki-client on console-fra.rpki-client.org