$ rpki-client -vvf rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/EE23EF6E857B11ECA3F32D50C4F9AE02.roa File: EE23EF6E857B11ECA3F32D50C4F9AE02.roa (raw, json) Hash identifier: u1WeU6UvrDy6/RJHPgJAeQ1takFO569N+KLvPiXwEw4= Subject key identifier: 8C:65:88:09:88:0F:6D:8F:D1:60:0D:CF:6E:AA:5F:87:F1:BB:8F:4D Certificate issuer: /CN=A9146F33/serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A Certificate serial: 031E Authority key identifier: A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/EE23EF6E857B11ECA3F32D50C4F9AE02.roa Signing time: Wed 22 May 2024 17:13:34 +0000 ROA not before: Wed 22 May 2024 17:13:34 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 134802 IP address blocks: 103.13.184.0/23 maxlen: 23 103.13.184.0/24 maxlen: 24 103.13.185.0/24 maxlen: 24 203.17.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 04:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 798 (0x31e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146F33/serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A Validity Not Before: May 22 17:13:34 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=664e27bd-dd4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:87:f6:48:e8:d6:c9:d2:f5:ea:28:ff:06:d5: 7c:8d:66:5d:65:ca:a2:29:f4:63:72:85:d8:a0:c8: 0b:6f:1b:06:5c:3e:bf:e6:3e:b3:d7:70:c7:81:3d: 86:89:96:e3:7c:d0:12:48:01:a1:19:c5:9b:99:49: 74:ed:5f:57:62:70:f4:e8:4d:e4:9b:46:9c:50:74: 3f:ee:e6:ba:6c:7c:f2:17:cf:89:39:98:54:17:f7: 14:af:84:83:f4:84:b1:e2:f8:53:ab:f6:e1:2f:45: 92:ea:fd:98:dd:e8:1f:e2:45:ab:99:67:14:6c:f0: d5:0e:85:55:4f:15:d2:57:32:31:c8:48:0c:ee:b2: b1:37:da:5e:71:ba:c6:82:3a:24:89:1f:74:88:70: 3d:48:ae:c3:31:02:61:88:33:45:5c:de:3d:f3:6e: 7c:0c:a5:d5:92:9f:67:dc:39:f7:73:33:3c:ef:ff: 7f:e2:2e:0e:9d:b6:df:ab:93:25:90:17:36:c9:83: 48:16:5e:dc:8f:24:c7:01:70:59:5f:78:26:bd:b3: e8:58:c6:53:df:01:76:cb:2d:0a:b3:57:86:98:ac: 24:92:3b:a1:9a:33:dd:84:ed:4b:07:d5:b4:67:13: ca:fc:60:88:16:4f:0e:53:38:22:85:da:10:0c:bf: b6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:65:88:09:88:0F:6D:8F:D1:60:0D:CF:6E:AA:5F:87:F1:BB:8F:4D X509v3 Authority Key Identifier: keyid:A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/EE23EF6E857B11ECA3F32D50C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.13.184.0/23 203.17.12.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:f0:67:b0:ef:ea:6f:91:e0:f8:1c:f3:cf:83:60:fc:7e:ee: de:0a:a7:80:91:9f:0a:c1:ed:d8:e9:cd:cf:4e:b7:db:41:9a: 3f:39:df:82:49:d1:3e:21:46:be:e1:37:67:d2:80:04:16:3b: c1:13:9f:f0:43:9f:43:6c:d2:7b:f4:cc:8e:70:cb:26:3d:1c: 78:56:65:f9:c2:37:c0:34:ce:64:38:f9:76:c5:9e:82:c8:30: 75:c2:6d:e3:88:c7:d2:96:df:4d:2d:9b:34:79:e3:52:e3:e2: 31:73:6d:cd:70:64:2f:dd:68:a7:0a:9d:9b:6d:b4:10:e2:59: 25:ac:2e:d9:d0:9f:5f:bf:2a:5e:f9:a5:d5:a5:2c:b7:35:0c: ac:b9:23:6d:7c:a8:c1:ff:9d:53:bc:51:2d:94:94:d2:d9:42: 6e:62:e3:a8:a5:1b:f1:84:bf:0a:38:68:41:f1:c9:75:7e:f7: 93:e0:37:40:b7:13:37:17:d4:2b:1c:3a:1d:d3:f4:4d:18:81: 90:17:59:1d:0b:1f:c8:c1:96:bd:4e:f8:ad:1c:3a:78:55:49: ad:4b:6c:e9:0a:83:9a:27:38:d2:11:57:c5:5a:67:30:7a:f3: 41:20:48:cf:2e:ed:7f:ad:78:dc:b4:58:b3:35:78:ed:c2:39: c0:f8:7a:2d -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZGMzMxMTAvBgNVBAUTKEE1NzM3QUQ5NzEzNkRCNTNDMjFCNkYzQjFENEQ3NzFE Q0Q1NzMxM0EwHhcNMjQwNTIyMTcxMzM0WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NjRlMjdiZC1kZDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1If2SOjWydL16ij/BtV8jWZdZcqiKfRjcoXYoMgLbxsGXD6/5j6z13DHgT2G iZbjfNASSAGhGcWbmUl07V9XYnD06E3km0acUHQ/7ua6bHzyF8+JOZhUF/cUr4SD 9ISx4vhTq/bhL0WS6v2Y3egf4kWrmWcUbPDVDoVVTxXSVzIxyEgM7rKxN9pecbrG gjokiR90iHA9SK7DMQJhiDNFXN498258DKXVkp9n3Dn3czM87/9/4i4Onbbfq5Ml kBc2yYNIFl7cjyTHAXBZX3gmvbPoWMZT3wF2yy0Ks1eGmKwkkjuhmjPdhO1LB9W0 ZxPK/GCIFk8OUzgihdoQDL+22wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIxliAmI D22P0WANz26qX4fxu49NMB8GA1UdIwQYMBaAFKVzetlxNttTwhtvOx1Ndx3NVzE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkYzMy9CMTY1QkI4QTg1 MTExMUVDQjlEMzM1N0NDNEY5QUUwMi9wWE42MlhFMjIxUENHMjg3SFUxM0hjMVhN VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BYTjYyWEUyMjFQQ0cyODdIVTEzSGMxWE1Uby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDZGMzMvQjE2NUJCOEE4NTExMTFFQ0I5RDMzNTdDQzRGOUFFMDIvRUUyM0VGNkU4 NTdCMTFFQ0EzRjMyRDUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnDbgDBADLEQwwDQYJKoZIhvcNAQELBQADggEBAC/wZ7Dv 6m+R4Pgc88+DYPx+7t4Kp4CRnwrB7djpzc9Ot9tBmj8534JJ0T4hRr7hN2fSgAQW O8ETn/BDn0Ns0nv0zI5wyyY9HHhWZfnCN8A0zmQ4+XbFnoLIMHXCbeOIx9KW300t mzR541Lj4jFzbc1wZC/daKcKnZtttBDiWSWsLtnQn1+/Kl75pdWlLLc1DKy5I218 qMH/nVO8US2UlNLZQm5i46ilG/GEvwo4aEHxyXV+95PgN0C3EzcX1CscOh3T9E0Y gZAXWR0LH8jBlr1O+K0cOnhVSa1LbOkKg5onONIRV8VaZzB680EgSM8u7X+teNy0 WLM1eO3COcD4ei0= -----END CERTIFICATE-----Generated at Sat Jun 1 04:59:01 2024 by rpki-client on console-fra.rpki-client.org