$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/9BCBA2EA6D6511EB80F7684BC4F9AE02.roa File: 9BCBA2EA6D6511EB80F7684BC4F9AE02.roa (raw, json) Hash identifier: fNsbv4N3JzHNbFquq5S7j59gDujh4p1pSaR5Q8JvdKg= Subject key identifier: 9D:6D:89:16:00:0B:2D:69:45:C3:90:E4:0C:54:63:F5:C3:F1:9C:B0 Certificate issuer: /CN=A9149F48/serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79 Certificate serial: 05EC Authority key identifier: 00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/9BCBA2EA6D6511EB80F7684BC4F9AE02.roa Signing time: Fri 24 May 2024 14:04:22 +0000 ROA not before: Fri 24 May 2024 14:04:22 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 141723 IP address blocks: 103.162.186.0/23 maxlen: 24 2407:1d40::/32 maxlen: 32 2407:1d40::/36 maxlen: 36 2407:1d40:1::/48 maxlen: 48 2407:1d40:2::/48 maxlen: 48 2407:1d40:3::/48 maxlen: 48 2407:1d40:4::/48 maxlen: 48 2407:1d40:5::/48 maxlen: 48 2407:1d40:6::/48 maxlen: 48 2407:1d40:7::/48 maxlen: 48 2407:1d40:8::/48 maxlen: 48 2407:1d40:9::/48 maxlen: 48 2407:1d40:a::/48 maxlen: 48 2407:1d40:b::/48 maxlen: 48 2407:1d40:c::/48 maxlen: 48 2407:1d40:d::/48 maxlen: 48 2407:1d40:e::/48 maxlen: 48 2407:1d40:f::/48 maxlen: 48 2407:1d40:1000::/36 maxlen: 36 2407:1d40:1000::/48 maxlen: 48 2407:1d40:1001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1516 (0x5ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F48/serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79 Validity Not Before: May 24 14:04:22 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=66509e66-aa6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a2:54:c9:79:8b:f3:f3:9c:cf:56:07:a5:e3: 45:7f:c8:fe:6a:c8:c1:a5:48:0f:53:5d:56:96:e2: d4:20:1d:e3:ad:db:ef:fe:cc:75:d5:7f:0f:7b:0d: 9f:c7:97:cb:e8:53:28:9f:a7:55:cd:89:bb:7a:89: e8:af:f8:1d:39:27:d4:d2:7e:b5:e2:73:12:10:d1: 9b:42:de:07:9f:2d:5d:91:62:de:63:1b:fa:d6:cb: 98:55:05:78:2c:f2:a6:97:9c:8e:29:1e:11:b4:56: 4e:89:05:0f:e9:23:c9:fa:10:0f:2c:ac:65:eb:13: 19:38:73:22:58:46:1d:aa:26:94:f4:bd:4a:34:27: 51:98:3a:11:bd:d1:ec:4b:4e:11:82:01:b3:62:07: 3a:d5:72:da:65:4e:22:1e:c8:12:98:90:78:1b:5c: 2b:83:69:f9:97:d9:11:26:f8:21:78:f5:bb:dd:de: 40:dd:72:7b:ba:66:c1:5a:fd:ec:00:3d:a1:f2:75: 48:aa:5e:4d:f9:0b:53:4e:f9:35:cd:da:4e:47:8d: dd:a1:6c:39:e3:76:55:3a:26:7d:90:22:e6:b0:db: a2:97:57:8c:51:05:6e:98:14:50:bb:29:17:b0:b3: 2f:11:c6:85:7a:3d:8c:36:32:eb:56:b6:16:29:80: fd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:6D:89:16:00:0B:2D:69:45:C3:90:E4:0C:54:63:F5:C3:F1:9C:B0 X509v3 Authority Key Identifier: keyid:00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/9BCBA2EA6D6511EB80F7684BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.162.186.0/23 IPv6: 2407:1d40::/32 Signature Algorithm: sha256WithRSAEncryption 7e:c0:8f:b6:c1:93:4a:e4:1b:d9:14:f6:67:33:fc:3d:e0:88: c0:88:df:91:33:66:3f:1e:46:f1:31:a5:0d:69:f9:e8:38:4d: e3:25:5e:92:8d:33:52:66:88:bd:b0:ae:35:4e:e4:6c:ab:e4: 0f:23:01:bd:a1:d2:cd:fa:6b:20:41:85:76:8b:ed:2d:58:cc: 57:e6:80:3b:90:7b:69:22:f0:9f:c8:41:93:c9:a3:d5:2b:7b: 74:d6:ae:fd:55:f4:dc:17:42:40:75:d1:04:fe:4a:0a:00:ae: 70:7a:ff:59:d1:de:59:44:74:12:d6:5f:9a:6f:35:28:61:95: 87:11:2a:27:ee:99:d2:dd:0f:4a:69:7c:d4:36:ac:f5:19:17: 55:08:76:9e:90:3e:9d:ff:36:50:a0:96:27:91:08:ba:f7:50: e7:ec:59:a2:15:f6:6e:9d:58:b8:41:ef:06:f8:66:75:ea:99: 3f:69:b9:d1:e5:fa:8c:b7:ce:d9:a4:58:05:b5:61:48:27:f6: 2f:7f:d5:10:34:46:8a:ef:be:50:0f:a7:fc:be:c8:b3:06:2f: e0:0b:5d:d5:21:2a:70:cf:39:84:94:96:2d:84:24:55:11:e0: 52:d5:d9:2c:7f:69:15:79:d1:89:a1:c3:a1:0c:af:59:ce:93: a8:ee:0a:4e -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGNDgxMTAvBgNVBAUTKDAwMEIzQjRGODg5NTdDREQ2RDM3REZGNjEzMTM4RDZG NTRBODVCNzkwHhcNMjQwNTI0MTQwNDIyWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjUwOWU2Ni1hYTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzqJUyXmL8/Ocz1YHpeNFf8j+asjBpUgPU11WluLUIB3jrdvv/sx11X8Pew2f x5fL6FMon6dVzYm7eonor/gdOSfU0n614nMSENGbQt4Hny1dkWLeYxv61suYVQV4 LPKml5yOKR4RtFZOiQUP6SPJ+hAPLKxl6xMZOHMiWEYdqiaU9L1KNCdRmDoRvdHs S04RggGzYgc61XLaZU4iHsgSmJB4G1wrg2n5l9kRJvghePW73d5A3XJ7umbBWv3s AD2h8nVIql5N+QtTTvk1zdpOR43doWw543ZVOiZ9kCLmsNuil1eMUQVumBRQuykX sLMvEcaFej2MNjLrVrYWKYD9RwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJ1tiRYA Cy1pRcOQ5AxUY/XD8ZywMB8GA1UdIwQYMBaAFAALO0+IlXzdbTff9hMTjW9UqFt5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUY0OC9EOUVGOTlDMDZE NjMxMUVCOURGODE5NDlDNEY5QUUwMi9BQXM3VDRpVmZOMXROOV8yRXhPTmIxU29X M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FBczdUNGlWZk4xdE45XzJFeE9OYjFTb1czay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGNDgvRDlFRjk5QzA2RDYzMTFFQjlERjgxOTQ5QzRGOUFFMDIvOUJDQkEyRUE2 RDY1MTFFQjgwRjc2ODRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnorowDQQCAAIwBwMFACQHHUAwDQYJKoZIhvcNAQELBQAD ggEBAH7Aj7bBk0rkG9kU9mcz/D3giMCI35EzZj8eRvExpQ1p+eg4TeMlXpKNM1Jm iL2wrjVO5Gyr5A8jAb2h0s36ayBBhXaL7S1YzFfmgDuQe2ki8J/IQZPJo9Ure3TW rv1V9NwXQkB10QT+SgoArnB6/1nR3llEdBLWX5pvNShhlYcRKifumdLdD0ppfNQ2 rPUZF1UIdp6QPp3/NlCglieRCLr3UOfsWaIV9m6dWLhB7wb4ZnXqmT9pudHl+oy3 ztmkWAW1YUgn9i9/1RA0RorvvlAPp/y+yLMGL+ALXdUhKnDPOYSUli2EJFUR4FLV 2Sx/aRV50Ymhw6EMr1nOk6juCk4= -----END CERTIFICATE-----Generated at Sat Jun 1 01:41:44 2024 by rpki-client on console-fra.rpki-client.org