$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/9A8603FC93ED11ED931AB73CC4F9AE02.roa File: 9A8603FC93ED11ED931AB73CC4F9AE02.roa (raw, json) Hash identifier: zEcAoH6Tp/2QV/N0ADzgdcdiJXIraNxY9bGSgI8p4Ow= Subject key identifier: 49:AA:32:E0:B5:77:B0:E3:62:19:0E:DE:B9:C8:A6:25:3B:9F:6B:9E Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Certificate serial: 0B8C Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/9A8603FC93ED11ED931AB73CC4F9AE02.roa Signing time: Thu 04 Apr 2024 20:28:52 +0000 ROA not before: Thu 04 Apr 2024 20:28:52 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 201133 IP address blocks: 103.155.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2956 (0xb8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Validity Not Before: Apr 4 20:28:52 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660f0d83-1860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cd:7b:53:b9:51:d7:f8:77:05:9d:ba:2d:9b: bc:8e:64:9d:46:9e:4e:85:5d:89:9b:45:a4:a9:49: 31:78:ed:58:14:fd:7e:20:8a:80:9c:eb:07:a1:bb: 5b:ec:7a:d8:a8:50:1f:80:83:e3:69:b4:c5:f3:90: 2e:d2:4e:eb:14:00:7d:3d:c3:7b:a9:3a:66:ed:7b: 6b:ef:44:00:b0:98:cc:86:04:a6:ba:17:0f:47:b1: f6:12:0e:18:35:34:d5:bc:2c:79:7a:fb:07:82:d8: b7:cd:b9:94:41:92:b3:b4:e6:ca:26:21:91:6b:ab: 02:5f:37:13:c9:d0:9e:75:0a:cf:b8:ac:bc:2d:95: ad:c3:13:9a:2e:d8:ff:57:96:f3:14:3d:a5:5b:74: 76:02:a8:32:e8:0a:4c:64:d5:cf:3f:e5:cc:91:45: c1:fc:c1:05:d0:93:52:8c:87:c0:93:39:79:7c:5f: 25:39:d3:3f:12:4e:e3:5c:ac:f0:65:62:40:a6:9d: fc:59:d2:f5:f1:97:fe:c3:72:cf:09:da:44:27:c0: ff:bc:e1:31:79:cd:2c:94:ff:6b:3f:97:e2:b2:dc: b8:28:cd:ee:b5:02:e3:77:69:d9:d9:14:00:04:c5: e3:50:4b:e8:f4:1b:02:76:53:78:39:cb:70:23:cb: fa:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AA:32:E0:B5:77:B0:E3:62:19:0E:DE:B9:C8:A6:25:3B:9F:6B:9E X509v3 Authority Key Identifier: keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/9A8603FC93ED11ED931AB73CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.155.92.0/24 Signature Algorithm: sha256WithRSAEncryption 52:8a:1c:f5:d9:0f:5a:85:bd:50:d4:ba:11:e9:fa:96:2f:aa: aa:85:20:67:14:37:a1:dc:01:fa:68:58:ab:4e:cc:58:6c:f7: ac:24:c2:33:1a:c8:f2:f8:e9:27:a9:c1:7f:84:da:18:bf:d3: 2d:6b:73:27:f5:57:cf:31:f4:6f:f4:a9:ef:81:31:77:fb:13: 37:27:80:7a:ae:c9:19:66:08:39:84:3e:63:95:a6:fa:1b:73: 64:8c:a5:a0:f4:03:13:a5:6a:e3:2c:a3:0e:20:6b:3a:29:32: ef:63:ca:c6:cf:9d:08:b1:15:5e:a1:2f:e7:5a:4c:6d:ee:b7: 21:e4:e4:c7:f1:95:a1:4a:de:4c:d5:91:eb:8b:8a:3d:a1:aa: b1:ff:f3:43:38:23:03:2e:4c:15:23:6a:c3:f0:7a:42:a3:86: 7b:56:c7:f6:a2:81:42:37:c0:70:a0:40:c9:79:48:d1:d8:04: c6:0e:b9:c2:bd:c6:03:4c:10:5f:a2:49:10:7c:de:2c:e7:c5: c6:cc:59:38:51:af:b1:10:ef:18:41:c8:62:c2:ed:fe:90:8a: f9:bd:21:37:f8:82:61:dd:0b:da:96:e6:a4:95:a5:4c:14:da: 63:49:21:db:c8:cf:40:a9:74:6d:38:e8:ac:56:c3:ef:1f:3e: 9a:ab:43:1b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMDgxMTAvBgNVBAUTKDM0REMyMDEyOUVBRDZGNDFBN0NBMkQ5OUM5QkQzRTdF NjAzM0NCODgwHhcNMjQwNDA0MjAyODUyWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjBmMGQ4My0xODYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvM17U7lR1/h3BZ26LZu8jmSdRp5OhV2Jm0WkqUkxeO1YFP1+IIqAnOsHobtb 7HrYqFAfgIPjabTF85Au0k7rFAB9PcN7qTpm7Xtr70QAsJjMhgSmuhcPR7H2Eg4Y NTTVvCx5evsHgti3zbmUQZKztObKJiGRa6sCXzcTydCedQrPuKy8LZWtwxOaLtj/ V5bzFD2lW3R2Aqgy6ApMZNXPP+XMkUXB/MEF0JNSjIfAkzl5fF8lOdM/Ek7jXKzw ZWJApp38WdL18Zf+w3LPCdpEJ8D/vOExec0slP9rP5fisty4KM3utQLjd2nZ2RQA BMXjUEvo9BsCdlN4OctwI8v6zwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEmqMuC1 d7DjYhkO3rnIpiU7n2ueMB8GA1UdIwQYMBaAFDTcIBKerW9Bp8otmcm9Pn5gM8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQwOC9GOUMzMzM5MjFE ODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIwR255aTJaeWIwLWZtQXp5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Od2dFcDZ0YjBHbnlpMlp5YjAtZm1Benk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTJEMDgvRjlDMzMzOTIxRDg3MTFFQUE5QzVCMTcwQzRGOUFFMDIvOUE4NjAzRkM5 M0VEMTFFRDkzMUFCNzNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnm1wwDQYJKoZIhvcNAQELBQADggEBAFKKHPXZD1qFvVDU uhHp+pYvqqqFIGcUN6HcAfpoWKtOzFhs96wkwjMayPL46SepwX+E2hi/0y1rcyf1 V88x9G/0qe+BMXf7EzcngHquyRlmCDmEPmOVpvobc2SMpaD0AxOlauMsow4gazop Mu9jysbPnQixFV6hL+daTG3utyHk5MfxlaFK3kzVkeuLij2hqrH/80M4IwMuTBUj asPwekKjhntWx/aigUI3wHCgQMl5SNHYBMYOucK9xgNMEF+iSRB83iznxcbMWThR r7EQ7xhByGLC7f6Qivm9ITf4gmHdC9qW5qSVpUwU2mNJIdvIz0CpdG046KxWw+8f PpqrQxs= -----END CERTIFICATE-----Generated at Fri May 31 22:13:04 2024 by rpki-client on console-fra.rpki-client.org