$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/0DBEE8A6F37011EEACC7EB7AC4F9AE02.roa File: 0DBEE8A6F37011EEACC7EB7AC4F9AE02.roa (raw, json) Hash identifier: /gSA3t31p4sHh/nVImDlZ6C1qeedlIwa0gXefZnIFWo= Subject key identifier: 09:C1:29:7C:D2:7D:CA:5D:CD:89:05:58:02:01:CE:2F:FC:C1:F9:D0 Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Certificate serial: 02 Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/0DBEE8A6F37011EEACC7EB7AC4F9AE02.roa Signing time: Fri 05 Apr 2024 17:15:09 +0000 ROA not before: Fri 05 Apr 2024 17:15:09 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 136359 IP address blocks: 103.72.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Validity Not Before: Apr 5 17:15:09 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=6610319d-bddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:30:d9:60:38:ea:8a:22:a5:c8:21:8b:99:5d: 64:4b:26:2e:3a:05:0d:3c:9c:d4:d6:7c:2c:6c:8c: 24:16:04:f1:68:c6:06:23:6e:14:c2:5d:e4:95:7d: f6:2e:a5:fd:b0:8e:6f:7d:48:41:21:a0:29:8e:c4: 37:2a:f0:8f:2a:d6:ec:3d:da:64:ef:14:64:2d:36: 40:9a:51:cd:09:ff:b2:3b:5a:4f:6a:32:84:8d:6e: 4f:92:d4:68:a7:e9:8d:82:c4:36:7d:14:e4:85:05: f8:b9:9b:56:11:91:9c:5c:0e:45:e8:a4:c7:db:7a: 6b:1e:cd:46:b0:3d:fe:64:00:80:60:08:53:0b:35: 64:9a:82:72:eb:55:bb:ac:22:75:bb:f0:e6:bb:12: a9:2d:c9:01:a9:76:3b:a3:41:e4:50:80:3a:5c:18: 48:5b:28:ac:23:b0:7b:5b:b5:97:99:04:d9:2e:54: 82:b9:3b:bb:e6:09:f2:ed:d8:90:4e:07:86:4f:86: f5:bd:e8:fe:28:49:d1:b2:93:4d:7b:94:4d:0c:88: fd:95:32:f1:ae:0e:63:92:80:59:c5:09:7f:db:d9: f8:c1:e1:9f:f6:b4:ed:5f:50:ba:3d:4c:ff:2a:b0: b8:a5:cd:4d:28:39:78:b9:74:d3:a3:c1:2b:3c:e0: b8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C1:29:7C:D2:7D:CA:5D:CD:89:05:58:02:01:CE:2F:FC:C1:F9:D0 X509v3 Authority Key Identifier: keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/0DBEE8A6F37011EEACC7EB7AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.72.195.0/24 Signature Algorithm: sha256WithRSAEncryption 88:77:a2:1b:94:eb:79:c5:cb:66:93:c4:11:02:93:df:65:1f: 20:98:74:41:50:4c:99:db:4e:0f:35:b4:85:69:3a:44:5b:2c: 7a:08:8d:4e:be:79:f8:89:c4:96:b4:80:ab:00:04:b2:47:57: a1:40:f5:7e:ae:b8:71:97:14:ed:2e:2f:3c:a7:16:94:ed:a4: 6a:86:bf:65:ae:bc:db:68:dd:e9:63:a6:65:68:bd:40:68:97: 62:06:27:ee:34:5e:27:a2:92:25:ff:82:f9:04:a8:82:09:d9: 23:14:84:52:9a:2d:61:43:af:78:46:44:bb:c9:4b:b3:10:c1: 11:92:07:7b:98:01:17:85:a5:c7:73:c7:d9:4a:b3:73:2d:bb: 8e:b8:ed:68:46:71:5f:b6:3b:f7:90:7b:f9:9b:49:ce:0e:c0: 0b:5f:0d:b1:99:c5:4c:f1:b4:87:e2:85:bc:8f:4e:3c:83:af: 33:ea:a0:95:2b:e6:2a:af:20:30:d5:93:50:b4:ef:b6:9c:05: c8:47:cd:da:8e:39:f6:e0:93:4e:93:01:8b:dc:56:9c:1f:13: 18:ef:98:c5:e4:1e:72:66:4e:f0:18:47:59:b8:17:bf:d3:e8: 9a:76:c3:20:37:b3:26:95:e9:82:66:42:37:e1:f8:34:98:a4: 98:3d:53:99 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NTY0NzExMC8GA1UEBRMoQUQzNDQ1REI0MjAxMEIxMjE1QTQ5RTQyN0YxQUU3NDAw RDc4OEJGQjAeFw0yNDA0MDUxNzE1MDlaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MTAzMTlkLWJkZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkMNlgOOqKIqXIIYuZXWRLJi46BQ08nNTWfCxsjCQWBPFoxgYjbhTCXeSVffYu pf2wjm99SEEhoCmOxDcq8I8q1uw92mTvFGQtNkCaUc0J/7I7Wk9qMoSNbk+S1Gin 6Y2CxDZ9FOSFBfi5m1YRkZxcDkXopMfbemsezUawPf5kAIBgCFMLNWSagnLrVbus InW78Oa7EqktyQGpdjujQeRQgDpcGEhbKKwjsHtbtZeZBNkuVIK5O7vmCfLt2JBO B4ZPhvW96P4oSdGyk017lE0MiP2VMvGuDmOSgFnFCX/b2fjB4Z/2tO1fULo9TP8q sLilzU0oOXi5dNOjwSs84LilAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUCcEpfNJ9 yl3NiQVYAgHOL/zB+dAwHwYDVR0jBBgwFoAUrTRF20IBCxIVpJ5CfxrnQA14i/sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1NjQ3LzkwNUMxMDQ2RjM2 RjExRUU5OTcyRUI3OUM0RjlBRTAyL3JUUkYyMElCQ3hJVnBKNUNmeHJuUUExNGlf cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvclRSRjIwSUJDeElWcEo1Q2Z4cm5RQTE0aV9zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTY0Ny85MDVDMTA0NkYzNkYxMUVFOTk3MkVCNzlDNEY5QUUwMi8wREJFRThBNkYz NzAxMUVFQUNDN0VCN0FDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGdIwzANBgkqhkiG9w0BAQsFAAOCAQEAiHeiG5TrecXLZpPE EQKT32UfIJh0QVBMmdtODzW0hWk6RFssegiNTr55+InElrSAqwAEskdXoUD1fq64 cZcU7S4vPKcWlO2kaoa/Za6822jd6WOmZWi9QGiXYgYn7jReJ6KSJf+C+QSoggnZ IxSEUpotYUOveEZEu8lLsxDBEZIHe5gBF4Wlx3PH2Uqzcy27jrjtaEZxX7Y795B7 +ZtJzg7AC18NsZnFTPG0h+KFvI9OPIOvM+qglSvmKq8gMNWTULTvtpwFyEfN2o45 9uCTTpMBi9xWnB8TGO+YxeQecmZO8BhHWbgXv9PomnbDIDezJpXpgmZCN+H4NJik mD1TmQ== -----END CERTIFICATE-----Generated at Fri May 31 10:42:21 2024 by rpki-client on console-fra.rpki-client.org