$ rpki-client -vvf rpki.apnic.net/member_repository/A9171634/942B83BC1D9011E2A36166F008B02CD2/989ED314FDCB11EDA52DCB45C4F9AE02.roa File: 989ED314FDCB11EDA52DCB45C4F9AE02.roa (raw, json) Hash identifier: 7Gr5+LKQZg71Xe7aRTwT76gb+Vnjm/TSiDDJs1rwm1o= Subject key identifier: 2E:D3:A5:9D:84:AA:E7:63:41:0C:94:44:22:DA:B1:AB:CD:8A:16:83 Certificate issuer: /CN=A9171634/serialNumber=3FC971292CE91A591A8CDFA7D1AE09CA46E03E87 Certificate serial: 340B Authority key identifier: 3F:C9:71:29:2C:E9:1A:59:1A:8C:DF:A7:D1:AE:09:CA:46:E0:3E:87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8lxKSzpGlkajN-n0a4JykbgPoc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171634/942B83BC1D9011E2A36166F008B02CD2/989ED314FDCB11EDA52DCB45C4F9AE02.roa Signing time: Sat 04 May 2024 14:50:49 +0000 ROA not before: Sat 04 May 2024 14:50:49 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 37989 IP address blocks: 203.123.48.0/21 maxlen: 22 203.123.48.0/24 maxlen: 24 203.123.49.0/24 maxlen: 24 203.123.50.0/24 maxlen: 24 203.123.51.0/24 maxlen: 24 203.123.52.0/24 maxlen: 24 203.123.53.0/24 maxlen: 24 2405:fc00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171634/942B83BC1D9011E2A36166F008B02CD2/P8lxKSzpGlkajN-n0a4JykbgPoc.crl rsync://rpki.apnic.net/member_repository/A9171634/942B83BC1D9011E2A36166F008B02CD2/P8lxKSzpGlkajN-n0a4JykbgPoc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8lxKSzpGlkajN-n0a4JykbgPoc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13323 (0x340b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171634/serialNumber=3FC971292CE91A591A8CDFA7D1AE09CA46E03E87 Validity Not Before: May 4 14:50:49 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66364b49-a2c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cb:af:78:e6:43:92:74:8d:b6:28:71:d9:19: 80:ea:d5:1a:69:30:8c:94:3f:1e:b6:3b:22:6c:cc: 9c:b1:74:e9:3c:a8:0d:cb:c8:94:02:5f:39:02:48: 9b:38:31:f1:88:a3:51:58:fd:93:81:52:93:8b:b1: f6:6c:d4:f2:df:2f:d2:c0:66:93:4b:a8:8b:42:42: 13:8f:40:7a:03:3a:b3:77:eb:8d:2a:53:93:13:d1: 28:46:a3:ca:0d:80:f3:3d:2d:93:02:e4:60:cf:65: 2b:da:3b:14:f2:31:a0:49:ec:5c:95:27:85:ea:72: 5c:3a:11:a7:ab:20:91:41:9a:f6:03:da:cf:4f:ed: 76:02:e7:92:88:f3:91:5f:e6:3e:76:1b:cf:cd:b8: 0e:9f:be:ad:1a:6e:de:70:1e:1e:be:38:65:6b:d0: 0a:0b:0b:74:2f:8f:a9:f7:13:b2:0f:a2:a5:11:0b: 68:c9:e2:cf:b5:38:8d:ed:d9:1a:45:6d:04:3f:a0: 99:e0:8d:4a:b3:d3:85:0b:d0:0a:10:7f:e8:be:af: 9a:09:91:7f:08:e5:08:89:21:94:36:5c:cd:a1:8a: 09:f0:e1:b2:8d:0e:b6:fc:8c:aa:cf:86:54:ac:bf: ad:9d:dc:7c:7c:92:9e:90:6e:ad:52:22:25:b0:47: 36:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D3:A5:9D:84:AA:E7:63:41:0C:94:44:22:DA:B1:AB:CD:8A:16:83 X509v3 Authority Key Identifier: keyid:3F:C9:71:29:2C:E9:1A:59:1A:8C:DF:A7:D1:AE:09:CA:46:E0:3E:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171634/942B83BC1D9011E2A36166F008B02CD2/P8lxKSzpGlkajN-n0a4JykbgPoc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8lxKSzpGlkajN-n0a4JykbgPoc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171634/942B83BC1D9011E2A36166F008B02CD2/989ED314FDCB11EDA52DCB45C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.123.48.0/21 IPv6: 2405:fc00::/32 Signature Algorithm: sha256WithRSAEncryption 06:5a:c1:50:06:a2:89:fa:48:f7:5b:e6:70:e4:eb:10:1c:71: 68:a7:67:2a:79:78:05:85:73:5b:77:6e:99:21:ce:ff:22:12: bc:76:4a:fd:ce:11:2b:bb:4f:0e:56:99:19:63:cc:f0:5e:98: 68:d2:be:16:72:63:a9:40:f0:68:9e:c2:03:9b:0c:d0:13:3f: 22:cf:c3:e0:11:24:a5:3d:bc:7d:29:4b:58:1f:c1:ad:b0:8d: 7c:b7:db:e7:75:f1:b6:91:c1:57:62:44:03:fb:be:25:cf:d8: 86:2d:03:77:f1:da:7e:f2:43:ba:1a:3e:7d:8f:5a:cc:27:27: b3:e3:cb:af:7c:c7:a1:4a:9b:fa:f2:c4:a2:d6:26:5f:3a:0d: 88:31:d3:06:e1:ed:7a:e3:9e:e7:2c:2d:fc:d4:11:88:a5:0d: bf:7d:05:71:18:5b:59:62:66:97:f3:63:f5:c3:2d:08:13:96: b5:21:1e:3c:23:06:a1:8f:46:5c:de:35:32:57:b3:b1:12:f6: 8a:b9:70:60:91:02:fb:e6:17:69:59:33:55:c5:d2:e5:5b:6c: de:9b:67:72:26:19:62:b0:c1:72:20:ae:8d:9d:42:46:c6:f5: ab:65:0e:89:7c:33:e8:9a:68:5b:85:d9:9d:47:79:dd:33:af: e5:20:79:48 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICNAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE2MzQxMTAvBgNVBAUTKDNGQzk3MTI5MkNFOTFBNTkxQThDREZBN0QxQUUwOUNB NDZFMDNFODcwHhcNMjQwNTA0MTQ1MDQ5WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjM2NGI0OS1hMmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8uveOZDknSNtihx2RmA6tUaaTCMlD8etjsibMycsXTpPKgNy8iUAl85Akib ODHxiKNRWP2TgVKTi7H2bNTy3y/SwGaTS6iLQkITj0B6Azqzd+uNKlOTE9EoRqPK DYDzPS2TAuRgz2Ur2jsU8jGgSexclSeF6nJcOhGnqyCRQZr2A9rPT+12AueSiPOR X+Y+dhvPzbgOn76tGm7ecB4evjhla9AKCwt0L4+p9xOyD6KlEQtoyeLPtTiN7dka RW0EP6CZ4I1Ks9OFC9AKEH/ovq+aCZF/COUIiSGUNlzNoYoJ8OGyjQ62/Iyqz4ZU rL+tndx8fJKekG6tUiIlsEc25wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFC7TpZ2E qudjQQyURCLasavNihaDMB8GA1UdIwQYMBaAFD/JcSks6RpZGozfp9GuCcpG4D6H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTYzNC85NDJCODNCQzFE OTAxMUUyQTM2MTY2RjAwOEIwMkNEMi9QOGx4S1N6cEdsa2FqTi1uMGE0SnlrYmdQ b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A4bHhLU3pwR2xrYWpOLW4wYTRKeWtiZ1BvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzE2MzQvOTQyQjgzQkMxRDkwMTFFMkEzNjE2NkYwMDhCMDJDRDIvOTg5RUQzMTRG RENCMTFFREE1MkRDQjQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAPLezAwDQQCAAIwBwMFACQF/AAwDQYJKoZIhvcNAQELBQAD ggEBAAZawVAGoon6SPdb5nDk6xAccWinZyp5eAWFc1t3bpkhzv8iErx2Sv3OESu7 Tw5WmRljzPBemGjSvhZyY6lA8GiewgObDNATPyLPw+ARJKU9vH0pS1gfwa2wjXy3 2+d18baRwVdiRAP7viXP2IYtA3fx2n7yQ7oaPn2PWswnJ7Pjy698x6FKm/ryxKLW Jl86DYgx0wbh7XrjnucsLfzUEYilDb99BXEYW1liZpfzY/XDLQgTlrUhHjwjBqGP RlzeNTJXs7ES9oq5cGCRAvvmF2lZM1XF0uVbbN6bZ3ImGWKwwXIgro2dQkbG9atl Dol8M+iaaFuF2Z1Hed0zr+UgeUg= -----END CERTIFICATE-----Generated at Thu Jun 6 21:10:45 2024 by rpki-client on console-ams.rpki-client.org