$ rpki-client -vvf rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/7DF47F46F95611E996377877C4F9AE02.roa File: 7DF47F46F95611E996377877C4F9AE02.roa (raw, json) Hash identifier: e3KA8e3Ufpsbkl9pexRMLVRDG3/Nhcl7F6sL/8AP/TA= Subject key identifier: B8:9B:AB:EC:C1:34:58:89:F0:13:42:8E:6E:4B:2A:AE:00:04:F5:03 Certificate issuer: /CN=A9174DAD/serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76 Certificate serial: 0B85 Authority key identifier: 4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/7DF47F46F95611E996377877C4F9AE02.roa Signing time: Thu 18 Jan 2024 19:37:03 +0000 ROA not before: Thu 18 Jan 2024 19:37:03 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 138462 IP address blocks: 103.126.36.0/22 maxlen: 24 2404:3c0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 19:41:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2949 (0xb85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174DAD/serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76 Validity Not Before: Jan 18 19:37:03 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65a97ddf-343b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:01:e6:64:95:3a:58:3b:9f:af:ea:e3:29:13: 5f:04:7f:fa:3e:51:08:14:e9:0e:ce:e9:96:4e:03: ba:05:4f:07:ea:08:88:43:a8:77:58:46:9c:32:85: e8:7f:8b:17:78:db:32:be:27:08:0d:55:2f:f6:b0: da:01:49:12:5f:bd:c9:8f:10:23:ec:68:52:b5:63: 90:d3:20:d7:f2:29:90:fc:cb:bd:19:dc:20:18:b2: e9:47:05:4e:09:3a:89:19:51:8c:b4:2a:96:ee:cc: 9a:63:06:cd:be:1f:9c:5d:cf:8b:76:73:0c:4e:ae: 03:7f:8a:87:b4:da:af:3d:ef:8f:fa:0e:b4:45:2e: e1:48:14:a2:2f:96:15:90:44:ce:92:4e:21:48:98: 2d:d1:79:2f:ab:09:7e:38:6c:81:f0:06:4d:2e:59: bd:f8:6e:e4:29:a0:40:35:ea:45:d2:26:cb:f2:be: 7c:07:5f:4e:33:65:85:ec:0a:a9:9c:9a:d1:0e:94: a9:8d:4b:a8:ab:a0:f1:67:0d:1c:f6:18:51:36:50: 1d:db:23:66:04:fe:7e:23:1c:e5:21:3f:ed:99:e7: 7b:2d:16:fa:23:61:57:8e:b2:77:63:24:4a:77:19: 62:84:5f:85:08:c1:ca:fd:7e:44:fe:93:fa:33:d7: 92:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9B:AB:EC:C1:34:58:89:F0:13:42:8E:6E:4B:2A:AE:00:04:F5:03 X509v3 Authority Key Identifier: keyid:4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/7DF47F46F95611E996377877C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.126.36.0/22 IPv6: 2404:3c0::/32 Signature Algorithm: sha256WithRSAEncryption 4e:0b:e5:76:75:5e:e2:a8:90:31:06:21:84:b9:6e:ed:37:47: da:bf:08:2e:fc:c1:f4:e0:a7:de:f5:49:ba:90:57:e7:f7:26: 45:17:b5:53:3d:1f:75:b6:45:f6:2a:5f:22:8b:2c:b8:52:25: ca:09:f9:78:63:e4:8a:9a:63:9c:96:34:46:d1:87:fb:3c:64: f0:b9:ca:e2:8a:50:30:79:a5:f0:d1:14:c7:39:ef:15:83:69: 7d:0e:e9:b4:2c:ed:20:92:e1:5b:6c:9c:ce:01:25:b5:69:31: 3f:b0:86:20:50:2e:fa:a0:e5:40:10:c1:98:62:44:37:85:43: 8d:98:7d:45:0e:0e:a3:07:13:68:f8:dd:bb:35:3e:7b:4b:61: ba:0c:cb:aa:18:12:56:d5:37:af:9d:c5:45:4b:52:11:27:ef: 73:c6:7c:43:de:2e:0c:44:df:90:b6:89:e7:38:55:b0:ce:67: 1e:06:03:cc:45:b0:d4:58:09:49:77:f4:6b:15:31:cd:55:e1: db:c7:89:bc:34:d0:65:5f:6a:a0:d9:0d:c0:22:74:07:ed:3f: 37:cb:7f:cc:5f:76:ee:e4:4c:ce:74:53:af:7c:62:6c:e6:4c: d5:53:67:7d:49:5c:ad:dd:4e:40:d3:54:78:f7:0c:64:29:2c: eb:38:e9:23 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICC4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzREQUQxMTAvBgNVBAUTKDRGNkIxQzVCNDJCNjFERDVFMjgxOTM5NjdBNzBEMThB MjI4RkVGNzYwHhcNMjQwMTE4MTkzNzAzWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NWE5N2RkZi0zNDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswHmZJU6WDufr+rjKRNfBH/6PlEIFOkOzumWTgO6BU8H6giIQ6h3WEacMoXo f4sXeNsyvicIDVUv9rDaAUkSX73JjxAj7GhStWOQ0yDX8imQ/Mu9GdwgGLLpRwVO CTqJGVGMtCqW7syaYwbNvh+cXc+LdnMMTq4Df4qHtNqvPe+P+g60RS7hSBSiL5YV kETOkk4hSJgt0Xkvqwl+OGyB8AZNLlm9+G7kKaBANepF0ibL8r58B19OM2WF7Aqp nJrRDpSpjUuoq6DxZw0c9hhRNlAd2yNmBP5+IxzlIT/tmed7LRb6I2FXjrJ3YyRK dxlihF+FCMHK/X5E/pP6M9eSMwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFLibq+zB NFiJ8BNCjm5LKq4ABPUDMB8GA1UdIwQYMBaAFE9rHFtCth3V4oGTlnpw0Yoij+92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NERBRC9GQzYwRTVCQUY5 NTQxMUU5ODAzQkI5NzJDNEY5QUUwMi9UMnNjVzBLMkhkWGlnWk9XZW5EUmlpS1A3 M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Qyc2NXMEsySGRYaWdaT1dlbkRSaWlLUDczWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzREQUQvRkM2MEU1QkFGOTU0MTFFOTgwM0JCOTcyQzRGOUFFMDIvN0RGNDdGNDZG OTU2MTFFOTk2Mzc3ODc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnfiQwDQQCAAIwBwMFACQEA8AwDQYJKoZIhvcNAQELBQAD ggEBAE4L5XZ1XuKokDEGIYS5bu03R9q/CC78wfTgp971SbqQV+f3JkUXtVM9H3W2 RfYqXyKLLLhSJcoJ+Xhj5IqaY5yWNEbRh/s8ZPC5yuKKUDB5pfDRFMc57xWDaX0O 6bQs7SCS4VtsnM4BJbVpMT+whiBQLvqg5UAQwZhiRDeFQ42YfUUODqMHE2j43bs1 PntLYboMy6oYElbVN6+dxUVLUhEn73PGfEPeLgxE35C2iec4VbDOZx4GA8xFsNRY CUl39GsVMc1V4dvHibw00GVfaqDZDcAidAftPzfLf8xfdu7kTM50U698YmzmTNVT Z31JXK3dTkDTVHj3DGQpLOs46SM= -----END CERTIFICATE-----Generated at Fri May 31 20:34:06 2024 by rpki-client on console-ams.rpki-client.org