$ rpki-client -vvf rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/9C749C7C140811EABB746522C4F9AE02.roa File: 9C749C7C140811EABB746522C4F9AE02.roa (raw, json) Hash identifier: QtCEpRDZ43QXhuit10kgTnRAUjgWUIHgYEVOruz3L9I= Subject key identifier: 73:01:E5:C8:8A:EE:54:41:D2:2B:FD:19:42:67:C5:C1:8B:A9:03:97 Certificate issuer: /CN=A9177285/serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492 Certificate serial: 0ABF Authority key identifier: 0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/9C749C7C140811EABB746522C4F9AE02.roa Signing time: Tue 12 Sep 2023 19:37:38 +0000 ROA not before: Tue 12 Sep 2023 19:37:38 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 139590 IP address blocks: 103.142.34.0/23 maxlen: 23 103.142.34.0/24 maxlen: 24 103.142.35.0/24 maxlen: 24 2400:63a0::/32 maxlen: 32 2400:63a0::/48 maxlen: 48 2400:63a0:1::/48 maxlen: 48 2400:63a0:2::/48 maxlen: 48 2400:63a0:3::/48 maxlen: 48 2400:63a0:4::/48 maxlen: 48 2400:63a0:5::/48 maxlen: 48 2400:63a0:6::/48 maxlen: 48 2400:63a0:7::/48 maxlen: 48 2400:63a0:8::/48 maxlen: 48 2400:63a0:9::/48 maxlen: 48 2400:63a0:a::/48 maxlen: 48 2400:63a0:b::/48 maxlen: 48 2400:63a0:c::/48 maxlen: 48 2400:63a0:d::/48 maxlen: 48 2400:63a0:11::/48 maxlen: 48 2400:63a0:12::/48 maxlen: 48 2400:63a0:40::/42 maxlen: 42 2400:63a0:80::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:24:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2751 (0xabf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177285/serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492 Validity Not Before: Sep 12 19:37:38 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=6500be02-fc6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ce:16:51:73:99:55:0b:74:22:76:73:24:77: f3:50:3f:f0:12:34:91:f1:86:24:96:2d:80:8e:82: 7a:d9:b9:53:7a:be:ce:13:bb:12:6b:ac:f9:c3:5f: ad:58:7d:d9:a8:78:73:77:e2:51:73:14:93:df:5f: d8:06:04:ed:3b:78:da:87:5d:cd:86:5c:30:52:e1: 71:a2:1e:b5:04:d7:a5:aa:42:30:e5:3d:b8:80:2b: c8:12:0c:ed:bf:2a:d2:14:52:4d:16:95:42:5f:0e: ea:b0:91:29:f5:9d:38:76:11:bf:10:b9:cb:8e:40: ea:d6:c9:75:e2:ce:68:8f:16:fc:35:f9:45:1c:e6: b0:6f:de:38:a0:33:88:c3:63:95:6b:fc:b0:0a:48: 26:99:db:a3:95:6b:2d:cd:ca:9a:22:ab:e9:22:e0: 24:1a:e3:39:2f:1f:4d:52:9f:05:2c:b4:91:88:90: c5:c5:77:85:64:e0:c1:9f:92:60:d4:3d:0a:d7:82: d5:15:25:12:9d:80:27:82:c7:d8:89:4c:5a:e0:0b: 07:1e:82:86:0c:e4:1c:57:79:68:d0:fb:5e:52:2c: a1:30:50:f2:09:db:80:3b:2d:48:e6:89:ff:50:73: 5b:1f:b1:85:f7:a9:f9:83:39:f6:f6:ce:f0:6f:6e: 56:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:01:E5:C8:8A:EE:54:41:D2:2B:FD:19:42:67:C5:C1:8B:A9:03:97 X509v3 Authority Key Identifier: keyid:0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/9C749C7C140811EABB746522C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.142.34.0/23 IPv6: 2400:63a0::/32 Signature Algorithm: sha256WithRSAEncryption 54:8c:59:89:b3:a7:cc:32:f1:e8:0b:7f:b4:2c:84:49:07:98: 93:89:d9:06:8a:73:ff:65:31:69:9e:67:e7:0e:28:da:a9:a1: f0:c0:2f:dd:98:dd:21:f8:13:78:74:f3:00:0a:fc:13:0f:d6: 09:76:0f:44:e7:1b:c7:8a:14:dd:d9:e3:ca:68:b1:98:bd:46: bf:1d:95:3a:4c:16:c0:fb:c0:1c:a8:61:94:82:e6:91:94:57: 68:b1:08:67:7e:f1:fa:7a:89:84:a4:8f:b2:f8:85:8e:0f:64: 09:0a:fb:40:a7:a1:02:eb:46:4b:b5:a5:05:3d:11:86:2c:c0: db:c4:7e:9c:6a:cd:22:c4:27:a4:2b:5d:8d:d6:14:99:e9:ef: 50:09:80:74:db:2d:27:10:65:82:66:07:66:28:84:7a:d0:d0: 42:d1:91:a3:e5:27:d0:3e:14:f0:7a:5b:4a:9e:d3:25:33:a1: da:df:64:fe:64:68:36:3f:8c:07:9a:e2:9f:cc:da:d8:c9:24: 8d:67:79:05:a8:54:53:a1:81:1f:54:0c:6d:2e:5c:b5:07:5f: 52:fe:2e:30:8e:f2:84:cb:de:16:eb:b0:7f:0f:39:b0:26:35: 3a:72:98:d1:e2:42:a2:8b:21:13:7c:7d:4d:aa:2c:69:de:09: 2a:a3:7e:61 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzcyODUxMTAvBgNVBAUTKDBFRUUwRkJGNzg2QTc3N0Y0QzI3NDE1M0Y3NTM2RjNE Rjg5Rjk0OTIwHhcNMjMwOTEyMTkzNzM4WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTAwYmUwMi1mYzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4M4WUXOZVQt0InZzJHfzUD/wEjSR8YYkli2AjoJ62blTer7OE7sSa6z5w1+t WH3ZqHhzd+JRcxST31/YBgTtO3jah13NhlwwUuFxoh61BNelqkIw5T24gCvIEgzt vyrSFFJNFpVCXw7qsJEp9Z04dhG/ELnLjkDq1sl14s5ojxb8NflFHOawb944oDOI w2OVa/ywCkgmmdujlWstzcqaIqvpIuAkGuM5Lx9NUp8FLLSRiJDFxXeFZODBn5Jg 1D0K14LVFSUSnYAngsfYiUxa4AsHHoKGDOQcV3lo0PteUiyhMFDyCduAOy1I5on/ UHNbH7GF96n5gzn29s7wb25W1QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFHMB5ciK 7lRB0iv9GUJnxcGLqQOXMB8GA1UdIwQYMBaAFA7uD794and/TCdBU/dTbz34n5SS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzI4NS9GRTdGNjM3QzE0 MDYxMUVBQTcyODEzMUZDNEY5QUUwMi9EdTRQdjNocWQzOU1KMEZUOTFOdlBmaWZs SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R1NFB2M2hxZDM5TUowRlQ5MU52UGZpZmxKSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzcyODUvRkU3RjYzN0MxNDA2MTFFQUE3MjgxMzFGQzRGOUFFMDIvOUM3NDlDN0Mx NDA4MTFFQUJCNzQ2NTIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnjiIwDQQCAAIwBwMFACQAY6AwDQYJKoZIhvcNAQELBQAD ggEBAFSMWYmzp8wy8egLf7QshEkHmJOJ2QaKc/9lMWmeZ+cOKNqpofDAL92Y3SH4 E3h08wAK/BMP1gl2D0TnG8eKFN3Z48posZi9Rr8dlTpMFsD7wByoYZSC5pGUV2ix CGd+8fp6iYSkj7L4hY4PZAkK+0CnoQLrRku1pQU9EYYswNvEfpxqzSLEJ6QrXY3W FJnp71AJgHTbLScQZYJmB2YohHrQ0ELRkaPlJ9A+FPB6W0qe0yUzodrfZP5kaDY/ jAea4p/M2tjJJI1neQWoVFOhgR9UDG0uXLUHX1L+LjCO8oTL3hbrsH8PObAmNTpy mNHiQqKLIRN8fU2qLGneCSqjfmE= -----END CERTIFICATE-----Generated at Fri May 31 22:13:06 2024 by rpki-client on console-fra.rpki-client.org