$ rpki-client -vvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/9839F630765111EDA744AE3AC4F9AE02.roa File: 9839F630765111EDA744AE3AC4F9AE02.roa (raw, json) Hash identifier: jThWavYpcLH8XlTA8WKtECA8EbagBitDppSeSnQP6Yk= Subject key identifier: BF:8E:E8:FD:91:78:5E:6A:45:5D:5A:2B:DC:91:7B:C5:C9:4D:E4:20 Certificate issuer: /CN=A9195AA2/serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59 Certificate serial: 0677 Authority key identifier: 73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/9839F630765111EDA744AE3AC4F9AE02.roa Signing time: Thu 06 Jul 2023 19:16:00 +0000 ROA not before: Thu 06 Jul 2023 19:16:00 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 139294 IP address blocks: 103.140.234.0/23 maxlen: 23 103.140.234.0/24 maxlen: 24 2001:df0:da80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1655 (0x677) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195AA2/serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59 Validity Not Before: Jul 6 19:16:00 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64a712f0-5f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6a:13:b0:a7:8b:54:5e:b0:c8:32:51:45:e0: 5b:c0:42:e5:85:c7:63:7a:79:23:91:a5:19:11:7c: a1:8b:5f:e0:ad:c9:bb:2b:99:93:59:3b:ad:3c:0b: 92:96:e7:5f:20:57:23:23:27:f8:ad:89:83:18:3e: 5a:70:0d:f7:53:a8:0a:f0:b3:fe:a4:50:f1:75:78: 3b:78:21:4c:c7:70:01:b4:ee:05:95:29:ca:aa:1c: 89:20:66:11:7e:24:9f:40:d1:44:2e:09:03:a1:35: 43:d4:33:52:d5:51:f6:13:c4:6f:30:1a:27:71:65: 49:35:bf:dc:10:40:24:36:cc:73:cc:3d:dc:56:16: 2f:03:d9:49:76:7e:4b:f8:4d:a7:f6:bc:6d:10:7d: 07:4d:5f:32:eb:20:eb:df:b8:07:0b:8a:4b:d4:0e: de:8e:4f:b3:01:66:9d:1f:3f:d3:2c:77:8a:27:c5: 01:c2:77:af:dd:f9:41:eb:7f:e6:68:b4:b5:bd:9d: d1:50:ea:57:bc:05:70:a1:62:d7:04:62:33:db:b4: c1:f9:b7:c5:8f:3e:e9:15:92:fe:ab:b7:36:61:d5: aa:96:91:ef:26:19:92:5e:53:1f:17:8f:bc:0c:dc: 42:42:7e:9f:cb:04:e4:11:7a:52:21:1b:59:8f:ad: 2d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8E:E8:FD:91:78:5E:6A:45:5D:5A:2B:DC:91:7B:C5:C9:4D:E4:20 X509v3 Authority Key Identifier: keyid:73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/9839F630765111EDA744AE3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.234.0/23 IPv6: 2001:df0:da80::/48 Signature Algorithm: sha256WithRSAEncryption 0a:10:32:7b:cf:58:53:f3:6c:11:56:55:49:a3:2b:92:af:c6: 42:4d:c8:95:0b:ea:e8:40:ae:b1:2d:dd:c9:d3:ce:d4:5a:3b: 6f:f7:63:95:b1:70:4e:bc:fe:16:3d:ee:08:7e:45:eb:b6:66: 44:28:9c:eb:b0:94:04:dc:d7:7e:76:65:dc:a9:18:db:5b:e5: 73:05:aa:7a:65:cf:30:25:b5:a0:2c:a9:f1:4b:43:8c:63:91: 46:02:22:93:6e:85:a9:b8:e4:e6:22:54:06:6d:b1:3d:4b:96: 40:82:0c:17:29:b5:e2:4b:3e:c2:c3:05:db:ec:34:a2:3e:7f: 46:6e:e2:6d:5d:87:b1:ae:e9:fe:7e:3c:94:c6:ad:27:19:b6: ef:de:e8:a2:82:c8:ce:5e:17:86:4c:51:08:b0:6a:04:8f:c1: 09:79:a9:7e:3d:45:1c:9d:ab:a3:90:f5:d1:3b:59:3c:7e:82: 7d:b4:d8:b9:26:e1:41:79:f6:71:56:31:37:8c:2f:2a:42:45: 6c:31:eb:27:a5:46:ba:c0:44:a3:b5:83:55:ea:80:07:4a:a9: 5a:3a:f4:a3:95:0f:08:b9:cd:45:50:29:ed:dd:70:51:75:b6: df:53:3e:4b:b6:dd:45:4b:5a:f7:3c:a1:7e:fe:a9:85:19:91: e7:28:dd:0d -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBQTIxMTAvBgNVBAUTKDczQkZBMzdBMDcyNTQzRTJGRDc1MUU0RTA1MEMzQUQz NzAwMTBDNTkwHhcNMjMwNzA2MTkxNjAwWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGE3MTJmMC01ZjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGoTsKeLVF6wyDJRReBbwELlhcdjenkjkaUZEXyhi1/grcm7K5mTWTutPAuS ludfIFcjIyf4rYmDGD5acA33U6gK8LP+pFDxdXg7eCFMx3ABtO4FlSnKqhyJIGYR fiSfQNFELgkDoTVD1DNS1VH2E8RvMBoncWVJNb/cEEAkNsxzzD3cVhYvA9lJdn5L +E2n9rxtEH0HTV8y6yDr37gHC4pL1A7ejk+zAWadHz/TLHeKJ8UBwnev3flB63/m aLS1vZ3RUOpXvAVwoWLXBGIz27TB+bfFjz7pFZL+q7c2YdWqlpHvJhmSXlMfF4+8 DNxCQn6fywTkEXpSIRtZj60tjQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFL+O6P2R eF5qRV1aK9yRe8XJTeQgMB8GA1UdIwQYMBaAFHO/o3oHJUPi/XUeTgUMOtNwAQxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUFBMi8xRkUzNTdENDA2 QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9jNy1qZWdjbFEtTDlkUjVPQlF3NjAzQUJE RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3LWplZ2NsUS1MOWRSNU9CUXc2MDNBQkRGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTVBQTIvMUZFMzU3RDQwNkM1MTFFQTg4OEVEOTE5QzRGOUFFMDIvOTgzOUY2MzA3 NjUxMTFFREE3NDRBRTNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnjOowDwQCAAIwCQMHACABDfDagDANBgkqhkiG9w0BAQsF AAOCAQEAChAye89YU/NsEVZVSaMrkq/GQk3IlQvq6ECusS3dydPO1Fo7b/djlbFw Trz+Fj3uCH5F67ZmRCic67CUBNzXfnZl3KkY21vlcwWqemXPMCW1oCyp8UtDjGOR RgIik26Fqbjk5iJUBm2xPUuWQIIMFym14ks+wsMF2+w0oj5/Rm7ibV2Hsa7p/n48 lMatJxm2797oooLIzl4XhkxRCLBqBI/BCXmpfj1FHJ2ro5D10TtZPH6CfbTYuSbh QXn2cVYxN4wvKkJFbDHrJ6VGusBEo7WDVeqAB0qpWjr0o5UPCLnNRVAp7d1wUXW2 31M+S7bdRUta9zyhfv6phRmR5yjdDQ== -----END CERTIFICATE-----Generated at Fri May 31 22:13:08 2024 by rpki-client on console-fra.rpki-client.org