$ rpki-client -vvf rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/8DFE2984EAD811ECA1ED8915C4F9AE02.roa File: 8DFE2984EAD811ECA1ED8915C4F9AE02.roa (raw, json) Hash identifier: p/5enCKd4IdLa2Qt15GBcmeM1LZDnnCBtF/+AbP/bxc= Subject key identifier: 09:6E:65:86:6E:BD:0E:83:51:CE:98:08:C0:40:04:D2:2D:E3:95:D6 Certificate issuer: /CN=A9197FBC/serialNumber=5337DCB6A91B41D5211A44C216A963ABACC7E2B0 Certificate serial: 335E Authority key identifier: 53:37:DC:B6:A9:1B:41:D5:21:1A:44:C2:16:A9:63:AB:AC:C7:E2:B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/8DFE2984EAD811ECA1ED8915C4F9AE02.roa Signing time: Thu 28 Sep 2023 15:10:47 +0000 ROA not before: Thu 28 Sep 2023 15:10:47 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 38211 IP address blocks: 203.135.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.crl rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13150 (0x335e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197FBC/serialNumber=5337DCB6A91B41D5211A44C216A963ABACC7E2B0 Validity Not Before: Sep 28 15:10:47 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=65159776-4c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c6:5e:80:c2:13:c0:02:dc:32:17:b6:a1:67: 0c:fc:5c:75:e1:33:e8:05:c1:fa:94:ff:da:4b:4c: 4a:55:3c:8c:41:5d:af:cd:46:61:7a:6c:10:d8:3f: d9:81:ed:50:eb:ac:26:dc:42:3b:51:22:e0:cd:07: 5a:43:77:cd:6a:4f:bc:e0:a7:cd:c0:fa:aa:01:66: 0b:8b:45:59:66:1b:4a:8c:a7:be:79:fc:9b:f7:85: a7:1f:32:c2:8a:af:55:eb:dc:85:60:63:d7:77:81: a1:d7:f8:20:c4:8c:6c:7c:2b:49:d5:bc:6b:17:7c: 2e:80:71:a3:fa:99:a0:a6:93:4b:1d:3b:9b:2d:46: 08:28:ac:92:12:96:01:9d:0f:e3:f7:3f:07:dc:50: 7c:c5:5c:62:ab:1e:6e:bd:71:a8:c4:04:c7:95:e1: 13:9a:70:d7:7b:84:2c:48:62:7b:e0:26:88:15:a1: 25:63:67:3f:71:b7:c8:8a:f3:5a:95:d2:a6:ec:6a: a1:cc:84:92:14:bb:3d:5f:cd:f0:b0:e6:09:91:91: c7:59:64:59:ad:c4:0b:de:29:a4:99:00:ef:21:a5: a0:f2:df:f9:29:01:93:61:ea:dc:fd:a7:ac:c7:24: 9a:4c:c8:09:c2:e1:1c:25:b6:0e:d5:b3:0a:cd:aa: 7b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:6E:65:86:6E:BD:0E:83:51:CE:98:08:C0:40:04:D2:2D:E3:95:D6 X509v3 Authority Key Identifier: keyid:53:37:DC:B6:A9:1B:41:D5:21:1A:44:C2:16:A9:63:AB:AC:C7:E2:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/8DFE2984EAD811ECA1ED8915C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.135.176.0/21 Signature Algorithm: sha256WithRSAEncryption 9e:52:8d:df:8d:b0:e7:c8:92:f1:11:fa:20:bd:14:07:00:b7: b8:09:b7:0f:4d:6c:95:f5:0e:c2:e0:83:0f:8b:c9:6d:09:02: df:c7:89:b8:67:cc:52:69:a8:d5:ce:f5:d2:b9:fa:97:fd:14: 6b:eb:dc:f7:f2:87:2c:25:41:8b:7c:8c:f6:a8:70:d0:9f:e2: 9f:9a:1e:c3:39:a5:c0:83:c3:d2:4f:b0:60:cb:1f:7f:86:68: 62:3a:e7:e5:0f:39:4a:17:62:64:67:8b:35:00:58:46:c6:77: 46:9e:48:7f:2b:74:ef:38:45:1b:1a:34:56:8a:84:5a:4d:05: 9c:cd:75:1c:be:6c:78:d2:69:3e:2f:c3:87:1f:d8:8b:09:8c: ac:1a:20:e6:ef:a7:5b:64:75:57:2b:33:52:e8:74:ee:5a:86: cf:22:c4:c7:70:24:74:ec:dc:18:e5:c8:6d:5f:90:2b:10:33: b1:68:07:9b:2c:47:c3:f5:51:81:5d:fe:78:f8:0b:55:09:a3: 04:3d:2d:b6:a5:2a:49:72:a2:69:46:36:36:1a:8a:4b:5a:4c: 14:72:7d:7f:37:ba:2b:be:c0:03:59:b6:1d:69:e0:30:0b:6f: 88:06:77:da:94:b9:7b:f9:06:d3:b3:a4:f8:49:68:70:06:66: 1a:33:2b:f5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICM14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdGQkMxMTAvBgNVBAUTKDUzMzdEQ0I2QTkxQjQxRDUyMTFBNDRDMjE2QTk2M0FC QUNDN0UyQjAwHhcNMjMwOTI4MTUxMDQ3WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTE1OTc3Ni00YzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlcZegMITwALcMhe2oWcM/Fx14TPoBcH6lP/aS0xKVTyMQV2vzUZhemwQ2D/Z ge1Q66wm3EI7USLgzQdaQ3fNak+84KfNwPqqAWYLi0VZZhtKjKe+efyb94WnHzLC iq9V69yFYGPXd4Gh1/ggxIxsfCtJ1bxrF3wugHGj+pmgppNLHTubLUYIKKySEpYB nQ/j9z8H3FB8xVxiqx5uvXGoxATHleETmnDXe4QsSGJ74CaIFaElY2c/cbfIivNa ldKm7GqhzISSFLs9X83wsOYJkZHHWWRZrcQL3imkmQDvIaWg8t/5KQGTYerc/aes xySaTMgJwuEcJbYO1bMKzap7BQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAluZYZu vQ6DUc6YCMBABNIt45XWMB8GA1UdIwQYMBaAFFM33LapG0HVIRpEwhapY6usx+Kw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0ZCQy8zNzMwODM4MDFE OTMxMUUyOEFCRTlFRjYwOEIwMkNEMi9VemZjdHFrYlFkVWhHa1RDRnFsanE2ekg0 ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6ZmN0cWtiUWRVaEdrVENGcWxqcTZ6SDRyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTdGQkMvMzczMDgzODAxRDkzMTFFMjhBQkU5RUY2MDhCMDJDRDIvOERGRTI5ODRF QUQ4MTFFQ0ExRUQ4OTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAPLh7AwDQYJKoZIhvcNAQELBQADggEBAJ5Sjd+NsOfIkvER +iC9FAcAt7gJtw9NbJX1DsLggw+LyW0JAt/HibhnzFJpqNXO9dK5+pf9FGvr3Pfy hywlQYt8jPaocNCf4p+aHsM5pcCDw9JPsGDLH3+GaGI65+UPOUoXYmRnizUAWEbG d0aeSH8rdO84RRsaNFaKhFpNBZzNdRy+bHjSaT4vw4cf2IsJjKwaIObvp1tkdVcr M1LodO5ahs8ixMdwJHTs3BjlyG1fkCsQM7FoB5ssR8P1UYFd/nj4C1UJowQ9Lbal KklyomlGNjYaiktaTBRyfX83uiu+wANZth1p4DALb4gGd9qUuXv5BtOzpPhJaHAG ZhozK/U= -----END CERTIFICATE-----Generated at Fri May 31 17:44:50 2024 by rpki-client on console-fra.rpki-client.org