$ rpki-client -vvf rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/F9869896C8F411EBB460DB52C4F9AE02.roa File: F9869896C8F411EBB460DB52C4F9AE02.roa (raw, json) Hash identifier: s2/gefkjyAwATsY34TF6PruGFfbhsqeQU6X2SCeJSoc= Subject key identifier: 25:50:D6:50:0C:CC:86:B7:1C:E2:FF:AD:5E:35:68:0C:4A:05:87:C6 Certificate issuer: /CN=A9113E15/serialNumber=95353799776EB9B3FF58725E99D02AA654FB1A04 Certificate serial: 04E9 Authority key identifier: 95:35:37:99:77:6E:B9:B3:FF:58:72:5E:99:D0:2A:A6:54:FB:1A:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/F9869896C8F411EBB460DB52C4F9AE02.roa Signing time: Wed 01 May 2024 02:04:42 +0000 ROA not before: Wed 01 May 2024 02:04:42 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 142058 IP address blocks: 103.166.38.0/23 maxlen: 23 103.166.38.0/24 maxlen: 24 103.166.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.crl rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 00:53:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1257 (0x4e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113E15/serialNumber=95353799776EB9B3FF58725E99D02AA654FB1A04 Validity Not Before: May 1 02:04:42 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6631a33a-f100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8f:3c:df:1c:b8:0f:33:62:d3:ca:eb:46:8e: 44:25:26:87:b9:5f:4b:45:da:72:ba:42:96:83:2e: 8c:18:af:4b:6f:50:a8:3c:09:49:d0:74:df:71:a1: b3:25:eb:98:78:77:c1:22:eb:ab:1c:d7:60:92:d9: ae:2b:f6:ed:37:10:d3:95:60:e0:15:3a:b6:65:70: 53:4d:93:85:ca:39:eb:18:1d:bf:79:51:b3:9f:3d: 44:1f:d8:ed:b2:2d:b5:d4:26:a1:7a:37:f1:89:68: 35:5b:17:5e:db:cf:b9:a5:c6:b3:08:56:14:07:e4: e1:c1:10:9c:24:6b:12:95:e8:b9:8f:df:7c:38:f9: ce:b4:42:b4:a3:d5:85:7b:31:91:ae:0d:fa:e6:59: b3:47:bd:17:62:de:bb:df:4b:67:ea:90:54:40:00: 71:24:2e:5f:ad:09:18:4a:68:81:64:62:15:d6:8a: 0a:74:15:fd:d4:11:c7:07:53:28:0c:56:33:aa:c6: d9:ff:ff:ae:bf:dd:c0:01:ce:7c:64:58:7b:11:e7: c7:75:93:ad:25:e4:be:71:ad:b8:f3:49:98:c3:76: f9:c7:1f:a0:64:a3:bc:97:51:07:c9:71:29:fc:11: 65:02:0c:2c:b0:72:56:c7:d6:94:ea:dc:74:bd:8d: 12:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:50:D6:50:0C:CC:86:B7:1C:E2:FF:AD:5E:35:68:0C:4A:05:87:C6 X509v3 Authority Key Identifier: keyid:95:35:37:99:77:6E:B9:B3:FF:58:72:5E:99:D0:2A:A6:54:FB:1A:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/F9869896C8F411EBB460DB52C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.166.38.0/23 Signature Algorithm: sha256WithRSAEncryption b7:bc:e3:4b:8d:c7:aa:f6:df:71:13:0c:40:ce:68:fe:9d:8d: 31:0e:62:59:fa:fb:be:59:d6:a1:20:6e:c1:3d:23:84:b1:2c: f6:e0:13:ba:02:c5:83:0f:1a:73:ae:16:fe:3d:09:b6:cd:7d: 78:4e:9b:06:2c:5d:1b:35:d9:e6:b2:07:f8:a0:3b:92:d1:28: 05:e0:0e:2c:40:e9:c2:ee:d2:f7:d1:81:4b:93:a3:46:ff:c9: 80:2d:d1:93:8e:d0:fc:b2:49:1f:0b:3e:f5:e9:af:bd:2d:d8: 43:71:a7:95:15:75:d0:f0:9b:16:ab:f1:f4:46:26:56:67:e2: ad:e5:0a:70:af:51:8f:ff:82:ad:df:ca:b0:38:08:67:c0:b3: 1c:e9:c5:6a:74:40:77:30:aa:f0:f1:e0:af:dd:30:c5:ba:dc: c7:c5:a9:45:ff:f9:6e:01:d6:ce:15:5d:39:19:97:5c:cb:43: b3:19:a2:46:3a:bc:56:86:97:b6:13:a7:03:a6:12:94:24:e9: 0c:67:bd:1e:86:16:34:66:f6:e3:9e:1a:20:e5:85:28:18:04: 4d:71:b1:c3:73:27:04:e6:a6:69:c2:87:11:bd:c5:c7:34:ad: 6b:98:08:8a:37:64:e6:b2:05:bb:2c:86:01:6d:4d:0b:ca:23: 3f:0c:15:e8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNFMTUxMTAvBgNVBAUTKDk1MzUzNzk5Nzc2RUI5QjNGRjU4NzI1RTk5RDAyQUE2 NTRGQjFBMDQwHhcNMjQwNTAxMDIwNDQyWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMxYTMzYS1mMTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4I883xy4DzNi08rrRo5EJSaHuV9LRdpyukKWgy6MGK9Lb1CoPAlJ0HTfcaGz JeuYeHfBIuurHNdgktmuK/btNxDTlWDgFTq2ZXBTTZOFyjnrGB2/eVGznz1EH9jt si211CahejfxiWg1Wxde28+5pcazCFYUB+ThwRCcJGsSlei5j998OPnOtEK0o9WF ezGRrg365lmzR70XYt6730tn6pBUQABxJC5frQkYSmiBZGIV1ooKdBX91BHHB1Mo DFYzqsbZ//+uv93AAc58ZFh7EefHdZOtJeS+ca2480mYw3b5xx+gZKO8l1EHyXEp /BFlAgwssHJWx9aU6tx0vY0SsQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCVQ1lAM zIa3HOL/rV41aAxKBYfGMB8GA1UdIwQYMBaAFJU1N5l3brmz/1hyXpnQKqZU+xoE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0UxNS82NzBDMDk4MEM4 RjIxMUVCOEUzRkFENTBDNEY5QUUwMi9sVFUzbVhkdXViUF9XSEplbWRBcXBsVDdH Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUVTNtWGR1dWJQX1dISmVtZEFxcGxUN0dnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTNFMTUvNjcwQzA5ODBDOEYyMTFFQjhFM0ZBRDUwQzRGOUFFMDIvRjk4Njk4OTZD OEY0MTFFQkI0NjBEQjUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnpiYwDQYJKoZIhvcNAQELBQADggEBALe840uNx6r233ET DEDOaP6djTEOYln6+75Z1qEgbsE9I4SxLPbgE7oCxYMPGnOuFv49CbbNfXhOmwYs XRs12eayB/igO5LRKAXgDixA6cLu0vfRgUuTo0b/yYAt0ZOO0PyySR8LPvXpr70t 2ENxp5UVddDwmxar8fRGJlZn4q3lCnCvUY//gq3fyrA4CGfAsxzpxWp0QHcwqvDx 4K/dMMW63MfFqUX/+W4B1s4VXTkZl1zLQ7MZokY6vFaGl7YTpwOmEpQk6QxnvR6G FjRm9uOeGiDlhSgYBE1xscNzJwTmpmnChxG9xcc0rWuYCIo3ZOayBbsshgFtTQvK Iz8MFeg= -----END CERTIFICATE-----Generated at Mon May 13 01:48:56 2024 by rpki-client on console-fra.rpki-client.org