$ rpki-client -vvf rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/B5761C3E2C8E11EA83DAB436C4F9AE02.roa File: B5761C3E2C8E11EA83DAB436C4F9AE02.roa (raw, json) Hash identifier: or6enVGaDRWyutHd8icp3MYkh3hV4LifLbAwdS8e2Ww= Subject key identifier: E2:E5:0A:EB:49:5B:1E:B8:12:17:DA:14:1C:E8:B7:82:5B:B9:F6:08 Certificate issuer: /CN=A9117754/serialNumber=531749095E449FD82AA1DB50DA834017230BDD13 Certificate serial: 0A8C Authority key identifier: 53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/B5761C3E2C8E11EA83DAB436C4F9AE02.roa Signing time: Tue 20 Feb 2024 08:59:07 +0000 ROA not before: Tue 20 Feb 2024 08:59:07 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 59209 IP address blocks: 103.243.140.0/22 maxlen: 22 103.243.140.0/24 maxlen: 24 103.243.141.0/24 maxlen: 24 103.243.142.0/24 maxlen: 24 103.243.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 19:25:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2700 (0xa8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117754/serialNumber=531749095E449FD82AA1DB50DA834017230BDD13 Validity Not Before: Feb 20 08:59:07 2024 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=65d469db-f741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8b:87:07:ce:60:11:62:b8:28:8a:6e:ed:ba: b4:ff:02:60:60:ae:c7:88:26:fa:71:f7:10:a4:9b: 9d:1f:be:73:22:8a:80:28:fe:1c:45:0c:79:07:a8: b2:6a:fb:5b:ae:4b:69:44:dc:13:d6:f8:1b:d7:2b: 68:d2:69:fc:d3:48:55:e9:eb:0c:0d:12:8f:33:b4: a5:e8:c7:b3:0c:88:79:65:d4:8c:95:40:f2:9e:3a: e4:57:d5:9d:99:f5:0b:15:04:ee:95:26:3a:1b:8d: da:ed:5e:7d:19:b2:65:68:26:4c:3e:af:1c:91:df: 20:b4:1e:37:72:42:32:8e:ac:8c:9a:b3:80:34:b5: 4b:a9:e9:bf:4d:40:f7:fd:c2:8a:0e:2b:f9:c8:d6: 90:2f:b8:29:6f:4b:17:d2:ea:1e:23:e1:2f:1b:b0: 59:07:79:ed:c4:89:93:0c:a4:49:d3:82:86:64:07: e0:d2:e8:51:e3:c6:99:2d:36:ef:1d:5c:08:ad:5b: 1c:7e:37:35:89:12:02:68:24:a6:b6:29:0d:b7:bf: 3a:d6:5c:7b:dc:68:d0:97:4a:cd:d6:79:7a:43:cf: d3:a3:86:aa:7b:5b:7b:8c:67:ff:fc:37:cc:80:13: 89:76:e9:b8:4b:41:13:b9:33:20:61:dc:45:5e:7f: 74:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E5:0A:EB:49:5B:1E:B8:12:17:DA:14:1C:E8:B7:82:5B:B9:F6:08 X509v3 Authority Key Identifier: keyid:53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/B5761C3E2C8E11EA83DAB436C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.243.140.0/22 Signature Algorithm: sha256WithRSAEncryption 46:aa:88:34:78:65:8f:1a:65:fa:2e:2a:8c:20:c6:e6:c1:55: 1a:a6:05:99:34:ee:c2:60:bd:7f:ef:bc:cb:45:b9:7b:f4:04: ba:a6:3c:a9:55:f3:6d:2b:e8:27:cb:b7:ca:46:81:cc:d7:a9: e2:b0:c3:00:d7:aa:bb:59:89:cf:0d:2e:79:fb:fb:f4:25:9d: 9e:db:8e:11:2e:aa:18:03:61:d1:33:48:d6:46:ad:a9:57:56: 48:2e:11:e0:8e:8a:95:8c:67:06:ba:9d:03:b9:bd:e0:07:5e: af:87:97:cd:33:13:63:65:24:61:6b:e5:4d:b9:31:b4:89:f8: 17:db:8d:8f:49:94:86:44:92:35:17:ea:58:81:4a:ff:f2:d1: 69:84:7e:27:a6:76:9b:47:39:3a:f5:02:0c:65:06:7a:47:48: fc:20:5b:cd:ad:bf:32:6e:5b:36:89:39:2a:c3:61:b0:f7:36: 1b:ef:f1:19:cd:3a:2f:9a:ff:4b:c9:10:85:55:f9:f4:07:ec: f8:6a:f0:5b:22:2b:d4:69:10:4f:1f:1c:45:05:af:2a:ca:3c: 77:7c:8e:52:ce:0f:4c:54:eb:f2:c4:a1:63:6f:32:c4:29:18: b4:ec:8f:6f:7c:52:06:94:61:c7:b7:bb:b0:1a:26:21:f7:d5: 85:67:52:3b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3NTQxMTAvBgNVBAUTKDUzMTc0OTA5NUU0NDlGRDgyQUExREI1MERBODM0MDE3 MjMwQkREMTMwHhcNMjQwMjIwMDg1OTA3WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NWQ0NjlkYi1mNzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4uHB85gEWK4KIpu7bq0/wJgYK7HiCb6cfcQpJudH75zIoqAKP4cRQx5B6iy avtbrktpRNwT1vgb1yto0mn800hV6esMDRKPM7Sl6MezDIh5ZdSMlUDynjrkV9Wd mfULFQTulSY6G43a7V59GbJlaCZMPq8ckd8gtB43ckIyjqyMmrOANLVLqem/TUD3 /cKKDiv5yNaQL7gpb0sX0uoeI+EvG7BZB3ntxImTDKRJ04KGZAfg0uhR48aZLTbv HVwIrVscfjc1iRICaCSmtikNt7861lx73GjQl0rN1nl6Q8/To4aqe1t7jGf//DfM gBOJdum4S0ETuTMgYdxFXn90YwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOLlCutJ Wx64EhfaFBzot4JbufYIMB8GA1UdIwQYMBaAFFMXSQleRJ/YKqHbUNqDQBcjC90T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzc1NC84QjMxNDVBRTJD OEMxMUVBOTBFQTM3MzJDNEY5QUUwMi9VeGRKQ1Y1RW45Z3FvZHRRMm9OQUZ5TUwz Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V4ZEpDVjVFbjlncW9kdFEyb05BRnlNTDNSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTc3NTQvOEIzMTQ1QUUyQzhDMTFFQTkwRUEzNzMyQzRGOUFFMDIvQjU3NjFDM0Uy QzhFMTFFQTgzREFCNDM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn84wwDQYJKoZIhvcNAQELBQADggEBAEaqiDR4ZY8aZfou KowgxubBVRqmBZk07sJgvX/vvMtFuXv0BLqmPKlV820r6CfLt8pGgczXqeKwwwDX qrtZic8NLnn7+/QlnZ7bjhEuqhgDYdEzSNZGralXVkguEeCOipWMZwa6nQO5veAH Xq+Hl80zE2NlJGFr5U25MbSJ+BfbjY9JlIZEkjUX6liBSv/y0WmEfiemdptHOTr1 AgxlBnpHSPwgW82tvzJuWzaJOSrDYbD3Nhvv8RnNOi+a/0vJEIVV+fQH7Phq8Fsi K9RpEE8fHEUFryrKPHd8jlLOD0xU6/LEoWNvMsQpGLTsj298UgaUYce3u7AaJiH3 1YVnUjs= -----END CERTIFICATE-----Generated at Fri May 24 20:48:01 2024 by rpki-client on console-fra.rpki-client.org