$ rpki-client -vvf rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/09AA16F8DB0011ECA67DA10BC4F9AE02.roa File: 09AA16F8DB0011ECA67DA10BC4F9AE02.roa (raw, json) Hash identifier: LO9ngxXOl+iazHSQjT/XtGyP65JUxjImT6/VdEBjdac= Subject key identifier: 20:5A:B3:CF:97:88:92:6D:3D:11:F7:65:B2:DE:29:64:F4:FB:C4:CA Certificate issuer: /CN=A9118422/serialNumber=386EACFAA61B8B4037DC38AA28085DE31878F1E3 Certificate serial: 0215 Authority key identifier: 38:6E:AC:FA:A6:1B:8B:40:37:DC:38:AA:28:08:5D:E3:18:78:F1:E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/09AA16F8DB0011ECA67DA10BC4F9AE02.roa Signing time: Tue 05 Mar 2024 04:05:38 +0000 ROA not before: Tue 05 Mar 2024 04:05:38 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 133914 IP address blocks: 103.47.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.crl rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 533 (0x215) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118422/serialNumber=386EACFAA61B8B4037DC38AA28085DE31878F1E3 Validity Not Before: Mar 5 04:05:38 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65e69a11-cb55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bc:d2:7b:be:b3:09:50:4c:0b:28:a8:83:7c: 60:e2:7b:3b:e6:02:95:95:96:8d:e1:55:b9:e3:01: c6:fe:e1:11:39:2e:3b:55:34:29:68:78:59:cd:08: 20:2b:79:03:06:a8:b3:61:2e:3b:bf:f6:5d:48:82: 44:72:24:61:5b:c3:b8:f4:4b:f6:2f:c2:18:77:21: 8d:95:eb:16:b5:77:f2:f7:40:dc:92:13:5b:f6:92: 89:d3:9d:ae:98:cd:ad:ca:02:39:16:86:b9:35:52: ae:6e:f4:d3:0b:17:02:90:39:d0:16:7e:ce:d5:5d: 72:a3:f6:f3:b9:d3:bc:53:38:e7:fd:dc:2f:78:b7: 12:81:69:22:4b:a2:0e:d8:b1:70:43:01:f3:3a:20: 03:5a:a5:97:03:88:3c:79:30:8c:b4:6b:fa:ff:a0: a4:1c:4a:82:6c:91:7b:bc:45:44:71:7a:75:ef:b0: 1f:fe:6e:c4:80:92:ac:bf:02:69:97:51:14:c8:a3: a1:ed:9c:39:44:53:d2:7f:f8:90:dd:6a:07:b7:37: b2:e1:05:75:68:f9:07:d1:e5:c7:4e:5e:a8:ed:9b: ce:7e:c0:14:00:af:16:8a:24:e4:f8:1b:63:50:29: d9:af:0b:e6:e3:9e:48:f9:47:b3:f5:1c:d9:05:ac: d5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5A:B3:CF:97:88:92:6D:3D:11:F7:65:B2:DE:29:64:F4:FB:C4:CA X509v3 Authority Key Identifier: keyid:38:6E:AC:FA:A6:1B:8B:40:37:DC:38:AA:28:08:5D:E3:18:78:F1:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/09AA16F8DB0011ECA67DA10BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.47.234.0/23 Signature Algorithm: sha256WithRSAEncryption 36:db:88:51:22:d9:5e:17:bf:d3:c4:9c:a7:64:df:4f:05:56: 03:d4:6a:1c:a4:99:71:4b:56:8f:7e:0f:46:9d:ff:f0:32:53: 4a:31:de:75:d3:36:e7:00:6a:95:0b:43:db:60:55:63:9f:2f: a4:cf:6f:22:35:2a:4f:61:06:06:22:d3:27:3f:16:9c:8f:22: de:2b:57:8a:e3:4b:16:f1:89:39:74:5e:05:5d:48:ef:63:87: 48:f2:1f:5b:78:a7:b1:7c:67:19:36:9d:73:11:da:51:b6:51: e8:80:15:95:8f:b6:50:26:8e:a5:a9:18:69:1f:0c:6e:47:34: bf:6d:bb:cf:7e:55:68:46:97:96:48:2a:68:7f:d4:6a:6b:97: dc:36:2f:1b:c4:43:9f:62:e0:d2:ac:91:44:62:b3:22:6b:e1: 24:d0:2f:cd:07:a9:01:bf:14:f7:27:e3:04:86:2b:e9:f3:71: b9:8c:6c:8c:56:e4:40:c7:9a:f4:50:5b:83:7f:67:8f:f3:b3: 50:64:a5:7f:96:b0:5c:41:a6:cd:cd:11:ef:80:43:af:4d:ec: 8d:ee:ad:1e:ed:ef:6e:d1:0e:a7:9c:4e:8c:f0:a8:25:95:98: c5:7f:32:3c:b5:14:b6:b9:5c:27:d9:ad:a0:f4:70:d8:64:e0: 1a:eb:fc:03 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg0MjIxMTAvBgNVBAUTKDM4NkVBQ0ZBQTYxQjhCNDAzN0RDMzhBQTI4MDg1REUz MTg3OEYxRTMwHhcNMjQwMzA1MDQwNTM4WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWU2OWExMS1jYjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLzSe76zCVBMCyiog3xg4ns75gKVlZaN4VW54wHG/uEROS47VTQpaHhZzQgg K3kDBqizYS47v/ZdSIJEciRhW8O49Ev2L8IYdyGNlesWtXfy90DckhNb9pKJ052u mM2tygI5Foa5NVKubvTTCxcCkDnQFn7O1V1yo/bzudO8Uzjn/dwveLcSgWkiS6IO 2LFwQwHzOiADWqWXA4g8eTCMtGv6/6CkHEqCbJF7vEVEcXp177Af/m7EgJKsvwJp l1EUyKOh7Zw5RFPSf/iQ3WoHtzey4QV1aPkH0eXHTl6o7ZvOfsAUAK8WiiTk+Btj UCnZrwvm455I+Uez9RzZBazV9QIDAQABo4IClTCCApEwHQYDVR0OBBYEFCBas8+X iJJtPRH3ZbLeKWT0+8TKMB8GA1UdIwQYMBaAFDhurPqmG4tAN9w4qigIXeMYePHj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODQyMi8zMTgwRkUyQURB RkMxMUVDQkJENTM3ODZDNEY5QUUwMi9PRzZzLXFZYmkwQTMzRGlxS0FoZDR4aDQ4 ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09HNnMtcVliaTBBMzNEaXFLQWhkNHhoNDhlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTg0MjIvMzE4MEZFMkFEQUZDMTFFQ0JCRDUzNzg2QzRGOUFFMDIvMDlBQTE2RjhE QjAwMTFFQ0E2N0RBMTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnL+owDQYJKoZIhvcNAQELBQADggEBADbbiFEi2V4Xv9PE nKdk308FVgPUahykmXFLVo9+D0ad//AyU0ox3nXTNucAapULQ9tgVWOfL6TPbyI1 Kk9hBgYi0yc/FpyPIt4rV4rjSxbxiTl0XgVdSO9jh0jyH1t4p7F8Zxk2nXMR2lG2 UeiAFZWPtlAmjqWpGGkfDG5HNL9tu89+VWhGl5ZIKmh/1Gprl9w2LxvEQ59i4NKs kURisyJr4STQL80HqQG/FPcn4wSGK+nzcbmMbIxW5EDHmvRQW4N/Z4/zs1BkpX+W sFxBps3NEe+AQ69N7I3urR7t727RDqecTozwqCWVmMV/Mjy1FLa5XCfZraD0cNhk 4Brr/AM= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:32 2024 by rpki-client on console-ams.rpki-client.org