$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/9E78AEC4C78E11EBB4983F5BC4F9AE02.roa File: 9E78AEC4C78E11EBB4983F5BC4F9AE02.roa (raw, json) Hash identifier: 5uLUZ+7ZABridhPJYI2qa3D2Yl/sh6FiJZCocDj/vgU= Subject key identifier: 3D:A6:D7:C2:4B:0C:67:9F:7C:33:72:99:B6:A5:22:A2:28:86:E4:A6 Certificate issuer: /CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Certificate serial: 0C9D Authority key identifier: 9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/9E78AEC4C78E11EBB4983F5BC4F9AE02.roa Signing time: Thu 24 Aug 2023 18:35:53 +0000 ROA not before: Thu 24 Aug 2023 18:35:53 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 134148 IP address blocks: 103.5.242.0/23 maxlen: 24 2401:c7c0:21a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 18:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3229 (0xc9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Validity Not Before: Aug 24 18:35:53 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64e7a309-a280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d5:04:fe:a8:23:2d:ce:72:20:b1:88:6b:67: 39:96:7a:74:37:e3:ea:ed:af:dc:b0:ba:a4:25:c2: 23:6d:ff:79:d7:aa:52:92:59:70:7b:73:15:74:54: c0:75:37:cc:78:0c:27:54:1b:19:49:d5:65:39:e2: 5a:87:3c:ee:8e:d5:55:e3:08:68:98:f4:e6:a1:d3: 87:0d:dd:a2:cb:d5:15:39:63:3a:74:ea:6b:a2:18: a8:6e:c3:82:5f:12:a6:a6:c4:55:3d:d2:5c:4b:3c: 66:57:96:60:09:10:c2:e3:70:f4:fb:98:b6:91:6e: da:b1:9d:78:ab:a2:70:3c:86:12:00:b2:63:c9:16: 6f:be:c1:a8:52:3a:60:4a:49:e8:b3:a3:ea:06:2c: 71:31:7e:79:e7:12:a3:0b:5a:a7:8a:6a:7b:bf:f6: f0:4b:af:fa:cb:6e:a6:06:32:0b:26:1a:12:37:d2: 88:89:9a:c9:36:d3:1e:1c:9a:cf:d9:03:a2:de:51: 33:0e:5f:62:4e:4c:6d:d2:45:25:b7:67:f5:e1:d0: 0f:7f:0e:3a:c1:c6:24:57:fe:e2:cb:bb:3d:1f:35: a8:01:09:b8:b7:56:a1:99:18:12:28:ee:6d:a0:c8: a3:08:cd:b7:a4:ee:46:d6:aa:66:d8:1b:b7:a7:5e: 34:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A6:D7:C2:4B:0C:67:9F:7C:33:72:99:B6:A5:22:A2:28:86:E4:A6 X509v3 Authority Key Identifier: keyid:9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/9E78AEC4C78E11EBB4983F5BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.5.242.0/23 IPv6: 2401:c7c0:21a::/48 Signature Algorithm: sha256WithRSAEncryption 45:ce:a5:e7:81:03:0d:0b:66:60:97:74:fc:35:df:20:9b:30: 6a:78:06:5d:9c:ee:40:d0:e7:e5:06:8c:49:e4:f8:01:4b:bb: f2:43:b0:f2:bd:27:98:6e:b3:e9:34:cc:d3:54:42:2a:8a:51: 06:53:c7:a7:61:6c:ad:4b:0c:97:fb:24:6c:86:c1:12:eb:7a: 8c:7d:80:92:36:88:c1:4e:2f:d2:c3:e2:c7:a4:09:d7:56:17: db:c9:24:c4:43:d2:c3:f1:a4:dd:9d:87:a5:fb:bb:0d:22:8e: 37:5e:cd:1b:be:0f:72:d2:aa:40:95:a7:df:73:6d:e3:fd:80: 7f:74:07:94:1a:af:4c:88:3d:01:b1:44:f4:a2:a1:47:cc:fa: 71:98:99:c2:8f:30:6a:7c:ff:f2:e8:94:a8:b2:26:d5:64:44: d6:f7:23:d5:14:72:30:e1:73:82:06:49:e2:2a:f7:3e:6c:ab: 04:2e:ff:6a:e2:b5:a1:4e:f4:9f:5d:1b:2f:bb:4b:44:f1:fb: 25:a1:a0:a6:2d:f2:0d:b9:88:a0:76:86:b1:0e:17:6a:d8:30: 53:cd:9c:78:ec:0c:46:75:c2:14:1b:ed:08:90:09:62:03:9e: 35:db:b3:a0:57:76:a2:17:d1:b6:eb:75:cf:b3:01:2f:dd:22: b6:2f:8a:66 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QjQxMTAvBgNVBAUTKDlERjk0QzMzRDNGNjQ3QUUzRDkxMzYxRTFGMTcyQzIw Njg2RjU5ODkwHhcNMjMwODI0MTgzNTUzWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGU3YTMwOS1hMjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNUE/qgjLc5yILGIa2c5lnp0N+Pq7a/csLqkJcIjbf9516pSkllwe3MVdFTA dTfMeAwnVBsZSdVlOeJahzzujtVV4whomPTmodOHDd2iy9UVOWM6dOprohiobsOC XxKmpsRVPdJcSzxmV5ZgCRDC43D0+5i2kW7asZ14q6JwPIYSALJjyRZvvsGoUjpg Sknos6PqBixxMX555xKjC1qnimp7v/bwS6/6y26mBjILJhoSN9KIiZrJNtMeHJrP 2QOi3lEzDl9iTkxt0kUlt2f14dAPfw46wcYkV/7iy7s9HzWoAQm4t1ahmRgSKO5t oMijCM23pO5G1qpm2Bu3p140kwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFD2m18JL DGeffDNymbalIqIohuSmMB8GA1UdIwQYMBaAFJ35TDPT9keuPZE2Hh8XLCBob1mJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVCNC83MDlGN0EyNkI4 MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2NDlrVFllSHhjc0lHaHZX WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25mbE1NOVAyUjY0OWtUWWVIeGNzSUdodldZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI1QjQvNzA5RjdBMjZCODI5MTFFOTkzNzM4QTA5QzRGOUFFMDIvOUU3OEFFQzRD NzhFMTFFQkI0OTgzRjVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnBfIwDwQCAAIwCQMHACQBx8ACGjANBgkqhkiG9w0BAQsF AAOCAQEARc6l54EDDQtmYJd0/DXfIJswangGXZzuQNDn5QaMSeT4AUu78kOw8r0n mG6z6TTM01RCKopRBlPHp2FsrUsMl/skbIbBEut6jH2AkjaIwU4v0sPix6QJ11YX 28kkxEPSw/Gk3Z2Hpfu7DSKON17NG74PctKqQJWn33Nt4/2Af3QHlBqvTIg9AbFE 9KKhR8z6cZiZwo8wanz/8uiUqLIm1WRE1vcj1RRyMOFzggZJ4ir3PmyrBC7/auK1 oU70n10bL7tLRPH7JaGgpi3yDbmIoHaGsQ4XatgwU82ceOwMRnXCFBvtCJAJYgOe NduzoFd2ohfRtut1z7MBL90iti+KZg== -----END CERTIFICATE-----Generated at Wed May 22 20:07:52 2024 by rpki-client on console-ams.rpki-client.org