$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/8BE9B1A03C8B11EC8947D982C4F9AE02.roa File: 8BE9B1A03C8B11EC8947D982C4F9AE02.roa (raw, json) Hash identifier: FoYRsCuS7R3h5SKIzMxx0ziFPmPriW5U+D3CqE4wpEg= Subject key identifier: CD:87:8A:5F:A2:ED:93:FF:93:EE:D6:2D:88:A4:09:40:CD:57:37:C6 Certificate issuer: /CN=A9120AC1/serialNumber=8F2BD4C12636F0059B408D0716AF32C8F54069A5 Certificate serial: 03B9 Authority key identifier: 8F:2B:D4:C1:26:36:F0:05:9B:40:8D:07:16:AF:32:C8:F5:40:69:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/8BE9B1A03C8B11EC8947D982C4F9AE02.roa Signing time: Wed 17 Jan 2024 02:03:55 +0000 ROA not before: Wed 17 Jan 2024 02:03:55 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 9744 IP address blocks: 43.225.196.0/22 maxlen: 24 103.44.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.crl rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 953 (0x3b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AC1/serialNumber=8F2BD4C12636F0059B408D0716AF32C8F54069A5 Validity Not Before: Jan 17 02:03:55 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65a7358b-3470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bb:1b:92:d2:94:44:51:bc:8a:e3:83:b9:54: 15:b4:20:29:44:9d:b8:8e:d6:f4:da:55:a0:a8:71: a7:80:d0:9a:0c:08:4a:ec:25:0d:c6:d9:f1:cd:86: 2c:76:9a:79:0c:14:32:d3:bb:89:e0:fa:27:d6:3f: 04:d7:39:ba:cf:7f:7d:97:17:fb:77:9c:e3:77:6d: cc:50:43:3e:bc:22:64:26:d8:ce:28:21:c9:4d:13: 8d:01:07:f7:e9:89:e2:19:74:cd:76:f2:8e:59:c0: 47:5e:19:0b:07:ee:4f:25:15:5e:e6:26:a1:d4:30: 7c:12:69:fa:6d:c2:32:95:5d:2e:7e:b3:66:9b:e4: 5f:59:ca:5e:99:23:5c:97:5c:6c:59:7c:e0:20:b9: f7:b4:9c:c1:bd:b0:ad:5b:c9:d9:d1:0f:04:34:04: 3e:81:46:e8:75:21:96:64:f2:0c:e5:52:8d:fa:f7: 1a:ca:f5:7f:52:cb:9c:e7:aa:0c:40:fd:04:7a:55: 50:b8:48:67:f1:10:54:45:39:62:48:b2:9a:f7:b1: 1a:61:57:0b:85:14:36:51:95:cf:d5:9d:89:ce:3c: 7c:c8:31:60:a7:82:46:8a:8a:34:c8:0c:6b:36:80: c1:16:e9:c5:ac:20:c4:21:ca:b5:d0:62:08:11:37: d6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:87:8A:5F:A2:ED:93:FF:93:EE:D6:2D:88:A4:09:40:CD:57:37:C6 X509v3 Authority Key Identifier: keyid:8F:2B:D4:C1:26:36:F0:05:9B:40:8D:07:16:AF:32:C8:F5:40:69:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/8BE9B1A03C8B11EC8947D982C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.225.196.0/22 103.44.160.0/22 Signature Algorithm: sha256WithRSAEncryption 60:e1:e8:bc:f4:09:26:7e:42:f9:ce:02:f0:bc:c2:6c:ea:7e: f3:4e:a2:61:62:bf:33:fc:16:32:86:00:89:0d:2b:c1:20:4a: b9:42:68:57:81:37:7d:0f:7e:e5:ff:fd:b1:7b:ff:66:36:aa: cb:4e:cd:79:84:49:26:2b:9c:7b:6c:dc:ca:bd:db:19:3f:79: e8:96:58:c8:83:2e:f9:66:5f:5a:ca:79:16:c7:40:65:f6:f0: 7e:ad:73:cc:3d:dd:b4:de:b1:54:11:15:e0:e1:43:c7:82:d8: ef:24:2b:52:5e:01:24:7d:fc:bc:1c:f6:b8:2b:d8:7d:38:47: bf:40:b2:dc:a4:c0:00:a6:b6:b7:ee:d3:cc:f5:c9:02:a0:83: 95:89:83:2f:ec:bd:31:0d:e4:fd:d2:0d:72:5b:2b:32:ae:65: ed:31:53:50:ce:21:2a:20:35:a1:d9:8c:d0:b1:bd:78:6b:9a: 34:69:1e:e8:44:24:fd:af:a7:d5:96:88:81:fe:5c:83:c4:76: 1e:34:c6:14:d0:19:2b:99:00:c0:50:e8:a3:85:35:7c:50:c5: 47:bd:aa:7e:a2:77:2c:30:65:ba:d4:fd:cc:cd:84:15:a6:13: 6a:d8:cc:d3:77:6b:f0:43:69:ad:ea:c1:24:b7:37:7f:fd:66: 21:c8:16:3c -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICA7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQzExMTAvBgNVBAUTKDhGMkJENEMxMjYzNkYwMDU5QjQwOEQwNzE2QUYzMkM4 RjU0MDY5QTUwHhcNMjQwMTE3MDIwMzU1WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWE3MzU4Yi0zNDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07sbktKURFG8iuODuVQVtCApRJ24jtb02lWgqHGngNCaDAhK7CUNxtnxzYYs dpp5DBQy07uJ4Pon1j8E1zm6z399lxf7d5zjd23MUEM+vCJkJtjOKCHJTRONAQf3 6YniGXTNdvKOWcBHXhkLB+5PJRVe5iah1DB8Emn6bcIylV0ufrNmm+RfWcpemSNc l1xsWXzgILn3tJzBvbCtW8nZ0Q8ENAQ+gUbodSGWZPIM5VKN+vcayvV/Usuc56oM QP0EelVQuEhn8RBURTliSLKa97EaYVcLhRQ2UZXP1Z2Jzjx8yDFgp4JGioo0yAxr NoDBFunFrCDEIcq10GIIETfWlwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFM2Hil+i 7ZP/k+7WLYikCUDNVzfGMB8GA1UdIwQYMBaAFI8r1MEmNvAFm0CNBxavMsj1QGml MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFDMS80ODAxN0QzODMw OTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9qeXZVd1NZMjhBV2JRSTBIRnE4eXlQVkFh YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p5dlV3U1kyOEFXYlFJMEhGcTh5eVBWQWFhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjBBQzEvNDgwMTdEMzgzMDk3MTFFQ0IyODVBNjRCQzRGOUFFMDIvOEJFOUIxQTAz QzhCMTFFQzg5NDdEOTgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr4cQDBAJnLKAwDQYJKoZIhvcNAQELBQADggEBAGDh6Lz0 CSZ+QvnOAvC8wmzqfvNOomFivzP8FjKGAIkNK8EgSrlCaFeBN30PfuX//bF7/2Y2 qstOzXmESSYrnHts3Mq92xk/eeiWWMiDLvlmX1rKeRbHQGX28H6tc8w93bTesVQR FeDhQ8eC2O8kK1JeASR9/Lwc9rgr2H04R79AstykwACmtrfu08z1yQKgg5WJgy/s vTEN5P3SDXJbKzKuZe0xU1DOISogNaHZjNCxvXhrmjRpHuhEJP2vp9WWiIH+XIPE dh40xhTQGSuZAMBQ6KOFNXxQxUe9qn6idywwZbrU/czNhBWmE2rYzNN3a/BDaa3q wSS3N3/9ZiHIFjw= -----END CERTIFICATE-----Generated at Sat May 11 03:57:05 2024 by rpki-client on console-fra.rpki-client.org