$ rpki-client -vvf rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/8BFE9EA6335911EDBC60AC44C4F9AE02.roa File: 8BFE9EA6335911EDBC60AC44C4F9AE02.roa (raw, json) Hash identifier: kwPYM3eNEmTBafyjP2u3E0wkgKddG8VQLJvyVo+ylYI= Subject key identifier: BE:6F:24:E8:4D:E4:7C:6D:1E:58:86:76:38:6B:E8:E5:79:77:99:A5 Certificate issuer: /CN=A9122905/serialNumber=0646C52291D5CD4DF4A0FF786784FCF528346324 Certificate serial: DE Authority key identifier: 06:46:C5:22:91:D5:CD:4D:F4:A0:FF:78:67:84:FC:F5:28:34:63:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/8BFE9EA6335911EDBC60AC44C4F9AE02.roa Signing time: Thu 21 Sep 2023 03:44:27 +0000 ROA not before: Thu 21 Sep 2023 03:44:27 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 146954 IP address blocks: 103.25.220.0/24 maxlen: 24 2001:df1:2a40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 05:19:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122905/serialNumber=0646C52291D5CD4DF4A0FF786784FCF528346324 Validity Not Before: Sep 21 03:44:27 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=650bbc1a-1413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:85:27:56:d3:a8:54:8a:ad:e3:e0:8a:16:47: ff:e8:02:ea:09:03:26:fa:4d:1c:c7:a8:fc:bf:54: 3f:1f:91:a5:69:89:ef:16:45:b2:53:8f:39:41:38: cd:2d:9a:96:b2:12:c5:c7:ac:a9:1f:7d:11:85:9b: 2b:e2:c2:56:c8:e8:86:1b:42:1f:f7:f2:c0:35:c3: e6:b7:d7:67:6a:42:a3:4d:3d:ed:83:d4:df:f9:74: 13:91:40:8d:25:67:f0:01:ff:55:cb:75:4c:93:12: c9:a9:cb:94:ee:00:a4:ff:23:37:e3:40:b9:81:b9: ce:19:18:6b:fe:e7:64:d8:93:7e:95:e1:6f:ad:4e: a2:17:ff:ca:0a:0f:43:dc:b2:40:9a:37:8e:9e:47: b2:5a:33:8a:5b:09:a0:ab:2c:db:c9:37:4f:b3:9d: 2a:75:c2:94:0e:9e:f7:ed:2c:95:48:48:60:06:20: f7:34:eb:66:94:36:ed:d6:ea:47:05:47:f9:d6:3a: 96:32:d2:2a:65:e6:09:64:36:41:44:f4:02:2a:56: 74:f8:0a:34:cf:85:97:a8:98:e2:57:a1:ef:c2:c8: 55:5a:50:57:73:25:4c:cb:c3:eb:3e:f2:5e:bc:9f: 6e:0b:67:ff:09:25:14:61:56:44:da:c7:d2:10:9f: a6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:6F:24:E8:4D:E4:7C:6D:1E:58:86:76:38:6B:E8:E5:79:77:99:A5 X509v3 Authority Key Identifier: keyid:06:46:C5:22:91:D5:CD:4D:F4:A0:FF:78:67:84:FC:F5:28:34:63:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/8BFE9EA6335911EDBC60AC44C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.25.220.0/24 IPv6: 2001:df1:2a40::/48 Signature Algorithm: sha256WithRSAEncryption 14:b2:a4:f1:6d:9f:27:96:e8:d9:25:94:a1:30:79:39:e1:16: ee:53:94:bb:e9:39:b6:3b:eb:39:d3:3b:f8:ef:b2:9d:e7:17: 51:6f:6b:c8:a2:b8:c1:a9:f4:e2:54:f9:b9:2f:ee:8e:04:8e: 89:75:81:a1:0d:5e:42:a9:8f:c0:76:0a:5c:53:26:ca:23:4e: b9:02:bf:f1:85:52:b1:33:5f:fd:0d:f6:35:94:49:a9:ba:88: 5f:9c:67:3e:e9:36:94:3b:c9:cf:e0:2f:87:29:d0:83:98:e8: 78:81:79:c6:da:f0:5c:55:a1:c2:2e:00:e1:b8:7e:1b:c0:f6: 32:aa:8a:d8:5a:51:95:61:f8:f8:99:4d:9d:c8:d4:05:80:0e: 02:fb:48:7d:9f:5b:ff:b8:6f:0a:6e:be:4b:b5:24:ba:7d:90: 11:b5:ed:c9:76:42:97:4f:1f:6f:2c:81:11:f4:33:a1:fb:a1: c9:98:47:71:5b:8b:12:c7:c6:00:00:d2:1a:13:ca:60:6e:68: ff:f7:03:4e:93:a7:9a:33:2b:f0:87:f6:28:d2:ee:28:d8:71: eb:57:2a:80:99:59:df:68:f4:6c:e7:71:84:2d:0f:73:b0:1e: b8:03:48:1e:51:0d:98:59:d4:71:3b:33:32:fa:a5:5a:58:19: 29:18:d3:43 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI5MDUxMTAvBgNVBAUTKDA2NDZDNTIyOTFENUNENERGNEEwRkY3ODY3ODRGQ0Y1 MjgzNDYzMjQwHhcNMjMwOTIxMDM0NDI3WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTBiYmMxYS0xNDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIUnVtOoVIqt4+CKFkf/6ALqCQMm+k0cx6j8v1Q/H5GlaYnvFkWyU485QTjN LZqWshLFx6ypH30RhZsr4sJWyOiGG0If9/LANcPmt9dnakKjTT3tg9Tf+XQTkUCN JWfwAf9Vy3VMkxLJqcuU7gCk/yM340C5gbnOGRhr/udk2JN+leFvrU6iF//KCg9D 3LJAmjeOnkeyWjOKWwmgqyzbyTdPs50qdcKUDp737SyVSEhgBiD3NOtmlDbt1upH BUf51jqWMtIqZeYJZDZBRPQCKlZ0+Ao0z4WXqJjiV6HvwshVWlBXcyVMy8PrPvJe vJ9uC2f/CSUUYVZE2sfSEJ+m4QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFL5vJOhN 5HxtHliGdjhr6OV5d5mlMB8GA1UdIwQYMBaAFAZGxSKR1c1N9KD/eGeE/PUoNGMk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjkwNS8xMUVCMDg2QTMz NTUxMUVEOTQzRkE1M0JDNEY5QUUwMi9Ca2JGSXBIVnpVMzBvUDk0WjRUODlTZzBZ eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JrYkZJcEhWelUzMG9QOTRaNFQ4OVNnMFl5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjI5MDUvMTFFQjA4NkEzMzU1MTFFRDk0M0ZBNTNCQzRGOUFFMDIvOEJGRTlFQTYz MzU5MTFFREJDNjBBQzQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnGdwwDwQCAAIwCQMHACABDfEqQDANBgkqhkiG9w0BAQsF AAOCAQEAFLKk8W2fJ5bo2SWUoTB5OeEW7lOUu+k5tjvrOdM7+O+ynecXUW9ryKK4 wan04lT5uS/ujgSOiXWBoQ1eQqmPwHYKXFMmyiNOuQK/8YVSsTNf/Q32NZRJqbqI X5xnPuk2lDvJz+AvhynQg5joeIF5xtrwXFWhwi4A4bh+G8D2MqqK2FpRlWH4+JlN ncjUBYAOAvtIfZ9b/7hvCm6+S7Ukun2QEbXtyXZCl08fbyyBEfQzofuhyZhHcVuL EsfGAADSGhPKYG5o//cDTpOnmjMr8If2KNLuKNhx61cqgJlZ32j0bOdxhC0Pc7Ae uANIHlENmFnUcTszMvqlWlgZKRjTQw== -----END CERTIFICATE-----Generated at Wed May 29 06:12:05 2024 by rpki-client on console-ams.rpki-client.org