$ rpki-client -vvf rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/962B0D98B14111E5A3B46B15C4F9AE02.roa File: 962B0D98B14111E5A3B46B15C4F9AE02.roa (raw, json) Hash identifier: 8T6+GpYGKPvpCT1aXj07WluTUhSqQG41Ny31YLC+lak= Subject key identifier: 84:1D:69:8B:23:06:26:8A:E0:54:A8:B9:B2:92:29:AC:B7:F9:0E:C7 Certificate issuer: /CN=A9126285/serialNumber=BCDBD71D7BA28DEBC5939F5CCA766ECA9F756310 Certificate serial: 2652 Authority key identifier: BC:DB:D7:1D:7B:A2:8D:EB:C5:93:9F:5C:CA:76:6E:CA:9F:75:63:10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/962B0D98B14111E5A3B46B15C4F9AE02.roa Signing time: Sun 10 Mar 2024 16:02:40 +0000 ROA not before: Sun 10 Mar 2024 16:02:40 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 133950 IP address blocks: 103.49.205.0/24 maxlen: 24 103.55.179.0/24 maxlen: 24 103.87.121.0/24 maxlen: 24 103.96.117.0/24 maxlen: 24 2001:df2:8400::/48 maxlen: 48 2001:df2:8401::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.crl rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 16:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9810 (0x2652) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126285/serialNumber=BCDBD71D7BA28DEBC5939F5CCA766ECA9F756310 Validity Not Before: Mar 10 16:02:40 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65edd9a0-7ebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fb:83:3a:47:bf:8e:23:9e:8b:d4:06:64:be: 88:c8:37:a5:42:00:6d:7d:c6:c3:20:2d:e4:37:ca: d4:3f:8f:b4:32:6b:25:a2:1f:8e:db:e1:c9:56:20: b7:2a:03:26:67:3c:9b:c9:e3:56:1c:06:ad:fe:41: 1a:66:98:85:e7:88:70:76:73:b1:83:32:5e:f8:9e: c0:f3:5a:f4:00:5d:cb:b3:27:59:21:1d:1f:41:bf: db:23:96:a4:55:36:dc:e2:ea:33:c3:0e:58:ce:f5: d5:d8:f9:fd:5d:57:8e:b3:96:d5:53:ff:1b:d8:95: 58:9b:73:2e:32:a9:a9:8f:64:4e:bf:bf:63:7c:26: c8:ab:d9:7a:d3:02:4f:df:a1:e8:08:0e:5d:dd:92: 9e:39:fe:88:f9:96:7c:92:0a:07:69:a1:2d:5d:6f: c3:f5:c4:3c:b7:60:98:c3:e6:22:f3:d9:49:97:07: 7b:a8:eb:e6:7b:c0:da:6e:ca:c9:03:7f:bd:8a:12: 6c:38:e5:88:67:ee:20:28:0c:93:55:58:a8:8c:8c: 1f:4e:d3:37:7a:8c:b1:3d:c1:7f:4f:92:20:14:06: 51:f1:7e:db:d2:0c:6a:8d:b9:38:e2:6c:40:08:8a: ee:b2:49:dd:a5:e7:8c:84:26:e5:a3:51:3b:bc:74: 93:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1D:69:8B:23:06:26:8A:E0:54:A8:B9:B2:92:29:AC:B7:F9:0E:C7 X509v3 Authority Key Identifier: keyid:BC:DB:D7:1D:7B:A2:8D:EB:C5:93:9F:5C:CA:76:6E:CA:9F:75:63:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/962B0D98B14111E5A3B46B15C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.49.205.0/24 103.55.179.0/24 103.87.121.0/24 103.96.117.0/24 IPv6: 2001:df2:8400::/47 Signature Algorithm: sha256WithRSAEncryption 10:0e:8d:31:ba:5f:d1:3d:83:61:44:92:f7:44:d0:89:83:b3: 71:16:1c:dc:04:ab:96:8a:1e:6d:c5:11:c9:9b:3d:b0:93:73: 09:7a:77:66:b4:9d:81:3d:47:0a:7e:6d:8f:1c:6a:10:66:63: 0e:80:1a:a7:60:4f:75:86:6a:32:af:48:4a:4f:d2:0e:69:b0: fb:a8:ad:ea:e1:e6:65:8c:8e:d3:8c:56:21:76:8e:16:88:de: 71:a9:81:75:95:51:62:f7:02:24:3b:e8:61:3a:85:af:ad:7c: ba:b5:e4:0a:9c:7b:e1:b2:18:37:3c:bd:9c:a5:4d:5d:39:ea: 0e:1f:8d:bc:ee:c2:c1:2d:05:cd:cf:04:85:ca:4b:14:89:38: f7:13:35:f4:c4:c6:40:2d:c8:7b:7b:4d:5c:4a:e8:ab:ac:af: 7d:9b:40:61:26:ff:cd:b3:31:0a:8b:42:96:01:c2:64:7b:86: 36:ef:cb:f8:97:18:19:28:a6:d7:8d:1e:1c:11:2b:0a:08:23: 50:67:42:cf:74:07:dd:aa:9b:e9:c8:a0:7a:6d:5d:93:ba:26: a4:8b:79:12:96:91:f4:2e:be:1b:be:9c:2d:cd:18:ef:27:da: c7:88:53:00:43:64:5d:4b:78:09:86:61:63:30:04:c8:d1:68: 27:52:9c:ae -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICJlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyODUxMTAvBgNVBAUTKEJDREJENzFEN0JBMjhERUJDNTkzOUY1Q0NBNzY2RUNB OUY3NTYzMTAwHhcNMjQwMzEwMTYwMjQwWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NWVkZDlhMC03ZWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvuDOke/jiOei9QGZL6IyDelQgBtfcbDIC3kN8rUP4+0Mmsloh+O2+HJViC3 KgMmZzybyeNWHAat/kEaZpiF54hwdnOxgzJe+J7A81r0AF3LsydZIR0fQb/bI5ak VTbc4uozww5YzvXV2Pn9XVeOs5bVU/8b2JVYm3MuMqmpj2ROv79jfCbIq9l60wJP 36HoCA5d3ZKeOf6I+ZZ8kgoHaaEtXW/D9cQ8t2CYw+Yi89lJlwd7qOvme8DabsrJ A3+9ihJsOOWIZ+4gKAyTVViojIwfTtM3eoyxPcF/T5IgFAZR8X7b0gxqjbk44mxA CIruskndpeeMhCblo1E7vHSTWwIDAQABo4ICuDCCArQwHQYDVR0OBBYEFIQdaYsj BiaK4FSoubKSKay3+Q7HMB8GA1UdIwQYMBaAFLzb1x17oo3rxZOfXMp2bsqfdWMQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjI4NS9CMjYxMEI1OEMz RjIxMUU0Qjk2NTc1MTRDNEY5QUUwMi92TnZYSFh1aWpldkZrNTljeW5adXlwOTFZ eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZOdlhIWHVpamV2Rms1OWN5blp1eXA5MVl4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjYyODUvQjI2MTBCNThDM0YyMTFFNEI5NjU3NTE0QzRGOUFFMDIvOTYyQjBEOThC MTQxMTFFNUEzQjQ2QjE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMB4EAgABMBgDBABnMc0DBABnN7MDBABnV3kDBABnYHUwDwQCAAIwCQMHASAB DfKEADANBgkqhkiG9w0BAQsFAAOCAQEAEA6NMbpf0T2DYUSS90TQiYOzcRYc3ASr looebcURyZs9sJNzCXp3ZrSdgT1HCn5tjxxqEGZjDoAap2BPdYZqMq9ISk/SDmmw +6it6uHmZYyO04xWIXaOFojecamBdZVRYvcCJDvoYTqFr618urXkCpx74bIYNzy9 nKVNXTnqDh+NvO7CwS0Fzc8EhcpLFIk49xM19MTGQC3Ie3tNXEroq6yvfZtAYSb/ zbMxCotClgHCZHuGNu/L+JcYGSim140eHBErCggjUGdCz3QH3aqb6cigem1dk7om pIt5EpaR9C6+G76cLc0Y7yfax4hTAENkXUt4CYZhYzAEyNFoJ1Kcrg== -----END CERTIFICATE-----Generated at Thu May 16 18:26:02 2024 by rpki-client on console-fra.rpki-client.org