$ rpki-client -vvf rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/ABCD12D8796311EF9BFCD176C4F9AE02.roa File: ABCD12D8796311EF9BFCD176C4F9AE02.roa (raw, json) Hash identifier: +RKW+/uN9Hi39qxkzWYiutguIiAMAssFq6PeTVoSj88= Subject key identifier: 0D:A9:72:E6:FE:C2:4B:14:73:45:18:D5:F9:27:56:39:3E:49:7C:74 Certificate issuer: /CN=A9126DA8/serialNumber=BC137C2777E51DE7BD1ACE80D868FD93A1EC7A43 Certificate serial: 027D Authority key identifier: BC:13:7C:27:77:E5:1D:E7:BD:1A:CE:80:D8:68:FD:93:A1:EC:7A:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBN8J3flHee9Gs6A2Gj9k6HsekM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/ABCD12D8796311EF9BFCD176C4F9AE02.roa Signing time: Mon 23 Sep 2024 04:24:06 +0000 ROA not before: Mon 23 Sep 2024 04:24:06 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 150716 IP address blocks: 103.25.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/vBN8J3flHee9Gs6A2Gj9k6HsekM.crl rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/vBN8J3flHee9Gs6A2Gj9k6HsekM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBN8J3flHee9Gs6A2Gj9k6HsekM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:23:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 637 (0x27d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126DA8/serialNumber=BC137C2777E51DE7BD1ACE80D868FD93A1EC7A43 Validity Not Before: Sep 23 04:24:06 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66f0ed66-65dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:62:bd:c2:7a:90:c0:61:0a:4a:50:31:58:aa: b3:b6:1a:3a:ce:55:07:ff:39:10:6b:ab:5a:6b:32: f8:2f:85:fd:fe:41:87:db:28:10:70:39:bc:bb:aa: 32:d5:ec:99:82:83:1c:93:15:d1:34:cc:51:2a:a1: 22:62:8c:ba:21:5e:04:f1:f7:94:ac:fa:29:51:d9: 20:c3:12:d4:3b:97:4b:a2:c5:ae:02:e1:dc:9f:28: 28:f7:89:3d:13:77:16:76:f8:53:42:8d:d6:ad:d7: 55:94:03:d0:bd:cb:52:88:c0:d0:82:f9:80:22:4e: 74:c0:0e:81:a6:c8:3e:9c:f1:ce:7b:d5:bc:ca:02: 31:37:00:1a:29:56:f7:a5:13:fa:9c:01:55:d1:45: 6f:9a:54:cf:3b:46:f6:03:21:0b:dc:ae:cd:e3:5f: 53:d9:b1:9e:9a:f5:23:2d:eb:1d:5e:bd:09:12:01: 82:32:56:a9:00:a5:ab:6f:ad:c0:31:29:df:8f:a6: 29:66:c0:41:49:01:67:1b:5e:de:9f:04:18:ec:89: cf:40:30:bc:5f:58:d3:8c:36:4b:35:a3:47:f5:cf: 6e:1d:fc:81:ff:cd:0b:91:a7:44:84:e7:67:a8:31: 89:43:f2:79:c4:75:ed:e6:d2:24:eb:30:45:4d:f9: 98:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A9:72:E6:FE:C2:4B:14:73:45:18:D5:F9:27:56:39:3E:49:7C:74 X509v3 Authority Key Identifier: keyid:BC:13:7C:27:77:E5:1D:E7:BD:1A:CE:80:D8:68:FD:93:A1:EC:7A:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/vBN8J3flHee9Gs6A2Gj9k6HsekM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBN8J3flHee9Gs6A2Gj9k6HsekM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/ABCD12D8796311EF9BFCD176C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.25.127.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:22:a9:3a:ed:67:a1:36:5a:b5:94:c5:ea:6b:11:fb:61:71: dc:2f:88:51:f5:e6:88:9f:34:4f:34:10:07:70:71:3b:fb:02: 13:45:2f:2a:71:b9:d4:4e:4c:bc:f8:15:d0:ff:12:08:ac:81: e3:df:22:1f:a5:bc:42:ab:5b:2e:46:4a:8a:0a:55:dc:52:4e: 1a:35:c0:c6:22:a7:9e:da:8b:f5:0b:11:f8:31:1b:b1:6d:13: e1:f9:45:37:66:31:7e:dd:9d:17:f9:8c:78:07:83:2a:f3:66: ee:67:3d:3b:e3:c6:41:c8:b8:f1:ec:0a:b4:a9:df:21:62:e9: cd:c5:99:ce:b8:e1:47:4d:08:d5:55:58:23:a9:87:d8:49:03: 60:49:f3:12:86:06:1d:23:9f:0c:61:1f:02:b0:2f:d0:d4:b2: 73:00:2a:d0:df:c8:bb:3c:56:5e:7e:ab:ef:6d:20:6b:79:b7: 79:be:5d:53:4b:c1:1c:e3:e5:21:92:c3:f6:30:43:da:12:98: 34:3d:9b:29:a2:62:1f:a5:3a:95:c8:4f:4c:fd:ef:6f:88:64: a6:6f:51:18:6a:0f:a7:5d:54:9a:09:52:0e:37:b7:1a:ee:97: ba:7b:0f:00:7d:1e:6d:9b:96:43:6f:b9:f2:80:5a:89:5a:69: 84:22:65:6e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZEQTgxMTAvBgNVBAUTKEJDMTM3QzI3NzdFNTFERTdCRDFBQ0U4MEQ4NjhGRDkz QTFFQzdBNDMwHhcNMjQwOTIzMDQyNDA2WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmYwZWQ2Ni02NWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02K9wnqQwGEKSlAxWKqztho6zlUH/zkQa6taazL4L4X9/kGH2ygQcDm8u6oy 1eyZgoMckxXRNMxRKqEiYoy6IV4E8feUrPopUdkgwxLUO5dLosWuAuHcnygo94k9 E3cWdvhTQo3WrddVlAPQvctSiMDQgvmAIk50wA6Bpsg+nPHOe9W8ygIxNwAaKVb3 pRP6nAFV0UVvmlTPO0b2AyEL3K7N419T2bGemvUjLesdXr0JEgGCMlapAKWrb63A MSnfj6YpZsBBSQFnG17enwQY7InPQDC8X1jTjDZLNaNH9c9uHfyB/80LkadEhOdn qDGJQ/J5xHXt5tIk6zBFTfmY2wIDAQABo4IClTCCApEwHQYDVR0OBBYEFA2pcub+ wksUc0UY1fknVjk+SXx0MB8GA1UdIwQYMBaAFLwTfCd35R3nvRrOgNho/ZOh7HpD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkRBOC83NkVENDRFRTAx RUIxMUVEOTlBMzFBMUZDNEY5QUUwMi92Qk44SjNmbEhlZTlHczZBMkdqOWs2SHNl a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZCTjhKM2ZsSGVlOUdzNkEyR2o5azZIc2VrTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjZEQTgvNzZFRDQ0RUUwMUVCMTFFRDk5QTMxQTFGQzRGOUFFMDIvQUJDRDEyRDg3 OTYzMTFFRjlCRkNEMTc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnGX8wDQYJKoZIhvcNAQELBQADggEBAJ0iqTrtZ6E2WrWU xeprEfthcdwviFH15oifNE80EAdwcTv7AhNFLypxudROTLz4FdD/EgisgePfIh+l vEKrWy5GSooKVdxSTho1wMYip57ai/ULEfgxG7FtE+H5RTdmMX7dnRf5jHgHgyrz Zu5nPTvjxkHIuPHsCrSp3yFi6c3Fmc644UdNCNVVWCOph9hJA2BJ8xKGBh0jnwxh HwKwL9DUsnMAKtDfyLs8Vl5+q+9tIGt5t3m+XVNLwRzj5SGSw/YwQ9oSmDQ9mymi Yh+lOpXIT0z972+IZKZvURhqD6ddVJoJUg43txrul7p7DwB9Hm2blkNvufKAWola aYQiZW4= -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:54 2024 by rpki-client on console-fra.rpki-client.org