$ rpki-client -vvf rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/A8E9DE704B8511E7BF406610C4F9AE02.roa File: A8E9DE704B8511E7BF406610C4F9AE02.roa (raw, json) Hash identifier: 8CIY/gFR5kFD/nBvCMuT75QcV3nOcarL1vc/JnhoNpo= Subject key identifier: 87:81:B1:E0:35:63:47:2F:32:0F:9B:08:78:E4:45:D0:65:AC:0E:4B Certificate issuer: /CN=A9126F2B/serialNumber=E182F9936952C4269D670DA5752DECC868234F1B Certificate serial: 20E2 Authority key identifier: E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/A8E9DE704B8511E7BF406610C4F9AE02.roa Signing time: Mon 04 Mar 2024 16:43:17 +0000 ROA not before: Mon 04 Mar 2024 16:43:17 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 17625 IP address blocks: 103.206.209.0/24 maxlen: 24 103.206.210.0/24 maxlen: 24 103.206.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 16:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8418 (0x20e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126F2B/serialNumber=E182F9936952C4269D670DA5752DECC868234F1B Validity Not Before: Mar 4 16:43:17 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65e5fa25-2252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8e:4d:38:af:e3:85:29:09:21:19:c6:f7:5b: bd:87:5c:8b:bb:5a:18:01:a5:d0:c5:1b:39:59:08: 1e:3e:78:a5:2b:d1:fb:f1:d5:81:13:e4:3a:97:10: a9:db:ff:82:28:c4:6e:fd:1c:e4:0c:91:85:bf:7f: 88:d6:8c:17:7f:a6:86:a9:13:9d:4a:3a:68:40:23: ab:dd:8f:39:08:7b:17:7d:54:9f:05:bf:69:09:7b: f2:4b:13:48:ce:07:5b:30:d9:0e:9c:78:62:f0:76: bf:65:68:5d:f3:1a:df:70:90:55:e7:46:fd:0a:12: 7d:a4:09:a1:43:8b:07:e7:c5:e7:16:cc:94:27:2b: 50:72:bf:a0:a7:d6:4f:19:ce:a0:cf:8e:82:b8:45: 99:4a:38:08:ee:df:ab:99:03:d6:a2:99:a5:ab:15: 22:94:84:55:20:aa:cc:6d:9c:58:0c:2e:f6:a1:54: 64:f4:22:87:23:ab:a6:51:a3:f6:db:be:8e:b8:ef: c1:2c:bd:16:63:2b:7f:4b:cd:34:f2:45:90:e7:5b: cc:b5:c1:43:15:9a:55:af:8b:f5:cd:44:47:e2:dc: 5c:5a:1a:f0:c9:97:fd:64:b8:96:f1:b8:c4:6f:ef: e5:b4:b9:d0:f4:47:f9:73:c7:e0:d1:ef:eb:20:d8: 98:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:81:B1:E0:35:63:47:2F:32:0F:9B:08:78:E4:45:D0:65:AC:0E:4B X509v3 Authority Key Identifier: keyid:E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/A8E9DE704B8511E7BF406610C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.206.209.0-103.206.211.255 Signature Algorithm: sha256WithRSAEncryption 0b:8d:8c:bb:7c:f9:fd:87:b8:22:33:a1:22:38:3b:4d:8b:f9: 59:3b:c1:5e:12:ca:58:50:56:fe:57:00:74:29:ce:6f:4a:79: 56:65:84:9b:fe:6a:9b:ab:08:b3:aa:40:3f:b2:57:3c:03:da: 88:3d:51:cb:2c:18:b1:57:2b:77:8a:3c:40:ef:6c:23:94:8e: d1:ae:87:3a:13:83:12:7a:23:2e:45:8d:9a:b5:f6:76:62:7d: 42:40:0d:0c:74:62:3f:aa:2e:f6:98:07:fd:2d:17:39:cf:91: e4:4b:b0:45:15:91:28:27:19:a7:c3:bd:bb:c4:10:43:ec:e1: 47:7b:7e:20:69:77:2b:8d:44:db:72:64:2b:ad:c8:64:19:18: 03:c0:b3:13:1a:99:cd:b0:da:35:7b:26:c4:b9:21:08:45:37: 1c:89:35:e3:5c:de:1a:ac:23:f2:fc:7e:fa:09:18:e2:f9:ef: f1:b7:a6:7a:cd:87:6f:67:74:61:e4:09:b2:ab:35:56:0e:f6: c7:57:3f:08:f0:f5:be:83:b0:e6:f0:2e:6c:8f:f9:60:ac:b6: 49:ce:8f:84:79:03:bb:45:ed:d9:5e:18:6a:f7:11:09:8f:50: 99:66:ba:5d:8b:33:73:75:fa:39:7d:41:c9:20:22:ec:91:a5: 55:d0:7a:68 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICIOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZGMkIxMTAvBgNVBAUTKEUxODJGOTkzNjk1MkM0MjY5RDY3MERBNTc1MkRFQ0M4 NjgyMzRGMUIwHhcNMjQwMzA0MTY0MzE3WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWU1ZmEyNS0yMjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuY5NOK/jhSkJIRnG91u9h1yLu1oYAaXQxRs5WQgePnilK9H78dWBE+Q6lxCp 2/+CKMRu/RzkDJGFv3+I1owXf6aGqROdSjpoQCOr3Y85CHsXfVSfBb9pCXvySxNI zgdbMNkOnHhi8Ha/ZWhd8xrfcJBV50b9ChJ9pAmhQ4sH58XnFsyUJytQcr+gp9ZP Gc6gz46CuEWZSjgI7t+rmQPWopmlqxUilIRVIKrMbZxYDC72oVRk9CKHI6umUaP2 276OuO/BLL0WYyt/S8008kWQ51vMtcFDFZpVr4v1zURH4txcWhrwyZf9ZLiW8bjE b+/ltLnQ9Ef5c8fg0e/rINiYSwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFIeBseA1 Y0cvMg+bCHjkRdBlrA5LMB8GA1UdIwQYMBaAFOGC+ZNpUsQmnWcNpXUt7MhoI08b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkYyQi85MEZBREVFQ0Q1 Q0QxMUU1QUE0MjZFNDBDNEY5QUUwMi80WUw1azJsU3hDYWRadzJsZFMzc3lHZ2pU eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRZTDVrMmxTeENhZFp3MmxkUzNzeUdnalR4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjZGMkIvOTBGQURFRUNENUNEMTFFNUFBNDI2RTQwQzRGOUFFMDIvQThFOURFNzA0 Qjg1MTFFN0JGNDA2NjEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAGfO0QMEAmfO0DANBgkqhkiG9w0BAQsFAAOCAQEAC42M u3z5/Ye4IjOhIjg7TYv5WTvBXhLKWFBW/lcAdCnOb0p5VmWEm/5qm6sIs6pAP7JX PAPaiD1RyywYsVcrd4o8QO9sI5SO0a6HOhODEnojLkWNmrX2dmJ9QkANDHRiP6ou 9pgH/S0XOc+R5EuwRRWRKCcZp8O9u8QQQ+zhR3t+IGl3K41E23JkK63IZBkYA8Cz ExqZzbDaNXsmxLkhCEU3HIk141zeGqwj8vx++gkY4vnv8bemes2Hb2d0YeQJsqs1 Vg72x1c/CPD1voOw5vAubI/5YKy2Sc6PhHkDu0Xt2V4YavcRCY9QmWa6XYszc3X6 OX1BySAi7JGlVdB6aA== -----END CERTIFICATE-----Generated at Thu May 16 17:51:18 2024 by rpki-client on console-ams.rpki-client.org