$ rpki-client -vvf rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/DA0A5C9280BE11EB88ED2418C4F9AE02.roa File: DA0A5C9280BE11EB88ED2418C4F9AE02.roa (raw, json) Hash identifier: zxSRfAAWHodRPXRUrpU838tKskpRSjTOWCqlIRMhn7M= Subject key identifier: 1B:2B:27:19:99:59:04:B0:29:40:00:B0:1D:B6:87:33:60:B8:64:1C Certificate issuer: /CN=A9128918/serialNumber=2503775FAC3A6F47234CB832A637FC1082A47C44 Certificate serial: 0B52 Authority key identifier: 25:03:77:5F:AC:3A:6F:47:23:4C:B8:32:A6:37:FC:10:82:A4:7C:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQN3X6w6b0cjTLgypjf8EIKkfEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/DA0A5C9280BE11EB88ED2418C4F9AE02.roa Signing time: Mon 14 Aug 2023 18:56:08 +0000 ROA not before: Mon 14 Aug 2023 18:56:08 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 134599 IP address blocks: 103.121.36.0/24 maxlen: 24 103.121.37.0/24 maxlen: 24 103.121.38.0/24 maxlen: 24 103.121.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.crl rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQN3X6w6b0cjTLgypjf8EIKkfEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2898 (0xb52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128918/serialNumber=2503775FAC3A6F47234CB832A637FC1082A47C44 Validity Not Before: Aug 14 18:56:08 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64da78c8-15fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:08:05:80:54:96:28:2a:10:bc:45:fa:3e:c2: 48:72:2e:77:aa:2e:61:9b:43:d8:ce:89:13:d9:a4: 68:e9:f4:9a:e9:da:bb:15:61:50:b7:7a:35:7c:97: f1:95:8d:b0:a9:22:d9:57:de:63:35:47:e8:b6:36: bd:4b:bc:04:c3:68:a0:80:3b:52:a8:77:7f:e4:ec: 54:a0:2f:79:f4:42:77:93:c1:d8:d5:f5:20:31:55: 2c:ed:1d:0a:e1:08:19:00:72:56:dd:38:3b:27:f5: 6b:72:15:fa:ae:3e:89:de:58:8f:b1:b0:da:91:77: 79:6e:86:04:5b:0f:81:40:0c:0e:3f:7f:13:63:83: 1f:78:1d:d6:55:c1:8e:0c:49:41:cf:20:c8:96:80: c5:30:32:5f:a5:cd:8e:11:14:53:a1:df:6e:e4:ec: b9:34:33:b4:7a:b9:a5:ac:a7:3e:9b:e6:2e:5e:cb: 06:2a:cb:08:d8:80:8b:4d:2c:8b:5e:e2:1b:fc:3c: f5:66:b4:98:02:af:bf:89:ba:a5:10:64:f6:5a:92: 0a:df:f5:e5:d0:23:34:a6:2c:3a:b5:9d:db:14:d9: 84:f6:be:49:64:e5:b7:4b:a7:fa:b0:6e:75:7a:de: a2:88:e7:68:e5:9f:e8:e2:12:e7:b1:80:28:60:ad: 76:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2B:27:19:99:59:04:B0:29:40:00:B0:1D:B6:87:33:60:B8:64:1C X509v3 Authority Key Identifier: keyid:25:03:77:5F:AC:3A:6F:47:23:4C:B8:32:A6:37:FC:10:82:A4:7C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQN3X6w6b0cjTLgypjf8EIKkfEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/DA0A5C9280BE11EB88ED2418C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.121.36.0/22 Signature Algorithm: sha256WithRSAEncryption 15:9f:a2:4f:22:37:8f:e5:8e:c3:7a:2f:3d:43:3a:22:3a:99: 11:f3:68:18:26:00:6f:e1:30:0f:50:f8:46:f8:67:d9:8c:e9: a8:d7:76:ba:12:5f:75:c5:97:8e:47:96:30:33:d6:81:36:5d: 8c:4e:8b:36:f4:8e:7d:f3:f1:94:53:7f:18:5f:78:78:07:93: 70:82:89:8e:bc:ad:e6:29:bf:1f:45:d6:14:b8:63:50:22:88: 72:47:bb:51:b4:f3:3e:f5:14:a4:d6:46:2c:ef:90:d9:48:1d: b3:8b:7f:14:38:1a:f0:b9:dd:e8:67:5b:65:a5:c9:52:e5:73: 0b:28:6d:ba:65:03:8d:db:a6:7a:0a:2d:36:5a:e2:55:37:2b: f0:2e:ef:47:74:de:a5:8e:bf:39:66:cb:7d:d4:55:ba:7e:e2: 80:49:e9:72:c0:9f:27:a6:fb:51:93:ab:0a:b2:c8:94:ae:00: 3d:1a:ca:d0:a8:48:33:b6:7a:bf:61:b6:c7:1e:2c:1a:b5:ec: 64:89:3f:b2:97:fd:d6:41:30:06:c9:99:85:47:f8:70:bd:21: d1:4f:25:93:33:4a:e0:8d:12:0c:79:df:6e:0c:60:40:e2:a9: eb:18:14:77:a3:56:35:94:81:37:97:bf:d0:f3:a8:37:2e:b2: 5a:26:5a:ce -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg5MTgxMTAvBgNVBAUTKDI1MDM3NzVGQUMzQTZGNDcyMzRDQjgzMkE2MzdGQzEw ODJBNDdDNDQwHhcNMjMwODE0MTg1NjA4WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGRhNzhjOC0xNWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAgFgFSWKCoQvEX6PsJIci53qi5hm0PYzokT2aRo6fSa6dq7FWFQt3o1fJfx lY2wqSLZV95jNUfotja9S7wEw2iggDtSqHd/5OxUoC959EJ3k8HY1fUgMVUs7R0K 4QgZAHJW3Tg7J/VrchX6rj6J3liPsbDakXd5boYEWw+BQAwOP38TY4MfeB3WVcGO DElBzyDIloDFMDJfpc2OERRTod9u5Oy5NDO0ermlrKc+m+YuXssGKssI2ICLTSyL XuIb/Dz1ZrSYAq+/ibqlEGT2WpIK3/Xl0CM0piw6tZ3bFNmE9r5JZOW3S6f6sG51 et6iiOdo5Z/o4hLnsYAoYK12HQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBsrJxmZ WQSwKUAAsB22hzNguGQcMB8GA1UdIwQYMBaAFCUDd1+sOm9HI0y4MqY3/BCCpHxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODkxOC9FOThGREZENEY2 NzIxMUU5OTFFRDBCMTZDNEY5QUUwMi9KUU4zWDZ3NmIwY2pUTGd5cGpmOEVJS2tm RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pRTjNYNnc2YjBjalRMZ3lwamY4RUlLa2ZFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjg5MTgvRTk4RkRGRDRGNjcyMTFFOTkxRUQwQjE2QzRGOUFFMDIvREEwQTVDOTI4 MEJFMTFFQjg4RUQyNDE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJneSQwDQYJKoZIhvcNAQELBQADggEBABWfok8iN4/ljsN6 Lz1DOiI6mRHzaBgmAG/hMA9Q+Eb4Z9mM6ajXdroSX3XFl45HljAz1oE2XYxOizb0 jn3z8ZRTfxhfeHgHk3CCiY68reYpvx9F1hS4Y1AiiHJHu1G08z71FKTWRizvkNlI HbOLfxQ4GvC53ehnW2WlyVLlcwsobbplA43bpnoKLTZa4lU3K/Au70d03qWOvzlm y33UVbp+4oBJ6XLAnyem+1GTqwqyyJSuAD0aytCoSDO2er9htsceLBq17GSJP7KX /dZBMAbJmYVH+HC9IdFPJZMzSuCNEgx5324MYEDiqesYFHejVjWUgTeXv9DzqDcu slomWs4= -----END CERTIFICATE-----Generated at Sat May 18 19:56:05 2024 by rpki-client on console-fra.rpki-client.org