$ rpki-client -vvf rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/B70383D6385411E9A0023656C4F9AE02.roa File: B70383D6385411E9A0023656C4F9AE02.roa (raw, json) Hash identifier: tKbPfXDC2Fwj+8ivwZ/PNB5Op2vLI8CIJgf4lWUv2p0= Subject key identifier: B8:2D:2A:35:9F:A3:FE:77:DD:E4:4A:C2:AC:6A:BA:91:AE:7C:9E:F0 Certificate issuer: /CN=A9129B9E/serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C Certificate serial: 0EEF Authority key identifier: 25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/B70383D6385411E9A0023656C4F9AE02.roa Signing time: Wed 28 Jun 2023 18:06:58 +0000 ROA not before: Wed 28 Jun 2023 18:06:58 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 136598 IP address blocks: 103.93.90.0/24 maxlen: 24 103.96.234.0/24 maxlen: 24 103.96.235.0/24 maxlen: 24 103.122.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 18:14:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3823 (0xeef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129B9E/serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C Validity Not Before: Jun 28 18:06:58 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=649c76c2-5812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:02:1e:a5:0a:7e:24:0d:0a:93:a9:ab:b1:9e: e2:bc:eb:dc:23:72:26:39:7d:f7:8b:70:7d:5a:6b: 34:88:6b:65:a1:53:f7:4b:48:e3:cb:16:5e:2a:76: 99:a2:cf:f6:fc:67:a0:a6:32:4e:76:52:21:54:60: 53:7a:69:ef:b7:4a:01:eb:e2:22:e9:da:5c:c1:6b: 4c:19:27:25:09:dc:6f:4f:de:8c:44:6c:58:9b:e3: de:a4:34:f6:49:b7:e1:c5:c5:0c:a0:33:7f:68:b1: 40:48:48:8a:c6:ff:6a:fe:b2:c5:66:04:c8:83:85: fe:75:fa:b2:8e:7c:86:05:7e:5a:9b:ea:83:ab:bc: be:b5:3e:90:23:07:7d:8f:bb:08:31:dc:d6:d1:a8: 43:27:b8:71:c8:00:7e:c2:36:7d:b9:42:40:37:ab: 1d:63:d1:56:a3:9e:0d:95:ec:b6:ba:11:be:55:72: 5d:c8:1f:44:8a:cb:97:28:b2:bf:b3:3f:a6:54:c9: 58:46:3f:c2:0e:89:bf:3c:04:0c:55:91:4b:9f:59: 39:8f:2c:3a:79:31:c5:7c:a4:a9:c2:90:74:3e:9b: 12:d8:22:30:04:13:b1:0b:19:c9:97:87:ad:ed:d0: 23:5a:36:eb:5a:ec:e1:c5:0e:f0:37:4b:41:4a:8a: 8e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:2D:2A:35:9F:A3:FE:77:DD:E4:4A:C2:AC:6A:BA:91:AE:7C:9E:F0 X509v3 Authority Key Identifier: keyid:25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/B70383D6385411E9A0023656C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.93.90.0/24 103.96.234.0/23 103.122.44.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:59:63:1e:15:41:ae:d6:ac:69:60:96:bb:d3:2f:f2:10:af: d6:9d:ba:b0:bf:8a:ab:92:5a:54:56:b4:1f:dd:3f:06:6b:f1: 50:a5:1b:28:82:5a:53:23:cc:c6:da:8e:6b:f4:06:0e:27:17: 4b:ea:9c:39:36:13:a5:63:f1:63:4b:16:47:03:5a:93:7b:85: a8:ca:92:dd:b9:f2:4c:2c:bb:32:c7:3f:a4:55:bd:5c:57:a6: bc:bb:52:c2:06:a7:37:14:6d:3b:c8:7a:b3:ce:76:01:37:8b: 0e:a8:85:de:a0:1f:75:d6:e6:60:82:cb:1b:c2:a2:92:6e:90: a1:cb:31:88:06:2d:98:ed:fa:11:72:8e:bc:5c:96:7f:4c:4e: 4a:4b:60:d9:fe:ec:60:de:ea:08:4a:51:9a:ce:56:a7:75:11: bb:a3:2f:a8:00:51:30:13:70:37:e0:a5:75:47:96:b8:25:ab: 94:03:c0:00:a5:36:66:52:e8:d4:1b:e5:4d:9d:9b:3f:41:b8: c4:e1:4f:c1:98:18:68:57:d4:67:fc:26:6b:79:2e:32:03:1e: 15:fe:82:20:cb:78:57:ab:a8:d8:a5:32:c3:68:d7:e5:f7:82: 2c:e8:38:25:39:17:6f:7e:07:df:c5:52:d0:a4:91:d0:45:1f: 6b:b9:9f:15 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICDu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlCOUUxMTAvBgNVBAUTKDI1MDRFOUY4MEE5ODQyQjU0QTQ5MjY5Q0MyRjRCMUFD MkI2RTg1NEMwHhcNMjMwNjI4MTgwNjU4WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDljNzZjMi01ODEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0AIepQp+JA0Kk6mrsZ7ivOvcI3ImOX33i3B9Wms0iGtloVP3S0jjyxZeKnaZ os/2/GegpjJOdlIhVGBTemnvt0oB6+Ii6dpcwWtMGSclCdxvT96MRGxYm+PepDT2 SbfhxcUMoDN/aLFASEiKxv9q/rLFZgTIg4X+dfqyjnyGBX5am+qDq7y+tT6QIwd9 j7sIMdzW0ahDJ7hxyAB+wjZ9uUJAN6sdY9FWo54Nley2uhG+VXJdyB9EisuXKLK/ sz+mVMlYRj/CDom/PAQMVZFLn1k5jyw6eTHFfKSpwpB0PpsS2CIwBBOxCxnJl4et 7dAjWjbrWuzhxQ7wN0tBSoqOFwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFLgtKjWf o/533eRKwqxqupGufJ7wMB8GA1UdIwQYMBaAFCUE6fgKmEK1SkkmnML0sawrboVM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUI5RS85OEI1N0Q4NjM4 NTMxMUU5QUQ0NDI4NTJDNEY5QUUwMi9KUVRwLUFxWVFyVktTU2Fjd3ZTeHJDdHVo VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pRVHAtQXFZUXJWS1NTYWN3dlN4ckN0dWhVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjlCOUUvOThCNTdEODYzODUzMTFFOUFENDQyODUyQzRGOUFFMDIvQjcwMzgzRDYz ODU0MTFFOUEwMDIzNjU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABnXVoDBAFnYOoDBABneiwwDQYJKoZIhvcNAQELBQADggEB AE1ZYx4VQa7WrGlglrvTL/IQr9adurC/iquSWlRWtB/dPwZr8VClGyiCWlMjzMba jmv0Bg4nF0vqnDk2E6Vj8WNLFkcDWpN7hajKkt258kwsuzLHP6RVvVxXpry7UsIG pzcUbTvIerPOdgE3iw6ohd6gH3XW5mCCyxvCopJukKHLMYgGLZjt+hFyjrxcln9M TkpLYNn+7GDe6ghKUZrOVqd1EbujL6gAUTATcDfgpXVHlrglq5QDwAClNmZS6NQb 5U2dmz9BuMThT8GYGGhX1Gf8Jmt5LjIDHhX+giDLeFerqNilMsNo1+X3gizoOCU5 F29+B9/FUtCkkdBFH2u5nxU= -----END CERTIFICATE-----Generated at Thu May 16 19:10:54 2024 by rpki-client on console-fra.rpki-client.org