$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/A80498FABAAB11EEBA024655C4F9AE02.roa File: A80498FABAAB11EEBA024655C4F9AE02.roa (raw, json) Hash identifier: Ys1bWxUU1Q27MLi9PA78rftLXNvIC29MFW+JEu4ijfc= Subject key identifier: 6F:54:E1:D2:41:87:42:64:C9:24:1E:3A:2B:EB:2E:5F:D4:AD:49:6E Certificate issuer: /CN=A912C8FA/serialNumber=00EFB3AFFF74FD621F4B8D91169B7A1C43B39417 Certificate serial: 79 Authority key identifier: 00:EF:B3:AF:FF:74:FD:62:1F:4B:8D:91:16:9B:7A:1C:43:B3:94:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/A80498FABAAB11EEBA024655C4F9AE02.roa Signing time: Fri 05 Apr 2024 07:39:24 +0000 ROA not before: Fri 05 Apr 2024 07:39:24 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 150790 IP address blocks: 103.99.134.0/23 maxlen: 23 103.99.134.0/24 maxlen: 24 103.99.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.crl rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Jun 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8FA/serialNumber=00EFB3AFFF74FD621F4B8D91169B7A1C43B39417 Validity Not Before: Apr 5 07:39:24 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660faaac-4b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:75:db:93:b0:9b:08:44:82:1d:5b:17:df:6b: 69:cb:57:53:7e:55:ab:84:e3:31:5f:80:8c:af:ea: 6b:f2:99:d8:d0:f7:5a:87:11:d4:74:ad:f5:9a:71: fa:b6:48:62:a2:ab:dc:6f:bd:2b:8f:cf:46:f4:8d: 0b:67:e3:8b:5f:79:c7:2b:1b:0f:94:a7:5a:18:f8: 0f:1f:63:9b:9d:db:15:e2:11:39:12:6f:0b:11:0d: 5e:40:c9:b4:41:40:c9:cb:9c:54:34:67:67:d3:29: 6f:e5:6b:b8:b5:28:f0:1e:80:5e:14:91:db:d8:6b: 88:d1:4f:70:d5:39:a8:a5:e8:d7:53:77:d5:7c:33: c7:c0:89:8e:03:27:5c:a1:8e:7e:89:d4:94:9a:8d: ec:f6:86:f8:36:84:15:7f:07:76:27:d6:5b:d7:86: e3:c7:eb:fe:50:e7:e7:ce:0d:9d:9f:2c:98:54:c2: 81:de:24:3c:36:ef:f7:f4:23:7b:66:86:74:1f:37: 83:d7:b0:71:67:f5:67:c4:e9:29:60:25:54:b8:5c: d9:e4:bb:4d:14:e6:cb:22:f7:7d:fc:bb:27:52:9a: 20:01:a0:85:76:74:ed:d3:a6:54:eb:3a:95:f6:7e: 2e:d6:36:5e:87:85:d6:df:2f:ba:e1:db:c7:2c:81: e5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:54:E1:D2:41:87:42:64:C9:24:1E:3A:2B:EB:2E:5F:D4:AD:49:6E X509v3 Authority Key Identifier: keyid:00:EF:B3:AF:FF:74:FD:62:1F:4B:8D:91:16:9B:7A:1C:43:B3:94:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/A80498FABAAB11EEBA024655C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.99.134.0/23 Signature Algorithm: sha256WithRSAEncryption 89:bd:82:08:d0:57:c1:b1:0f:fb:78:8b:2e:8e:7a:42:00:f4: 73:2b:c3:09:58:d3:b6:f0:a7:9b:c7:c7:8d:26:6d:18:e8:89: ea:18:4a:f2:14:74:c8:fe:3c:b2:76:b7:f0:04:eb:47:71:f5: 16:32:29:5b:3d:6d:d8:a0:f4:ca:bb:45:74:f7:0c:62:8f:8a: 53:ec:5e:3b:8c:4b:69:cf:75:7a:1e:fe:17:68:42:be:f0:4a: 44:82:e1:1c:a4:04:3f:cc:7f:45:fc:45:02:6f:cf:29:86:11: 46:e6:e9:31:37:4c:e0:36:1d:aa:5d:dc:db:33:6d:4a:a2:35: b5:0a:b6:e1:a2:bd:14:cd:c2:a2:f1:59:c6:0a:af:cf:8e:01: 1c:3d:1d:26:d9:e2:77:38:67:06:34:26:0b:58:40:96:d7:06: 55:c9:fd:ab:1d:ed:7e:ff:e9:45:8f:fb:46:ec:24:e5:98:90: de:c2:0b:2e:f2:7f:21:dd:5b:1d:b2:29:0e:f4:ed:96:6c:6b: bb:af:0a:12:4a:22:97:04:a7:0e:0f:df:43:44:23:94:ee:f1: 24:59:99:c9:92:6e:b5:87:74:21:d0:f3:ae:c9:98:5d:c3:01: d7:27:93:6d:b5:33:90:76:0c:70:a3:a7:c7:c9:b9:23:ca:92: e8:55:c6:95 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QzhGQTExMC8GA1UEBRMoMDBFRkIzQUZGRjc0RkQ2MjFGNEI4RDkxMTY5QjdBMUM0 M0IzOTQxNzAeFw0yNDA0MDUwNzM5MjRaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MGZhYWFjLTRiNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWdduTsJsIRIIdWxffa2nLV1N+VauE4zFfgIyv6mvymdjQ91qHEdR0rfWacfq2 SGKiq9xvvSuPz0b0jQtn44tfeccrGw+Up1oY+A8fY5ud2xXiETkSbwsRDV5AybRB QMnLnFQ0Z2fTKW/la7i1KPAegF4UkdvYa4jRT3DVOail6NdTd9V8M8fAiY4DJ1yh jn6J1JSajez2hvg2hBV/B3Yn1lvXhuPH6/5Q5+fODZ2fLJhUwoHeJDw27/f0I3tm hnQfN4PXsHFn9WfE6SlgJVS4XNnku00U5ssi9338uydSmiABoIV2dO3TplTrOpX2 fi7WNl6HhdbfL7rh28csgeWjAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUb1Th0kGH QmTJJB46K+suX9StSW4wHwYDVR0jBBgwFoAUAO+zr/90/WIfS42RFpt6HEOzlBcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDOEZBLzQwMDNGOTMwNTRB MzExRUVCNzVGNDY4NkM0RjlBRTAyL0FPLXpyXzkwX1dJZlM0MlJGcHQ2SEVPemxC Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQU8tenJfOTBfV0lmUzQyUkZwdDZIRU96bEJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhGQS80MDAzRjkzMDU0QTMxMUVFQjc1RjQ2ODZDNEY5QUUwMi9BODA0OThGQUJB QUIxMUVFQkEwMjQ2NTVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWdjhjANBgkqhkiG9w0BAQsFAAOCAQEAib2CCNBXwbEP+3iL Lo56QgD0cyvDCVjTtvCnm8fHjSZtGOiJ6hhK8hR0yP48sna38ATrR3H1FjIpWz1t 2KD0yrtFdPcMYo+KU+xeO4xLac91eh7+F2hCvvBKRILhHKQEP8x/RfxFAm/PKYYR RubpMTdM4DYdql3c2zNtSqI1tQq24aK9FM3CovFZxgqvz44BHD0dJtnidzhnBjQm C1hAltcGVcn9qx3tfv/pRY/7Ruwk5ZiQ3sILLvJ/Id1bHbIpDvTtlmxru68KEkoi lwSnDg/fQ0QjlO7xJFmZyZJutYd0IdDzrsmYXcMB1yeTbbUzkHYMcKOnx8m5I8qS 6FXGlQ== -----END CERTIFICATE-----Generated at Sun Jun 9 08:27:49 2024 by rpki-client on console-fra.rpki-client.org