$ rpki-client -vvf rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/8BF809E4892411EDBAF42C12C4F9AE02.roa File: 8BF809E4892411EDBAF42C12C4F9AE02.roa (raw, json) Hash identifier: mEjBzRrAL4pWgzh5wz35tUDDoe/ZvVINTfcTjEza+zc= Subject key identifier: 14:E9:07:C1:CA:89:F4:69:22:BA:A6:5B:0F:67:AC:25:E0:2D:E6:F5 Certificate issuer: /CN=A912E791/serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E Certificate serial: 0382 Authority key identifier: C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/8BF809E4892411EDBAF42C12C4F9AE02.roa Signing time: Wed 25 Oct 2023 01:33:38 +0000 ROA not before: Wed 25 Oct 2023 01:33:37 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 150683 IP address blocks: 103.174.4.0/24 maxlen: 24 103.174.5.0/24 maxlen: 24 2400:7360::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 00:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 898 (0x382) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E791/serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E Validity Not Before: Oct 25 01:33:37 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=65387071-67db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:63:87:7c:1b:3e:5b:81:b9:b3:21:74:30:62: e9:21:33:07:89:7c:e6:43:40:6e:cd:aa:d5:61:2d: a0:93:cb:93:6c:b4:d1:2b:89:1c:80:15:82:45:5d: 91:d1:4c:d2:09:c7:0e:0a:c6:f2:c7:10:a0:25:a0: 3c:b9:66:dd:d7:b9:fd:4f:6b:a2:82:9b:76:0d:12: f4:c5:cf:ca:76:54:64:67:32:56:99:9b:35:7e:ed: 6a:26:9a:ac:a7:64:b9:12:83:31:dd:f4:17:ba:d0: a9:5b:7b:6f:69:a6:f1:aa:ea:2c:73:21:c2:71:46: 56:82:6e:87:0f:d5:3c:53:a9:e4:53:8f:b4:6e:ab: 57:5e:45:08:b3:1c:10:cc:86:16:a8:39:f9:1b:2b: 64:1a:a1:cf:bc:d7:0c:d4:d0:dc:e4:46:59:e4:c0: a3:0f:bf:14:f3:d1:fb:87:3c:f1:f7:be:92:08:2a: b5:77:2d:61:f8:77:35:d5:76:a3:cf:47:2c:d3:b9: fd:cb:8b:05:61:48:d0:ca:5f:6b:bd:36:6e:00:ac: c4:fc:60:fb:8b:3f:0f:5d:2a:e6:99:2a:6a:7d:00: b2:60:02:0c:a7:72:a1:5f:1c:8b:68:8d:c7:a4:ad: 16:c2:93:ee:ea:de:27:dd:88:f3:44:60:47:80:83: f9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E9:07:C1:CA:89:F4:69:22:BA:A6:5B:0F:67:AC:25:E0:2D:E6:F5 X509v3 Authority Key Identifier: keyid:C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/8BF809E4892411EDBAF42C12C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.174.4.0/23 IPv6: 2400:7360::/32 Signature Algorithm: sha256WithRSAEncryption 8a:6b:80:f9:78:71:89:35:21:89:db:44:da:f2:a0:91:eb:ce: 74:fa:62:11:ac:07:77:bc:3e:94:e8:63:1f:f2:0d:53:0d:74: 8a:2c:99:3b:03:e9:42:8a:7e:14:b9:ae:f2:07:f3:61:c4:04: dc:cd:46:35:ca:86:51:13:b5:93:dd:c0:75:92:61:47:8a:19: 5e:97:fd:fc:62:09:25:6c:cf:20:42:cd:aa:c1:61:68:ce:0c: d9:4e:a2:7a:58:d1:5e:06:97:9c:d2:bb:00:fb:dc:3a:1e:ff: 93:0e:b9:da:92:91:3e:77:92:ea:ec:e9:1f:8a:e4:43:6e:db: 77:61:75:89:45:56:8e:9c:a3:92:9c:65:94:62:43:46:d2:d5: 63:38:11:f2:a2:2a:fe:33:29:0e:14:f5:b9:58:9f:27:72:20: fc:83:dc:e3:b5:61:80:61:99:e1:25:69:38:da:ad:b0:ee:53: 7f:8b:ae:85:9c:f2:8b:91:b0:c8:b6:05:44:ab:d6:a9:b1:8f: 19:46:dd:24:45:d8:e5:76:a4:c4:96:2b:73:07:67:92:0b:81: f2:e4:13:5f:a1:9c:21:f6:49:24:56:6f:e9:5c:56:8e:c5:16: 9f:d8:5a:39:09:80:e9:be:a1:a5:42:ec:e5:98:5d:a1:09:99: 74:85:25:08 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICA4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU3OTExMTAvBgNVBAUTKEM0RDdCOTRCOURGQjY0RjVDMTg5MjcyMzMwREJEQ0FE MkE3RDAxNkUwHhcNMjMxMDI1MDEzMzM3WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTM4NzA3MS02N2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmOHfBs+W4G5syF0MGLpITMHiXzmQ0BuzarVYS2gk8uTbLTRK4kcgBWCRV2R 0UzSCccOCsbyxxCgJaA8uWbd17n9T2uigpt2DRL0xc/KdlRkZzJWmZs1fu1qJpqs p2S5EoMx3fQXutCpW3tvaabxquoscyHCcUZWgm6HD9U8U6nkU4+0bqtXXkUIsxwQ zIYWqDn5GytkGqHPvNcM1NDc5EZZ5MCjD78U89H7hzzx976SCCq1dy1h+Hc11Xaj z0cs07n9y4sFYUjQyl9rvTZuAKzE/GD7iz8PXSrmmSpqfQCyYAIMp3KhXxyLaI3H pK0WwpPu6t4n3YjzRGBHgIP5WwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFBTpB8HK ifRpIrqmWw9nrCXgLeb1MB8GA1UdIwQYMBaAFMTXuUud+2T1wYknIzDb3K0qfQFu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTc5MS8xOUM2OEQwNjNB MDUxMUVDQTk0NDA1MUJDNEY5QUUwMi94TmU1UzUzN1pQWEJpU2NqTU52Y3JTcDlB VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOZTVTNTM3WlBYQmlTY2pNTnZjclNwOUFXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkU3OTEvMTlDNjhEMDYzQTA1MTFFQ0E5NDQwNTFCQzRGOUFFMDIvOEJGODA5RTQ4 OTI0MTFFREJBRjQyQzEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnrgQwDQQCAAIwBwMFACQAc2AwDQYJKoZIhvcNAQELBQAD ggEBAIprgPl4cYk1IYnbRNryoJHrznT6YhGsB3e8PpToYx/yDVMNdIosmTsD6UKK fhS5rvIH82HEBNzNRjXKhlETtZPdwHWSYUeKGV6X/fxiCSVszyBCzarBYWjODNlO onpY0V4Gl5zSuwD73Doe/5MOudqSkT53kurs6R+K5ENu23dhdYlFVo6co5KcZZRi Q0bS1WM4EfKiKv4zKQ4U9blYnydyIPyD3OO1YYBhmeElaTjarbDuU3+LroWc8ouR sMi2BUSr1qmxjxlG3SRF2OV2pMSWK3MHZ5ILgfLkE1+hnCH2SSRWb+lcVo7FFp/Y WjkJgOm+oaVC7OWYXaEJmXSFJQg= -----END CERTIFICATE-----Generated at Mon May 27 02:57:01 2024 by rpki-client on console-fra.rpki-client.org