$ rpki-client -vvf rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/1F8D757623B811E9971D8168C4F9AE02.roa File: 1F8D757623B811E9971D8168C4F9AE02.roa (raw, json) Hash identifier: T/B/35CfwwdqXePoF3h1HVhAJX4x/EEmRiwOM5XJuNE= Subject key identifier: BC:65:F1:C3:DF:11:BF:38:60:42:16:8A:D0:7D:6A:17:51:7C:D0:ED Certificate issuer: /CN=A9131D31/serialNumber=60D13183D39DE6956560231E7E0317E69CBC6C0F Certificate serial: 0FDF Authority key identifier: 60:D1:31:83:D3:9D:E6:95:65:60:23:1E:7E:03:17:E6:9C:BC:6C:0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/1F8D757623B811E9971D8168C4F9AE02.roa Signing time: Thu 22 Feb 2024 18:25:57 +0000 ROA not before: Thu 22 Feb 2024 18:25:57 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 138549 IP address blocks: 103.132.220.0/22 maxlen: 22 103.132.220.0/23 maxlen: 23 103.132.220.0/24 maxlen: 24 103.132.221.0/24 maxlen: 24 103.132.222.0/23 maxlen: 23 103.132.222.0/24 maxlen: 24 103.132.223.0/24 maxlen: 24 2404:40c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.crl rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 18:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4063 (0xfdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131D31/serialNumber=60D13183D39DE6956560231E7E0317E69CBC6C0F Validity Not Before: Feb 22 18:25:57 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65d791b5-423f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:99:76:28:8c:25:01:0e:5d:63:82:8d:a3:99: 32:87:b6:83:d8:42:1c:2a:d1:fd:c4:c9:a3:4d:3d: 18:b6:ce:25:d7:99:d7:e9:b0:a8:66:04:2e:c2:34: 60:4f:e8:41:67:2f:e8:6e:4c:f0:54:2e:e6:ed:ac: 6e:32:4b:f4:46:9c:02:e8:17:df:e2:ef:cd:79:63: 4d:3e:bf:79:bc:2b:33:c3:42:44:d9:ef:58:16:54: f1:81:3f:2a:60:f6:24:4c:a9:e0:18:df:ab:ad:6d: 6e:1f:ac:fd:6f:ae:30:03:fa:38:87:28:e1:8c:a6: 01:56:92:44:09:17:81:38:dc:80:b4:2d:cd:72:c3: 9b:20:a2:ae:75:89:97:32:34:7a:34:f5:8b:65:3f: ec:c6:d7:26:ad:2f:ee:25:24:9b:a7:88:28:d4:86: 07:3d:75:8a:39:e9:1c:34:87:7c:7b:1b:55:d6:48: 6a:43:27:ff:e4:b9:72:21:4a:0d:1d:26:0f:d8:83: 1e:ed:4c:5c:3a:a0:bb:92:a7:d9:fa:1a:70:ef:21: d0:08:2d:10:17:46:06:39:4f:84:7d:7a:78:d3:2a: 1f:74:67:ca:69:05:57:5f:ec:61:69:72:c6:6f:24: 2b:14:54:6e:5e:18:65:64:e3:3a:69:23:15:ec:84: 0e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:65:F1:C3:DF:11:BF:38:60:42:16:8A:D0:7D:6A:17:51:7C:D0:ED X509v3 Authority Key Identifier: keyid:60:D1:31:83:D3:9D:E6:95:65:60:23:1E:7E:03:17:E6:9C:BC:6C:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/1F8D757623B811E9971D8168C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.132.220.0/22 IPv6: 2404:40c0::/32 Signature Algorithm: sha256WithRSAEncryption 32:ca:d5:fe:a6:40:84:db:90:1b:d7:ac:ed:aa:1a:03:74:0f: 2a:b2:6c:d5:7f:f8:45:ba:6f:b5:7c:9c:ec:67:93:56:2b:67: ca:a1:16:5f:c1:9f:0c:cf:3f:1b:3f:16:a2:6e:f4:b5:07:33: 2e:ed:66:9f:85:38:14:7f:06:b4:55:86:b4:78:70:1c:0f:87: f3:cb:1b:9a:a4:24:05:7d:f9:dc:c5:f2:15:67:46:af:58:f2: ed:f8:0d:d4:14:af:72:6d:dd:09:57:dd:d8:b0:8e:a7:df:f6: 9e:e1:7d:f7:97:76:04:aa:a4:dd:68:47:69:8f:57:47:48:8c: fe:64:1c:6d:8f:87:60:08:b2:9c:08:e6:53:28:fa:6c:50:93: f8:39:92:76:66:d6:0f:94:30:de:b3:0c:33:8d:dd:ed:42:b5: 63:b7:5b:ec:be:99:22:da:d1:bf:1a:fc:dc:5f:7e:58:d2:aa: 58:a6:01:c6:62:a7:da:fb:15:e4:77:5e:71:f0:11:3c:15:bb: d6:02:71:9e:f3:d7:84:6f:31:64:87:f7:54:59:be:d2:b7:49: 46:ea:3c:89:9a:b4:99:92:fd:53:2c:b8:f9:55:ed:87:f6:9d: 2b:89:b3:b1:c8:c9:5d:e5:43:c9:c8:c4:5d:2d:40:cf:fc:b8: 72:e3:a5:c6 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICD98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFEMzExMTAvBgNVBAUTKDYwRDEzMTgzRDM5REU2OTU2NTYwMjMxRTdFMDMxN0U2 OUNCQzZDMEYwHhcNMjQwMjIyMTgyNTU3WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWQ3OTFiNS00MjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpl2KIwlAQ5dY4KNo5kyh7aD2EIcKtH9xMmjTT0Yts4l15nX6bCoZgQuwjRg T+hBZy/obkzwVC7m7axuMkv0RpwC6Bff4u/NeWNNPr95vCszw0JE2e9YFlTxgT8q YPYkTKngGN+rrW1uH6z9b64wA/o4hyjhjKYBVpJECReBONyAtC3NcsObIKKudYmX MjR6NPWLZT/sxtcmrS/uJSSbp4go1IYHPXWKOekcNId8extV1khqQyf/5LlyIUoN HSYP2IMe7UxcOqC7kqfZ+hpw7yHQCC0QF0YGOU+EfXp40yofdGfKaQVXX+xhaXLG byQrFFRuXhhlZOM6aSMV7IQOFwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFLxl8cPf Eb84YEIWitB9ahdRfNDtMB8GA1UdIwQYMBaAFGDRMYPTneaVZWAjHn4DF+acvGwP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUQzMS82NUVGMjk2QTIz MTMxMUU5QTI5QkIxNzRDNEY5QUUwMi9ZTkV4ZzlPZDVwVmxZQ01lZmdNWDVweThi QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lORXhnOU9kNXBWbFlDTWVmZ01YNXB5OGJBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzFEMzEvNjVFRjI5NkEyMzEzMTFFOUEyOUJCMTc0QzRGOUFFMDIvMUY4RDc1NzYy M0I4MTFFOTk3MUQ4MTY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnhNwwDQQCAAIwBwMFACQEQMAwDQYJKoZIhvcNAQELBQAD ggEBADLK1f6mQITbkBvXrO2qGgN0DyqybNV/+EW6b7V8nOxnk1YrZ8qhFl/BnwzP Pxs/FqJu9LUHMy7tZp+FOBR/BrRVhrR4cBwPh/PLG5qkJAV9+dzF8hVnRq9Y8u34 DdQUr3Jt3QlX3diwjqff9p7hffeXdgSqpN1oR2mPV0dIjP5kHG2Ph2AIspwI5lMo +mxQk/g5knZm1g+UMN6zDDON3e1CtWO3W+y+mSLa0b8a/NxffljSqlimAcZip9r7 FeR3XnHwETwVu9YCcZ7z14RvMWSH91RZvtK3SUbqPImatJmS/VMsuPlV7Yf2nSuJ s7HIyV3lQ8nIxF0tQM/8uHLjpcY= -----END CERTIFICATE-----Generated at Mon May 20 19:59:35 2024 by rpki-client on console-ams.rpki-client.org