$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/0D09F1969E4F11EA9EACCE25C4F9AE02.roa File: 0D09F1969E4F11EA9EACCE25C4F9AE02.roa (raw, json) Hash identifier: 24YebT/eCpzy2OYMv6Aeg+ODlII/BFqv/zb/WSfHSZQ= Subject key identifier: 96:C2:2A:F3:DC:04:01:F2:C7:FC:F6:DF:7E:C0:86:63:D8:63:CC:06 Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Certificate serial: 0919 Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/0D09F1969E4F11EA9EACCE25C4F9AE02.roa Signing time: Thu 04 Apr 2024 22:00:34 +0000 ROA not before: Thu 04 Apr 2024 22:00:34 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 17540 IP address blocks: 203.83.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2329 (0x919) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Validity Not Before: Apr 4 22:00:34 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660f2301-e82b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e3:28:48:be:9d:80:37:c2:74:65:58:28:ba: b8:d6:2c:dd:50:bf:96:4a:11:22:d2:77:ac:de:a2: b9:82:a4:30:e9:66:b0:08:a6:05:82:46:f3:89:0b: 47:c3:18:74:c7:31:9a:9d:04:0b:82:37:11:27:e2: 96:32:d7:31:ef:1e:a6:84:7d:b8:e2:6d:65:9c:33: 7b:6c:34:1c:da:eb:a7:9b:8d:02:ec:2a:88:15:15: 72:b8:d2:26:73:09:14:67:df:d2:b6:20:53:e8:d9: 1c:ed:ec:9f:a9:47:86:a7:c3:9c:28:a9:86:a4:0c: f2:ad:b9:72:38:54:64:6b:1c:e5:a8:33:bd:27:22: 11:a1:8e:9f:41:1c:c9:d7:2f:dd:31:5e:e4:70:a9: 7c:b7:fa:e2:50:ee:2b:4b:1b:35:25:c7:e2:8e:18: 32:cf:ae:25:3b:53:d8:87:f6:c7:d2:c0:93:3e:19: 48:ae:d3:7f:61:ae:ac:89:97:df:5d:07:a7:a3:90: 42:8e:c7:8a:99:b8:89:b5:3c:94:07:15:d8:ff:cf: e7:ae:6f:b5:57:e7:2e:95:16:b1:f4:60:6d:9e:fc: 9a:df:cc:b5:21:03:22:04:8d:6a:e1:52:29:be:27: 9a:17:c1:55:6f:7d:02:56:28:1f:d1:40:d1:9b:e5: 17:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C2:2A:F3:DC:04:01:F2:C7:FC:F6:DF:7E:C0:86:63:D8:63:CC:06 X509v3 Authority Key Identifier: keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/0D09F1969E4F11EA9EACCE25C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.83.127.0/24 Signature Algorithm: sha256WithRSAEncryption 32:04:1e:0a:c5:ec:b2:ce:36:25:18:e8:69:18:5d:95:10:cd: d2:a1:06:17:d8:e3:a4:7a:5a:6e:96:55:d4:13:d3:e3:28:a3: 90:65:23:47:03:ab:00:0a:9b:f1:af:71:fc:9d:3f:e6:bb:79: d1:32:b6:86:b9:a6:ee:90:51:e1:db:36:2e:ae:4a:37:8f:21: 1e:f8:f2:89:2e:83:7d:c6:37:76:5c:2d:73:36:d8:3d:72:cc: 58:46:7e:4e:66:2a:31:ea:24:8a:ca:51:66:91:37:f5:b2:47: 81:34:2d:98:41:37:62:68:e4:30:6c:43:8d:76:d2:db:ab:21: 24:12:27:8d:e0:bb:50:ca:a9:b6:d6:79:3c:bd:5c:0f:2e:f2: 21:22:6e:49:be:4c:a7:f5:5f:8e:23:b1:29:fc:25:79:16:e0: f7:92:fb:9d:ed:85:f8:5e:5b:7f:08:0b:d4:16:56:a1:5c:1e: 3e:cd:26:45:38:ec:0b:53:18:de:64:a8:ff:62:1b:82:af:23: 71:00:68:2f:99:08:33:60:9d:fe:36:0a:e0:ce:a4:c9:d3:0e: 65:83:67:6d:a8:80:1e:83:43:a0:4a:a6:eb:cf:3d:fe:d4:6d: 69:bc:1a:95:90:6e:84:b5:3c:08:a7:f2:c8:58:b9:e8:40:6f: 98:e0:7d:77 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw MzQ4QzQ2QTcwHhcNMjQwNDA0MjIwMDM0WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjBmMjMwMS1lODJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8OMoSL6dgDfCdGVYKLq41izdUL+WShEi0nes3qK5gqQw6WawCKYFgkbziQtH wxh0xzGanQQLgjcRJ+KWMtcx7x6mhH244m1lnDN7bDQc2uunm40C7CqIFRVyuNIm cwkUZ9/StiBT6Nkc7eyfqUeGp8OcKKmGpAzyrblyOFRkaxzlqDO9JyIRoY6fQRzJ 1y/dMV7kcKl8t/riUO4rSxs1Jcfijhgyz64lO1PYh/bH0sCTPhlIrtN/Ya6siZff XQeno5BCjseKmbiJtTyUBxXY/8/nrm+1V+culRax9GBtnvya38y1IQMiBI1q4VIp vieaF8FVb30CVigf0UDRm+UX5QIDAQABo4IClTCCApEwHQYDVR0OBBYEFJbCKvPc BAHyx/z2337AhmPYY8wGMB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzQxNzIvNTk3NjEyNjQ5RTREMTFFQTlDMjNBRjFGQzRGOUFFMDIvMEQwOUYxOTY5 RTRGMTFFQTlFQUNDRTI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLU38wDQYJKoZIhvcNAQELBQADggEBADIEHgrF7LLONiUY 6GkYXZUQzdKhBhfY46R6Wm6WVdQT0+Moo5BlI0cDqwAKm/GvcfydP+a7edEytoa5 pu6QUeHbNi6uSjePIR748okug33GN3ZcLXM22D1yzFhGfk5mKjHqJIrKUWaRN/Wy R4E0LZhBN2Jo5DBsQ4120turISQSJ43gu1DKqbbWeTy9XA8u8iEibkm+TKf1X44j sSn8JXkW4PeS+53thfheW38IC9QWVqFcHj7NJkU47AtTGN5kqP9iG4KvI3EAaC+Z CDNgnf42CuDOpMnTDmWDZ22ogB6DQ6BKpuvPPf7UbWm8GpWQboS1PAin8shYuehA b5jgfXc= -----END CERTIFICATE-----Generated at Mon May 6 22:40:54 2024 by rpki-client on console-ams.rpki-client.org