$ rpki-client -vvf rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/075B4CC80AC511EEB25A152AC4F9AE02.roa File: 075B4CC80AC511EEB25A152AC4F9AE02.roa (raw, json) Hash identifier: N7buuVY+ecDIzSoYukHeCFEfFQ0zl4C0Rq6x+/cw45Y= Subject key identifier: 23:D1:5C:1B:4A:0A:7E:75:EE:9E:83:E3:AD:6D:4E:01:A1:96:B9:E8 Certificate issuer: /CN=A9134BB0/serialNumber=0F6142AE4168DF0B1805FA581D20394767AA2258 Certificate serial: 3E Authority key identifier: 0F:61:42:AE:41:68:DF:0B:18:05:FA:58:1D:20:39:47:67:AA:22:58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2FCrkFo3wsYBfpYHSA5R2eqIlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/075B4CC80AC511EEB25A152AC4F9AE02.roa Signing time: Tue 10 Oct 2023 05:07:49 +0000 ROA not before: Tue 10 Oct 2023 05:07:49 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 141192 IP address blocks: 103.131.136.0/23 maxlen: 23 103.131.136.0/24 maxlen: 24 103.131.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.crl rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2FCrkFo3wsYBfpYHSA5R2eqIlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:20:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134BB0/serialNumber=0F6142AE4168DF0B1805FA581D20394767AA2258 Validity Not Before: Oct 10 05:07:49 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=6524dc24-1e05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bf:93:22:a6:02:9b:3e:24:03:a5:26:b0:7e: ef:ee:3f:fc:e2:64:dd:44:3e:cb:92:bc:87:2b:5a: f8:08:38:27:d1:d2:4c:2b:dc:f0:16:c0:11:af:87: 14:3a:e8:12:86:12:49:49:e2:f1:54:02:b4:02:fe: c3:be:e7:05:51:68:c9:cc:29:2a:92:d8:ea:78:7c: c5:08:11:1e:9f:4c:7b:77:83:9c:08:54:70:48:fc: 11:f7:53:67:40:01:fc:6c:92:e1:64:25:ee:76:d3: a7:ca:78:4b:38:4c:b5:59:19:8b:c9:38:f7:03:14: d6:0c:7b:6e:c6:a7:e6:20:94:c5:a0:8a:14:7a:36: 39:45:28:1a:7a:46:66:a4:90:01:c8:49:dc:73:ef: 49:b8:26:c5:e7:3d:aa:98:6d:a5:38:89:7f:e1:ab: 56:8a:f7:11:95:66:f1:72:16:9d:77:04:69:87:95: 23:2f:8a:b4:bf:7a:04:fa:59:c7:5b:6e:21:24:d6: aa:de:f4:07:e7:4e:ea:52:26:5f:bf:80:1a:90:ef: ee:7e:e2:b4:a7:2a:a8:24:98:0c:38:ff:f6:c2:79: c5:8e:cb:a8:4f:23:27:0c:9a:4c:c3:d6:62:eb:eb: 80:c2:48:1a:4d:a0:16:74:ce:1a:6a:bf:d9:71:64: 9a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D1:5C:1B:4A:0A:7E:75:EE:9E:83:E3:AD:6D:4E:01:A1:96:B9:E8 X509v3 Authority Key Identifier: keyid:0F:61:42:AE:41:68:DF:0B:18:05:FA:58:1D:20:39:47:67:AA:22:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2FCrkFo3wsYBfpYHSA5R2eqIlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/075B4CC80AC511EEB25A152AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.131.136.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:eb:65:44:bb:72:77:62:ce:8e:00:a5:ef:33:97:73:81:b4: 3f:b9:ef:9c:05:a7:af:1d:43:4a:c3:e7:11:02:15:24:14:84: c5:b8:c0:6e:97:a6:5d:87:16:a5:46:1f:29:c1:12:14:3f:be: 8e:34:80:2f:e4:0b:3e:b3:b1:d7:2e:06:73:16:02:fb:f4:4e: 54:e5:a3:3c:bf:4b:ba:26:f9:48:3b:e0:07:b3:ca:55:54:c3: 78:0a:df:9d:d4:10:37:1f:8c:49:34:5d:cb:40:23:df:d9:8f: 47:22:45:11:68:ba:bd:39:17:d6:9d:6e:13:2f:9c:7e:11:fc: 74:e9:68:f6:aa:91:d0:6d:eb:1f:c3:71:00:9a:da:58:79:56: 36:37:7b:ae:31:ed:c1:36:e4:0a:ba:7e:2e:d5:d1:ff:46:01: c5:97:ab:62:8e:f8:68:05:a0:94:f2:c0:bc:73:6a:0c:3a:88: e5:d4:a0:73:2b:55:24:fc:12:b6:5b:3b:dc:39:9f:e3:18:24: 05:56:a3:9c:01:56:93:c3:68:67:2a:99:2a:9d:d3:d2:96:d4: aa:76:bc:d9:64:99:57:74:1c:8c:d9:71:d9:58:bd:24:db:0f: 73:bd:19:db:55:58:51:3b:ad:78:e1:84:1f:d5:5c:92:be:77: b6:78:27:af -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NEJCMDExMC8GA1UEBRMoMEY2MTQyQUU0MTY4REYwQjE4MDVGQTU4MUQyMDM5NDc2 N0FBMjI1ODAeFw0yMzEwMTAwNTA3NDlaFw0yNDA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY1MjRkYzI0LTFlMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkv5MipgKbPiQDpSawfu/uP/ziZN1EPsuSvIcrWvgIOCfR0kwr3PAWwBGvhxQ6 6BKGEklJ4vFUArQC/sO+5wVRaMnMKSqS2Op4fMUIER6fTHt3g5wIVHBI/BH3U2dA AfxskuFkJe5206fKeEs4TLVZGYvJOPcDFNYMe27Gp+YglMWgihR6NjlFKBp6Rmak kAHISdxz70m4JsXnPaqYbaU4iX/hq1aK9xGVZvFyFp13BGmHlSMvirS/egT6Wcdb biEk1qre9AfnTupSJl+/gBqQ7+5+4rSnKqgkmAw4//bCecWOy6hPIycMmkzD1mLr 64DCSBpNoBZ0zhpqv9lxZJpNAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUI9FcG0oK fnXunoPjrW1OAaGWuegwHwYDVR0jBBgwFoAUD2FCrkFo3wsYBfpYHSA5R2eqIlgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0QkIwL0RENDczOEUwMEFC RDExRUU5MTdEQTY1NUM0RjlBRTAyL0QyRkNya0ZvM3dzWUJmcFlIU0E1UjJlcUls Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRDJGQ3JrRm8zd3NZQmZwWUhTQTVSMmVxSWxnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEJCMC9ERDQ3MzhFMDBBQkQxMUVFOTE3REE2NTVDNEY5QUUwMi8wNzVCNENDODBB QzUxMUVFQjI1QTE1MkFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWeDiDANBgkqhkiG9w0BAQsFAAOCAQEAiutlRLtyd2LOjgCl 7zOXc4G0P7nvnAWnrx1DSsPnEQIVJBSExbjAbpemXYcWpUYfKcESFD++jjSAL+QL PrOx1y4GcxYC+/ROVOWjPL9Luib5SDvgB7PKVVTDeArfndQQNx+MSTRdy0Aj39mP RyJFEWi6vTkX1p1uEy+cfhH8dOlo9qqR0G3rH8NxAJraWHlWNjd7rjHtwTbkCrp+ LtXR/0YBxZerYo74aAWglPLAvHNqDDqI5dSgcytVJPwStls73Dmf4xgkBVajnAFW k8NoZyqZKp3T0pbUqna82WSZV3QcjNlx2Vi9JNsPc70Z21VYUTuteOGEH9Vckr53 tngnrw== -----END CERTIFICATE-----Generated at Fri May 31 08:38:29 2024 by rpki-client on console-fra.rpki-client.org