$ rpki-client -vvf rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/E8803B90F27411E99E67A342C4F9AE02.roa File: E8803B90F27411E99E67A342C4F9AE02.roa (raw, json) Hash identifier: kYBuYcKPKBp85+i7Uj2fjGVl7YIsW3/imIoGdYeNAvo= Subject key identifier: C2:53:F5:6A:18:6F:9A:75:1D:37:DA:D9:F5:AF:EF:8E:F4:30:88:54 Certificate issuer: /CN=A9136AF7/serialNumber=28FBADF1C0B5A425B5D21D7CF45C40CAA44EDCE1 Certificate serial: 0B38 Authority key identifier: 28:FB:AD:F1:C0:B5:A4:25:B5:D2:1D:7C:F4:5C:40:CA:A4:4E:DC:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPut8cC1pCW10h189FxAyqRO3OE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/E8803B90F27411E99E67A342C4F9AE02.roa Signing time: Fri 02 Jun 2023 20:00:52 +0000 ROA not before: Fri 02 Jun 2023 20:00:52 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 136608 IP address blocks: 103.93.233.0/24 maxlen: 24 103.93.234.0/23 maxlen: 23 2401:31c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/KPut8cC1pCW10h189FxAyqRO3OE.crl rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/KPut8cC1pCW10h189FxAyqRO3OE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPut8cC1pCW10h189FxAyqRO3OE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2872 (0xb38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136AF7/serialNumber=28FBADF1C0B5A425B5D21D7CF45C40CAA44EDCE1 Validity Not Before: Jun 2 20:00:52 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=647a4a74-f596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:73:5c:87:39:02:f1:d3:55:e5:51:d9:8d:f8: e3:7c:92:68:d5:aa:14:84:19:29:cb:bf:29:ca:bd: 3c:97:9d:eb:92:1e:79:4d:db:5b:11:cb:ce:6d:f1: 9f:93:a3:be:0d:5f:1b:4d:98:af:fd:7f:f2:fe:eb: c2:50:99:69:9e:58:fc:3d:02:16:a3:25:fc:27:a0: 29:31:91:41:b1:08:d1:5a:1c:8a:89:18:ee:39:16: c9:12:6a:36:53:35:ff:2b:16:af:0b:7e:67:87:7c: 77:2e:48:eb:94:a3:17:59:02:f9:17:4d:fb:25:37: 92:a5:5a:f3:87:6c:ec:1f:cd:a6:b0:40:5b:57:c1: 4c:f7:fd:9c:d5:cb:96:47:5a:de:0c:93:82:c7:9e: e2:12:79:ac:09:6d:e3:75:6e:68:00:5c:a1:55:ff: be:7d:4d:85:62:1a:e4:40:84:e2:4c:b9:f5:f7:67: bd:4d:ca:86:34:9f:af:56:ad:96:76:f5:89:30:0c: e6:79:ce:3b:8c:d3:07:81:54:df:a5:f0:b6:42:49: 5c:91:b1:da:7b:f1:8d:e5:df:37:3a:20:46:6f:b8: e3:94:16:26:54:cf:e5:2a:ab:82:b3:e7:5b:92:f4: 0f:1f:03:5e:ac:ae:43:04:37:b6:0c:23:3a:e5:04: 32:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:53:F5:6A:18:6F:9A:75:1D:37:DA:D9:F5:AF:EF:8E:F4:30:88:54 X509v3 Authority Key Identifier: keyid:28:FB:AD:F1:C0:B5:A4:25:B5:D2:1D:7C:F4:5C:40:CA:A4:4E:DC:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/KPut8cC1pCW10h189FxAyqRO3OE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPut8cC1pCW10h189FxAyqRO3OE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/E8803B90F27411E99E67A342C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.93.233.0-103.93.235.255 IPv6: 2401:31c0::/32 Signature Algorithm: sha256WithRSAEncryption 54:05:ba:8f:78:6f:fc:52:c0:3d:42:7c:4b:47:da:9b:94:e2: 34:cc:e1:6c:20:8a:f9:45:5a:d1:2c:87:53:c2:f9:6b:79:e4: ed:55:45:1d:79:e3:79:38:78:1e:a5:ff:1a:71:83:ee:ba:40: 90:16:54:e2:c8:4e:ff:a3:4c:9a:a8:e6:ae:72:9a:fa:e3:8f: 93:74:ad:b3:ae:64:15:d2:ae:e3:21:2c:bf:30:f0:4a:08:8a: f7:b0:6b:e4:5e:29:be:bf:05:a2:20:fe:9e:5b:16:13:da:ac: 2b:f6:85:88:b9:6c:56:70:02:a7:f4:dc:f3:dc:54:5c:12:25: e1:1c:f0:fb:08:0b:97:26:f9:f8:50:fa:e6:bd:52:37:66:2e: 5a:51:81:82:56:9c:6d:7a:8a:f9:d7:77:3a:d2:d1:44:6f:f7: 25:67:a0:3a:35:a0:f5:66:fd:ca:33:d1:af:b9:5b:b9:c8:1c: fa:74:2a:f1:e8:46:90:3f:4c:79:89:6c:a5:83:82:98:66:22: 54:df:57:da:22:d3:0f:e4:f0:70:51:5b:c8:13:0a:a5:e2:24: 75:c7:b2:26:b2:16:21:1f:ac:60:f8:4e:db:95:83:71:ad:f3: 5e:47:f4:a7:7c:27:79:bc:a5:32:0a:9c:29:45:0e:39:ef:dd: 16:2f:6b:ab -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICCzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZBRjcxMTAvBgNVBAUTKDI4RkJBREYxQzBCNUE0MjVCNUQyMUQ3Q0Y0NUM0MENB QTQ0RURDRTEwHhcNMjMwNjAyMjAwMDUyWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDdhNGE3NC1mNTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXNchzkC8dNV5VHZjfjjfJJo1aoUhBkpy78pyr08l53rkh55TdtbEcvObfGf k6O+DV8bTZiv/X/y/uvCUJlpnlj8PQIWoyX8J6ApMZFBsQjRWhyKiRjuORbJEmo2 UzX/KxavC35nh3x3LkjrlKMXWQL5F037JTeSpVrzh2zsH82msEBbV8FM9/2c1cuW R1reDJOCx57iEnmsCW3jdW5oAFyhVf++fU2FYhrkQITiTLn192e9TcqGNJ+vVq2W dvWJMAzmec47jNMHgVTfpfC2QklckbHae/GN5d83OiBGb7jjlBYmVM/lKquCs+db kvQPHwNerK5DBDe2DCM65QQyZwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFMJT9WoY b5p1HTfa2fWv7470MIhUMB8GA1UdIwQYMBaAFCj7rfHAtaQltdIdfPRcQMqkTtzh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkFGNy83QjBCNkY3MkYy NzMxMUU5QUUyNTc2NDBDNEY5QUUwMi9LUHV0OGNDMXBDVzEwaDE4OUZ4QXlxUk8z T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tQdXQ4Y0MxcENXMTBoMTg5RnhBeXFSTzNPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzZBRjcvN0IwQjZGNzJGMjczMTFFOUFFMjU3NjQwQzRGOUFFMDIvRTg4MDNCOTBG Mjc0MTFFOTlFNjdBMzQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBQEAgABMA4wDAMEAGdd6QMEAmdd6DANBAIAAjAHAwUAJAExwDANBgkqhkiG 9w0BAQsFAAOCAQEAVAW6j3hv/FLAPUJ8S0fam5TiNMzhbCCK+UVa0SyHU8L5a3nk 7VVFHXnjeTh4HqX/GnGD7rpAkBZU4shO/6NMmqjmrnKa+uOPk3Sts65kFdKu4yEs vzDwSgiK97Br5F4pvr8FoiD+nlsWE9qsK/aFiLlsVnACp/Tc89xUXBIl4Rzw+wgL lyb5+FD65r1SN2YuWlGBglacbXqK+dd3OtLRRG/3JWegOjWg9Wb9yjPRr7lbucgc +nQq8ehGkD9MeYlspYOCmGYiVN9X2iLTD+TwcFFbyBMKpeIkdceyJrIWIR+sYPhO 25WDca3zXkf0p3wnebylMgqcKUUOOe/dFi9rqw== -----END CERTIFICATE-----Generated at Fri May 10 20:45:22 2024 by rpki-client on console-ams.rpki-client.org