$ rpki-client -vvf rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/3889BE2CEDD611EC8E98151DC4F9AE02.roa File: 3889BE2CEDD611EC8E98151DC4F9AE02.roa (raw, json) Hash identifier: 9wjcns0ncw/wGTNs74xbVREIvS/DquHOra1YJnzxANk= Subject key identifier: 2E:38:17:1C:3D:25:B6:3B:20:B2:40:E3:97:FD:0D:0E:CC:A9:D6:55 Certificate issuer: /CN=A9138E67/serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF Certificate serial: 01C0 Authority key identifier: B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/3889BE2CEDD611EC8E98151DC4F9AE02.roa Signing time: Sun 17 Dec 2023 03:54:32 +0000 ROA not before: Sun 17 Dec 2023 03:54:32 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 7575 IP address blocks: 203.29.104.0/21 maxlen: 21 203.57.160.0/19 maxlen: 19 2406:bac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138E67/serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF Validity Not Before: Dec 17 03:54:32 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=657e70f8-086c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5d:6e:b3:2b:dc:67:b0:05:6e:f1:20:28:82: b5:58:6d:7a:d8:22:2c:6d:03:4c:36:64:10:c7:4f: 6a:8d:b8:34:56:0b:b1:69:1e:b7:02:01:d4:4c:b7: 69:ce:15:22:03:f3:d6:e2:dc:9e:01:c2:04:6c:7f: a8:7d:e6:13:c9:3a:f9:29:a8:7e:14:85:de:09:66: d2:30:8e:44:79:7c:36:22:10:b5:dd:9b:04:22:9e: 3f:e1:50:d4:ee:8c:1b:98:06:70:ec:4f:f3:cc:cd: dc:a8:61:61:c7:ac:1d:29:40:e2:2a:f4:ae:8e:51: 89:04:fb:0f:ec:73:d6:2b:41:a8:f5:52:16:8d:80: 88:0e:78:42:6e:c2:47:fd:ca:ea:8f:af:86:1e:72: cc:a8:6f:e4:6b:65:fd:eb:c6:ce:b9:92:4a:01:64: 59:23:72:3b:10:f8:36:e2:f8:79:54:8e:6f:da:8f: 8d:12:b7:14:5b:51:6f:08:c6:33:d6:88:11:d6:2a: b6:ff:7d:3d:f4:5a:1e:1c:25:6f:72:e3:9a:eb:75: df:2c:d0:8c:4f:5e:f6:91:7a:f2:7a:d2:3c:83:d4: 06:5d:78:36:1c:73:36:2e:a7:fe:48:96:62:c6:02: 4e:a4:f3:62:b5:96:be:31:37:4a:e5:b8:16:0a:c6: f0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:38:17:1C:3D:25:B6:3B:20:B2:40:E3:97:FD:0D:0E:CC:A9:D6:55 X509v3 Authority Key Identifier: keyid:B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/3889BE2CEDD611EC8E98151DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.29.104.0/21 203.57.160.0/19 IPv6: 2406:bac0::/32 Signature Algorithm: sha256WithRSAEncryption a3:45:33:74:0f:a1:d3:dc:66:20:e8:f1:24:95:dc:d6:eb:89: 7d:f8:09:f1:dd:56:c8:df:97:88:d0:29:24:0c:df:a9:95:27: be:dd:c7:7a:50:cb:68:59:b5:a4:a8:34:fe:1e:13:0e:6f:70: 0c:34:07:b4:82:65:b8:0e:93:3c:7b:9d:66:ef:9c:cf:e5:92: ac:88:39:f4:15:9c:f9:8f:18:83:f0:b8:0e:28:e7:21:29:3f: ba:26:54:39:8f:e4:7d:7f:94:3d:56:10:14:4d:00:e4:bc:41: 5b:97:54:a4:2a:17:8f:04:e4:79:ae:73:1a:16:aa:1c:9f:d0: 4d:a3:fa:52:ca:60:e4:8a:98:fd:06:9f:a5:30:e0:d8:bc:8f: 7e:7b:a0:ad:4a:15:98:bf:2b:45:62:88:78:d7:31:5b:8b:18: f5:ed:44:b3:15:6d:1e:19:f9:bd:6e:08:e7:f5:d2:f3:bc:60: 99:8c:f9:ed:46:cc:dd:11:82:2e:d7:0e:3c:a2:20:d3:fd:31: 9f:b3:cf:32:bb:47:ce:12:ad:1a:3a:21:0c:02:55:b5:03:39: e8:46:26:58:d9:5c:72:8c:0d:a9:b8:d5:3d:0f:14:27:3e:72: 72:ed:58:46:3e:84:87:98:ea:44:0c:5b:a8:cd:59:e5:0e:c5: 52:f6:81:a5 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhFNjcxMTAvBgNVBAUTKEI2NTg5QkFDNTZBNURDOEEyNkRCMDcyN0ZBRDQ0QTkw M0E2M0M0Q0YwHhcNMjMxMjE3MDM1NDMyWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTdlNzBmOC0wODZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvV1usyvcZ7AFbvEgKIK1WG162CIsbQNMNmQQx09qjbg0VguxaR63AgHUTLdp zhUiA/PW4tyeAcIEbH+ofeYTyTr5Kah+FIXeCWbSMI5EeXw2IhC13ZsEIp4/4VDU 7owbmAZw7E/zzM3cqGFhx6wdKUDiKvSujlGJBPsP7HPWK0Go9VIWjYCIDnhCbsJH /crqj6+GHnLMqG/ka2X968bOuZJKAWRZI3I7EPg24vh5VI5v2o+NErcUW1FvCMYz 1ogR1iq2/3099FoeHCVvcuOa63XfLNCMT172kXryetI8g9QGXXg2HHM2Lqf+SJZi xgJOpPNitZa+MTdK5bgWCsbwSQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFC44Fxw9 JbY7ILJA45f9DQ7MqdZVMB8GA1UdIwQYMBaAFLZYm6xWpdyKJtsHJ/rUSpA6Y8TP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEU2Ny8yNzlDQkYwOEVE Q0YxMUVDQjVFNzREN0NDNEY5QUUwMi90bGlickZhbDNJb20yd2NuLXRSS2tEcGp4 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RsaWJyRmFsM0lvbTJ3Y24tdFJLa0RwanhNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzhFNjcvMjc5Q0JGMDhFRENGMTFFQ0I1RTc0RDdDQzRGOUFFMDIvMzg4OUJFMkNF REQ2MTFFQzhFOTgxNTFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAPLHWgDBAXLOaAwDQQCAAIwBwMFACQGusAwDQYJKoZIhvcN AQELBQADggEBAKNFM3QPodPcZiDo8SSV3NbriX34CfHdVsjfl4jQKSQM36mVJ77d x3pQy2hZtaSoNP4eEw5vcAw0B7SCZbgOkzx7nWbvnM/lkqyIOfQVnPmPGIPwuA4o 5yEpP7omVDmP5H1/lD1WEBRNAOS8QVuXVKQqF48E5HmucxoWqhyf0E2j+lLKYOSK mP0Gn6Uw4Ni8j357oK1KFZi/K0ViiHjXMVuLGPXtRLMVbR4Z+b1uCOf10vO8YJmM +e1GzN0Rgi7XDjyiINP9MZ+zzzK7R84SrRo6IQwCVbUDOehGJljZXHKMDam41T0P FCc+cnLtWEY+hIeY6kQMW6jNWeUOxVL2gaU= -----END CERTIFICATE-----Generated at Sat May 11 05:40:20 2024 by rpki-client on console-ams.rpki-client.org