$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9B64D5BC5BD311ECAB122945C4F9AE02.roa File: 9B64D5BC5BD311ECAB122945C4F9AE02.roa (raw, json) Hash identifier: O75ak5g3Sd3oJTig8KK/2ICaXFxfuZ2760QEleY1kic= Subject key identifier: 68:36:99:6A:E1:32:AD:D1:96:AA:E7:0E:89:3E:0A:BA:B0:33:6C:B8 Certificate issuer: /CN=A913E8F3/serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Certificate serial: 0F00 Authority key identifier: F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9B64D5BC5BD311ECAB122945C4F9AE02.roa Signing time: Wed 28 Feb 2024 18:26:37 +0000 ROA not before: Wed 28 Feb 2024 18:26:37 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 58521 IP address blocks: 103.247.204.0/22 maxlen: 22 103.247.205.0/24 maxlen: 24 103.247.206.0/23 maxlen: 23 103.247.206.0/24 maxlen: 24 103.247.207.0/24 maxlen: 24 202.81.96.0/19 maxlen: 24 202.181.64.0/20 maxlen: 24 2403:b00::/32 maxlen: 32 2403:b00::/48 maxlen: 48 2403:b00:1::/48 maxlen: 48 2403:b00:2::/48 maxlen: 48 2403:b00:3::/48 maxlen: 48 2403:b00:4::/48 maxlen: 48 2403:b00:5::/48 maxlen: 48 2403:b00:6::/48 maxlen: 48 2403:b00:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 18:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3840 (0xf00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E8F3/serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Validity Not Before: Feb 28 18:26:37 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65df7add-2c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:29:0c:14:94:1e:c4:07:a1:0e:8d:a6:f1:9e: 40:e2:70:14:6a:08:c3:2d:24:b6:ff:7e:bf:4d:84: 1e:75:76:0b:f3:ca:1a:ad:58:b2:a4:33:2f:7e:f1: cb:66:96:63:69:48:15:d2:f6:f8:64:84:dd:d7:bd: 43:9d:0c:50:d7:3d:f2:36:f8:01:05:32:72:16:12: 1b:7a:31:2d:0c:10:44:af:50:bd:ed:ad:da:72:5d: 43:1f:a4:92:d0:b6:12:95:54:88:49:09:40:0a:3c: 57:a6:12:c7:71:ad:db:e0:bb:ac:7c:8b:3a:05:c8: e0:63:c6:6b:a9:e5:89:3f:e8:1d:d1:ee:18:72:05: 6c:8a:5b:68:ec:5b:65:1f:7c:92:07:d9:40:a0:06: 76:39:b8:51:49:63:d1:c3:1d:bb:44:93:37:24:10: c3:d2:b5:bb:d5:41:be:a5:eb:35:b6:9a:ec:6a:29: 8f:b7:01:2e:fc:82:91:a3:f8:e9:ed:85:80:a0:bf: e8:a7:ed:6e:bb:a0:90:ad:0d:52:56:17:24:b5:ca: af:4c:75:15:af:53:0e:c7:97:32:51:c1:92:cf:8c: 1a:04:0e:83:31:fe:ea:df:e2:a2:b0:84:d7:82:8a: e3:b1:44:18:81:f1:01:65:47:cc:44:e7:1a:24:f9: f3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:36:99:6A:E1:32:AD:D1:96:AA:E7:0E:89:3E:0A:BA:B0:33:6C:B8 X509v3 Authority Key Identifier: keyid:F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9B64D5BC5BD311ECAB122945C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.247.204.0/22 202.81.96.0/19 202.181.64.0/20 IPv6: 2403:b00::/32 Signature Algorithm: sha256WithRSAEncryption 5b:b9:b1:7a:93:a9:70:3c:2e:5c:56:55:ca:2b:9a:a9:2d:90: ee:bb:b5:65:62:c3:6e:67:93:60:e8:3f:17:29:30:c8:b3:c2: c7:20:07:9b:40:5b:62:b4:3e:2a:53:fd:61:a4:7b:45:50:a4: fe:17:05:76:6a:2d:9c:2f:6c:1d:49:12:43:27:43:a1:cf:47: ae:9f:1f:d3:11:3b:bd:92:c2:f3:eb:70:4e:3e:0a:f4:91:14: 83:14:e2:bb:0d:08:b1:c4:ef:6e:e0:d0:f7:b0:b1:ac:b5:d6: 7a:ef:00:ce:f3:d8:9c:6e:55:69:c8:a1:ba:ad:3d:c1:e2:f4: 10:87:ca:37:d7:e2:ed:9d:ad:56:95:87:ae:b5:6a:aa:90:1c: 24:15:0d:02:22:04:71:4a:1c:ed:fe:21:63:5b:51:5b:ed:e4: d3:28:91:bc:58:bf:e6:1e:1c:46:4a:81:83:d2:d0:62:89:a1: ec:61:a4:06:b0:52:25:33:a1:06:95:4c:62:b1:89:82:89:1c: ba:cf:9b:80:4a:9e:ee:2e:65:1a:95:c4:16:ed:bf:53:1f:43: ac:bb:e2:3c:13:42:f5:49:03:b0:47:10:42:cd:da:b4:e9:9f: 59:e9:34:0a:95:ac:10:69:3e:32:fb:43:9e:b5:81:a8:6d:cb: 0b:00:90:68 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICDwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4RjMxMTAvBgNVBAUTKEY1OUZCQzVDNTg4MDNDMEQ3Q0FCOEFCRDQyRTE0RkQz ODIxMjg4QTQwHhcNMjQwMjI4MTgyNjM3WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWRmN2FkZC0yYzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoykMFJQexAehDo2m8Z5A4nAUagjDLSS2/36/TYQedXYL88oarViypDMvfvHL ZpZjaUgV0vb4ZITd171DnQxQ1z3yNvgBBTJyFhIbejEtDBBEr1C97a3acl1DH6SS 0LYSlVSISQlACjxXphLHca3b4LusfIs6BcjgY8ZrqeWJP+gd0e4YcgVsilto7Ftl H3ySB9lAoAZ2ObhRSWPRwx27RJM3JBDD0rW71UG+pes1tprsaimPtwEu/IKRo/jp 7YWAoL/op+1uu6CQrQ1SVhcktcqvTHUVr1MOx5cyUcGSz4waBA6DMf7q3+KisITX gorjsUQYgfEBZUfMROcaJPnzpwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFGg2mWrh Mq3RlqrnDok+CrqwM2y4MB8GA1UdIwQYMBaAFPWfvFxYgDwNfKuKvULhT9OCEoik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRThGMy8xMkY0REYxODU0 OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBBMThxNHE5UXVGUDA0SVNp S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlaLThYRmlBUEExOHE0cTlRdUZQMDRJU2lLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0U4RjMvMTJGNERGMTg1NDk0MTFFOUI1OTdFNTcxQzRGOUFFMDIvOUI2NEQ1QkM1 QkQzMTFFQ0FCMTIyOTQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAJn98wDBAXKUWADBATKtUAwDQQCAAIwBwMFACQDCwAwDQYJ KoZIhvcNAQELBQADggEBAFu5sXqTqXA8LlxWVcormqktkO67tWViw25nk2DoPxcp MMizwscgB5tAW2K0PipT/WGke0VQpP4XBXZqLZwvbB1JEkMnQ6HPR66fH9MRO72S wvPrcE4+CvSRFIMU4rsNCLHE727g0Pewsay11nrvAM7z2JxuVWnIobqtPcHi9BCH yjfX4u2drVaVh661aqqQHCQVDQIiBHFKHO3+IWNbUVvt5NMokbxYv+YeHEZKgYPS 0GKJoexhpAawUiUzoQaVTGKxiYKJHLrPm4BKnu4uZRqVxBbtv1MfQ6y74jwTQvVJ A7BHEELN2rTpn1npNAqVrBBpPjL7Q561gahtywsAkGg= -----END CERTIFICATE-----Generated at Wed May 22 20:07:56 2024 by rpki-client on console-ams.rpki-client.org