$ rpki-client -vvf rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/F38DEBFC83E911EA993D9515C4F9AE02.roa File: F38DEBFC83E911EA993D9515C4F9AE02.roa (raw, json) Hash identifier: jObq5WAnKWNNe1xvn+i1p17e0KpzbzVrnmTwIgH5Dh0= Subject key identifier: 14:24:A8:B3:2E:00:4F:67:AF:35:28:43:94:18:4C:F9:48:73:85:11 Certificate issuer: /CN=A9144717/serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77 Certificate serial: 08F6 Authority key identifier: DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/F38DEBFC83E911EA993D9515C4F9AE02.roa Signing time: Thu 02 May 2024 21:40:28 +0000 ROA not before: Thu 02 May 2024 21:40:28 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 139605 IP address blocks: 103.150.156.0/23 maxlen: 23 103.150.156.0/24 maxlen: 24 103.150.157.0/24 maxlen: 24 2001:df3:7b80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.crl rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2294 (0x8f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144717/serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77 Validity Not Before: May 2 21:40:28 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6634084c-1b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2d:f0:b3:23:6c:eb:81:2a:10:46:6b:f1:0a: f8:24:45:75:62:66:68:89:8c:23:eb:b9:8b:1f:50: cc:16:62:e2:13:ce:98:87:55:85:65:7e:78:d9:bf: a9:c3:6c:af:52:71:53:14:5a:28:32:6d:89:ec:7f: e4:cc:d0:64:80:da:7d:67:34:22:c5:0e:45:03:9e: fb:04:44:89:b8:5a:9f:d7:dc:d5:13:67:d0:57:a5: 8a:a5:eb:06:11:4a:10:c0:d3:33:b8:00:6e:0a:ad: be:f1:0d:62:52:ba:d5:b4:7c:71:d1:d2:e2:7b:c1: 9c:aa:15:3a:c3:a2:fe:c7:2b:79:04:79:39:34:f6: 03:fd:33:82:c1:bd:07:9d:62:2a:e1:39:63:79:37: 8b:84:29:6e:92:f6:0c:99:15:a5:84:6e:a0:9a:97: 5d:42:1e:d8:43:bf:b5:84:42:67:e4:a0:25:05:da: 8e:2b:0b:29:ac:8a:b1:95:d9:26:b1:2d:89:aa:6c: f3:01:9c:b3:5b:8d:6d:03:65:c5:5f:7d:4f:5a:ef: d0:df:80:fd:85:d6:f2:6d:e6:0e:64:06:0a:68:3f: d0:87:28:01:de:73:9c:a6:5b:22:71:3f:fc:a0:0f: 62:dd:4c:05:0b:ef:2a:f9:50:dc:a3:6c:14:7f:25: 80:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:24:A8:B3:2E:00:4F:67:AF:35:28:43:94:18:4C:F9:48:73:85:11 X509v3 Authority Key Identifier: keyid:DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/F38DEBFC83E911EA993D9515C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.150.156.0/23 IPv6: 2001:df3:7b80::/48 Signature Algorithm: sha256WithRSAEncryption 50:60:31:08:dd:88:64:67:45:07:aa:17:14:c8:7d:31:9c:7f: 9d:04:f9:1a:e0:21:94:6f:c3:56:6b:09:56:30:d0:90:9f:e4: 30:58:ea:ed:dc:7b:82:45:81:1a:25:39:5e:4c:0e:c0:9f:a7: 64:b8:80:5c:16:9d:d1:20:c1:2a:94:7b:1e:87:59:02:2d:aa: 30:1c:39:10:c8:20:de:c3:38:ad:75:83:0d:26:14:c0:b8:41: a6:6d:17:33:af:72:f3:9b:de:33:d5:29:dc:88:0e:c9:8d:91: fa:14:30:31:be:87:88:b1:fd:1f:3f:c3:29:ba:95:d0:78:c6: 8c:ab:ff:47:d6:d6:82:6e:96:70:0f:0c:8e:fc:50:a7:0b:df: 30:38:b1:50:c8:ee:02:59:9d:ed:86:8b:9e:08:62:0d:74:b1: 40:27:f9:93:55:0c:79:86:78:cf:eb:05:56:46:fe:55:71:07: bd:13:d4:a0:b2:1f:6c:be:5b:2d:25:6a:4c:5c:2e:fb:ba:87: 8f:7b:78:03:d1:aa:97:ca:03:db:b2:55:05:48:73:42:4f:e8: 7c:25:7f:fd:d3:ca:07:eb:b0:46:c4:fd:83:2d:2a:c8:2f:10: 98:26:9f:31:46:0e:81:5f:ff:66:93:00:8c:fa:9f:02:e1:bd: 5d:75:ae:68 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ3MTcxMTAvBgNVBAUTKERBNTAzRjk3MkNCQzkzQThDODFERjk1RjU0QTJDQjJB MzhGMTNDNzcwHhcNMjQwNTAyMjE0MDI4WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjM0MDg0Yy0xYjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyC3wsyNs64EqEEZr8Qr4JEV1YmZoiYwj67mLH1DMFmLiE86Yh1WFZX542b+p w2yvUnFTFFooMm2J7H/kzNBkgNp9ZzQixQ5FA577BESJuFqf19zVE2fQV6WKpesG EUoQwNMzuABuCq2+8Q1iUrrVtHxx0dLie8GcqhU6w6L+xyt5BHk5NPYD/TOCwb0H nWIq4TljeTeLhClukvYMmRWlhG6gmpddQh7YQ7+1hEJn5KAlBdqOKwsprIqxldkm sS2JqmzzAZyzW41tA2XFX31PWu/Q34D9hdbybeYOZAYKaD/QhygB3nOcplsicT/8 oA9i3UwFC+8q+VDco2wUfyWALQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBQkqLMu AE9nrzUoQ5QYTPlIc4URMB8GA1UdIwQYMBaAFNpQP5csvJOoyB35X1Siyyo48Tx3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDcxNy8zOTg4OTAwMDgz RTgxMUVBQjc3MDA1MTNDNEY5QUUwMi8ybEFfbHl5OGs2aklIZmxmVktMTEtqanhQ SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJsQV9seXk4azZqSUhmbGZWS0xMS2pqeFBIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDQ3MTcvMzk4ODkwMDA4M0U4MTFFQUI3NzAwNTEzQzRGOUFFMDIvRjM4REVCRkM4 M0U5MTFFQTk5M0Q5NTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnlpwwDwQCAAIwCQMHACABDfN7gDANBgkqhkiG9w0BAQsF AAOCAQEAUGAxCN2IZGdFB6oXFMh9MZx/nQT5GuAhlG/DVmsJVjDQkJ/kMFjq7dx7 gkWBGiU5XkwOwJ+nZLiAXBad0SDBKpR7HodZAi2qMBw5EMgg3sM4rXWDDSYUwLhB pm0XM69y85veM9Up3IgOyY2R+hQwMb6HiLH9Hz/DKbqV0HjGjKv/R9bWgm6WcA8M jvxQpwvfMDixUMjuAlmd7YaLnghiDXSxQCf5k1UMeYZ4z+sFVkb+VXEHvRPUoLIf bL5bLSVqTFwu+7qHj3t4A9Gql8oD27JVBUhzQk/ofCV//dPKB+uwRsT9gy0qyC8Q mCafMUYOgV//ZpMAjPqfAuG9XXWuaA== -----END CERTIFICATE-----Generated at Thu May 16 22:23:36 2024 by rpki-client on console-fra.rpki-client.org