$ rpki-client -vvf rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/08E67270C19611EDBDEEFD0BC4F9AE02.roa File: 08E67270C19611EDBDEEFD0BC4F9AE02.roa (raw, json) Hash identifier: /+LBjF6lBPLxhQK10OGPQmB3GU8J3/dgM8FRgJhuXxw= Subject key identifier: 0B:1D:2D:B2:10:8C:A9:92:2A:F0:CD:5D:4D:AE:E6:ED:74:76:0F:B4 Certificate issuer: /CN=A9146DAA/serialNumber=820F7030BEAC6D49F109BA8EC25A65BF2369AD2F Certificate serial: D6 Authority key identifier: 82:0F:70:30:BE:AC:6D:49:F1:09:BA:8E:C2:5A:65:BF:23:69:AD:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/08E67270C19611EDBDEEFD0BC4F9AE02.roa Signing time: Sat 27 Apr 2024 06:20:17 +0000 ROA not before: Sat 27 Apr 2024 06:20:16 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 150808 IP address blocks: 103.111.4.0/24 maxlen: 24 103.111.5.0/24 maxlen: 24 2400:e9e0::/48 maxlen: 48 2400:e9e0:1::/48 maxlen: 48 2400:e9e0:2::/48 maxlen: 48 2400:e9e0:3::/48 maxlen: 48 2400:e9e0:5::/48 maxlen: 48 2400:e9e0:6::/48 maxlen: 48 2400:e9e0:7::/48 maxlen: 48 2400:e9e0:8::/48 maxlen: 48 2400:e9e0:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.crl rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146DAA/serialNumber=820F7030BEAC6D49F109BA8EC25A65BF2369AD2F Validity Not Before: Apr 27 06:20:16 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=662c9920-707a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:21:88:f9:c1:32:21:13:42:68:f5:3a:cd:0b: 3c:53:28:77:25:d6:32:94:3f:40:bc:f4:db:18:2e: a3:5b:85:4d:fc:cc:5c:35:59:c6:3d:fa:6f:0e:da: e5:51:ad:99:5b:fd:19:d8:17:66:e4:26:47:c8:99: 7b:8a:6d:e3:e4:78:b1:fe:4f:aa:45:91:09:01:fa: 4e:17:0d:51:e9:f7:e0:08:f6:cb:8a:df:01:dc:82: af:24:3d:af:6d:8d:c2:79:76:09:90:c0:bc:df:04: 44:b4:90:fb:7d:58:9c:13:bb:5b:37:7b:f5:5c:99: 84:7d:49:20:8c:c1:5f:46:bc:69:f7:7d:a2:69:43: d3:40:9b:e4:a5:ea:b6:de:0f:c5:44:d4:a5:ff:ed: 9e:2b:ea:01:ae:6f:29:2b:43:e0:49:f2:9e:1c:f3: 32:08:6b:ed:30:62:f1:65:dc:d6:04:a8:cf:41:b2: 62:cc:f1:a0:dd:90:7c:75:6d:1f:0e:58:b1:69:96: 26:6c:b8:a1:e3:9b:76:e3:c2:58:ba:1b:01:08:e3: 2e:8d:91:a0:1b:ba:85:fc:00:14:83:80:97:aa:1f: 05:d9:c8:cd:20:da:19:75:02:c0:75:a3:76:7a:47: a5:6a:06:d1:ee:f8:d2:59:58:d3:ae:49:54:1f:dc: 61:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1D:2D:B2:10:8C:A9:92:2A:F0:CD:5D:4D:AE:E6:ED:74:76:0F:B4 X509v3 Authority Key Identifier: keyid:82:0F:70:30:BE:AC:6D:49:F1:09:BA:8E:C2:5A:65:BF:23:69:AD:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/08E67270C19611EDBDEEFD0BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.111.4.0/23 IPv6: 2400:e9e0::/46 2400:e9e0:5::-2400:e9e0:9:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 1c:fe:1e:66:7b:0c:de:17:01:46:8f:92:3b:a1:91:fc:46:c0: 36:b4:a5:00:8c:62:50:2f:2b:ae:96:9b:d4:44:75:f3:61:b4: 47:6a:e6:8c:47:9d:0c:19:ec:86:07:07:c8:b6:e3:ee:26:ec: 15:98:a1:2a:d4:b6:4f:8d:cb:e2:ec:26:bc:f3:87:8b:b4:1e: ce:02:ba:33:3f:15:f0:a5:6a:8f:cb:b7:e5:32:2d:58:da:13: 0a:56:71:0d:5a:7a:51:df:aa:8b:58:d3:d2:95:7c:4e:eb:21: a9:a6:66:d5:58:d3:c3:11:dd:1f:1f:74:74:0d:db:1f:5c:3e: 81:ac:fa:d5:82:2e:48:16:6a:e5:77:56:78:6a:1c:48:8d:38: 39:ba:59:25:c9:45:3f:93:de:df:3f:ea:68:2f:31:7c:b7:e1: 2e:d6:d1:98:90:03:03:a4:e3:c6:77:79:fb:47:fd:77:63:98: 45:b1:d5:2a:1e:00:40:b4:77:81:af:76:94:2e:cf:2d:35:3b: 18:6d:e6:4f:e2:51:20:4e:68:af:b1:cf:6c:c8:a0:45:34:2a: 02:11:f8:59:5c:34:99:3e:12:35:74:01:3f:80:77:d5:1f:93: e7:f2:4d:4e:3a:16:3d:68:03:2a:38:7a:5c:d7:a3:d2:b3:e8: 6d:32:e1:28 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZEQUExMTAvBgNVBAUTKDgyMEY3MDMwQkVBQzZENDlGMTA5QkE4RUMyNUE2NUJG MjM2OUFEMkYwHhcNMjQwNDI3MDYyMDE2WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjJjOTkyMC03MDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyGI+cEyIRNCaPU6zQs8Uyh3JdYylD9AvPTbGC6jW4VN/MxcNVnGPfpvDtrl Ua2ZW/0Z2Bdm5CZHyJl7im3j5Hix/k+qRZEJAfpOFw1R6ffgCPbLit8B3IKvJD2v bY3CeXYJkMC83wREtJD7fVicE7tbN3v1XJmEfUkgjMFfRrxp932iaUPTQJvkpeq2 3g/FRNSl/+2eK+oBrm8pK0PgSfKeHPMyCGvtMGLxZdzWBKjPQbJizPGg3ZB8dW0f DlixaZYmbLih45t248JYuhsBCOMujZGgG7qF/AAUg4CXqh8F2cjNINoZdQLAdaN2 ekelagbR7vjSWVjTrklUH9xhwwIDAQABo4ICujCCArYwHQYDVR0OBBYEFAsdLbIQ jKmSKvDNXU2u5u10dg+0MB8GA1UdIwQYMBaAFIIPcDC+rG1J8Qm6jsJaZb8jaa0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkRBQS83MUVCN0M1QUMx OTMxMUVEOUI4NjZCMEJDNEY5QUUwMi9nZzl3TUw2c2JVbnhDYnFPd2xwbHZ5TnBy UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnOXdNTDZzYlVueENicU93bHBsdnlOcHJTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDZEQUEvNzFFQjdDNUFDMTkzMTFFRDlCODY2QjBCQzRGOUFFMDIvMDhFNjcyNzBD MTk2MTFFREJERUVGRDBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRAYIKwYBBQUHAQcBAf8E NTAzMAwEAgABMAYDBAFnbwQwIwQCAAIwHQMHAiQA6eAAADASAwcAJADp4AAFAwcB JADp4AAIMA0GCSqGSIb3DQEBCwUAA4IBAQAc/h5mewzeFwFGj5I7oZH8RsA2tKUA jGJQLyuulpvURHXzYbRHauaMR50MGeyGBwfItuPuJuwVmKEq1LZPjcvi7Ca884eL tB7OArozPxXwpWqPy7flMi1Y2hMKVnENWnpR36qLWNPSlXxO6yGppmbVWNPDEd0f H3R0DdsfXD6BrPrVgi5IFmrld1Z4ahxIjTg5ulklyUU/k97fP+poLzF8t+Eu1tGY kAMDpOPGd3n7R/13Y5hFsdUqHgBAtHeBr3aULs8tNTsYbeZP4lEgTmivsc9syKBF NCoCEfhZXDSZPhI1dAE/gHfVH5Pn8k1OOhY9aAMqOHpc16PSs+htMuEo -----END CERTIFICATE-----Generated at Fri May 17 08:13:49 2024 by rpki-client on console-fra.rpki-client.org