$ rpki-client -vvf rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/F26DAE0AB10D11E5894F4D1CC4F9AE02.roa File: F26DAE0AB10D11E5894F4D1CC4F9AE02.roa (raw, json) Hash identifier: p7YB9HGkxeDcNSJqEifaW0jnaufKeVcTIrM3iLVwivM= Subject key identifier: D9:6A:1A:09:9E:A5:E3:CB:6C:BE:3E:83:8E:70:85:BA:B0:48:38:04 Certificate issuer: /CN=A9147259/serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4 Certificate serial: 22EB Authority key identifier: 01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/F26DAE0AB10D11E5894F4D1CC4F9AE02.roa Signing time: Tue 30 Jan 2024 16:13:59 +0000 ROA not before: Tue 30 Jan 2024 16:13:59 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 133092 IP address blocks: 103.65.200.0/23 maxlen: 23 103.65.200.0/24 maxlen: 24 103.65.201.0/24 maxlen: 24 103.233.182.0/24 maxlen: 24 103.255.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 16:10:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8939 (0x22eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147259/serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4 Validity Not Before: Jan 30 16:13:59 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65b92047-3893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a9:64:94:af:08:26:d4:8d:ac:3e:89:24:8a: 0b:92:52:7e:39:fe:36:0a:cd:36:32:44:43:b3:d2: 06:f1:5a:5c:ad:d4:27:aa:8c:14:73:4b:4a:8c:93: 3f:d8:9a:5b:49:aa:39:de:05:d1:bc:25:74:4a:b2: e9:8d:15:2d:96:fd:a5:ee:16:38:b1:6d:54:82:53: e8:aa:5e:16:e0:f3:de:27:e4:dc:38:97:9e:6f:be: c0:49:a5:3b:c3:67:54:67:c3:42:ef:73:d0:51:cb: a7:72:92:e7:f4:ec:de:7e:68:36:9c:fe:13:15:6f: 14:f4:1a:26:75:14:62:53:38:d2:d8:b2:3e:7b:bb: 31:9b:ca:56:41:d8:bb:92:e5:e9:e4:04:d2:47:f9: c9:0f:dd:95:66:7f:cc:b8:04:01:d8:4b:cf:c6:20: 7f:0b:f5:ad:fd:c5:d5:a0:f3:4f:2a:52:36:36:19: fa:54:1e:a6:f0:25:9b:72:c4:a2:31:6c:c6:a4:03: 17:36:90:2f:0b:b3:c0:b6:39:29:04:e4:2a:15:3c: 14:0f:d6:88:f5:37:8d:eb:38:8a:d2:9e:a8:21:f5: 54:8c:76:9c:a8:fa:7c:58:52:16:e8:eb:77:19:c5: 87:ef:20:7d:dd:a4:bb:6a:ee:ec:b1:75:29:5f:99: a6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6A:1A:09:9E:A5:E3:CB:6C:BE:3E:83:8E:70:85:BA:B0:48:38:04 X509v3 Authority Key Identifier: keyid:01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/F26DAE0AB10D11E5894F4D1CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.65.200.0/23 103.233.182.0/24 103.255.126.0/24 Signature Algorithm: sha256WithRSAEncryption 32:50:92:f2:b9:fb:78:f1:1f:b3:05:6d:81:4a:7a:34:14:af: 13:48:18:fd:6f:81:45:36:0d:0e:0a:f7:4a:75:03:85:e7:3d: 9f:40:f4:16:ab:11:b5:6a:4f:06:a9:90:2e:78:68:b4:22:71: 51:ee:1b:b0:1a:c1:ba:89:d4:7f:52:ea:6b:78:c3:15:80:bf: d9:04:c5:25:f9:cc:00:33:03:b8:9f:08:91:08:1d:93:0c:54: 82:25:a9:6b:b0:69:95:4e:b3:6e:ac:ca:87:6f:4a:80:c3:1f: b6:1f:bc:3d:45:83:fc:28:7e:13:c6:e1:9c:31:3d:66:5c:cd: 69:bf:04:5e:07:f7:6d:70:fc:92:62:47:20:7a:32:b7:bd:e7: cf:c6:84:8c:3f:af:1c:19:c9:4e:1b:64:48:ce:89:bd:61:16: 00:67:ce:8a:fa:91:45:02:72:9d:a3:ed:4d:45:d9:9f:22:0d: 9e:d7:6b:25:85:23:4f:cd:93:7a:4c:ae:d0:8a:3a:8e:bb:03: 49:f8:c7:ad:f3:8f:e2:f7:b8:61:aa:45:5e:05:a7:7f:0b:a1: b4:d4:44:5c:99:71:df:ac:a3:8d:8e:c1:bb:9f:11:c3:fd:38: d6:bc:d3:4f:46:3f:46:25:c7:04:8b:fe:e7:8b:08:65:cf:58: ad:50:d2:2d -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICIuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcyNTkxMTAvBgNVBAUTKDAxM0ZCN0I3QThDNzNFNTEzRjc2OThCQ0RBMURBM0M0 NUNDNjdGQTQwHhcNMjQwMTMwMTYxMzU5WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWI5MjA0Ny0zODkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqalklK8IJtSNrD6JJIoLklJ+Of42Cs02MkRDs9IG8VpcrdQnqowUc0tKjJM/ 2JpbSao53gXRvCV0SrLpjRUtlv2l7hY4sW1UglPoql4W4PPeJ+TcOJeeb77ASaU7 w2dUZ8NC73PQUcuncpLn9Ozefmg2nP4TFW8U9BomdRRiUzjS2LI+e7sxm8pWQdi7 kuXp5ATSR/nJD92VZn/MuAQB2EvPxiB/C/Wt/cXVoPNPKlI2Nhn6VB6m8CWbcsSi MWzGpAMXNpAvC7PAtjkpBOQqFTwUD9aI9TeN6ziK0p6oIfVUjHacqPp8WFIW6Ot3 GcWH7yB93aS7au7ssXUpX5mmtQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFNlqGgme pePLbL4+g45whbqwSDgEMB8GA1UdIwQYMBaAFAE/t7eoxz5RP3aYvNodo8Rcxn+k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzI1OS9BODhDMUE4QTY3 NUExMUU1OTlGMzMwMUZDNEY5QUUwMi9BVC0zdDZqSFBsRV9kcGk4MmgyanhGekdm NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FULTN0NmpIUGxFX2RwaTgyaDJqeEZ6R2Y2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDcyNTkvQTg4QzFBOEE2NzVBMTFFNTk5RjMzMDFGQzRGOUFFMDIvRjI2REFFMEFC MTBEMTFFNTg5NEY0RDFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAFnQcgDBABn6bYDBABn/34wDQYJKoZIhvcNAQELBQADggEB ADJQkvK5+3jxH7MFbYFKejQUrxNIGP1vgUU2DQ4K90p1A4XnPZ9A9BarEbVqTwap kC54aLQicVHuG7AawbqJ1H9S6mt4wxWAv9kExSX5zAAzA7ifCJEIHZMMVIIlqWuw aZVOs26syodvSoDDH7YfvD1Fg/wofhPG4ZwxPWZczWm/BF4H921w/JJiRyB6Mre9 58/GhIw/rxwZyU4bZEjOib1hFgBnzor6kUUCcp2j7U1F2Z8iDZ7XayWFI0/Nk3pM rtCKOo67A0n4x63zj+L3uGGqRV4Fp38LobTURFyZcd+so42OwbufEcP9ONa8009G P0YlxwSL/ueLCGXPWK1Q0i0= -----END CERTIFICATE-----Generated at Fri May 24 18:22:54 2024 by rpki-client on console-ams.rpki-client.org