$ rpki-client -vvf rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/E5DE3744492611EAA7ADEB71C4F9AE02.roa File: E5DE3744492611EAA7ADEB71C4F9AE02.roa (raw, json) Hash identifier: Fz0CDYPtXNYhgB9YTjI1zGiOeMCYZZOlR8VF0yZ8kZs= Subject key identifier: 8C:E3:C6:11:F5:8F:A8:94:FB:33:0A:46:E1:7C:3C:10:09:48:8B:43 Certificate issuer: /CN=A9148827/serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478 Certificate serial: 0A39 Authority key identifier: 48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/E5DE3744492611EAA7ADEB71C4F9AE02.roa Signing time: Tue 30 Apr 2024 20:59:34 +0000 ROA not before: Tue 30 Apr 2024 20:59:34 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 136450 IP address blocks: 103.88.140.0/22 maxlen: 24 116.204.230.0/24 maxlen: 24 2400:e340::/32 maxlen: 32 2400:e340:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 20:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2617 (0xa39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148827/serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478 Validity Not Before: Apr 30 20:59:34 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=66315bb5-b06b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:89:d3:78:6c:d7:85:c1:44:2b:f2:85:de:3d: 4c:a5:a4:b7:0b:27:d4:e5:d2:89:74:49:2d:73:4d: 27:0e:71:a1:4d:1d:a2:22:47:f2:8d:84:28:ae:77: 5f:b8:6c:ad:83:f3:41:88:ac:bf:85:d6:f0:17:25: ce:42:d4:3f:5d:04:0b:40:72:9d:33:41:61:ee:e7: c2:28:31:d5:ac:5c:1a:b5:2d:63:0e:7f:18:27:f7: a8:81:f3:f7:4b:9a:0f:02:86:70:0e:24:f0:09:a5: 5e:fb:4b:b7:4d:88:56:0f:85:92:e2:36:4a:37:9f: de:60:56:c4:cb:91:6e:4f:d8:ed:61:4b:91:d1:71: a3:4e:65:c4:00:4e:72:c3:f6:d1:f5:ec:3b:6b:3b: 87:4a:56:1f:a5:e9:c9:94:e3:2f:c4:f3:a5:9c:09: e0:23:40:81:72:f5:cb:9f:3d:3e:b6:a9:6e:fd:96: f7:3b:e1:be:07:5f:d9:af:b1:f5:22:de:cc:04:83: 79:65:63:c3:5c:39:6a:23:d7:2a:99:d8:4b:bb:31: dd:47:75:2b:2d:d2:35:42:a3:73:9d:88:36:15:0e: 7e:0d:17:91:87:43:9d:2e:51:6e:30:36:3d:55:06: f9:84:7a:37:69:92:c8:50:aa:1e:28:9f:18:d2:0d: 62:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E3:C6:11:F5:8F:A8:94:FB:33:0A:46:E1:7C:3C:10:09:48:8B:43 X509v3 Authority Key Identifier: keyid:48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/E5DE3744492611EAA7ADEB71C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.88.140.0/22 116.204.230.0/24 IPv6: 2400:e340::/32 Signature Algorithm: sha256WithRSAEncryption 9b:ea:b2:13:49:5d:0c:e5:9a:bf:20:3e:9a:95:2a:72:70:2a: 17:2a:43:39:f3:94:24:4f:06:08:bf:f1:70:19:91:70:a6:cc: 37:18:2a:da:94:ad:77:0c:10:d3:e4:57:f6:ef:83:7b:c6:cf: 57:f7:7f:36:00:92:b9:f9:55:c3:2c:d3:75:ae:f3:98:89:8b: 3b:1a:f2:35:bb:4b:07:e9:7c:40:42:16:a7:cd:ab:58:6c:d3: fa:f7:3c:c1:67:58:c1:33:fc:9b:57:15:a9:4c:8a:8d:a6:4c: c3:1a:78:03:b1:2b:fe:9e:fa:fb:16:50:d4:76:c2:31:16:b6: ab:f1:41:15:9a:d6:07:f5:bb:f2:9f:7f:f2:8b:62:56:10:d2: 2c:28:ef:70:79:72:34:cf:00:24:b5:2b:64:51:bf:ab:03:0e: b9:3a:ad:8c:c0:2a:da:79:10:8a:de:0f:12:4e:14:75:51:c7: 74:fd:27:31:1e:b1:b9:14:82:2e:e3:7a:98:77:d3:2b:e7:97: 43:32:2f:29:f5:76:cd:2f:e9:81:cb:ec:f1:1d:6b:6a:9a:c2: 0d:01:a7:25:74:08:ff:e4:5c:84:7f:15:ab:ad:10:ff:7a:c9: 8c:97:78:c8:cc:57:b8:f7:69:ae:76:a4:d8:c3:a3:78:14:ef: b5:27:0a:81 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg4MjcxMTAvBgNVBAUTKDQ4NEFFOEMwRDE1Nzk5QjVGRjA4MUZFNDBDM0UxRTAw RTRFODk0NzgwHhcNMjQwNDMwMjA1OTM0WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjMxNWJiNS1iMDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvInTeGzXhcFEK/KF3j1MpaS3CyfU5dKJdEktc00nDnGhTR2iIkfyjYQorndf uGytg/NBiKy/hdbwFyXOQtQ/XQQLQHKdM0Fh7ufCKDHVrFwatS1jDn8YJ/eogfP3 S5oPAoZwDiTwCaVe+0u3TYhWD4WS4jZKN5/eYFbEy5FuT9jtYUuR0XGjTmXEAE5y w/bR9ew7azuHSlYfpenJlOMvxPOlnAngI0CBcvXLnz0+tqlu/Zb3O+G+B1/Zr7H1 It7MBIN5ZWPDXDlqI9cqmdhLuzHdR3UrLdI1QqNznYg2FQ5+DReRh0OdLlFuMDY9 VQb5hHo3aZLIUKoeKJ8Y0g1i5wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFIzjxhH1 j6iU+zMKRuF8PBAJSItDMB8GA1UdIwQYMBaAFEhK6MDRV5m1/wgf5Aw+HgDk6JR4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODgyNy84ODg3MTkzNjQ5 MjUxMUVBQTk0NDk3NkZDNEY5QUUwMi9TRXJvd05GWG1iWF9DQl9rREQ0ZUFPVG9s SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NFcm93TkZYbWJYX0NCX2tERDRlQU9Ub2xIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDg4MjcvODg4NzE5MzY0OTI1MTFFQUE5NDQ5NzZGQzRGOUFFMDIvRTVERTM3NDQ0 OTI2MTFFQUE3QURFQjcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnWIwDBAB0zOYwDQQCAAIwBwMFACQA40AwDQYJKoZIhvcN AQELBQADggEBAJvqshNJXQzlmr8gPpqVKnJwKhcqQznzlCRPBgi/8XAZkXCmzDcY KtqUrXcMENPkV/bvg3vGz1f3fzYAkrn5VcMs03Wu85iJizsa8jW7SwfpfEBCFqfN q1hs0/r3PMFnWMEz/JtXFalMio2mTMMaeAOxK/6e+vsWUNR2wjEWtqvxQRWa1gf1 u/Kff/KLYlYQ0iwo73B5cjTPACS1K2RRv6sDDrk6rYzAKtp5EIreDxJOFHVRx3T9 JzEesbkUgi7jeph30yvnl0MyLyn1ds0v6YHL7PEda2qawg0BpyV0CP/kXIR/Faut EP96yYyXeMjMV7j3aa52pNjDo3gU77UnCoE= -----END CERTIFICATE-----Generated at Sun May 26 21:25:56 2024 by rpki-client on console-fra.rpki-client.org