$ rpki-client -vvf rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/2A3E123A5A5711E8B29BFE6AC4F9AE02.roa File: 2A3E123A5A5711E8B29BFE6AC4F9AE02.roa (raw, json) Hash identifier: A/XphIsRsOsGjumeuE2iVQaX/iZDBLc8b+0PDck+aog= Subject key identifier: BE:F0:20:F4:44:23:CA:0C:12:6B:D7:79:14:6D:74:28:15:45:B5:0A Certificate issuer: /CN=A9150845/serialNumber=F7D33F455EDABE3D4CB63FB92E4CA076119C34A6 Certificate serial: 13A9 Authority key identifier: F7:D3:3F:45:5E:DA:BE:3D:4C:B6:3F:B9:2E:4C:A0:76:11:9C:34:A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/2A3E123A5A5711E8B29BFE6AC4F9AE02.roa Signing time: Thu 14 Sep 2023 17:14:49 +0000 ROA not before: Thu 14 Sep 2023 17:14:49 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 63528 IP address blocks: 203.159.68.0/22 maxlen: 22 203.159.70.0/23 maxlen: 24 2001:deb::/48 maxlen: 48 2001:df5:b880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.crl rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5033 (0x13a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150845/serialNumber=F7D33F455EDABE3D4CB63FB92E4CA076119C34A6 Validity Not Before: Sep 14 17:14:49 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=65033f89-f9ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cd:90:2f:98:95:d6:92:72:9d:0e:89:9d:1f: 78:68:5c:15:eb:4e:16:3f:9b:d7:b2:73:5e:e9:31: a6:49:91:64:24:f6:09:4d:37:9f:a0:84:45:10:10: c9:83:57:8a:01:e5:c0:99:81:1b:a4:bc:30:e7:09: 6f:95:75:26:c3:3e:77:97:10:87:de:d1:3b:d0:20: e2:2f:31:0c:5c:5d:ec:ff:ae:ff:04:1b:cf:5a:38: 7d:21:ac:a2:f2:96:93:7c:49:63:5b:40:c6:a4:c0: 00:64:e2:bc:b9:88:ee:5c:ec:60:7c:8f:0f:89:5d: a0:11:0e:91:cf:90:d3:ff:76:71:eb:43:07:69:25: 0a:14:88:8d:ef:51:34:c8:03:6a:dd:5e:88:a5:8f: 17:71:93:bd:87:4d:1f:1b:5e:63:7c:44:3c:bf:71: ec:0f:63:26:6c:36:be:51:39:43:cf:85:f3:4d:7b: 68:d4:02:7c:72:d4:69:03:4a:fb:1f:ae:6f:63:30: 6f:c4:3a:c8:97:e3:11:a5:f6:a7:89:1f:e6:5d:5d: a8:f1:81:bd:fa:3e:46:e9:81:53:58:fe:b7:b3:46: 84:b8:8e:1b:d3:2f:dd:9d:88:f4:ff:bf:72:93:0d: bd:38:de:77:ed:49:a5:8c:4c:06:83:9e:aa:da:8f: 3c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F0:20:F4:44:23:CA:0C:12:6B:D7:79:14:6D:74:28:15:45:B5:0A X509v3 Authority Key Identifier: keyid:F7:D3:3F:45:5E:DA:BE:3D:4C:B6:3F:B9:2E:4C:A0:76:11:9C:34:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/2A3E123A5A5711E8B29BFE6AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.159.68.0/22 IPv6: 2001:deb::/48 2001:df5:b880::/48 Signature Algorithm: sha256WithRSAEncryption 7c:be:d3:e4:85:c1:91:cd:48:1c:48:f6:d5:fb:2c:2a:2b:37: 89:f5:91:69:79:18:40:ad:e0:ea:2c:52:d8:e2:2e:7d:5d:2e: aa:dc:4b:79:56:61:de:be:be:ab:82:2a:70:23:b3:0b:43:18: 47:06:8c:a8:0a:ed:88:bc:b0:60:5e:28:c9:63:4e:66:a0:6f: 45:97:3e:9b:e0:75:bc:4a:d1:46:77:12:62:1a:db:be:31:bf: b9:bd:26:cb:5e:8e:a2:f6:22:e9:9a:ed:e4:58:4f:f6:8d:dc: 8f:df:f0:65:6b:99:49:ee:d7:f4:28:a1:b5:b4:2a:6c:99:5c: 24:43:cc:ba:36:89:4b:6c:a3:9b:55:87:04:cc:3a:92:4d:47: 41:7f:6b:d5:e4:37:38:2b:6d:d1:31:87:8c:b6:ee:8d:54:0b: 13:17:8b:7f:f7:5a:5e:9e:f5:98:75:a9:fe:e0:18:8e:b1:74: 11:6a:1f:c8:b0:4a:79:30:78:76:74:63:69:21:2a:32:d0:2f: 42:2a:49:d1:5b:c1:7f:87:d9:05:f7:9c:72:68:08:c2:4e:64: 46:95:34:29:27:1d:ec:17:e7:15:f0:9c:19:78:3c:d8:22:8c: 2b:83:78:85:3a:d6:a3:15:b8:e0:8f:80:0e:8d:ce:07:0b:e3: f0:b2:a6:3a -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICE6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA4NDUxMTAvBgNVBAUTKEY3RDMzRjQ1NUVEQUJFM0Q0Q0I2M0ZCOTJFNENBMDc2 MTE5QzM0QTYwHhcNMjMwOTE0MTcxNDQ5WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTAzM2Y4OS1mOWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsc2QL5iV1pJynQ6JnR94aFwV604WP5vXsnNe6TGmSZFkJPYJTTefoIRFEBDJ g1eKAeXAmYEbpLww5wlvlXUmwz53lxCH3tE70CDiLzEMXF3s/67/BBvPWjh9Iayi 8paTfEljW0DGpMAAZOK8uYjuXOxgfI8PiV2gEQ6Rz5DT/3Zx60MHaSUKFIiN71E0 yANq3V6IpY8XcZO9h00fG15jfEQ8v3HsD2MmbDa+UTlDz4XzTXto1AJ8ctRpA0r7 H65vYzBvxDrIl+MRpfaniR/mXV2o8YG9+j5G6YFTWP63s0aEuI4b0y/dnYj0/79y kw29ON537UmljEwGg56q2o883wIDAQABo4ICrzCCAqswHQYDVR0OBBYEFL7wIPRE I8oMEmvXeRRtdCgVRbUKMB8GA1UdIwQYMBaAFPfTP0Ve2r49TLY/uS5MoHYRnDSm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDg0NS9EQzcxMDBFQTVB NTUxMUU4QkUzRTBCNjhDNEY5QUUwMi85OU1fUlY3YXZqMU10ai01TGt5Z2RoR2NO S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk5TV9SVjdhdmoxTXRqLTVMa3lnZGhHY05LWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTA4NDUvREM3MTAwRUE1QTU1MTFFOEJFM0UwQjY4QzRGOUFFMDIvMkEzRTEyM0E1 QTU3MTFFOEIyOUJGRTZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMAwEAgABMAYDBALLn0QwGAQCAAIwEgMHACABDesAAAMHACABDfW4gDANBgkq hkiG9w0BAQsFAAOCAQEAfL7T5IXBkc1IHEj21fssKis3ifWRaXkYQK3g6ixS2OIu fV0uqtxLeVZh3r6+q4IqcCOzC0MYRwaMqArtiLywYF4oyWNOZqBvRZc+m+B1vErR RncSYhrbvjG/ub0my16OovYi6Zrt5FhP9o3cj9/wZWuZSe7X9CihtbQqbJlcJEPM ujaJS2yjm1WHBMw6kk1HQX9r1eQ3OCtt0TGHjLbujVQLExeLf/daXp71mHWp/uAY jrF0EWofyLBKeTB4dnRjaSEqMtAvQipJ0VvBf4fZBfeccmgIwk5kRpU0KScd7Bfn FfCcGXg82CKMK4N4hTrWoxW44I+ADo3OBwvj8LKmOg== -----END CERTIFICATE-----Generated at Sat May 18 18:21:36 2024 by rpki-client on console-ams.rpki-client.org