$ rpki-client -vvf rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/D9FACFBEF1F111EEA7B10347C4F9AE02.roa File: D9FACFBEF1F111EEA7B10347C4F9AE02.roa (raw, json) Hash identifier: 3dfFc3qr5u6PL/yffP0V14rLFaJPhkJSoHD0YlejQTE= Subject key identifier: F2:3C:60:88:C5:10:C5:1B:1A:F6:12:6B:B2:1C:76:71:CC:85:D5:7F Certificate issuer: /CN=A9151A79/serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C Certificate serial: BB Authority key identifier: 05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/D9FACFBEF1F111EEA7B10347C4F9AE02.roa Signing time: Sun 05 May 2024 06:39:41 +0000 ROA not before: Sun 05 May 2024 06:39:41 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 142123 IP address blocks: 103.114.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 06:28:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151A79/serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C Validity Not Before: May 5 06:39:41 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=663729ad-b170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8a:4d:8f:46:21:06:03:0d:ae:c1:5e:3d:89: 60:7a:8f:3a:67:2e:b1:bc:3b:5a:3d:a9:e9:ce:9a: 46:4e:b2:50:e1:8f:69:ba:f2:8e:1d:89:50:bd:0c: 6a:f9:93:3a:bc:76:61:95:8a:40:ac:e7:8b:65:e1: ca:25:93:89:25:6a:43:bb:8c:f0:db:3d:c3:50:32: 13:0d:9a:53:f8:9f:f9:04:ef:5a:aa:a9:a7:88:06: 04:0b:bf:6d:7f:f2:d6:6a:e9:cb:13:a1:07:c5:07: e4:29:ad:95:5a:aa:f6:ce:fe:ed:d9:02:2b:34:c2: 07:7e:da:3d:e6:4c:fb:85:ec:38:d0:ec:b5:b1:4f: 78:ff:15:6a:2d:2f:46:01:c1:6b:cd:d6:3c:b6:93: dd:08:c1:c9:27:47:67:93:bd:f2:5e:c3:81:2e:d7: f0:ca:2c:8e:cf:91:4b:b9:ac:93:c0:9f:83:c3:73: 80:4c:b7:74:c9:fb:b5:ed:6c:a7:17:52:3f:67:fa: d2:0c:0a:0e:a9:43:52:f7:78:bd:c3:6f:ee:cc:f7: 27:a7:4d:8c:95:fb:81:94:99:6b:40:dd:f1:f9:2f: 91:9b:1e:d2:8d:f3:75:fa:5a:42:62:56:4b:88:b2: 66:31:db:ee:87:3c:ec:a6:e5:0a:41:79:d0:c9:6b: 19:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3C:60:88:C5:10:C5:1B:1A:F6:12:6B:B2:1C:76:71:CC:85:D5:7F X509v3 Authority Key Identifier: keyid:05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/D9FACFBEF1F111EEA7B10347C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.114.255.0/24 Signature Algorithm: sha256WithRSAEncryption 70:8e:72:90:81:34:23:68:8a:30:da:bd:cd:80:c4:ad:d7:3c: 8e:51:ae:d6:69:7b:77:42:37:9d:98:1f:dc:aa:6c:42:7c:2d: 0c:2e:3e:33:2c:0b:5d:80:1d:32:6e:3d:2c:44:b3:55:d5:8a: d2:00:d9:a6:c0:97:e0:a4:8a:d8:9c:2c:b6:da:e0:0c:aa:9a: f5:19:67:51:bc:a7:55:36:f4:f6:65:c0:75:80:78:71:5e:5a: 03:c8:3a:b5:cf:6f:27:b0:cc:c5:8e:6d:28:02:09:95:44:00: f7:59:8d:95:f5:23:a9:c2:8e:d8:85:7e:5a:f1:55:d3:08:0c: 13:8a:30:80:c9:23:b5:b9:cf:c9:77:69:50:4a:62:66:d6:fa: bd:93:f6:00:4a:8d:92:9f:8a:a2:75:dd:28:44:86:3b:5f:5f: 59:16:18:05:46:43:d7:d8:b2:91:fc:63:8c:70:8a:03:2d:28: 5c:5c:d1:ad:9b:12:7f:e3:da:f0:a1:65:a0:e9:8e:5d:77:4e: bb:4a:ce:16:fe:66:bf:0d:c3:da:97:6a:30:8a:9d:a1:37:a8: f0:ac:18:59:a7:26:be:9f:04:3f:8d:71:10:c5:d1:57:57:2a: f6:a8:9a:b8:ac:a8:95:f5:cd:c9:1e:68:31:39:6e:d5:29:93: b6:22:bf:44 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFBNzkxMTAvBgNVBAUTKDA1Mjk4NUYyQkUyOEM3OUU3NEVGRjREQjRDNzE0MjI4 NDU0NzczNUMwHhcNMjQwNTA1MDYzOTQxWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjM3MjlhZC1iMTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp4pNj0YhBgMNrsFePYlgeo86Zy6xvDtaPanpzppGTrJQ4Y9puvKOHYlQvQxq +ZM6vHZhlYpArOeLZeHKJZOJJWpDu4zw2z3DUDITDZpT+J/5BO9aqqmniAYEC79t f/LWaunLE6EHxQfkKa2VWqr2zv7t2QIrNMIHfto95kz7hew40Oy1sU94/xVqLS9G AcFrzdY8tpPdCMHJJ0dnk73yXsOBLtfwyiyOz5FLuayTwJ+Dw3OATLd0yfu17Wyn F1I/Z/rSDAoOqUNS93i9w2/uzPcnp02MlfuBlJlrQN3x+S+Rmx7SjfN1+lpCYlZL iLJmMdvuhzzspuUKQXnQyWsZHQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPI8YIjF EMUbGvYSa7IcdnHMhdV/MB8GA1UdIwQYMBaAFAUphfK+KMeedO/020xxQihFR3Nc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUE3OS9ENENBMTVDMEY5 NDcxMUVEODhDMTg3NDZDNEY5QUUwMi9CU21GOHI0b3g1NTA3X1RiVEhGQ0tFVkhj MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JTbUY4cjRveDU1MDdfVGJUSEZDS0VWSGMxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTFBNzkvRDRDQTE1QzBGOTQ3MTFFRDg4QzE4NzQ2QzRGOUFFMDIvRDlGQUNGQkVG MUYxMTFFRUE3QjEwMzQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABncv8wDQYJKoZIhvcNAQELBQADggEBAHCOcpCBNCNoijDa vc2AxK3XPI5RrtZpe3dCN52YH9yqbEJ8LQwuPjMsC12AHTJuPSxEs1XVitIA2abA l+CkiticLLba4AyqmvUZZ1G8p1U29PZlwHWAeHFeWgPIOrXPbyewzMWObSgCCZVE APdZjZX1I6nCjtiFflrxVdMIDBOKMIDJI7W5z8l3aVBKYmbW+r2T9gBKjZKfiqJ1 3ShEhjtfX1kWGAVGQ9fYspH8Y4xwigMtKFxc0a2bEn/j2vChZaDpjl13TrtKzhb+ Zr8Nw9qXajCKnaE3qPCsGFmnJr6fBD+NcRDF0VdXKvaomrisqJX1zckeaDE5btUp k7Yiv0Q= -----END CERTIFICATE-----Generated at Tue May 7 07:13:00 2024 by rpki-client on console-ams.rpki-client.org