$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/5BC9A0B0C91211ED91C9A325C4F9AE02.roa File: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (raw, json) Hash identifier: g+v9/1+EEfr8WVYtjOZsScKu6pv6E6flFrJU7Lh7c1U= Subject key identifier: CF:BB:E9:8F:30:40:7F:F8:A3:97:FE:B1:83:1D:EF:90:DB:22:2F:73 Certificate issuer: /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Certificate serial: 03F8 Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/5BC9A0B0C91211ED91C9A325C4F9AE02.roa Signing time: Wed 24 Jan 2024 15:33:34 +0000 ROA not before: Wed 24 Jan 2024 15:33:34 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 136258 IP address blocks: 103.75.116.0/24 maxlen: 24 103.75.118.0/24 maxlen: 24 103.75.119.0/24 maxlen: 24 103.97.203.0/24 maxlen: 24 103.106.228.0/24 maxlen: 24 103.106.229.0/24 maxlen: 24 103.106.230.0/24 maxlen: 24 103.106.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:15:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1016 (0x3f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Validity Not Before: Jan 24 15:33:34 2024 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=65b12dcd-0a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e2:7e:c7:a9:e4:fb:a0:9e:15:89:52:b6:de: d3:18:9c:85:7a:22:1f:c4:32:a1:6c:f1:6b:93:4a: 57:57:5b:a1:d9:9f:d7:78:01:e8:4f:3b:a6:22:55: d9:89:0c:c4:de:2b:6c:1e:8a:15:ac:9f:1d:1d:67: 57:18:ae:10:7d:d7:e4:34:15:4c:97:1f:40:3e:94: 5d:bf:d0:11:c1:9b:2e:fc:43:15:6b:c5:11:11:38: d2:7e:f4:8e:70:93:f3:42:7f:c7:64:ab:50:87:6b: 96:82:48:80:95:cf:dc:1f:45:2c:bb:3b:13:dd:0b: d4:0b:23:fb:6f:c0:70:cb:87:0c:3a:17:8b:86:f7: 69:43:ac:17:81:da:98:42:18:ed:44:f6:7e:92:42: 72:88:14:42:df:6a:a7:09:86:d3:88:6f:c9:fc:11: cc:aa:b7:92:0b:43:d2:01:51:2e:56:53:4f:6b:31: ad:d7:ec:e5:07:e4:8b:50:85:88:fc:a1:63:d2:3e: da:04:bb:81:d6:ff:b5:a9:4d:98:5b:64:77:fb:da: 7a:1a:e7:32:11:1a:7b:2c:09:1c:ba:98:7c:8a:1a: c2:0c:c0:6c:03:b1:b3:bb:6c:89:70:05:77:a5:4c: 77:2f:99:d7:c7:27:11:b1:d7:61:cf:93:59:3a:f8: f2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:BB:E9:8F:30:40:7F:F8:A3:97:FE:B1:83:1D:EF:90:DB:22:2F:73 X509v3 Authority Key Identifier: keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/5BC9A0B0C91211ED91C9A325C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.75.116.0/24 103.75.118.0/23 103.97.203.0/24 103.106.228.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:0a:1d:80:a2:87:ab:9c:dc:cb:f1:48:72:40:3a:a0:0c:23: 1f:bf:f4:ab:d3:74:95:07:9b:a0:72:81:48:be:85:ce:b0:33: c3:42:d0:b4:53:4f:d2:02:f8:d8:d2:33:c7:0c:46:57:6d:2f: 7f:eb:67:ff:41:57:e5:3e:10:9d:f8:45:9e:20:f9:45:42:b8: f1:70:ac:d5:c6:1c:eb:9b:b5:5d:b3:2b:61:11:4e:57:3d:05: b0:10:c2:ff:40:46:55:0d:fd:d8:a0:f9:54:8e:44:ea:2b:9a: 9d:b6:b8:5b:ec:66:9a:0f:05:12:a0:87:ce:6c:c6:af:f2:68: 00:21:3d:30:19:38:e5:1b:41:15:01:97:02:3f:e3:f7:75:d1: 27:73:87:ea:d2:f8:7d:65:ee:0d:af:f6:73:17:ca:c5:2c:d8: 3d:ac:f4:b4:bc:e9:c8:77:7d:1e:44:56:3e:92:2c:9d:2b:65: 22:26:84:e9:f1:1c:70:f3:f7:72:49:72:4b:89:f0:73:12:2b: 5a:cb:63:31:4b:93:b8:6f:12:87:e7:10:a8:c6:34:25:07:0b: bf:fb:ab:d8:1f:ba:ed:64:6c:8e:86:97:f2:c1:64:97:af:c9: e8:3b:96:2b:9f:1f:ef:d4:ee:34:7d:a9:94:86:14:21:5e:d1: 49:87:09:d4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICA/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFNzAxMTAvBgNVBAUTKDA2RDMzQzhENkJBNEE2MjIyREZDQjkwQzJCNDBBNEI3 OTI5Mzc2N0EwHhcNMjQwMTI0MTUzMzM0WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NWIxMmRjZC0wYTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+J+x6nk+6CeFYlStt7TGJyFeiIfxDKhbPFrk0pXV1uh2Z/XeAHoTzumIlXZ iQzE3itsHooVrJ8dHWdXGK4QfdfkNBVMlx9APpRdv9ARwZsu/EMVa8URETjSfvSO cJPzQn/HZKtQh2uWgkiAlc/cH0UsuzsT3QvUCyP7b8Bwy4cMOheLhvdpQ6wXgdqY QhjtRPZ+kkJyiBRC32qnCYbTiG/J/BHMqreSC0PSAVEuVlNPazGt1+zlB+SLUIWI /KFj0j7aBLuB1v+1qU2YW2R3+9p6GucyERp7LAkcuph8ihrCDMBsA7Gzu2yJcAV3 pUx3L5nXxycRsddhz5NZOvjyaQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFM+76Y8w QH/4o5f+sYMd75DbIi9zMB8GA1UdIwQYMBaAFAbTPI1rpKYiLfy5DCtApLeSk3Z6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkU3MC9CRUM1Q0E3MjIx MUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3BpSXRfTGtNSzBDa3Q1S1Rk bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J0TThqV3VrcGlJdF9Ma01LMENrdDVLVGRuby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTJFNzAvQkVDNUNBNzIyMTFCMTFFQ0I0NUZENDJGQzRGOUFFMDIvNUJDOUEwQjBD OTEyMTFFRDkxQzlBMzI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBABnS3QDBAFnS3YDBABnYcsDBAJnauQwDQYJKoZIhvcNAQEL BQADggEBAI8KHYCih6uc3MvxSHJAOqAMIx+/9KvTdJUHm6BygUi+hc6wM8NC0LRT T9IC+NjSM8cMRldtL3/rZ/9BV+U+EJ34RZ4g+UVCuPFwrNXGHOubtV2zK2ERTlc9 BbAQwv9ARlUN/dig+VSOROormp22uFvsZpoPBRKgh85sxq/yaAAhPTAZOOUbQRUB lwI/4/d10Sdzh+rS+H1l7g2v9nMXysUs2D2s9LS86ch3fR5EVj6SLJ0rZSImhOnx HHDz93JJckuJ8HMSK1rLYzFLk7hvEofnEKjGNCUHC7/7q9gfuu1kbI6Gl/LBZJev yeg7liufH+/U7jR9qZSGFCFe0UmHCdQ= -----END CERTIFICATE-----Generated at Fri May 17 03:06:31 2024 by rpki-client on console-ams.rpki-client.org