$ rpki-client -vvf rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/0C8538A6FFA411E9BC2B6886C4F9AE02.roa File: 0C8538A6FFA411E9BC2B6886C4F9AE02.roa (raw, json) Hash identifier: NEC29ByjsDaKAhJRTSgfmFIrg80vHn1kxIxJlvWTYQY= Subject key identifier: D7:87:24:23:A2:4C:9F:79:63:61:48:85:8C:D3:BA:0A:64:85:07:1C Certificate issuer: /CN=A9165C64/serialNumber=40EBC25A08BA5E7541CE142D2BC28AE4F8288A4B Certificate serial: 0B7B Authority key identifier: 40:EB:C2:5A:08:BA:5E:75:41:CE:14:2D:2B:C2:8A:E4:F8:28:8A:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/0C8538A6FFA411E9BC2B6886C4F9AE02.roa Signing time: Fri 16 Feb 2024 19:27:20 +0000 ROA not before: Fri 16 Feb 2024 19:27:20 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 138501 IP address blocks: 103.127.56.0/22 maxlen: 22 103.127.56.0/24 maxlen: 24 103.127.57.0/24 maxlen: 24 103.127.58.0/24 maxlen: 24 103.127.59.0/24 maxlen: 24 2405:9a40::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2939 (0xb7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165C64/serialNumber=40EBC25A08BA5E7541CE142D2BC28AE4F8288A4B Validity Not Before: Feb 16 19:27:20 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65cfb717-b2cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d5:f7:d7:45:aa:1b:5f:31:da:63:62:e7:02: 1b:32:57:41:ca:02:e6:fd:85:40:98:c0:ce:fa:be: cb:7e:c9:85:f7:83:7b:55:e1:f0:b7:e6:16:ba:ef: 61:b1:70:18:f0:21:8a:a3:29:25:3a:29:a0:56:ef: fa:c2:43:0e:89:cd:1b:cd:02:4f:0d:44:b9:08:5e: b0:8e:be:03:ac:7e:6f:ca:13:f8:c4:b6:1a:09:03: 9a:ad:fe:69:c1:9e:cb:2f:d6:2b:4b:f6:64:6f:c1: fb:95:84:ac:51:70:42:13:e5:0c:ee:29:70:43:7f: ce:ba:77:bd:6f:ee:0f:92:ef:d9:9d:87:ca:c2:e1: e8:df:23:92:3c:fb:79:7f:a1:15:99:cb:20:fe:ed: ea:37:4d:1f:20:a9:df:9b:3c:8d:4b:67:fc:e8:9d: 96:50:cb:5e:3b:a0:e1:3a:3e:34:5f:a6:e8:4f:fa: 29:f9:6e:99:c0:83:f5:c0:b5:88:48:de:e6:d2:51: c6:13:ce:97:22:9f:63:98:52:a5:60:e5:a4:93:0d: 34:6d:b4:67:e9:56:d5:5a:f1:29:0b:36:09:f0:01: e0:30:9b:00:14:f7:b1:53:0c:12:c5:41:00:bf:db: b1:6f:79:20:bf:58:e8:cb:22:b7:23:5f:c6:cd:bd: 94:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:87:24:23:A2:4C:9F:79:63:61:48:85:8C:D3:BA:0A:64:85:07:1C X509v3 Authority Key Identifier: keyid:40:EB:C2:5A:08:BA:5E:75:41:CE:14:2D:2B:C2:8A:E4:F8:28:8A:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/0C8538A6FFA411E9BC2B6886C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.127.56.0/22 IPv6: 2405:9a40::/32 Signature Algorithm: sha256WithRSAEncryption a1:9f:7b:1e:8f:8f:ed:12:c2:e2:a3:28:f2:fa:fc:b5:2c:41: 8d:35:90:32:05:30:33:dd:c7:a1:d0:75:f3:96:69:36:a5:a6: 35:04:7d:dd:bd:28:cd:1a:66:be:60:a2:3c:10:e0:4b:5c:40: 62:14:41:67:35:bd:f5:54:f6:04:f9:c4:46:fc:ae:f2:f7:10: ca:f3:b2:43:2a:a5:07:c0:96:0b:52:73:06:27:68:2c:fe:a4: a2:c9:47:bd:1e:77:fc:9e:5c:c2:19:05:13:7c:ec:a0:b7:be: 7d:0d:30:9b:71:19:5f:92:70:ae:0f:d1:f4:51:e2:16:4c:0b: 3d:2b:61:17:09:c3:16:81:9c:d1:c4:33:04:07:99:d4:32:53: 0e:a4:10:b0:63:f1:83:46:0c:b8:7b:c1:1d:d8:38:41:ac:4c: c3:88:9f:46:d9:ef:50:18:28:28:45:80:2c:56:b1:2a:1e:6d: 01:36:b7:ce:0f:72:81:64:7c:b1:d7:98:da:29:3c:28:62:c7: e1:76:f6:70:31:dd:2e:9d:aa:39:47:64:12:f0:94:d6:d8:d9: 8a:61:1d:d9:52:df:ea:76:b0:b8:33:c0:24:8f:44:70:59:23: 18:2c:c5:b8:b3:ca:0e:c8:bf:57:f7:0c:f8:1e:ad:8d:14:a2: 44:be:4e:8e -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICC3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVDNjQxMTAvBgNVBAUTKDQwRUJDMjVBMDhCQTVFNzU0MUNFMTQyRDJCQzI4QUU0 RjgyODhBNEIwHhcNMjQwMjE2MTkyNzIwWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWNmYjcxNy1iMmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9X310WqG18x2mNi5wIbMldBygLm/YVAmMDO+r7LfsmF94N7VeHwt+YWuu9h sXAY8CGKoyklOimgVu/6wkMOic0bzQJPDUS5CF6wjr4DrH5vyhP4xLYaCQOarf5p wZ7LL9YrS/Zkb8H7lYSsUXBCE+UM7ilwQ3/Oune9b+4Pku/ZnYfKwuHo3yOSPPt5 f6EVmcsg/u3qN00fIKnfmzyNS2f86J2WUMteO6DhOj40X6boT/op+W6ZwIP1wLWI SN7m0lHGE86XIp9jmFKlYOWkkw00bbRn6VbVWvEpCzYJ8AHgMJsAFPexUwwSxUEA v9uxb3kgv1joyyK3I1/Gzb2UMQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFNeHJCOi TJ95Y2FIhYzTugpkhQccMB8GA1UdIwQYMBaAFEDrwloIul51Qc4ULSvCiuT4KIpL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUM2NC80MjVCNDIzQ0ZG QTMxMUU5ODczNUE2ODVDNEY5QUUwMi9RT3ZDV2dpNlhuVkJ6aFF0SzhLSzVQZ29p a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPdkNXZ2k2WG5WQnpoUXRLOEtLNVBnb2lrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjVDNjQvNDI1QjQyM0NGRkEzMTFFOTg3MzVBNjg1QzRGOUFFMDIvMEM4NTM4QTZG RkE0MTFFOUJDMkI2ODg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnfzgwDQQCAAIwBwMFACQFmkAwDQYJKoZIhvcNAQELBQAD ggEBAKGfex6Pj+0SwuKjKPL6/LUsQY01kDIFMDPdx6HQdfOWaTalpjUEfd29KM0a Zr5gojwQ4EtcQGIUQWc1vfVU9gT5xEb8rvL3EMrzskMqpQfAlgtScwYnaCz+pKLJ R70ed/yeXMIZBRN87KC3vn0NMJtxGV+ScK4P0fRR4hZMCz0rYRcJwxaBnNHEMwQH mdQyUw6kELBj8YNGDLh7wR3YOEGsTMOIn0bZ71AYKChFgCxWsSoebQE2t84PcoFk fLHXmNopPChix+F29nAx3S6dqjlHZBLwlNbY2YphHdlS3+p2sLgzwCSPRHBZIxgs xbizyg7Iv1f3DPgerY0UokS+To4= -----END CERTIFICATE-----Generated at Sat May 18 19:56:05 2024 by rpki-client on console-fra.rpki-client.org