$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/FD9A4AA0E53111EBAB62446EC4F9AE02.roa File: FD9A4AA0E53111EBAB62446EC4F9AE02.roa (raw, json) Hash identifier: QMaNZz8A/1wAjSRCmeaUTYUnqLadlxV+1b/Xc7UahV8= Subject key identifier: FC:9A:45:3E:77:72:F5:C8:90:95:B8:07:3F:41:AC:CE:9F:BD:77:F0 Certificate issuer: /CN=A9169BB4/serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4 Certificate serial: 0406 Authority key identifier: 85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/FD9A4AA0E53111EBAB62446EC4F9AE02.roa Signing time: Wed 05 Jul 2023 00:50:24 +0000 ROA not before: Wed 05 Jul 2023 00:50:24 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 58868 IP address blocks: 103.152.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.crl rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1030 (0x406) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169BB4/serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4 Validity Not Before: Jul 5 00:50:24 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64a4be4f-1df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:85:33:93:2a:85:31:46:8d:92:38:a9:d8:06: 77:8a:50:2e:49:64:31:6c:99:82:b5:b0:56:94:45: 33:55:c5:a8:25:fa:5e:ea:14:17:60:69:4d:da:86: 0b:bd:ed:1e:c1:dd:11:a9:1c:18:82:3a:f8:0f:42: 70:b0:87:fd:b8:bd:2a:0e:85:a5:bb:eb:3b:a7:b0: 25:26:ea:19:ef:89:13:82:f1:e1:38:96:4b:21:cc: ec:9b:85:e1:94:d4:3f:d5:ec:31:a3:b7:6c:96:55: 3f:46:fd:12:96:02:71:5b:61:ea:f5:d2:6f:8d:bb: 5c:ae:92:b7:63:0b:d5:2f:3b:d1:7f:0e:4f:7c:86: 8e:dd:d0:51:26:dd:72:18:f8:39:38:e6:8a:7c:78: 5a:59:25:2a:60:31:b7:6c:6a:88:9b:65:62:56:e0: f1:4d:7b:3d:df:d2:40:17:58:ed:a9:7a:ac:eb:9e: fb:1f:10:20:30:71:66:59:b3:c0:cb:41:4c:f4:43: 98:ab:7a:68:e6:bd:ea:6f:c4:db:8d:9e:d1:49:f4: b3:34:01:75:13:a9:e4:35:5b:58:d8:73:38:ef:19: 60:dd:70:1b:71:86:31:12:3d:7a:de:dd:96:e5:88: 77:62:be:95:20:9a:9e:98:30:52:f8:78:6e:92:72: 6c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:9A:45:3E:77:72:F5:C8:90:95:B8:07:3F:41:AC:CE:9F:BD:77:F0 X509v3 Authority Key Identifier: keyid:85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/FD9A4AA0E53111EBAB62446EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.204.0/23 Signature Algorithm: sha256WithRSAEncryption 28:ac:24:72:a4:77:17:a2:ea:92:30:90:e4:7d:12:7f:a3:7c: 76:b1:59:9c:ba:eb:40:6b:74:f9:96:25:2d:98:f6:cf:0e:08: e8:dc:b2:48:86:e8:72:8f:24:87:2a:11:54:59:bd:fa:17:4e: 43:56:38:da:d3:6c:87:5b:11:31:81:bd:c7:1d:59:53:1c:c1: 3f:6e:85:85:28:51:00:56:07:c3:3b:69:76:d2:23:8d:15:05: 10:00:cc:e2:6d:61:da:d7:8f:3b:6c:28:d5:48:99:7b:0b:cc: 36:4e:12:74:44:c8:8e:ba:5a:4d:18:13:9d:73:97:b3:4d:f8: 84:3b:a9:c0:39:49:b3:dc:a2:cc:24:65:ed:bc:f6:e9:08:4e: 2f:7c:00:4a:7e:3a:0a:40:c3:15:4e:d1:0b:d9:2d:76:8a:c5: 7e:00:e8:29:de:d3:c9:90:9e:87:3c:fc:26:8d:fd:3b:a9:a3: 76:88:80:6f:e8:27:f8:d0:fc:d3:2d:8f:f5:03:23:aa:15:35: 2a:58:82:ef:e2:57:1c:31:94:d3:e8:be:f3:08:25:e3:0a:6c: d4:41:cb:50:84:11:da:41:b3:c2:04:05:ac:18:ef:40:e8:e1: 83:55:d0:0d:c6:6d:44:30:7e:30:74:08:ac:1e:f7:22:62:ad: 5d:9f:4e:0d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlCQjQxMTAvBgNVBAUTKDg1Q0I0MDE5MEE3N0RDOUU2ODk0RDg1N0Y3M0JCN0E5 MEUwOTc0RTQwHhcNMjMwNzA1MDA1MDI0WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGE0YmU0Zi0xZGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1IUzkyqFMUaNkjip2AZ3ilAuSWQxbJmCtbBWlEUzVcWoJfpe6hQXYGlN2oYL ve0ewd0RqRwYgjr4D0JwsIf9uL0qDoWlu+s7p7AlJuoZ74kTgvHhOJZLIczsm4Xh lNQ/1ewxo7dsllU/Rv0SlgJxW2Hq9dJvjbtcrpK3YwvVLzvRfw5PfIaO3dBRJt1y GPg5OOaKfHhaWSUqYDG3bGqIm2ViVuDxTXs939JAF1jtqXqs6577HxAgMHFmWbPA y0FM9EOYq3po5r3qb8TbjZ7RSfSzNAF1E6nkNVtY2HM47xlg3XAbcYYxEj163t2W 5Yh3Yr6VIJqemDBS+HhuknJsLwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPyaRT53 cvXIkJW4Bz9BrM6fvXfwMB8GA1UdIwQYMBaAFIXLQBkKd9yeaJTYV/c7t6kOCXTk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUJCNC9CM0U3MzA5Q0U1 MkUxMUVCOUVCMUZENjlDNEY5QUUwMi9oY3RBR1FwMzNKNW9sTmhYOXp1M3FRNEpk T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hjdEFHUXAzM0o1b2xOaFg5enUzcVE0SmRPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjlCQjQvQjNFNzMwOUNFNTJFMTFFQjlFQjFGRDY5QzRGOUFFMDIvRkQ5QTRBQTBF NTMxMTFFQkFCNjI0NDZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmMwwDQYJKoZIhvcNAQELBQADggEBACisJHKkdxei6pIw kOR9En+jfHaxWZy660BrdPmWJS2Y9s8OCOjcskiG6HKPJIcqEVRZvfoXTkNWONrT bIdbETGBvccdWVMcwT9uhYUoUQBWB8M7aXbSI40VBRAAzOJtYdrXjztsKNVImXsL zDZOEnREyI66Wk0YE51zl7NN+IQ7qcA5SbPcoswkZe289ukITi98AEp+OgpAwxVO 0QvZLXaKxX4A6Cne08mQnoc8/CaN/Tupo3aIgG/oJ/jQ/NMtj/UDI6oVNSpYgu/i VxwxlNPovvMIJeMKbNRBy1CEEdpBs8IEBawY70Do4YNV0A3GbUQwfjB0CKwe9yJi rV2fTg0= -----END CERTIFICATE-----Generated at Sun May 19 02:39:36 2024 by rpki-client on console-fra.rpki-client.org