$ rpki-client -vvf rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/732F4132D85E11EDB34ED618C4F9AE02.roa File: 732F4132D85E11EDB34ED618C4F9AE02.roa (raw, json) Hash identifier: vZKHycAcW2nLtUOaWvEw8PnU1TIAzuT6PSJsqO4DJ8E= Subject key identifier: 06:72:6B:C0:BA:E6:47:68:AF:60:36:20:1D:20:74:01:8B:F8:72:E2 Certificate issuer: /CN=A9169FA9/serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2 Certificate serial: 24 Authority key identifier: D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/732F4132D85E11EDB34ED618C4F9AE02.roa Signing time: Tue 13 Jun 2023 07:36:21 +0000 ROA not before: Tue 13 Jun 2023 07:36:21 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 139245 IP address blocks: 103.140.86.0/23 maxlen: 23 103.140.86.0/24 maxlen: 24 103.140.87.0/24 maxlen: 24 2001:df0:b480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 02:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169FA9/serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2 Validity Not Before: Jun 13 07:36:21 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64881c75-3717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:47:76:cd:36:8a:55:37:8b:b3:c0:b5:42:29: bc:ec:9e:7a:8b:e4:dc:4f:dd:fa:d9:43:6d:a9:07: 76:00:7d:11:52:f9:95:00:a5:9f:4a:eb:af:16:93: 04:d2:f4:e3:6b:b4:f7:da:15:d3:cc:61:b1:59:23: d4:a0:d2:aa:fa:4a:59:d2:46:a1:de:2c:5a:e6:b6: 3c:39:b9:78:ba:d2:9e:06:a1:66:0e:60:56:e0:0c: 6d:b5:5a:2d:f2:5e:d8:da:a6:c0:8e:2d:6c:6a:50: e8:6d:7f:2a:b2:bb:a8:14:38:50:e8:0c:30:ab:c9: 1b:21:75:31:15:db:9a:58:40:93:8a:c7:a1:ee:72: 74:c7:e0:9f:99:ad:d0:8e:9b:94:be:34:bb:22:93: bd:55:a2:6d:89:51:c3:70:b3:e0:d2:b3:4b:e3:2d: 6a:bb:94:f5:9e:18:f0:9a:4d:11:e7:1d:21:a5:b9: 10:ec:9f:29:1d:c2:26:67:94:01:d8:b3:9b:a3:7b: 75:03:ff:ac:31:ba:06:c6:c3:a0:2d:06:bd:f9:45: c8:4c:db:fe:6e:7c:d0:b5:70:c2:b1:eb:65:3a:97: f9:bc:f5:f0:c1:3c:bd:c8:e3:6c:8e:81:3d:3e:a1: 3a:8e:1b:ad:13:0d:26:59:aa:46:cf:6f:cc:cb:4f: 3c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:72:6B:C0:BA:E6:47:68:AF:60:36:20:1D:20:74:01:8B:F8:72:E2 X509v3 Authority Key Identifier: keyid:D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/732F4132D85E11EDB34ED618C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.86.0/23 IPv6: 2001:df0:b480::/48 Signature Algorithm: sha256WithRSAEncryption b5:75:0b:f0:49:55:d7:ce:60:27:6d:3f:3e:5a:22:b7:fa:49: d8:e9:48:4f:8c:9c:58:af:77:6b:7e:04:13:c8:25:b1:bb:c4: a7:fa:e9:f0:fc:30:77:8b:96:e4:8a:9a:1d:34:cb:8e:e1:24: 86:0e:1f:7e:a5:eb:b4:69:b8:5b:15:ab:eb:d6:61:4f:8d:45: 62:98:88:0e:2e:b4:0d:75:9b:45:89:6c:57:ac:74:57:cc:90: 3b:e8:c4:86:d8:94:d5:83:bd:25:a4:35:84:c6:10:b1:fd:e8: 8b:5c:f7:ff:f6:1d:7a:b4:ec:69:93:e1:94:7c:fe:f8:be:f7: fe:b0:f4:e2:b0:da:64:c1:2c:77:eb:ea:07:57:f9:05:3a:da: 62:91:7d:18:a4:86:59:5e:65:c1:ab:da:b0:30:e6:8c:92:2e: 6f:bd:08:e3:12:53:f5:cd:13:61:62:d4:97:09:43:b1:1c:c9: f5:40:60:f9:43:c2:25:bf:30:23:6c:08:68:dd:50:1f:52:d8: c7:ac:16:99:5b:f0:de:0b:7f:78:a5:dc:04:c9:06:2f:a9:68: fd:a2:62:58:1e:62:63:b8:d4:d3:99:9c:f1:c9:04:d2:cd:5c: a1:b4:b2:ed:8e:ce:ae:76:5d:f9:6f:2a:97:ff:4d:b9:0e:f3: 3f:19:87:f5 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OUZBOTExMC8GA1UEBRMoRDgwNTc3RkUzNTFDRUMxMzJGQzBGRkExODg4N0FCMEM3 NDZCMTRGMjAeFw0yMzA2MTMwNzM2MjFaFw0yNDA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY0ODgxYzc1LTM3MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6R3bNNopVN4uzwLVCKbzsnnqL5NxP3frZQ22pB3YAfRFS+ZUApZ9K668WkwTS 9ONrtPfaFdPMYbFZI9Sg0qr6SlnSRqHeLFrmtjw5uXi60p4GoWYOYFbgDG21Wi3y XtjapsCOLWxqUOhtfyqyu6gUOFDoDDCryRshdTEV25pYQJOKx6HucnTH4J+ZrdCO m5S+NLsik71Vom2JUcNws+DSs0vjLWq7lPWeGPCaTRHnHSGluRDsnykdwiZnlAHY s5uje3UD/6wxugbGw6AtBr35RchM2/5ufNC1cMKx62U6l/m89fDBPL3I42yOgT0+ oTqOG60TDSZZqkbPb8zLTzyfAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUBnJrwLrm R2ivYDYgHSB0AYv4cuIwHwYDVR0jBBgwFoAU2AV3/jUc7BMvwP+hiIerDHRrFPIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5RkE5LzdDMEY0RDgyRDg1 QTExRUQ4ODFBQzgxMkM0RjlBRTAyLzJBVjNfalVjN0JNdndQLWhpSWVyREhSckZQ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMkFWM19qVWM3Qk12d1AtaGlJZXJESFJyRlBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUZBOS83QzBGNEQ4MkQ4NUExMUVEODgxQUM4MTJDNEY5QUUwMi83MzJGNDEzMkQ4 NUUxMUVEQjM0RUQ2MThDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAWeMVjAPBAIAAjAJAwcAIAEN8LSAMA0GCSqGSIb3DQEBCwUA A4IBAQC1dQvwSVXXzmAnbT8+WiK3+knY6UhPjJxYr3drfgQTyCWxu8Sn+unw/DB3 i5bkipodNMuO4SSGDh9+peu0abhbFavr1mFPjUVimIgOLrQNdZtFiWxXrHRXzJA7 6MSG2JTVg70lpDWExhCx/eiLXPf/9h16tOxpk+GUfP74vvf+sPTisNpkwSx36+oH V/kFOtpikX0YpIZZXmXBq9qwMOaMki5vvQjjElP1zRNhYtSXCUOxHMn1QGD5Q8Il vzAjbAho3VAfUtjHrBaZW/DeC394pdwEyQYvqWj9omJYHmJjuNTTmZzxyQTSzVyh tLLtjs6udl35byqX/025DvM/GYf1 -----END CERTIFICATE-----Generated at Mon May 27 06:55:49 2024 by rpki-client on console-fra.rpki-client.org