$ rpki-client -vvf rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/A2A3D38A05CE11EA80526530C4F9AE02.roa File: A2A3D38A05CE11EA80526530C4F9AE02.roa (raw, json) Hash identifier: WvVRuKjmFetWalrRmBx2MQuKTGac5vufXmU8sXdWgUY= Subject key identifier: 66:40:AD:9D:DD:AA:1E:14:9F:EE:92:9F:DA:FD:74:54:C4:F0:CA:12 Certificate issuer: /CN=A9171064/serialNumber=FD827C026B3967E2A140D4D2314E2B0E9C047430 Certificate serial: 0AE1 Authority key identifier: FD:82:7C:02:6B:39:67:E2:A1:40:D4:D2:31:4E:2B:0E:9C:04:74:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/A2A3D38A05CE11EA80526530C4F9AE02.roa Signing time: Mon 10 Jul 2023 19:16:06 +0000 ROA not before: Mon 10 Jul 2023 19:16:06 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 137911 IP address blocks: 103.117.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2785 (0xae1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171064/serialNumber=FD827C026B3967E2A140D4D2314E2B0E9C047430 Validity Not Before: Jul 10 19:16:06 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64ac58f6-ec88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:41:37:14:e0:b0:f2:35:e0:2b:2d:08:f3:35: 89:ee:65:c9:ed:a2:be:0c:3b:85:5a:d3:f2:88:d0: f0:9c:89:ff:42:d6:f3:88:43:59:23:4a:13:b2:64: aa:89:15:e3:b3:9e:3a:40:1a:d9:3e:6e:e0:e5:ae: 63:03:bd:15:d4:b6:0b:bb:ce:74:a6:0a:aa:f1:8b: 11:90:cc:6a:c6:50:9b:b2:c4:ac:09:a7:46:2e:fe: d0:66:bb:f3:bb:84:99:d9:a7:ba:62:9b:f9:58:90: 57:18:4a:d6:57:bb:9a:0d:9e:bb:12:45:ef:3a:67: 55:b5:1a:88:16:ae:54:8d:af:da:a3:e6:21:4c:6b: 70:06:fc:5e:1a:45:3b:56:de:30:51:8d:ca:7b:d9: 3b:06:04:10:8b:0f:ff:68:d4:08:04:77:61:30:e8: 50:1b:d7:09:18:98:3a:ab:60:ac:16:fa:b3:13:4c: 41:16:c5:a6:b0:e4:0e:bc:e6:90:d7:7c:71:44:c3: 8e:45:7f:36:68:03:4d:8f:7e:b8:47:12:ca:c8:c5: c3:d0:77:45:74:c6:da:af:26:c8:e3:49:2b:7a:d2: 92:d3:87:6f:39:7a:33:11:eb:4d:95:89:52:e1:9b: be:bf:85:a1:6d:5f:fa:77:3d:9d:36:fe:2e:01:ce: ad:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:40:AD:9D:DD:AA:1E:14:9F:EE:92:9F:DA:FD:74:54:C4:F0:CA:12 X509v3 Authority Key Identifier: keyid:FD:82:7C:02:6B:39:67:E2:A1:40:D4:D2:31:4E:2B:0E:9C:04:74:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/A2A3D38A05CE11EA80526530C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.117.11.0/24 Signature Algorithm: sha256WithRSAEncryption 89:ad:79:76:43:30:20:df:93:89:6e:4d:ce:05:bd:81:04:d6: 8b:f0:c7:27:64:93:a1:8d:34:b0:ef:59:fa:76:77:88:0d:b7: 61:1f:bd:a5:7e:41:40:38:d3:3d:45:73:ff:fc:ec:83:20:79: 0e:de:07:2f:6e:b4:31:ad:9c:23:21:f4:3e:8c:b5:ea:9b:06: e3:0c:bc:f7:cf:32:43:96:1e:ad:4e:69:03:dd:18:6e:25:33: 18:ad:23:80:ef:89:a1:ca:19:ed:cc:d5:6d:c7:61:1a:5f:d9: e9:f0:54:8c:da:c7:31:17:e0:71:bf:89:23:83:ce:99:ae:6b: 89:f5:00:bd:10:55:c7:97:88:bc:89:1f:1b:82:a9:b4:b0:c6: d0:f6:a0:6e:e7:57:79:fb:fa:c3:06:84:82:01:e9:28:68:f4: 7a:38:1c:19:74:cd:13:8e:8a:58:aa:9d:2f:4e:f3:02:13:b3: 3d:41:8e:c6:73:ad:b7:43:28:bc:04:f7:e2:7a:1a:5a:63:ee: a2:6c:c2:da:31:a2:2c:8e:15:49:a7:72:eb:5e:43:50:0b:67: b2:fb:a2:b1:0e:31:df:1c:51:2a:b2:50:bf:1e:26:17:49:bd: 6a:d1:b0:56:6c:50:b4:55:08:85:6a:b5:02:0e:e4:2b:22:ea: 4f:ed:fa:e5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEwNjQxMTAvBgNVBAUTKEZEODI3QzAyNkIzOTY3RTJBMTQwRDREMjMxNEUyQjBF OUMwNDc0MzAwHhcNMjMwNzEwMTkxNjA2WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGFjNThmNi1lYzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkE3FOCw8jXgKy0I8zWJ7mXJ7aK+DDuFWtPyiNDwnIn/QtbziENZI0oTsmSq iRXjs546QBrZPm7g5a5jA70V1LYLu850pgqq8YsRkMxqxlCbssSsCadGLv7QZrvz u4SZ2ae6Ypv5WJBXGErWV7uaDZ67EkXvOmdVtRqIFq5Uja/ao+YhTGtwBvxeGkU7 Vt4wUY3Ke9k7BgQQiw//aNQIBHdhMOhQG9cJGJg6q2CsFvqzE0xBFsWmsOQOvOaQ 13xxRMOORX82aANNj364RxLKyMXD0HdFdMbarybI40kretKS04dvOXozEetNlYlS 4Zu+v4WhbV/6dz2dNv4uAc6tDwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGZArZ3d qh4Un+6Sn9r9dFTE8MoSMB8GA1UdIwQYMBaAFP2CfAJrOWfioUDU0jFOKw6cBHQw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTA2NC8wNzYzOTYyMDA1 MkYxMUVBOEE5RTM5NDdDNEY5QUUwMi9fWUo4QW1zNVotS2hRTlRTTVU0ckRwd0Vk REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19ZSjhBbXM1Wi1LaFFOVFNNVTRyRHB3RWREQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzEwNjQvMDc2Mzk2MjAwNTJGMTFFQThBOUUzOTQ3QzRGOUFFMDIvQTJBM0QzOEEw NUNFMTFFQTgwNTI2NTMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABndQswDQYJKoZIhvcNAQELBQADggEBAImteXZDMCDfk4lu Tc4FvYEE1ovwxydkk6GNNLDvWfp2d4gNt2EfvaV+QUA40z1Fc//87IMgeQ7eBy9u tDGtnCMh9D6MteqbBuMMvPfPMkOWHq1OaQPdGG4lMxitI4DviaHKGe3M1W3HYRpf 2enwVIzaxzEX4HG/iSODzpmua4n1AL0QVceXiLyJHxuCqbSwxtD2oG7nV3n7+sMG hIIB6Sho9Ho4HBl0zROOiliqnS9O8wITsz1BjsZzrbdDKLwE9+J6Glpj7qJswtox oiyOFUmncuteQ1ALZ7L7orEOMd8cUSqyUL8eJhdJvWrRsFZsULRVCIVqtQIO5Csi 6k/t+uU= -----END CERTIFICATE-----Generated at Wed May 8 21:03:58 2024 by rpki-client on console-fra.rpki-client.org