$ rpki-client -vvf rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/0963FDF0C35711EC9F5ADC3DC4F9AE02.roa File: 0963FDF0C35711EC9F5ADC3DC4F9AE02.roa (raw, json) Hash identifier: Tom70YCu/S7Tv4KcqktThCfx1aOcqXCVZ/HT5qZpYsc= Subject key identifier: 0B:22:CE:A8:69:D1:67:AB:35:20:7C:8D:F9:9F:A2:DF:8C:A6:99:65 Certificate issuer: /CN=A91717D1/serialNumber=DC187FC8416CE5B347BAF221A3613A3B47828E88 Certificate serial: 0D80 Authority key identifier: DC:18:7F:C8:41:6C:E5:B3:47:BA:F2:21:A3:61:3A:3B:47:82:8E:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bh_yEFs5bNHuvIho2E6O0eCjog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/0963FDF0C35711EC9F5ADC3DC4F9AE02.roa Signing time: Fri 14 Jul 2023 18:15:02 +0000 ROA not before: Fri 14 Jul 2023 18:15:02 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 135413 IP address blocks: 103.139.8.0/23 maxlen: 23 103.139.8.0/24 maxlen: 24 2001:df0:6180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.crl rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bh_yEFs5bNHuvIho2E6O0eCjog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3456 (0xd80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91717D1/serialNumber=DC187FC8416CE5B347BAF221A3613A3B47828E88 Validity Not Before: Jul 14 18:15:02 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64b190a6-2a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d9:1c:20:69:45:df:01:b7:77:db:ec:d5:14: 05:66:b3:03:74:33:2c:d0:72:a0:65:ea:53:e5:3f: 7c:07:16:aa:ac:a9:a0:30:49:fc:b3:e7:5a:1a:29: c2:32:ca:f7:68:21:08:20:28:db:77:fe:14:3b:38: 78:1c:aa:29:64:27:d4:88:79:c2:35:58:cc:4d:59: 4b:24:8a:c0:52:f0:a6:4d:6e:7b:d5:72:62:d3:5e: f7:df:7d:19:b1:37:b2:74:35:cb:fc:cb:08:28:cf: dd:d4:8e:f6:9f:bf:25:e1:46:aa:66:64:5a:1e:96: c3:88:76:25:02:8e:0f:d4:78:4a:7f:0a:f8:37:19: 9a:3b:75:75:38:cf:04:3d:62:9c:6d:cf:94:3b:97: 20:cd:30:51:15:ad:22:74:ec:e8:5e:4d:0b:c2:7e: 8f:19:e2:61:a7:3b:38:04:95:02:59:3c:39:20:8c: f4:cc:7f:18:ae:5b:1b:5d:02:c7:95:6f:7e:b8:d8: 3b:86:b3:42:e9:84:f2:9f:39:9f:99:5a:9b:f6:95: fe:8c:fe:74:f3:d7:05:ec:e3:da:42:f7:9e:03:04: a8:f6:dc:4f:bf:7d:9a:d2:b8:fd:ae:9b:de:bc:20: 14:fb:9e:49:61:b1:be:b6:73:e3:65:57:b6:f0:75: e3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:22:CE:A8:69:D1:67:AB:35:20:7C:8D:F9:9F:A2:DF:8C:A6:99:65 X509v3 Authority Key Identifier: keyid:DC:18:7F:C8:41:6C:E5:B3:47:BA:F2:21:A3:61:3A:3B:47:82:8E:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bh_yEFs5bNHuvIho2E6O0eCjog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/0963FDF0C35711EC9F5ADC3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.139.8.0/23 IPv6: 2001:df0:6180::/48 Signature Algorithm: sha256WithRSAEncryption 6b:86:3f:85:9e:53:7f:9a:e9:db:73:b7:91:1d:db:ab:85:e3: cb:3d:8e:77:99:37:85:ff:6d:9d:87:4f:86:b6:69:a1:d0:d6: 4c:b9:5e:83:5d:e5:5e:83:2b:4c:44:f7:9d:01:11:01:86:46: 8f:a5:ca:93:27:fd:ce:44:89:78:0a:fb:85:03:69:c4:47:82: ef:0a:94:1c:96:16:65:62:65:c0:2a:a0:52:d9:e1:63:e7:6e: 95:af:5d:fa:c3:41:08:be:cd:7d:c0:e1:ff:09:1a:ac:89:73: 69:1c:e2:76:ec:84:52:58:c5:37:91:d7:70:fb:df:1e:f9:7e: 26:ea:e2:c0:89:f2:b2:7d:18:3f:a2:ff:02:71:b2:df:39:ac: 2a:92:c0:4b:ef:89:49:38:00:5e:bd:df:8b:a4:d4:af:60:e4: 76:a0:72:ce:cf:3d:f9:9d:57:f4:11:9c:92:fc:1d:10:49:7b: 3e:ba:d5:c5:a8:c9:bf:99:64:6a:df:d9:a8:72:e4:6a:dc:89: c3:55:b8:4a:ef:b8:fd:e3:a8:05:db:a5:90:56:ac:61:ee:f0: de:0a:af:35:53:bf:50:51:c4:97:cd:6a:b0:3d:fb:c4:44:ea: de:a2:b7:c2:04:7c:9d:07:a5:99:d2:08:0a:5c:56:dd:b7:95: a3:bf:fb:5f -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3RDExMTAvBgNVBAUTKERDMTg3RkM4NDE2Q0U1QjM0N0JBRjIyMUEzNjEzQTNC NDc4MjhFODgwHhcNMjMwNzE0MTgxNTAyWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGIxOTBhNi0yYTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9kcIGlF3wG3d9vs1RQFZrMDdDMs0HKgZepT5T98BxaqrKmgMEn8s+daGinC Msr3aCEIICjbd/4UOzh4HKopZCfUiHnCNVjMTVlLJIrAUvCmTW571XJi0173330Z sTeydDXL/MsIKM/d1I72n78l4UaqZmRaHpbDiHYlAo4P1HhKfwr4NxmaO3V1OM8E PWKcbc+UO5cgzTBRFa0idOzoXk0Lwn6PGeJhpzs4BJUCWTw5IIz0zH8YrlsbXQLH lW9+uNg7hrNC6YTynzmfmVqb9pX+jP5089cF7OPaQveeAwSo9txPv32a0rj9rpve vCAU+55JYbG+tnPjZVe28HXjLQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFAsizqhp 0WerNSB8jfmfot+MppllMB8GA1UdIwQYMBaAFNwYf8hBbOWzR7ryIaNhOjtHgo6I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTdEMS85QTlCNDhBMjgy QTMxMUU5OUU1ODIzODRDNEY5QUUwMi8zQmhfeUVGczViTkh1dklobzJFNk8wZUNq b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNCaF95RUZzNWJOSHV2SWhvMkU2TzBlQ2pvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzE3RDEvOUE5QjQ4QTI4MkEzMTFFOTlFNTgyMzg0QzRGOUFFMDIvMDk2M0ZERjBD MzU3MTFFQzlGNUFEQzNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFniwgwDwQCAAIwCQMHACABDfBhgDANBgkqhkiG9w0BAQsF AAOCAQEAa4Y/hZ5Tf5rp23O3kR3bq4Xjyz2Od5k3hf9tnYdPhrZpodDWTLleg13l XoMrTET3nQERAYZGj6XKkyf9zkSJeAr7hQNpxEeC7wqUHJYWZWJlwCqgUtnhY+du la9d+sNBCL7NfcDh/wkarIlzaRziduyEUljFN5HXcPvfHvl+JuriwInysn0YP6L/ AnGy3zmsKpLAS++JSTgAXr3fi6TUr2DkdqByzs89+Z1X9BGckvwdEEl7PrrVxajJ v5lkat/ZqHLkatyJw1W4Su+4/eOoBdulkFasYe7w3gqvNVO/UFHEl81qsD37xETq 3qK3wgR8nQelmdIIClxW3beVo7/7Xw== -----END CERTIFICATE-----Generated at Sat May 18 19:15:25 2024 by rpki-client on console-ams.rpki-client.org