$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/5C7542F4060E11EB9A4BBF52C4F9AE02.roa File: 5C7542F4060E11EB9A4BBF52C4F9AE02.roa (raw, json) Hash identifier: hHmiC/PL3f4/lp+2apj6y/UFcEOV5oahtEwxOsTfmts= Subject key identifier: E3:70:0B:97:67:4B:C7:98:24:53:4C:9C:84:23:4F:AF:E1:0C:0E:24 Certificate issuer: /CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Certificate serial: 0AD5 Authority key identifier: 48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/5C7542F4060E11EB9A4BBF52C4F9AE02.roa Signing time: Wed 08 Feb 2023 20:06:48 +0000 ROA not before: Wed 08 Feb 2023 20:06:48 +0000 ROA not after: Wed 01 May 2024 00:00:00 +0000 asID: 135386 IP address blocks: 103.133.92.0/24 maxlen: 24 103.133.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Mar 2023 20:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2773 (0xad5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Validity Not Before: Feb 8 20:06:48 2023 GMT Not After : May 1 00:00:00 2024 GMT Subject: CN=63e400d8-4e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:14:4b:06:92:9a:3d:be:d5:0c:91:f2:94:95: 14:4f:49:3a:d5:33:65:38:24:65:fe:3c:49:34:c5: f3:68:97:3a:e9:43:38:d4:f8:d8:36:78:a0:ca:b4: ae:d0:28:25:e4:8b:63:40:7e:b2:a5:05:f3:a6:44: 29:e7:de:c9:3f:39:a9:93:cf:b5:0a:79:9a:b7:5a: 40:a5:b0:3c:53:c6:a0:42:84:42:5b:00:ae:b9:cf: 1a:9a:49:cb:95:5d:c6:a1:3e:5b:07:75:a5:1a:68: 42:11:e4:da:23:53:3c:0b:70:9a:ed:0b:71:59:77: 83:20:72:d8:db:81:61:38:20:4c:9b:2c:8a:ee:be: b8:d0:71:78:b1:12:e2:12:41:8a:c2:49:0b:90:03: a0:56:87:0f:8d:ad:02:67:cf:e8:9c:7d:be:42:d9: 17:ca:db:bf:fe:44:dd:5c:e4:2b:41:79:6c:9e:de: 67:b7:16:5d:6a:d6:c8:9d:3e:a4:86:e9:f6:01:fe: 2b:03:dc:34:09:dd:1f:d9:a5:c8:2e:57:54:b3:84: 93:c4:60:e4:6d:39:52:55:fc:39:91:29:58:e5:e2: 08:57:57:f2:2e:1c:be:96:f2:00:25:73:48:08:98: aa:d9:fc:8d:6c:d6:26:77:a4:77:f7:2c:52:13:d3: 24:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:70:0B:97:67:4B:C7:98:24:53:4C:9C:84:23:4F:AF:E1:0C:0E:24 X509v3 Authority Key Identifier: keyid:48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/5C7542F4060E11EB9A4BBF52C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.133.92.0/24 103.133.94.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:7e:e4:a8:b6:45:a0:cf:8e:be:e6:1f:65:ad:a6:8d:c1:7a: d6:4c:e7:10:2d:34:7a:a8:0c:5f:aa:e5:11:4d:3a:ef:fb:ea: 04:bd:96:5f:d6:8e:65:31:d8:73:e5:e2:2a:d1:62:30:c8:c4: c0:20:16:a0:f5:5b:b2:8d:a4:b4:28:4c:ab:2e:f5:c9:2c:06: e6:48:25:26:45:91:7f:6a:b5:db:29:41:f6:41:ae:cd:91:82: 07:c2:a5:4f:91:6f:02:b5:a6:25:f8:7c:35:5c:73:06:7f:35: 15:06:0c:bd:fe:16:ea:ac:92:b8:70:a0:32:58:37:54:4e:7b: cb:9c:c6:a8:27:f4:5f:a7:7e:d6:91:3a:c5:c8:fe:35:41:0e: 1b:25:d6:88:69:7c:07:b4:cd:5a:2b:3c:3e:f5:bb:6f:99:9c: 98:02:1f:ec:3a:3b:c1:a8:93:d2:4d:58:90:f9:e6:85:22:36: e7:98:d3:f2:a7:84:cd:e0:97:21:2a:fa:80:b7:89:8f:10:a9: 51:d8:7d:ab:cf:e2:24:31:5f:e9:55:9a:9e:30:ea:86:19:af: 35:ba:b0:40:97:60:68:de:de:5c:4a:a0:ea:d9:0a:03:6b:11: 89:9f:ff:14:21:8d:c3:48:d6:60:4c:c2:01:5b:a7:0c:d2:ba: b9:cc:38:c7 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRFQjUxMTAvBgNVBAUTKDQ4RTk5ODUxQzE4OUZBOTIxQjg2NjY0RTMwQkM1N0My MEVEMUE4QzQwHhcNMjMwMjA4MjAwNjQ4WhcNMjQwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02M2U0MDBkOC00ZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RRLBpKaPb7VDJHylJUUT0k61TNlOCRl/jxJNMXzaJc66UM41PjYNnigyrSu 0Cgl5ItjQH6ypQXzpkQp597JPzmpk8+1Cnmat1pApbA8U8agQoRCWwCuuc8amknL lV3GoT5bB3WlGmhCEeTaI1M8C3Ca7QtxWXeDIHLY24FhOCBMmyyK7r640HF4sRLi EkGKwkkLkAOgVocPja0CZ8/onH2+QtkXytu//kTdXOQrQXlsnt5ntxZdatbInT6k hun2Af4rA9w0Cd0f2aXILldUs4STxGDkbTlSVfw5kSlY5eIIV1fyLhy+lvIAJXNI CJiq2fyNbNYmd6R39yxSE9MkCwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFONwC5dn S8eYJFNMnIQjT6/hDA4kMB8GA1UdIwQYMBaAFEjpmFHBifqSG4ZmTjC8V8IO0ajE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEVCNS9BRkVBMjlDMjA2 MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1wSWJobVpPTUx4WHdnN1Jx TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPbVlVY0dKLXBJYmhtWk9NTHhYd2c3UnFNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzRFQjUvQUZFQTI5QzIwNjE5MTFFQTg1NEEzNTE2QzRGOUFFMDIvNUM3NTQyRjQw NjBFMTFFQjlBNEJCRjUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnhVwDBABnhV4wDQYJKoZIhvcNAQELBQADggEBAG5+5Ki2 RaDPjr7mH2Wtpo3BetZM5xAtNHqoDF+q5RFNOu/76gS9ll/WjmUx2HPl4irRYjDI xMAgFqD1W7KNpLQoTKsu9cksBuZIJSZFkX9qtdspQfZBrs2RggfCpU+RbwK1piX4 fDVccwZ/NRUGDL3+FuqskrhwoDJYN1ROe8ucxqgn9F+nftaROsXI/jVBDhsl1ohp fAe0zVorPD71u2+ZnJgCH+w6O8Gok9JNWJD55oUiNueY0/KnhM3glyEq+oC3iY8Q qVHYfavP4iQxX+lVmp4w6oYZrzW6sECXYGje3lxKoOrZCgNrEYmf/xQhjcNI1mBM wgFbpwzSurnMOMc= -----END CERTIFICATE-----Generated at Wed Mar 15 11:53:36 2023 by rpki-client on console-fra.rpki-client.org