$ rpki-client -vvf rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/A987B8BEDB0B11ECB433A842C4F9AE02.roa File: A987B8BEDB0B11ECB433A842C4F9AE02.roa (raw, json) Hash identifier: Uux9XyphLsVIKeA/IFErVFzA0Ft4kk18NgzJzhEmzX4= Subject key identifier: 0F:3E:92:C4:68:B5:A0:84:D1:BD:85:D1:73:90:CC:84:66:89:EE:09 Certificate issuer: /CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Certificate serial: 060F Authority key identifier: E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/A987B8BEDB0B11ECB433A842C4F9AE02.roa Signing time: Sun 02 Jul 2023 22:28:49 +0000 ROA not before: Sun 02 Jul 2023 22:28:49 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 45654 IP address blocks: 103.1.188.0/22 maxlen: 24 103.19.172.0/22 maxlen: 24 103.232.160.0/22 maxlen: 24 113.212.168.0/21 maxlen: 24 163.47.120.0/22 maxlen: 24 163.47.136.0/22 maxlen: 24 163.47.168.0/22 maxlen: 24 182.237.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 23:26:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1551 (0x60f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Validity Not Before: Jul 2 22:28:49 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64a1fa21-1db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e4:7d:fe:b3:93:d2:e1:74:43:00:a8:6d:67: 4e:9f:ae:4a:49:1c:d7:64:df:6d:46:23:47:81:f4: 5a:09:2e:fa:5c:f7:2a:91:d1:d0:45:ed:58:7a:0f: 27:44:25:4a:d5:0f:ba:e6:4e:12:08:3a:d9:9d:ce: 17:ea:35:d2:2a:89:0f:09:b1:07:35:6b:9a:15:bd: 9f:d1:bb:b5:91:94:d5:c4:08:fc:17:e2:49:69:f6: a7:6e:82:19:87:de:d5:a3:0e:47:79:a3:7d:90:e1: 97:9a:1c:63:25:d0:b9:32:c2:a1:2c:20:ae:4d:8b: 64:b5:8f:4d:4e:4b:35:83:10:4b:eb:ab:04:d1:50: 4c:7b:57:23:97:4a:ce:36:56:07:ef:52:78:86:91: d4:01:75:0e:cb:d3:51:6e:03:9a:00:a7:5a:2c:ff: 7a:97:72:9b:cf:2a:30:8e:c6:bb:a9:59:50:0a:3f: cf:43:86:c0:28:ec:0c:a1:88:fd:81:26:9e:df:ba: b5:0b:cd:ec:0b:02:db:d7:59:dd:fe:cf:0c:75:a7: da:6a:ec:30:8d:29:05:92:a4:af:79:dc:4e:78:be: b0:fb:6d:e1:95:de:ca:71:b5:36:b0:a4:da:40:71: 9f:19:f8:eb:37:e9:ad:ce:7f:ed:e4:81:1a:77:fc: 80:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3E:92:C4:68:B5:A0:84:D1:BD:85:D1:73:90:CC:84:66:89:EE:09 X509v3 Authority Key Identifier: keyid:E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/A987B8BEDB0B11ECB433A842C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.1.188.0/22 103.19.172.0/22 103.232.160.0/22 113.212.168.0/21 163.47.120.0/22 163.47.136.0/22 163.47.168.0/22 182.237.4.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:f4:ce:de:3c:06:da:ce:0c:cf:97:de:0d:9b:f9:01:e5:4b: 43:95:46:07:fa:bd:85:1d:26:63:ed:7d:89:74:e0:5c:f0:f4: 7f:e5:31:65:c8:b7:77:9f:e0:c9:c2:bf:e7:58:fe:5d:64:c5: 9b:db:fb:a1:bd:90:22:b8:88:48:c7:cc:d9:87:90:55:95:6b: e9:e6:bc:99:0b:3a:43:02:8a:53:8b:b2:ad:c6:7d:04:50:4b: d4:cf:64:d6:74:08:3b:b4:08:95:81:d8:39:0b:0e:a9:e0:66: 4b:02:be:44:0d:fc:18:a0:17:a9:5f:bd:f6:24:0c:5a:8e:04: c1:92:98:cb:cc:e2:5f:c1:3d:76:18:75:d2:7f:ab:5d:5c:46: 90:ad:2a:0a:59:c9:96:44:bb:03:94:55:15:d6:17:93:0c:53: 54:8e:31:a1:f1:c4:8a:8c:89:2e:1d:9c:7f:b1:a5:2b:94:3f: 7b:8a:5b:a9:a8:48:e7:e8:ed:6a:4a:f1:a8:84:df:4a:e2:85: 60:8a:e5:df:b5:af:2d:ef:49:1a:59:9d:ff:5d:5c:ef:48:da: e9:b9:b3:82:24:fd:0a:c6:e7:0a:1e:38:e2:e7:f3:ac:64:2b: 7d:2c:6e:5e:b0:38:8a:41:dc:0b:ca:71:42:ba:4c:1b:1b:d6: 86:03:82:02 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgICBg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUwMjcxMTAvBgNVBAUTKEUxNzcyQ0I1RDM5NjUyNzZDRjRFOThEMzc2NkI2MzBE N0UzRjgxNzgwHhcNMjMwNzAyMjIyODQ5WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGExZmEyMS0xZGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5eR9/rOT0uF0QwCobWdOn65KSRzXZN9tRiNHgfRaCS76XPcqkdHQRe1Yeg8n RCVK1Q+65k4SCDrZnc4X6jXSKokPCbEHNWuaFb2f0bu1kZTVxAj8F+JJafanboIZ h97Vow5HeaN9kOGXmhxjJdC5MsKhLCCuTYtktY9NTks1gxBL66sE0VBMe1cjl0rO NlYH71J4hpHUAXUOy9NRbgOaAKdaLP96l3Kbzyowjsa7qVlQCj/PQ4bAKOwMoYj9 gSae37q1C83sCwLb11nd/s8MdafaauwwjSkFkqSvedxOeL6w+23hld7KcbU2sKTa QHGfGfjrN+mtzn/t5IEad/yAewIDAQABo4ICvzCCArswHQYDVR0OBBYEFA8+ksRo taCE0b2F0XOQzIRmie4JMB8GA1UdIwQYMBaAFOF3LLXTllJ2z06Y03ZrYw1+P4F4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTAyNy8yNTA1Q0VEQzI1 NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1VuYlBUcGpUZG10akRYNF9n WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYY3N0ZE9XVW5iUFRwalRkbXRqRFg0X2dYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzUwMjcvMjUwNUNFREMyNTY4MTFFQkFDMkNBQzVBQzRGOUFFMDIvQTk4N0I4QkVE QjBCMTFFQ0I0MzNBODQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSQYIKwYBBQUHAQcBAf8E OjA4MDYEAgABMDADBAJnAbwDBAJnE6wDBAJn6KADBANx1KgDBAKjL3gDBAKjL4gD BAKjL6gDBAK27QQwDQYJKoZIhvcNAQELBQADggEBAJ70zt48BtrODM+X3g2b+QHl S0OVRgf6vYUdJmPtfYl04Fzw9H/lMWXIt3ef4MnCv+dY/l1kxZvb+6G9kCK4iEjH zNmHkFWVa+nmvJkLOkMCilOLsq3GfQRQS9TPZNZ0CDu0CJWB2DkLDqngZksCvkQN /BigF6lfvfYkDFqOBMGSmMvM4l/BPXYYddJ/q11cRpCtKgpZyZZEuwOUVRXWF5MM U1SOMaHxxIqMiS4dnH+xpSuUP3uKW6moSOfo7WpK8aiE30rihWCK5d+1ry3vSRpZ nf9dXO9I2um5s4Ik/QrG5woeOOLn86xkK30sbl6wOIpB3AvKcUK6TBsb1oYDggI= -----END CERTIFICATE-----Generated at Tue May 7 01:58:21 2024 by rpki-client on console-fra.rpki-client.org