$ rpki-client -vvf rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/FCCF8F6E5B8111ED85FB0456C4F9AE02.roa File: FCCF8F6E5B8111ED85FB0456C4F9AE02.roa (raw, json) Hash identifier: qp0p19FgxJZz7DqlZ+b6D0Wx5IorPdvXYrQ3BI/Cxqg= Subject key identifier: C0:53:12:A5:9D:E3:BC:82:EA:68:8F:E2:5A:1F:84:B0:84:60:97:13 Certificate issuer: /CN=A9176909/serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913 Certificate serial: DA Authority key identifier: 3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/FCCF8F6E5B8111ED85FB0456C4F9AE02.roa Signing time: Fri 01 Dec 2023 05:16:03 +0000 ROA not before: Fri 01 Dec 2023 05:16:03 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 135075 IP address blocks: 103.20.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 05:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176909/serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913 Validity Not Before: Dec 1 05:16:03 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65696c12-b09c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b4:48:d8:0c:92:32:9a:d1:33:67:c6:b9:b4: a9:77:97:b7:e6:12:7e:8a:23:06:94:cf:77:a2:45: 98:a5:14:4f:c0:d6:0f:53:88:ca:12:9a:a0:70:27: 78:3a:01:9b:65:c3:8f:48:8f:95:ef:f8:b1:25:29: 08:cb:a9:58:2e:15:4e:85:70:7c:76:27:1d:81:3f: 32:75:b4:9e:ca:2f:4c:90:da:9b:7a:71:cc:56:0c: 0a:66:1e:1e:6c:ac:00:6a:6f:de:35:39:ae:98:c3: 2f:33:c5:f8:85:4b:1f:08:59:7e:04:c4:27:8e:9f: 1d:a5:1c:d9:e9:4c:c4:33:53:af:10:b9:cb:0e:6d: 22:d6:25:a5:33:98:51:8a:8c:cb:69:90:3e:b7:03: 4d:ea:ba:6a:b6:ae:ff:aa:a8:f8:88:94:fb:22:41: 42:1c:d4:1f:87:ac:87:26:d7:dd:13:ff:1e:1a:de: c9:e6:df:81:d0:0a:83:fa:47:f5:49:a6:97:10:0a: 29:28:04:e3:97:0f:25:55:bd:d6:d3:7f:78:83:cb: f9:f4:87:8f:05:94:81:b0:47:c5:dd:fe:0d:e2:00: 2f:ee:6c:fe:ca:e5:b8:fd:db:61:cd:87:cf:0e:23: 38:c0:f7:dc:d4:b4:77:49:0c:7f:8c:d9:cc:ff:72: 3e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:53:12:A5:9D:E3:BC:82:EA:68:8F:E2:5A:1F:84:B0:84:60:97:13 X509v3 Authority Key Identifier: keyid:3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/FCCF8F6E5B8111ED85FB0456C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.20.242.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:d5:84:69:dd:05:65:cb:69:4a:a9:72:65:72:e8:7a:c2:aa: 9f:99:bd:e0:ff:47:80:c6:11:44:c8:57:c9:00:0e:b7:b9:b0: d6:8c:e0:58:fa:56:e9:44:2e:4d:17:fd:44:fc:06:52:56:1c: b8:04:fb:bb:88:b0:ec:24:f8:47:5f:68:bf:82:08:78:52:3b: 4d:77:52:4a:3a:c6:78:3d:cf:9c:41:37:a7:fe:11:54:a5:76: c9:03:d8:e9:30:bb:3c:bb:15:98:09:6b:90:d8:41:2a:06:78: 34:10:bf:6f:81:79:17:2d:ab:b9:0b:50:84:ca:28:fa:88:7f: 25:6a:2f:77:0d:6f:40:e5:76:37:fd:79:cd:ac:65:5b:04:d2: 59:1e:57:74:6b:7f:f2:7a:ed:a7:51:d5:77:6d:fc:a1:7f:4a: 07:28:7d:0c:15:06:7d:dc:d5:c0:37:e4:81:9b:81:f8:3b:3a: 62:56:37:2a:a9:4f:85:47:4b:cc:48:c9:c1:f8:15:30:48:6a: 9c:0f:de:ff:99:86:a0:6c:fe:20:1c:61:72:01:d7:4c:b1:91: 9d:5c:b1:19:c4:c7:82:8c:ff:de:fc:4b:38:83:d3:25:bc:6f: b8:77:2d:84:a8:4c:33:f3:f9:74:5e:a8:ce:a4:33:4f:50:79: d3:54:78:32 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY5MDkxMTAvBgNVBAUTKDNCNDhBQjg2MTY1MkZBRUVEN0UxRDEyNTgzRjE2QkI3 RkJCMjg5MTMwHhcNMjMxMjAxMDUxNjAzWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY5NmMxMi1iMDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmrRI2AySMprRM2fGubSpd5e35hJ+iiMGlM93okWYpRRPwNYPU4jKEpqgcCd4 OgGbZcOPSI+V7/ixJSkIy6lYLhVOhXB8dicdgT8ydbSeyi9MkNqbenHMVgwKZh4e bKwAam/eNTmumMMvM8X4hUsfCFl+BMQnjp8dpRzZ6UzEM1OvELnLDm0i1iWlM5hR iozLaZA+twNN6rpqtq7/qqj4iJT7IkFCHNQfh6yHJtfdE/8eGt7J5t+B0AqD+kf1 SaaXEAopKATjlw8lVb3W0394g8v59IePBZSBsEfF3f4N4gAv7mz+yuW4/dthzYfP DiM4wPfc1LR3SQx/jNnM/3I+HQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMBTEqWd 47yC6miP4lofhLCEYJcTMB8GA1UdIwQYMBaAFDtIq4YWUvru1+HRJYPxa7f7sokT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjkwOS85QUJBQ0FDODRE Q0IxMUVEODI5NjFCMzZDNEY5QUUwMi9PMGlyaGhaUy11N1g0ZEVsZ19GcnRfdXlp Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08waXJoaFpTLXU3WDRkRWxnX0ZydF91eWlSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzY5MDkvOUFCQUNBQzg0RENCMTFFRDgyOTYxQjM2QzRGOUFFMDIvRkNDRjhGNkU1 QjgxMTFFRDg1RkIwNDU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnFPIwDQYJKoZIhvcNAQELBQADggEBACrVhGndBWXLaUqp cmVy6HrCqp+ZveD/R4DGEUTIV8kADre5sNaM4Fj6VulELk0X/UT8BlJWHLgE+7uI sOwk+EdfaL+CCHhSO013Uko6xng9z5xBN6f+EVSldskD2Okwuzy7FZgJa5DYQSoG eDQQv2+BeRctq7kLUITKKPqIfyVqL3cNb0Dldjf9ec2sZVsE0lkeV3Rrf/J67adR 1Xdt/KF/SgcofQwVBn3c1cA35IGbgfg7OmJWNyqpT4VHS8xIycH4FTBIapwP3v+Z hqBs/iAcYXIB10yxkZ1csRnEx4KM/978SziD0yW8b7h3LYSoTDPz+XReqM6kM09Q edNUeDI= -----END CERTIFICATE-----Generated at Tue May 21 05:59:12 2024 by rpki-client on console-fra.rpki-client.org