$ rpki-client -vvf rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/9BE3C7087E8311EEBC7E6681C4F9AE02.roa File: 9BE3C7087E8311EEBC7E6681C4F9AE02.roa (raw, json) Hash identifier: dQp1RFXkmdHYdN2uYRrVX4OpwPj5pGn/GAC5Xyj0LE8= Subject key identifier: FF:BF:A2:B1:E9:F1:4D:9D:2D:DE:73:42:A1:D0:F1:B7:CE:F4:FF:35 Certificate issuer: /CN=A917A4F7/serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA Certificate serial: 7A Authority key identifier: 22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/9BE3C7087E8311EEBC7E6681C4F9AE02.roa Signing time: Sat 29 Jun 2024 06:49:17 +0000 ROA not before: Sat 29 Jun 2024 06:49:17 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 149841 IP address blocks: 103.187.240.0/23 maxlen: 23 2400:7fa0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A4F7/serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA Validity Not Before: Jun 29 06:49:17 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=667fae6d-156f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9b:19:0e:86:d3:aa:67:b5:54:ae:0f:9a:60: d1:17:e3:30:41:7d:79:05:09:90:78:e4:ad:a3:2f: eb:43:3f:32:52:a6:50:d4:fa:db:96:70:44:2d:f2: b4:73:6d:5c:a7:36:41:9a:a2:0f:48:44:e4:8f:ec: 83:68:7d:b4:0f:4a:a1:a2:31:5f:db:f6:da:9f:a7: a3:c3:23:65:77:6a:b3:c1:27:61:a0:23:b9:28:87: 1f:6b:d3:95:48:ac:30:98:53:e5:63:84:e8:04:d7: cb:5d:d2:4e:2f:be:ea:df:59:8b:b6:07:2b:3d:84: 5c:38:44:dc:59:71:4d:31:42:a3:d1:5c:37:de:f2: 1b:41:e7:00:90:75:ef:b2:0d:17:ab:d7:3e:9f:1f: 17:ed:84:2b:10:0e:61:8c:87:b5:24:43:52:88:3d: e9:1a:77:d6:2f:f7:c5:a9:ea:81:47:1e:30:6a:64: d7:61:74:13:9d:c4:08:2c:31:d7:10:73:75:5c:84: c0:da:3d:27:b6:83:8b:56:c9:66:ef:ef:20:70:4e: b1:0c:7f:dd:56:82:64:f0:2a:68:ec:70:89:9a:a1: 97:74:80:b3:64:fa:f0:88:5d:b7:39:1f:b8:a7:64: 21:08:5b:5c:0d:c4:c5:20:7c:51:22:a7:d5:f8:2b: 06:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:BF:A2:B1:E9:F1:4D:9D:2D:DE:73:42:A1:D0:F1:B7:CE:F4:FF:35 X509v3 Authority Key Identifier: keyid:22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/9BE3C7087E8311EEBC7E6681C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.187.240.0/23 IPv6: 2400:7fa0::/32 Signature Algorithm: sha256WithRSAEncryption 8c:7e:8e:9c:2b:68:34:6d:d4:d0:48:d3:58:68:16:c0:3b:d3: 98:93:cd:8a:88:da:cc:9a:1b:61:bd:27:6d:30:aa:45:44:a5: 4b:c2:53:9d:bc:03:5e:6d:9b:91:05:65:81:77:17:37:85:56: 8d:17:3b:43:2d:77:31:35:2f:3b:3c:e0:3b:00:c6:e0:13:1c: f9:a9:1f:96:64:83:fa:6c:13:56:e0:31:44:32:6c:13:fd:31: a3:66:fd:5e:b6:96:a5:68:16:6d:82:99:00:e8:b0:08:d8:65: 80:98:e4:ff:4e:6d:d1:e3:98:8d:c5:01:99:09:f6:a8:90:61: be:71:77:d2:04:e0:55:a5:d9:c0:6d:03:dc:2c:bf:7e:8c:c0: ed:1d:bd:ce:58:bc:6f:4d:ac:5f:1a:f2:ab:75:0b:30:d5:4c: 04:2c:f5:85:d3:8b:07:ff:37:03:3a:2a:93:c3:40:b7:1b:a3: 75:2d:43:1b:3c:bb:9c:9b:41:59:86:d8:51:6b:c4:87:d5:58: 36:6f:d7:e6:14:7b:b8:29:a5:70:6e:08:f6:c1:6c:52:8c:75: 62:f6:b1:97:98:2c:43:79:08:56:f4:ff:93:1b:8c:90:95:c5: 4d:4e:73:41:bc:00:74:67:9a:35:27:ca:4a:71:af:fa:93:9b: 90:c1:e0:ae -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTRGNzExMC8GA1UEBRMoMjJEM0U5NzQ0REFENDk3NTAzNkNDNDIyQUMxMUM0MDQ3 MjBFNjZFQTAeFw0yNDA2MjkwNjQ5MTdaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2N2ZhZTZkLTE1NmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbmxkOhtOqZ7VUrg+aYNEX4zBBfXkFCZB45K2jL+tDPzJSplDU+tuWcEQt8rRz bVynNkGaog9IROSP7INofbQPSqGiMV/b9tqfp6PDI2V3arPBJ2GgI7kohx9r05VI rDCYU+VjhOgE18td0k4vvurfWYu2Bys9hFw4RNxZcU0xQqPRXDfe8htB5wCQde+y DRer1z6fHxfthCsQDmGMh7UkQ1KIPekad9Yv98Wp6oFHHjBqZNdhdBOdxAgsMdcQ c3VchMDaPSe2g4tWyWbv7yBwTrEMf91WgmTwKmjscImaoZd0gLNk+vCIXbc5H7in ZCEIW1wNxMUgfFEip9X4KwajAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQU/7+isenx TZ0t3nNCodDxt870/zUwHwYDVR0jBBgwFoAUItPpdE2tSXUDbMQirBHEBHIOZuow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBNEY3LzJBNDg5Mzg2N0U4 MjExRUU5OURBOUI3QUM0RjlBRTAyL0l0UHBkRTJ0U1hVRGJNUWlyQkhFQkhJT1p1 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSXRQcGRFMnRTWFVEYk1RaXJCSEVCSElPWnVvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTRGNy8yQTQ4OTM4NjdFODIxMUVFOTlEQTlCN0FDNEY5QUUwMi85QkUzQzcwODdF ODMxMUVFQkM3RTY2ODFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAWe78DANBAIAAjAHAwUAJAB/oDANBgkqhkiG9w0BAQsFAAOC AQEAjH6OnCtoNG3U0EjTWGgWwDvTmJPNiojazJobYb0nbTCqRUSlS8JTnbwDXm2b kQVlgXcXN4VWjRc7Qy13MTUvOzzgOwDG4BMc+akflmSD+mwTVuAxRDJsE/0xo2b9 XraWpWgWbYKZAOiwCNhlgJjk/05t0eOYjcUBmQn2qJBhvnF30gTgVaXZwG0D3Cy/ fozA7R29zli8b02sXxryq3ULMNVMBCz1hdOLB/83Azoqk8NAtxujdS1DGzy7nJtB WYbYUWvEh9VYNm/X5hR7uCmlcG4I9sFsUox1Yvaxl5gsQ3kIVvT/kxuMkJXFTU5z QbwAdGeaNSfKSnGv+pObkMHgrg== -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:51 2024 by rpki-client on console-fra.rpki-client.org