$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/D3A7743C19EA11EC9C11D95AC4F9AE02.roa File: D3A7743C19EA11EC9C11D95AC4F9AE02.roa (raw, json) Hash identifier: 1jP6i/gsW4Ign+tinc9Mjc3nf9zy4YX6dc8pTLkyDlc= Subject key identifier: 60:AE:3B:F3:E2:4A:F4:DA:56:02:BB:94:9D:7E:B7:D0:39:06:AA:A3 Certificate issuer: /CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2 Certificate serial: 03CF Authority key identifier: A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/D3A7743C19EA11EC9C11D95AC4F9AE02.roa Signing time: Wed 11 Oct 2023 01:13:24 +0000 ROA not before: Wed 11 Oct 2023 01:13:24 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 14537 IP address blocks: 45.127.116.0/22 maxlen: 24 103.81.128.0/22 maxlen: 23 103.81.129.0/24 maxlen: 24 103.81.130.0/23 maxlen: 24 124.109.4.0/22 maxlen: 23 124.109.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 975 (0x3cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2 Validity Not Before: Oct 11 01:13:24 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=6525f6b4-3806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:dc:b8:e0:09:40:f3:5a:6f:5c:ff:e0:4b:0b: d7:e7:04:aa:d1:e6:3d:ae:9e:e1:b5:c5:10:3e:b9: a3:27:cb:47:8a:b2:41:1a:9c:ed:6a:83:6d:62:a3: d5:f8:5c:32:94:ef:65:7b:f8:84:d9:4b:04:ab:31: f1:35:8b:9c:95:6d:ae:6d:75:53:e9:51:a8:e3:84: 35:65:32:6c:08:2f:d9:bc:1c:04:05:4e:6a:9b:8c: f0:69:2d:c7:46:93:13:c5:b8:ba:d7:82:95:88:fb: 5f:3c:c3:c7:89:17:a8:2d:1b:89:ce:bd:33:d4:a7: d9:79:e8:25:1c:47:fb:73:73:44:95:7c:f7:71:03: e0:8d:7a:d9:17:a9:1e:3c:17:6c:16:67:b8:22:1c: 3a:c8:fe:8b:d5:ef:da:5b:28:a6:7b:b4:e9:4d:6c: 02:e4:8f:cb:83:82:24:6c:4a:86:6d:16:ec:85:08: f0:11:58:16:ca:ef:c3:8b:a9:36:ac:80:1c:1e:6b: ab:8e:3a:08:94:3e:85:f9:ef:64:bc:37:e7:f2:b0: eb:51:d3:27:ec:b0:cc:f4:ef:8c:31:a0:36:71:e1: 62:83:db:32:29:90:ed:6b:40:03:1b:f4:67:de:64: 7b:99:d7:e4:23:b1:89:05:03:22:30:3a:75:17:95: f2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:AE:3B:F3:E2:4A:F4:DA:56:02:BB:94:9D:7E:B7:D0:39:06:AA:A3 X509v3 Authority Key Identifier: keyid:A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/D3A7743C19EA11EC9C11D95AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.127.116.0/22 103.81.128.0/22 124.109.4.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:39:46:fc:e0:e5:54:c4:bb:d8:f1:f8:59:c8:25:e4:4a:fa: e1:1e:3e:fa:02:f3:1e:99:37:2f:a1:83:44:4b:11:e4:04:59: b3:59:99:fc:d1:ef:8e:d3:c5:ee:cb:b6:96:32:ff:0b:91:e0: 16:68:2c:63:d9:99:56:5b:0e:7a:f0:15:25:af:94:65:ee:4c: 11:45:60:42:f5:14:b9:bd:9f:3f:e9:83:94:66:87:23:a1:c1: 68:de:d4:45:99:86:46:f7:a1:8a:17:f6:b1:18:e7:2c:c6:10: 16:e0:f6:cd:2c:22:df:48:dd:9c:30:1c:04:f9:3f:cf:86:dd: 51:8c:7f:01:29:dd:8b:87:24:f9:55:0f:4b:15:4f:6e:79:63: b7:d0:92:da:f8:4a:c8:58:ab:52:42:0f:81:e9:8c:0a:ec:eb: 56:89:2e:c4:3b:97:24:9f:05:9f:94:bd:59:87:e7:83:a7:ac: cd:64:50:ec:4f:c2:65:7c:5a:5a:35:ec:57:d2:92:75:5e:7e: 32:e2:26:e2:0a:82:eb:de:aa:52:28:5e:1f:ee:c6:13:e4:ab: 9a:d0:ce:2e:fa:73:e6:43:b3:1e:0b:55:b6:0f:9d:35:89:2c: f4:0d:57:d6:35:e5:02:b9:a3:66:59:70:fe:4e:c0:ae:00:55: 14:49:e2:25 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICA88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZCODAxMTAvBgNVBAUTKEE4RkMyNTlBMTAxRUFCODI2RUU4Q0JFQTJBMEJEQTVD REVDRkRBRjIwHhcNMjMxMDExMDExMzI0WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTI1ZjZiNC0zODA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9dy44AlA81pvXP/gSwvX5wSq0eY9rp7htcUQPrmjJ8tHirJBGpztaoNtYqPV +FwylO9le/iE2UsEqzHxNYuclW2ubXVT6VGo44Q1ZTJsCC/ZvBwEBU5qm4zwaS3H RpMTxbi614KViPtfPMPHiReoLRuJzr0z1KfZeeglHEf7c3NElXz3cQPgjXrZF6ke PBdsFme4Ihw6yP6L1e/aWyime7TpTWwC5I/Lg4IkbEqGbRbshQjwEVgWyu/Di6k2 rIAcHmurjjoIlD6F+e9kvDfn8rDrUdMn7LDM9O+MMaA2ceFig9syKZDta0ADG/Rn 3mR7mdfkI7GJBQMiMDp1F5XyDwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFGCuO/Pi SvTaVgK7lJ1+t9A5BqqjMB8GA1UdIwQYMBaAFKj8JZoQHquCbujL6ioL2lzez9ry MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkI4MC9CODY5ODA1RTEy M0IxMUVDOEExMzVGNDJDNEY5QUUwMi9xUHdsbWhBZXE0SnU2TXZxS2d2YVhON1Ay dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FQd2xtaEFlcTRKdTZNdnFLZ3ZhWE43UDJ2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODZCODAvQjg2OTgwNUUxMjNCMTFFQzhBMTM1RjQyQzRGOUFFMDIvRDNBNzc0M0Mx OUVBMTFFQzlDMTFEOTVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAItf3QDBAJnUYADBAJ8bQQwDQYJKoZIhvcNAQELBQADggEB AD45Rvzg5VTEu9jx+FnIJeRK+uEePvoC8x6ZNy+hg0RLEeQEWbNZmfzR747Txe7L tpYy/wuR4BZoLGPZmVZbDnrwFSWvlGXuTBFFYEL1FLm9nz/pg5RmhyOhwWje1EWZ hkb3oYoX9rEY5yzGEBbg9s0sIt9I3ZwwHAT5P8+G3VGMfwEp3YuHJPlVD0sVT255 Y7fQktr4SshYq1JCD4HpjArs61aJLsQ7lySfBZ+UvVmH54OnrM1kUOxPwmV8Wlo1 7FfSknVefjLiJuIKguveqlIoXh/uxhPkq5rQzi76c+ZDsx4LVbYPnTWJLPQNV9Y1 5QK5o2ZZcP5OwK4AVRRJ4iU= -----END CERTIFICATE-----Generated at Sun May 19 02:39:36 2024 by rpki-client on console-fra.rpki-client.org