$ rpki-client -vvf rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/7F5C2CFA1A1B11EEBC083487C4F9AE02.roa File: 7F5C2CFA1A1B11EEBC083487C4F9AE02.roa (raw, json) Hash identifier: 4dOibNybnRxXwpvQqDw6/KiKsdYGxIL5kbUNcXlEkVk= Subject key identifier: 38:B2:50:4A:81:AC:03:3C:D2:ED:51:4D:81:EA:E1:65:F3:44:3E:F7 Certificate issuer: /CN=A9187208/serialNumber=16144C8235B4519F50EDD555368118844D1711A5 Certificate serial: 04 Authority key identifier: 16:14:4C:82:35:B4:51:9F:50:ED:D5:55:36:81:18:84:4D:17:11:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/7F5C2CFA1A1B11EEBC083487C4F9AE02.roa Signing time: Wed 05 Jul 2023 04:33:52 +0000 ROA not before: Wed 05 Jul 2023 04:33:52 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 151413 IP address blocks: 103.149.218.0/24 maxlen: 24 2001:df2:9940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187208/serialNumber=16144C8235B4519F50EDD555368118844D1711A5 Validity Not Before: Jul 5 04:33:52 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64a4f2af-5b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:26:d5:f9:03:88:c3:63:af:e6:83:fd:7f:67: bc:29:fe:da:b5:e8:a3:a3:26:61:46:ee:37:a7:12: d3:c4:4d:ec:1d:cc:d0:ad:26:a7:2b:1e:3d:a5:f3: 5a:db:71:c1:ac:89:84:af:e4:79:4c:8a:f6:07:02: 1a:d6:3e:5b:f3:4c:13:f3:d2:f6:71:02:db:18:69: 1c:44:8a:22:20:9e:e8:d2:ad:0e:f8:8b:46:70:be: 5d:90:db:ad:d1:49:9a:55:1e:cd:43:fe:26:b2:d7: 1d:95:49:4c:3d:e2:5d:38:9b:dc:3b:e8:47:ba:dd: af:8a:b1:76:c4:44:66:3f:74:b7:86:43:a8:af:53: b4:35:14:a4:e5:79:1c:a4:96:09:98:4c:53:b4:2f: 12:46:e2:90:af:2c:ac:5d:fb:2a:80:37:d4:b9:ad: 1b:21:8e:83:60:2b:9e:f5:02:58:ec:b7:71:21:1e: 07:32:fd:ff:1c:e4:59:10:a7:67:ad:e5:0e:eb:dc: 21:c0:5a:c4:aa:0d:4e:fa:24:c2:72:92:7f:c3:07: 18:74:08:4f:a2:8e:5f:da:33:ee:52:ba:14:ad:bd: 84:27:09:b6:89:94:8d:09:e3:87:92:16:2e:02:2c: b8:9a:3b:de:30:6c:06:6e:ec:5f:9e:ec:35:34:b6: b5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B2:50:4A:81:AC:03:3C:D2:ED:51:4D:81:EA:E1:65:F3:44:3E:F7 X509v3 Authority Key Identifier: keyid:16:14:4C:82:35:B4:51:9F:50:ED:D5:55:36:81:18:84:4D:17:11:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/7F5C2CFA1A1B11EEBC083487C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.149.218.0/24 IPv6: 2001:df2:9940::/48 Signature Algorithm: sha256WithRSAEncryption 65:fc:78:16:32:55:31:f3:87:48:84:42:08:3e:b4:49:e7:a7: 33:03:97:fd:7d:c4:ba:a0:46:c1:3a:23:e4:db:f2:0a:57:f6: bb:68:76:0a:79:89:26:48:1c:a3:75:ad:98:50:40:06:ee:9c: ed:25:6a:68:15:8e:64:b0:1c:d4:1d:9a:65:4b:58:48:86:d5: 4b:f0:6e:38:81:74:a1:5c:97:e0:fe:cd:39:5b:1e:30:36:e1: b6:cc:2f:3a:ff:32:2d:07:26:a7:26:39:35:23:7a:69:e3:6a: 36:73:db:89:2d:33:90:26:1a:18:d4:0d:15:ce:b1:da:30:ac: 99:6d:c1:ee:b6:18:eb:c7:63:2d:c0:2d:15:76:a3:23:51:e4: 2b:79:d0:1f:a1:10:55:c4:44:f3:dc:76:cc:c4:20:ee:3f:94: 0b:34:bb:b4:5c:7c:69:f0:e9:48:d3:ee:17:ae:5b:7f:61:c8: 29:84:73:6d:01:c8:13:bd:bb:a6:2f:88:33:c6:e0:d4:2e:4c: 2d:2f:83:c8:c1:4c:be:fb:1e:cd:77:98:49:4d:1b:6d:2c:92: e9:af:b9:8c:30:c8:c0:f1:b8:27:86:5b:d2:c7:a2:99:07:6f: e8:0e:de:74:a9:c5:51:c8:94:bf:f7:cb:82:2b:83:70:29:f9: cd:54:0d:55 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzIwODExMC8GA1UEBRMoMTYxNDRDODIzNUI0NTE5RjUwRURENTU1MzY4MTE4ODQ0 RDE3MTFBNTAeFw0yMzA3MDUwNDMzNTJaFw0yNDA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY0YTRmMmFmLTViMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVJtX5A4jDY6/mg/1/Z7wp/tq16KOjJmFG7jenEtPETewdzNCtJqcrHj2l81rb ccGsiYSv5HlMivYHAhrWPlvzTBPz0vZxAtsYaRxEiiIgnujSrQ74i0Zwvl2Q263R SZpVHs1D/iay1x2VSUw94l04m9w76Ee63a+KsXbERGY/dLeGQ6ivU7Q1FKTleRyk lgmYTFO0LxJG4pCvLKxd+yqAN9S5rRshjoNgK571Aljst3EhHgcy/f8c5FkQp2et 5Q7r3CHAWsSqDU76JMJykn/DBxh0CE+ijl/aM+5SuhStvYQnCbaJlI0J44eSFi4C LLiaO94wbAZu7F+e7DU0trXrAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUOLJQSoGs AzzS7VFNgerhZfNEPvcwHwYDVR0jBBgwFoAUFhRMgjW0UZ9Q7dVVNoEYhE0XEaUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3MjA4L0M2RDk2RDlFMUEx NzExRUU4MjA2MzY4MUM0RjlBRTAyL0ZoUk1nalcwVVo5UTdkVlZOb0VZaEUwWEVh VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRmhSTWdqVzBVWjlRN2RWVk5vRVloRTBYRWFVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzIwOC9DNkQ5NkQ5RTFBMTcxMUVFODIwNjM2ODFDNEY5QUUwMi83RjVDMkNGQTFB MUIxMUVFQkMwODM0ODdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAGeV2jAPBAIAAjAJAwcAIAEN8plAMA0GCSqGSIb3DQEBCwUA A4IBAQBl/HgWMlUx84dIhEIIPrRJ56czA5f9fcS6oEbBOiPk2/IKV/a7aHYKeYkm SByjda2YUEAG7pztJWpoFY5ksBzUHZplS1hIhtVL8G44gXShXJfg/s05Wx4wNuG2 zC86/zItByanJjk1I3pp42o2c9uJLTOQJhoY1A0VzrHaMKyZbcHuthjrx2MtwC0V dqMjUeQredAfoRBVxETz3HbMxCDuP5QLNLu0XHxp8OlI0+4Xrlt/YcgphHNtAcgT vbumL4gzxuDULkwtL4PIwUy++x7Nd5hJTRttLJLpr7mMMMjA8bgnhlvSx6KZB2/o Dt50qcVRyJS/98uCK4NwKfnNVA1V -----END CERTIFICATE-----Generated at Sat Jun 1 09:10:34 2024 by rpki-client on console-fra.rpki-client.org