$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/0D7B74CACE1111ED8BDB217CC4F9AE02.roa File: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (raw, json) Hash identifier: uH0p9W6gyErJqwQXUobMQ4l4IHk3TpFXVC4lxSYw/yc= Subject key identifier: 21:4F:E0:AE:CD:8B:AC:A2:61:50:6D:4C:EE:7F:0A:AD:AF:03:92:09 Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Certificate serial: 0BDD Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/0D7B74CACE1111ED8BDB217CC4F9AE02.roa Signing time: Sun 14 Apr 2024 19:27:40 +0000 ROA not before: Sun 14 Apr 2024 19:27:40 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 150178 IP address blocks: 103.135.138.0/24 maxlen: 24 103.135.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3037 (0xbdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Validity Not Before: Apr 14 19:27:40 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=661c2e2c-81a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9e:60:bb:a9:26:29:59:0e:2a:54:81:45:da: 14:ff:ce:e2:5c:0e:d1:b9:57:1e:e8:7f:8f:04:74: 69:d0:bd:6c:6f:4b:1d:f4:40:2f:e9:55:c2:1c:84: d6:7d:75:2d:80:2f:bc:38:83:45:f6:eb:60:d4:56: 69:f1:b0:19:08:f3:dc:eb:fe:fa:49:81:8d:12:ee: 1b:b4:9d:ee:13:da:62:48:1c:66:2e:fa:d1:e0:eb: 33:66:53:9e:df:dc:f5:df:ed:ff:55:92:e6:ba:6b: 1d:1e:92:29:5c:a1:72:c8:b9:ae:67:7b:a2:37:00: a7:e2:ef:cb:6d:4c:7b:e0:0e:07:15:73:fa:1f:b3: bc:28:0f:60:bf:de:a6:f6:d9:33:0a:0d:2d:16:2e: e2:2f:54:58:a4:cd:7c:38:be:3f:1e:4d:c0:4c:8f: 1c:59:c4:9a:6c:cd:ac:2f:36:d0:3b:95:c7:8f:c8: 14:cd:5d:88:85:fd:a9:53:dc:df:c8:35:8f:e6:5a: d5:49:fc:0d:4c:87:0e:a2:cf:51:9f:ed:41:db:d3: af:a2:fa:fd:39:e2:6f:5d:72:f7:77:d9:73:2a:ff: 91:9b:23:ad:3d:19:23:e4:0d:77:50:68:40:58:b1: 10:be:26:2a:37:be:2f:f2:ef:f3:ad:6c:06:cf:d2: 23:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4F:E0:AE:CD:8B:AC:A2:61:50:6D:4C:EE:7F:0A:AD:AF:03:92:09 X509v3 Authority Key Identifier: keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/0D7B74CACE1111ED8BDB217CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.135.138.0/23 Signature Algorithm: sha256WithRSAEncryption 40:c8:d1:8a:cc:68:06:92:88:98:93:de:79:34:7d:63:91:b3: 1f:2f:a8:d6:13:f3:5e:7f:59:22:9c:2f:95:b2:90:2a:b5:7b: 4e:a7:28:6d:7c:f4:81:24:eb:f0:42:3d:ba:04:d6:62:4e:10: c7:1c:07:1d:1f:8b:75:ef:ea:ab:1c:ad:58:0b:68:02:60:40: 00:d7:ac:eb:16:97:0f:93:a3:5d:a8:34:63:d9:30:d6:a8:86: c6:20:5c:31:d8:8f:51:b0:fd:c1:98:f8:63:1d:c4:b1:41:b8: e7:fa:fa:18:d0:bc:ce:b8:55:e3:83:76:81:f5:c9:e0:70:d1: 30:ff:f5:91:a2:21:2d:70:ba:af:1f:3c:55:b3:06:1c:19:ef: 20:91:f6:ca:04:23:33:07:a9:53:c9:c4:7b:b1:dd:8b:d2:f6: a3:90:d7:96:25:ef:c1:c8:b9:56:c7:cf:72:80:65:ef:a0:83: 01:30:73:c6:77:67:17:d5:0e:cb:cb:06:d0:f7:f9:e6:5d:a7: 4d:66:c8:d1:4e:5f:ed:71:b9:d8:39:7b:69:75:20:8e:f3:45: b6:9b:23:42:2c:33:e5:a2:f9:f5:ab:22:78:8e:93:c8:b0:11: cf:07:f2:97:95:f6:9d:22:f0:d9:2e:69:a1:96:69:ca:e3:09: da:43:a2:4d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE QjFBNTBEQTQwHhcNMjQwNDE0MTkyNzQwWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjFjMmUyYy04MWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJ5gu6kmKVkOKlSBRdoU/87iXA7RuVce6H+PBHRp0L1sb0sd9EAv6VXCHITW fXUtgC+8OINF9utg1FZp8bAZCPPc6/76SYGNEu4btJ3uE9piSBxmLvrR4OszZlOe 39z13+3/VZLmumsdHpIpXKFyyLmuZ3uiNwCn4u/LbUx74A4HFXP6H7O8KA9gv96m 9tkzCg0tFi7iL1RYpM18OL4/Hk3ATI8cWcSabM2sLzbQO5XHj8gUzV2Ihf2pU9zf yDWP5lrVSfwNTIcOos9Rn+1B29Ovovr9OeJvXXL3d9lzKv+RmyOtPRkj5A13UGhA WLEQviYqN74v8u/zrWwGz9IjRQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCFP4K7N i6yiYVBtTO5/Cq2vA5IJMB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2 N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODhBMDYvODAxQ0E1ODRGNjdGMTFFOUFBM0U3MDNEQzRGOUFFMDIvMEQ3Qjc0Q0FD RTExMTFFRDhCREIyMTdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnh4owDQYJKoZIhvcNAQELBQADggEBAEDI0YrMaAaSiJiT 3nk0fWORsx8vqNYT815/WSKcL5WykCq1e06nKG189IEk6/BCPboE1mJOEMccBx0f i3Xv6qscrVgLaAJgQADXrOsWlw+To12oNGPZMNaohsYgXDHYj1Gw/cGY+GMdxLFB uOf6+hjQvM64VeODdoH1yeBw0TD/9ZGiIS1wuq8fPFWzBhwZ7yCR9soEIzMHqVPJ xHux3YvS9qOQ15Yl78HIuVbHz3KAZe+ggwEwc8Z3ZxfVDsvLBtD3+eZdp01myNFO X+1xudg5e2l1II7zRbabI0IsM+Wi+fWrIniOk8iwEc8H8peV9p0i8NkuaaGWacrj CdpDok0= -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:00 2024 by rpki-client on console-fra.rpki-client.org