$ rpki-client -vvf rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/047A427C7E2B11EAB1B5B00DC4F9AE02.roa File: 047A427C7E2B11EAB1B5B00DC4F9AE02.roa (raw, json) Hash identifier: naQ0f1fMl+5YOqPXWqkAJem3Mp8Csnn5VZpRI+ERtew= Subject key identifier: 96:61:95:A1:B1:46:1B:88:E6:7F:28:4B:12:C7:BA:4F:54:90:2D:68 Certificate issuer: /CN=A9191D22/serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Certificate serial: 08B7 Authority key identifier: CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/047A427C7E2B11EAB1B5B00DC4F9AE02.roa Signing time: Tue 26 Sep 2023 20:58:31 +0000 ROA not before: Tue 26 Sep 2023 20:58:31 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 135337 IP address blocks: 103.94.158.0/23 maxlen: 24 103.198.8.0/23 maxlen: 24 2001:df0:8a00::/48 maxlen: 48 2406:6840::/32 maxlen: 32 2406:6840:8::/48 maxlen: 48 2406:6840:a::/48 maxlen: 48 2406:6840:c::/48 maxlen: 48 2406:6840:e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2231 (0x8b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191D22/serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Validity Not Before: Sep 26 20:58:31 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=651345f7-f7f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9f:d8:f4:e7:18:17:2a:2d:56:e4:4b:c1:ab: 42:23:8d:14:a0:04:0d:a0:74:d7:5f:ec:7c:d8:50: 9f:b6:11:45:5c:9a:fb:1d:68:53:e3:3a:14:16:57: 39:6e:22:51:af:ef:d4:d9:e7:b6:fe:01:ae:74:01: 2e:a5:82:ce:f0:86:53:6a:d0:5a:86:32:bd:8f:12: c5:2e:23:68:4a:ab:a5:c2:a9:11:1f:76:03:01:24: 4c:97:20:5c:5a:53:d2:a9:57:34:0c:f6:c3:20:b7: c1:ed:3f:02:f6:ca:00:84:29:62:d9:0a:78:ab:b0: 38:70:92:2b:c1:0a:48:f8:1c:7c:1f:d9:c5:d9:60: d4:7a:51:fd:69:fc:ea:54:d5:ed:ec:93:8d:d4:17: d0:f9:92:d9:21:ab:b1:68:78:f9:6d:d7:0d:35:bf: b5:f3:9e:a0:bb:c8:d1:6b:34:aa:31:b0:68:11:eb: 84:0b:0c:9b:a6:07:23:0f:d1:e4:fc:ef:78:ba:43: 2e:89:cc:10:d6:9a:12:17:a8:ba:66:ba:2b:e9:fe: 93:37:01:55:90:b7:9f:c7:8a:ef:71:0d:2f:ca:d4: 75:9f:38:b2:de:eb:07:08:1b:08:e1:2b:2a:b8:b4: 7a:03:4d:4f:93:7a:52:11:ae:08:dd:36:3f:ce:eb: d8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:61:95:A1:B1:46:1B:88:E6:7F:28:4B:12:C7:BA:4F:54:90:2D:68 X509v3 Authority Key Identifier: keyid:CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/047A427C7E2B11EAB1B5B00DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.94.158.0/23 103.198.8.0/23 IPv6: 2001:df0:8a00::/48 2406:6840::/32 Signature Algorithm: sha256WithRSAEncryption 2c:ca:0b:f0:e6:27:ff:0b:2e:a5:89:6d:93:38:f7:fd:14:d6: 9d:0a:30:6b:9d:9f:64:08:be:11:5c:18:52:69:d7:53:6d:46: 5c:3e:79:42:77:4d:bc:38:77:e7:c6:76:c0:74:db:b6:ee:16: a9:27:83:db:8b:c7:e9:86:a7:9a:ff:ac:f5:fe:e0:10:3a:23: bf:14:58:7e:43:84:2d:82:5b:7d:ff:de:0a:0e:d9:7f:a9:77: 83:24:16:19:f5:80:bb:08:c2:cf:af:ee:ab:20:ec:3a:ec:17: a4:7f:65:ff:14:8a:d6:52:f6:12:43:ae:3d:9f:13:e7:fc:96: 10:ec:8b:36:8a:d1:73:0b:40:bf:3f:f2:f8:88:bf:1e:d2:03: 71:76:dc:34:00:89:d5:2f:69:2e:9d:b8:15:78:de:7e:8f:8e: 3d:f9:36:bf:60:c5:5e:59:a1:e4:e9:2a:81:70:c3:59:3b:5b: 6c:9c:f5:15:39:23:5d:a7:4f:8a:2a:84:e7:3f:49:f8:f0:14: 5d:c2:54:c4:c3:9b:70:4c:9c:0e:11:af:ec:cd:d8:79:24:08: fe:e9:a3:3f:5c:42:9b:0e:0e:4a:6a:76:3e:c7:75:41:4c:2b: f4:5f:ae:9c:74:88:78:14:5b:c2:5f:2d:74:55:63:e4:c9:0c: ab:06:61:50 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICCLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFEMjIxMTAvBgNVBAUTKENDRkJBMEIzOTkzOTMwRUIxM0I3QTI1OTI3MkFBODEx Rjg3NDRCMjMwHhcNMjMwOTI2MjA1ODMxWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTEzNDVmNy1mN2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlJ/Y9OcYFyotVuRLwatCI40UoAQNoHTXX+x82FCfthFFXJr7HWhT4zoUFlc5 biJRr+/U2ee2/gGudAEupYLO8IZTatBahjK9jxLFLiNoSqulwqkRH3YDASRMlyBc WlPSqVc0DPbDILfB7T8C9soAhCli2Qp4q7A4cJIrwQpI+Bx8H9nF2WDUelH9afzq VNXt7JON1BfQ+ZLZIauxaHj5bdcNNb+1856gu8jRazSqMbBoEeuECwybpgcjD9Hk /O94ukMuicwQ1poSF6i6Zror6f6TNwFVkLefx4rvcQ0vytR1nziy3usHCBsI4Ssq uLR6A01Pk3pSEa4I3TY/zuvYpQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFJZhlaGx RhuI5n8oSxLHuk9UkC1oMB8GA1UdIwQYMBaAFMz7oLOZOTDrE7eiWScqqBH4dEsj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUQyMi8yODQwMDFFQzdC MUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1Pc1R0NkpaSnlxb0VmaDBT eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQdWdzNWs1TU9zVHQ2SlpKeXFvRWZoMFN5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTFEMjIvMjg0MDAxRUM3QjFGMTFFQTg1OEJDRDg2QzRGOUFFMDIvMDQ3QTQyN0M3 RTJCMTFFQUIxQjVCMDBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMBIEAgABMAwDBAFnXp4DBAFnxggwFgQCAAIwEAMHACABDfCKAAMFACQGaEAw DQYJKoZIhvcNAQELBQADggEBACzKC/DmJ/8LLqWJbZM49/0U1p0KMGudn2QIvhFc GFJp11NtRlw+eUJ3Tbw4d+fGdsB027buFqkng9uLx+mGp5r/rPX+4BA6I78UWH5D hC2CW33/3goO2X+pd4MkFhn1gLsIws+v7qsg7DrsF6R/Zf8UitZS9hJDrj2fE+f8 lhDsizaK0XMLQL8/8viIvx7SA3F23DQAidUvaS6duBV43n6Pjj35Nr9gxV5ZoeTp KoFww1k7W2yc9RU5I12nT4oqhOc/SfjwFF3CVMTDm3BMnA4Rr+zN2HkkCP7poz9c QpsODkpqdj7HdUFMK/Rfrpx0iHgUW8JfLXRVY+TJDKsGYVA= -----END CERTIFICATE-----Generated at Mon May 6 22:40:59 2024 by rpki-client on console-ams.rpki-client.org