$ rpki-client -vvf rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/AB3040224C0211EF84B00D1EC4F9AE02.roa File: AB3040224C0211EF84B00D1EC4F9AE02.roa (raw, json) Hash identifier: noVdM6ngikXxZBW4pTHIBoQSLKize1jndamJhpeixzc= Subject key identifier: 82:E0:9C:51:56:D6:5D:35:A8:05:D7:B4:33:58:C6:A4:35:38:DA:4D Certificate issuer: /CN=A9112804/serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01 Certificate serial: 071F Authority key identifier: 09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/AB3040224C0211EF84B00D1EC4F9AE02.roa Signing time: Thu 03 Oct 2024 18:14:01 +0000 ROA not before: Thu 03 Oct 2024 18:14:01 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 136815 IP address blocks: 103.97.160.0/23 maxlen: 23 103.97.160.0/24 maxlen: 24 103.97.161.0/24 maxlen: 24 103.97.162.0/24 maxlen: 24 103.97.163.0/24 maxlen: 24 2401:91c0::/32 maxlen: 32 2401:91c0::/33 maxlen: 33 2401:91c0:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1823 (0x71f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112804/serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01 Validity Not Before: Oct 3 18:14:01 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66fedee9-a30d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d2:d4:72:ad:69:01:9f:7f:c0:b9:ef:64:07: 1b:1f:b2:02:14:4d:cf:46:86:c5:5c:13:9d:1b:5e: 21:de:8d:08:05:67:f1:23:98:44:99:86:95:b6:48: 58:9a:18:c5:8d:fc:70:de:c9:d6:68:8b:7c:9f:c0: b4:b0:ec:91:17:f4:89:da:a3:ae:f5:52:db:e6:80: 4c:4d:f5:20:2d:14:27:f8:03:a3:6c:f3:c8:19:07: 3e:3d:34:77:35:b9:4a:d8:2c:6b:51:2e:c5:17:dc: b0:6a:30:16:05:69:a1:42:ad:c8:e5:1a:3a:ac:d9: 7a:30:37:25:7f:ee:71:05:13:79:7b:52:30:10:21: 83:a4:52:1a:a9:85:20:03:f7:e5:22:e1:75:35:89: 60:86:bf:b4:0c:ea:52:3c:a6:52:9e:4f:da:79:30: a8:72:83:9d:ba:49:b2:50:6a:54:8b:87:d5:c7:39: 6d:17:46:5f:ab:aa:77:b1:dd:d8:f0:88:bf:00:3f: b9:18:e4:4f:d4:c3:14:16:cd:f5:93:ef:58:79:ac: c7:67:16:8c:f8:02:4c:02:cd:3f:db:a0:4d:5b:45: 1b:ca:81:a8:35:53:21:82:65:93:02:e4:c6:cf:ee: c0:00:cb:ce:1e:93:d7:17:28:19:14:9d:cd:d7:38: a4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E0:9C:51:56:D6:5D:35:A8:05:D7:B4:33:58:C6:A4:35:38:DA:4D X509v3 Authority Key Identifier: keyid:09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/AB3040224C0211EF84B00D1EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.97.160.0/22 IPv6: 2401:91c0::/32 Signature Algorithm: sha256WithRSAEncryption 7d:63:56:df:06:82:39:6b:72:e2:01:12:e2:c7:96:56:5e:bf: 34:18:f5:2f:67:1b:a2:a0:30:ce:67:b0:b0:ae:f9:7d:6c:0a: 4f:78:4a:05:51:c2:d0:e9:31:ef:6e:ab:1e:d0:6a:b3:4b:81: ed:e3:40:ea:9f:b4:5c:32:09:4a:49:41:da:af:9e:fa:fa:f9: 45:b6:c8:a5:67:0f:ba:ed:89:2d:5c:92:1a:f4:ca:5e:55:80: a1:33:ca:87:7e:38:73:ef:b3:80:8b:45:88:14:cb:c9:32:40: ed:98:b2:8f:1c:a9:c1:0b:71:bd:58:30:68:67:f3:fa:dd:8e: 99:f5:f8:7b:aa:43:5c:ea:37:2d:e1:b6:b0:0e:db:92:c0:47: fc:1c:0a:6e:ee:47:39:1d:e4:31:92:28:9e:e0:87:86:6c:0b: 98:97:e6:a3:22:e7:4b:7e:15:94:f4:2f:9d:7e:34:32:97:f2: 6e:5e:08:55:36:fa:94:9a:75:03:1b:95:56:3d:1b:7e:0f:bd: dc:8f:8c:66:69:5b:9b:72:97:a3:55:27:19:f1:8d:a4:d9:c4: 68:1f:3b:4e:05:c9:67:19:19:3a:66:37:c1:f8:5d:99:66:c8: c9:18:cf:06:c5:3d:be:9d:ca:c9:c2:2a:3c:3c:a4:57:14:20: 81:3a:ea:7c -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4MDQxMTAvBgNVBAUTKDA5OTJDM0NERUY4MjUwMDY3M0NDRDdBMTc2MDVGRDMz RDg2NEZGMDEwHhcNMjQxMDAzMTgxNDAxWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZlZGVlOS1hMzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NLUcq1pAZ9/wLnvZAcbH7ICFE3PRobFXBOdG14h3o0IBWfxI5hEmYaVtkhY mhjFjfxw3snWaIt8n8C0sOyRF/SJ2qOu9VLb5oBMTfUgLRQn+AOjbPPIGQc+PTR3 NblK2CxrUS7FF9ywajAWBWmhQq3I5Ro6rNl6MDclf+5xBRN5e1IwECGDpFIaqYUg A/flIuF1NYlghr+0DOpSPKZSnk/aeTCocoOdukmyUGpUi4fVxzltF0Zfq6p3sd3Y 8Ii/AD+5GORP1MMUFs31k+9YeazHZxaM+AJMAs0/26BNW0UbyoGoNVMhgmWTAuTG z+7AAMvOHpPXFygZFJ3N1zikHQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFILgnFFW 1l01qAXXtDNYxqQ1ONpNMB8GA1UdIwQYMBaAFAmSw83vglAGc8zXoXYF/TPYZP8B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjgwNC8zNkVDREE1NEY0 RkExMUU5OTkxODQzM0RDNEY5QUUwMi9DWkxEemUtQ1VBWnp6TmVoZGdYOU05aGtf d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaTER6ZS1DVUFaenpOZWhkZ1g5TTloa193RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTI4MDQvMzZFQ0RBNTRGNEZBMTFFOTk5MTg0MzNEQzRGOUFFMDIvQUIzMDQwMjI0 QzAyMTFFRjg0QjAwRDFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnYaAwDQQCAAIwBwMFACQBkcAwDQYJKoZIhvcNAQELBQAD ggEBAH1jVt8GgjlrcuIBEuLHllZevzQY9S9nG6KgMM5nsLCu+X1sCk94SgVRwtDp Me9uqx7QarNLge3jQOqftFwyCUpJQdqvnvr6+UW2yKVnD7rtiS1ckhr0yl5VgKEz yod+OHPvs4CLRYgUy8kyQO2Yso8cqcELcb1YMGhn8/rdjpn1+HuqQ1zqNy3htrAO 25LAR/wcCm7uRzkd5DGSKJ7gh4ZsC5iX5qMi50t+FZT0L51+NDKX8m5eCFU2+pSa dQMblVY9G34PvdyPjGZpW5tyl6NVJxnxjaTZxGgfO04FyWcZGTpmN8H4XZlmyMkY zwbFPb6dysnCKjw8pFcUIIE66nw= -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:55 2024 by rpki-client on console-fra.rpki-client.org