$ rpki-client -vvf rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/8E9B074050E311EF8624AC36C4F9AE02.roa File: 8E9B074050E311EF8624AC36C4F9AE02.roa (raw, json) Hash identifier: OMwuM+GLC4j4NcdExvOXIOxilMsEBWQawa7SmPYWVzY= Subject key identifier: A6:E3:39:7D:5E:2E:22:17:46:6E:83:FE:BD:F6:20:48:D1:2D:00:CD Certificate issuer: /CN=A911392E/serialNumber=629B50963EBC6A022E27AECB613420E40E74DB4A Certificate serial: 1A Authority key identifier: 62:9B:50:96:3E:BC:6A:02:2E:27:AE:CB:61:34:20:E4:0E:74:DB:4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YptQlj68agIuJ67LYTQg5A5020o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/8E9B074050E311EF8624AC36C4F9AE02.roa Signing time: Tue 10 Sep 2024 14:01:33 +0000 ROA not before: Tue 10 Sep 2024 14:01:33 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 136920 IP address blocks: 103.99.26.0/24 maxlen: 24 103.176.215.0/24 maxlen: 24 2001:df0:f980::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.crl rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YptQlj68agIuJ67LYTQg5A5020o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911392E/serialNumber=629B50963EBC6A022E27AECB613420E40E74DB4A Validity Not Before: Sep 10 14:01:33 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66e0513d-3d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ef:bb:a0:aa:08:c3:02:87:11:5e:9b:b7:e9: c8:24:c1:ff:80:0f:d6:77:8a:1c:07:05:06:ef:3c: 63:6b:99:88:2d:24:6b:cd:fb:49:73:73:c5:a3:2e: b8:90:0b:ca:ff:0e:02:f2:c9:d3:52:4b:a4:c5:bf: bf:9e:d6:1c:b6:4a:10:cb:e3:cf:24:fa:03:2a:92: e4:88:e7:0e:4f:82:c3:22:4c:4e:b4:97:23:d1:4b: df:ad:54:7f:7a:0f:a8:25:f7:f5:8c:3a:ae:c6:6d: 43:4a:77:aa:70:a9:b8:f4:b8:02:ac:1b:51:de:7f: dd:df:34:55:7f:9f:d4:b1:b3:5a:29:5d:99:2c:da: 43:bb:52:5d:fd:69:2d:81:fe:ed:fb:7d:3c:f7:85: d0:ba:97:95:af:4a:61:18:3c:f5:2b:5c:52:e0:02: a5:bc:e3:3d:28:a8:dc:c1:6c:f5:5f:60:42:9a:54: e0:e3:8b:08:82:4c:9d:a9:03:8c:b1:ed:8d:4d:81: 57:1b:14:cc:4b:42:e9:e3:51:6a:44:ab:b6:c5:74: 36:d9:8b:2d:6a:ab:a9:e7:9f:3b:48:20:6e:07:82: a4:c3:35:a3:62:bd:01:8f:7c:3b:e3:4f:c7:7a:81: 2b:85:42:bd:09:17:ac:b8:38:7a:8f:84:82:b2:31: 70:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E3:39:7D:5E:2E:22:17:46:6E:83:FE:BD:F6:20:48:D1:2D:00:CD X509v3 Authority Key Identifier: keyid:62:9B:50:96:3E:BC:6A:02:2E:27:AE:CB:61:34:20:E4:0E:74:DB:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YptQlj68agIuJ67LYTQg5A5020o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/8E9B074050E311EF8624AC36C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.99.26.0/24 103.176.215.0/24 IPv6: 2001:df0:f980::/48 Signature Algorithm: sha256WithRSAEncryption 45:2d:06:16:c6:44:d0:62:b8:87:48:db:fd:b8:e1:7f:12:f5: 46:cd:18:f2:85:ef:6d:3e:e8:97:36:e3:2c:ca:bc:0f:08:e0: f8:f8:b0:df:96:33:92:7f:ce:3c:f5:8b:16:c0:44:6e:57:d0: 70:5b:fa:59:21:fd:a8:42:fc:0b:18:9b:b8:1c:f3:af:ff:f3: 05:33:01:7a:6a:9f:9e:5f:c8:26:1d:f6:43:9d:2e:71:56:08: ef:24:1a:ed:6b:ec:16:ed:6a:7f:d5:08:5e:b8:8d:ec:5e:a5: 29:de:c7:31:7d:6a:b8:b3:fd:c4:20:25:54:e1:54:f0:23:3b: 2d:2c:3d:f2:85:d0:31:35:6d:57:6f:da:3d:3d:dd:0d:5d:3a: 01:49:6e:76:2f:c3:52:46:0d:13:5d:c8:17:58:cf:36:52:29: f2:5d:b6:77:ce:a5:98:3c:a5:a4:2f:11:3d:95:eb:1a:b5:99: 67:83:9a:4e:5b:19:a8:2b:83:e3:26:2b:30:2f:33:ee:cb:69: c6:ba:7b:f1:5b:1b:bd:ed:1e:41:82:75:eb:0d:80:80:f4:e9: 5c:81:fe:3e:dd:6d:b9:2d:29:95:0a:eb:f3:b8:24:2d:3e:a3: eb:35:ba:3f:6d:d5:15:25:ab:02:14:5c:f7:d6:fd:28:d7:7c: af:34:2f:4b -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MzkyRTExMC8GA1UEBRMoNjI5QjUwOTYzRUJDNkEwMjJFMjdBRUNCNjEzNDIwRTQw RTc0REI0QTAeFw0yNDA5MTAxNDAxMzNaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZTA1MTNkLTNkNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDX77ugqgjDAocRXpu36cgkwf+AD9Z3ihwHBQbvPGNrmYgtJGvN+0lzc8WjLriQ C8r/DgLyydNSS6TFv7+e1hy2ShDL488k+gMqkuSI5w5PgsMiTE60lyPRS9+tVH96 D6gl9/WMOq7GbUNKd6pwqbj0uAKsG1Hef93fNFV/n9Sxs1opXZks2kO7Ul39aS2B /u37fTz3hdC6l5WvSmEYPPUrXFLgAqW84z0oqNzBbPVfYEKaVODjiwiCTJ2pA4yx 7Y1NgVcbFMxLQunjUWpEq7bFdDbZiy1qq6nnnztIIG4HgqTDNaNivQGPfDvjT8d6 gSuFQr0JF6y4OHqPhIKyMXDhAgMBAAGjggKsMIICqDAdBgNVHQ4EFgQUpuM5fV4u IhdGboP+vfYgSNEtAM0wHwYDVR0jBBgwFoAUYptQlj68agIuJ67LYTQg5A5020ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzOTJFLzMyRTFGMzU4NTBF MDExRUZBNzA5NDE2OEM0RjlBRTAyL1lwdFFsajY4YWdJdUo2N0xZVFFnNUE1MDIw by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWXB0UWxqNjhhZ0l1SjY3TFlUUWc1QTUwMjBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzkyRS8zMkUxRjM1ODUwRTAxMUVGQTcwOTQxNjhDNEY5QUUwMi84RTlCMDc0MDUw RTMxMUVGODYyNEFDMzZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA2BggrBgEFBQcBBwEB/wQn MCUwEgQCAAEwDAMEAGdjGgMEAGew1zAPBAIAAjAJAwcAIAEN8PmAMA0GCSqGSIb3 DQEBCwUAA4IBAQBFLQYWxkTQYriHSNv9uOF/EvVGzRjyhe9tPuiXNuMsyrwPCOD4 +LDfljOSf8489YsWwERuV9BwW/pZIf2oQvwLGJu4HPOv//MFMwF6ap+eX8gmHfZD nS5xVgjvJBrta+wW7Wp/1QheuI3sXqUp3scxfWq4s/3EICVU4VTwIzstLD3yhdAx NW1Xb9o9Pd0NXToBSW52L8NSRg0TXcgXWM82UinyXbZ3zqWYPKWkLxE9lesatZln g5pOWxmoK4PjJiswLzPuy2nGunvxWxu97R5BgnXrDYCA9Olcgf4+3W25LSmVCuvz uCQtPqPrNbo/bdUVJasCFFz31v0o13yvNC9L -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:00 2024 by rpki-client on console-ams.rpki-client.org