$ rpki-client -vvf rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/3B0E8BD2292211ED93341915C4F9AE02.roa File: 3B0E8BD2292211ED93341915C4F9AE02.roa (raw, json) Hash identifier: nIc0DzbDh/PwNmfiEtRIcpTiu7BnHHbJ2kvWsihcckg= Subject key identifier: F0:63:32:95:49:70:99:00:C4:95:BD:07:9F:7D:FC:40:7E:70:40:42 Certificate issuer: /CN=A9118F69/serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D Certificate serial: 01B7 Authority key identifier: 6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/3B0E8BD2292211ED93341915C4F9AE02.roa Signing time: Wed 25 Sep 2024 02:36:09 +0000 ROA not before: Wed 25 Sep 2024 02:36:09 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 150170 IP address blocks: 103.138.254.0/23 maxlen: 23 103.138.254.0/24 maxlen: 24 103.138.255.0/24 maxlen: 24 2001:df1:2bc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118F69/serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D Validity Not Before: Sep 25 02:36:09 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66f37718-4b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5d:26:e8:6b:b3:b2:5f:7d:30:77:16:7c:2d: 35:2f:17:49:75:2f:94:b3:cc:83:08:89:a0:6e:85: d3:81:0d:30:12:e0:07:ea:71:a5:cc:d2:09:d6:a5: cb:6e:bf:ab:86:95:88:3b:18:2d:ac:90:f9:13:10: 28:f1:58:ea:d1:9f:78:59:a8:58:3c:2d:b6:ba:65: f4:e2:3c:e2:6e:be:0b:6c:67:ca:45:aa:0a:39:c0: c1:1c:c9:ab:51:d1:79:a6:d7:88:14:99:f2:64:de: b8:33:20:16:83:73:96:43:bd:56:81:b7:01:c8:c1: e5:69:5d:fe:8b:8c:d9:ca:2a:40:94:d9:2f:8d:f6: 69:a9:cd:e1:20:66:e9:27:11:36:09:19:4e:74:c3: 89:1a:55:bb:1e:3e:fd:8b:14:10:ed:89:61:ce:37: e3:a2:ae:f9:05:86:6f:bb:7d:1a:ca:ca:e0:af:bf: cd:ca:f4:ca:4f:cd:0a:a9:4c:14:44:29:39:4c:b2: 69:34:70:39:82:99:f5:4c:ec:98:fe:7f:54:08:97: f4:c8:17:0d:c5:19:b0:0f:7b:c8:e5:2d:aa:a6:67: f8:7a:22:4c:c2:f2:1c:00:1c:37:72:fc:2b:9c:d1: 0b:a0:b5:8b:03:9a:97:1f:f2:56:3b:2e:8e:3b:c0: 8d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:63:32:95:49:70:99:00:C4:95:BD:07:9F:7D:FC:40:7E:70:40:42 X509v3 Authority Key Identifier: keyid:6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/3B0E8BD2292211ED93341915C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.254.0/23 IPv6: 2001:df1:2bc0::/48 Signature Algorithm: sha256WithRSAEncryption aa:27:82:5d:b0:26:d4:4b:e9:e0:04:23:75:21:c9:55:8a:41: b3:e1:86:c6:21:9a:0c:60:c3:c7:87:78:81:e5:76:cd:19:c4: 3a:70:d6:ed:1b:e6:d4:20:5d:1a:71:6c:14:9e:da:ab:8f:79: 81:eb:42:a6:a0:f3:47:5c:5c:6c:af:ad:d7:2a:4b:80:00:68: a5:52:73:78:b2:54:21:b1:15:f7:49:24:51:8a:74:19:dc:5c: 08:52:92:69:62:97:9b:bc:07:bc:fe:70:99:7c:17:74:65:c0: 4f:8e:40:96:12:ca:f2:b4:7c:49:c2:c2:38:14:b7:ad:4a:e8: 87:fe:f8:1f:51:63:92:f3:81:b8:1f:0f:61:6c:94:ee:c7:82: 3a:e2:fb:66:91:b1:1d:8a:51:8c:46:50:52:a2:50:ae:4d:77: b7:34:a3:92:b0:d3:9b:de:90:42:d7:97:40:48:57:bf:81:4c: b7:7e:48:6a:71:10:a8:83:87:1f:00:07:2d:66:de:e0:08:56: 04:3f:cd:1b:96:43:e3:18:37:b5:ed:19:db:4c:bb:ff:bc:aa: 0b:4a:c3:70:1d:e1:c5:80:0c:9f:c9:a7:fd:79:c9:a3:6f:59: 37:49:ad:3e:56:a9:2e:a5:24:93:0e:d6:a3:64:af:ce:17:53: c8:6f:50:a8 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThGNjkxMTAvBgNVBAUTKDZBMUU1NkQ1RkUyNkM2QkQyRUNCMDQ1NzgxN0RDNkJB M0MwREU0N0QwHhcNMjQwOTI1MDIzNjA5WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmYzNzcxOC00YjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu10m6Guzsl99MHcWfC01LxdJdS+Us8yDCImgboXTgQ0wEuAH6nGlzNIJ1qXL br+rhpWIOxgtrJD5ExAo8Vjq0Z94WahYPC22umX04jzibr4LbGfKRaoKOcDBHMmr UdF5pteIFJnyZN64MyAWg3OWQ71WgbcByMHlaV3+i4zZyipAlNkvjfZpqc3hIGbp JxE2CRlOdMOJGlW7Hj79ixQQ7Ylhzjfjoq75BYZvu30aysrgr7/NyvTKT80KqUwU RCk5TLJpNHA5gpn1TOyY/n9UCJf0yBcNxRmwD3vI5S2qpmf4eiJMwvIcABw3cvwr nNELoLWLA5qXH/JWOy6OO8CNCQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPBjMpVJ cJkAxJW9B599/EB+cEBCMB8GA1UdIwQYMBaAFGoeVtX+Jsa9LssEV4F9xro8DeR9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEY2OS9COTk4REQzQzI5 MDgxMUVEQkQyNjJCMjhDNEY5QUUwMi9haDVXMWY0bXhyMHV5d1JYZ1gzR3Vqd041 SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoNVcxZjRteHIwdXl3UlhnWDNHdWp3TjVIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MThGNjkvQjk5OEREM0MyOTA4MTFFREJEMjYyQjI4QzRGOUFFMDIvM0IwRThCRDIy OTIyMTFFRDkzMzQxOTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFniv4wDwQCAAIwCQMHACABDfErwDANBgkqhkiG9w0BAQsF AAOCAQEAqieCXbAm1Evp4AQjdSHJVYpBs+GGxiGaDGDDx4d4geV2zRnEOnDW7Rvm 1CBdGnFsFJ7aq495getCpqDzR1xcbK+t1ypLgABopVJzeLJUIbEV90kkUYp0Gdxc CFKSaWKXm7wHvP5wmXwXdGXAT45AlhLK8rR8ScLCOBS3rUroh/74H1FjkvOBuB8P YWyU7seCOuL7ZpGxHYpRjEZQUqJQrk13tzSjkrDTm96QQteXQEhXv4FMt35IanEQ qIOHHwAHLWbe4AhWBD/NG5ZD4xg3te0Z20y7/7yqC0rDcB3hxYAMn8mn/XnJo29Z N0mtPlapLqUkkw7Wo2SvzhdTyG9QqA== -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:30 2024 by rpki-client on console-fra.rpki-client.org