$ rpki-client -vvf rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/B6A9D8EEB0F411E5BE86D757C4F9AE02.roa File: B6A9D8EEB0F411E5BE86D757C4F9AE02.roa (raw, json) Hash identifier: 1XjlmfVjZ+/g856KRJ7NU7PVXN/iYERguNmyY4VTdYc= Subject key identifier: F0:74:38:7F:2D:E9:2C:11:D5:C9:73:AD:1F:5C:B3:35:A9:36:75:9E Certificate issuer: /CN=A912359E/serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84 Certificate serial: 2398 Authority key identifier: F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/B6A9D8EEB0F411E5BE86D757C4F9AE02.roa Signing time: Tue 02 Jul 2024 16:22:31 +0000 ROA not before: Tue 02 Jul 2024 16:22:31 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 132267 IP address blocks: 103.9.136.0/24 maxlen: 24 103.9.137.0/24 maxlen: 24 103.9.138.0/24 maxlen: 24 103.9.139.0/24 maxlen: 24 163.53.140.0/24 maxlen: 24 163.53.141.0/24 maxlen: 24 163.53.142.0/24 maxlen: 24 2403:eb00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9112 (0x2398) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912359E/serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84 Validity Not Before: Jul 2 16:22:31 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66842947-36b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:d8:f5:fa:60:cf:a5:d2:b0:7d:af:69:49:f0: 23:4e:dd:90:96:bc:cd:31:a5:d3:6c:fe:e6:4c:df: 6a:72:0d:fd:be:90:46:ce:c7:3f:89:65:27:a8:23: 84:3f:87:c3:93:c3:c9:f9:9f:e2:36:b1:b4:85:d4: 84:56:96:ce:e8:6a:22:03:df:9f:53:48:d0:94:26: 61:d6:f3:39:13:77:21:5f:b2:f8:6a:50:fb:fd:ef: 65:8c:d0:6e:f2:95:3c:cd:32:cb:28:b4:79:ba:02: 04:51:32:26:4a:ca:b5:ca:c4:77:11:e2:7f:00:75: 5a:f6:3e:ff:ee:9a:d5:99:62:1f:f0:62:ec:67:b5: ae:06:4e:45:b2:b4:a7:d0:c5:89:e6:be:00:65:56: ef:b8:aa:af:e5:67:a5:4f:18:60:75:44:fc:ad:b9: ce:8b:47:a6:f0:61:36:8d:44:6a:0f:bd:4d:d5:1e: 5f:97:54:28:d5:31:51:ea:5c:4b:2c:be:73:02:f0: 02:74:56:81:3b:36:4f:5c:4d:e9:f8:17:1e:2b:8c: 02:83:c5:84:81:e9:78:c0:d8:c0:59:03:a8:47:90: cf:11:76:02:35:fe:63:23:00:30:c7:9a:4d:f1:8c: 40:60:f7:8c:11:9d:5c:43:eb:5f:79:5a:b1:a0:d2: 53:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:74:38:7F:2D:E9:2C:11:D5:C9:73:AD:1F:5C:B3:35:A9:36:75:9E X509v3 Authority Key Identifier: keyid:F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/B6A9D8EEB0F411E5BE86D757C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.9.136.0/22 163.53.140.0-163.53.142.255 IPv6: 2403:eb00::/32 Signature Algorithm: sha256WithRSAEncryption 67:39:88:29:29:06:e5:20:d3:6c:de:25:f8:9f:6c:98:fd:0c: 90:ef:36:4d:17:e4:8d:dd:d3:54:bc:d9:12:05:72:2e:8a:07: 0d:7a:29:13:2c:c4:13:df:e6:25:5b:92:91:48:c2:58:cd:12: cd:5b:48:3a:ec:82:3d:97:0f:09:7d:3b:63:98:83:c5:96:6f: 41:9d:c8:0c:58:7b:f9:89:8d:33:11:c9:7c:99:72:f7:da:e6: b8:42:19:bf:38:b7:b4:98:de:bd:8e:36:9d:2d:36:50:9b:7e: f5:7e:c8:4b:fe:ed:39:f2:49:5d:3e:f6:8f:52:bd:e7:bf:e3: 0c:e4:1b:51:3d:f5:25:32:df:ed:70:54:db:f3:11:0f:45:1e: 2e:a8:70:3b:80:d2:42:38:e4:8c:26:2e:e3:e4:06:b5:ea:6a: a9:52:20:82:bd:0b:97:3f:6c:c9:f1:4c:a0:ca:46:dd:8b:ff: 12:f9:44:dd:b3:8c:89:e7:0d:91:4d:7c:17:54:85:8c:78:5d: 7c:bb:9e:7d:c0:e0:0f:e2:e2:36:de:a6:5a:18:fb:3b:fe:24: f1:58:65:42:14:62:12:25:c6:23:21:fe:55:96:bc:ce:1e:a8: ac:a2:6d:8a:83:55:2b:0c:71:9a:5e:df:4b:85:24:c5:de:eb: 34:0a:81:e7 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICI5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM1OUUxMTAvBgNVBAUTKEY5OTM1NzBBQTBENTQ5NkVGNURFRTdFOTA2MzcwRTY4 RkJEQ0NCODQwHhcNMjQwNzAyMTYyMjMxWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njg0Mjk0Ny0zNmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9dj1+mDPpdKwfa9pSfAjTt2QlrzNMaXTbP7mTN9qcg39vpBGzsc/iWUnqCOE P4fDk8PJ+Z/iNrG0hdSEVpbO6GoiA9+fU0jQlCZh1vM5E3chX7L4alD7/e9ljNBu 8pU8zTLLKLR5ugIEUTImSsq1ysR3EeJ/AHVa9j7/7prVmWIf8GLsZ7WuBk5FsrSn 0MWJ5r4AZVbvuKqv5WelTxhgdUT8rbnOi0em8GE2jURqD71N1R5fl1Qo1TFR6lxL LL5zAvACdFaBOzZPXE3p+BceK4wCg8WEgel4wNjAWQOoR5DPEXYCNf5jIwAwx5pN 8YxAYPeMEZ1cQ+tfeVqxoNJTzwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFPB0OH8t 6SwR1clzrR9cszWpNnWeMB8GA1UdIwQYMBaAFPmTVwqg1Ulu9d7n6QY3Dmj73MuE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzU5RS82RjJCNjU1MjU0 N0MxMUU1OTcxRjNCNDhDNEY5QUUwMi8tWk5YQ3FEVlNXNzEzdWZwQmpjT2FQdmN5 NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1aTlhDcURWU1c3MTN1ZnBCamNPYVB2Y3k0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjM1OUUvNkYyQjY1NTI1NDdDMTFFNTk3MUYzQjQ4QzRGOUFFMDIvQjZBOUQ4RUVC MEY0MTFFNUJFODZENzU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBoEAgABMBQDBAJnCYgwDAMEAqM1jAMEAKM1jjANBAIAAjAHAwUAJAPrADAN BgkqhkiG9w0BAQsFAAOCAQEAZzmIKSkG5SDTbN4l+J9smP0MkO82TRfkjd3TVLzZ EgVyLooHDXopEyzEE9/mJVuSkUjCWM0SzVtIOuyCPZcPCX07Y5iDxZZvQZ3IDFh7 +YmNMxHJfJly99rmuEIZvzi3tJjevY42nS02UJt+9X7IS/7tOfJJXT72j1K957/j DOQbUT31JTLf7XBU2/MRD0UeLqhwO4DSQjjkjCYu4+QGtepqqVIggr0Llz9syfFM oMpG3Yv/EvlE3bOMiecNkU18F1SFjHhdfLuefcDgD+LiNt6mWhj7O/4k8VhlQhRi EiXGIyH+VZa8zh6orKJtioNVKwxxml7fS4Ukxd7rNAqB5w== -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:14 2024 by rpki-client on console-ams.rpki-client.org