$ rpki-client -vvf rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/CBF9AD5449E811E6BAF4525DC4F9AE02.roa File: CBF9AD5449E811E6BAF4525DC4F9AE02.roa (raw, json) Hash identifier: f4EKOmeKepAiODou+eN9xy2W8k6h11p1CV/RVot3uC0= Subject key identifier: C0:3C:C8:81:6C:23:FA:C4:D9:54:97:51:52:CB:2A:5F:19:76:B6:68 Certificate issuer: /CN=A9127342/serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C Certificate serial: 2207 Authority key identifier: C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/CBF9AD5449E811E6BAF4525DC4F9AE02.roa Signing time: Tue 02 Jan 2024 16:13:02 +0000 ROA not before: Tue 02 Jan 2024 16:13:02 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 134839 IP address blocks: 103.222.238.0/24 maxlen: 24 103.245.176.0/24 maxlen: 24 103.247.180.0/24 maxlen: 24 2001:df7:a401::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8711 (0x2207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127342/serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C Validity Not Before: Jan 2 16:13:02 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6594360e-c5f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4b:58:8f:85:5a:b2:15:1e:97:fb:2d:e1:f5: dc:2f:28:c9:af:20:99:63:20:d5:75:8b:26:4e:6d: 37:bb:18:1c:84:3f:b0:be:6e:39:68:6b:e5:34:8b: e2:e8:a2:d5:2c:e6:70:ea:3e:79:52:bd:0f:3f:68: fe:41:fb:67:b2:7a:85:cb:0e:4e:54:f2:22:62:9f: 7b:97:a0:84:99:ab:a0:03:4b:67:43:5b:bd:6e:07: f6:e3:56:37:1f:71:2b:ab:20:48:d2:94:cb:0f:db: c7:c4:41:7b:7a:60:62:ce:93:61:26:02:37:5a:da: 89:2b:a5:b7:12:85:0e:5d:e3:67:d2:35:ce:17:74: a9:79:76:97:4a:16:70:f4:1e:2d:c4:17:56:b8:2a: e1:0d:fa:0b:a8:60:a2:4d:4c:a7:8e:49:f0:43:cf: 00:48:dd:5c:ba:a6:ca:f0:eb:1b:6e:d5:41:89:80: 3f:4c:a4:04:99:c5:c4:e6:e6:a9:6a:fd:bd:db:e2: 3d:e9:59:7d:f7:ae:54:b4:8b:62:92:26:55:18:c8: ea:ea:36:c0:a0:26:8e:3e:42:2f:12:0d:8f:75:bd: 49:37:94:a8:21:16:f0:4a:67:8b:51:75:2d:88:70: 2d:4c:55:6c:c3:46:6f:0f:76:bf:18:5f:ea:67:c6: 6e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:3C:C8:81:6C:23:FA:C4:D9:54:97:51:52:CB:2A:5F:19:76:B6:68 X509v3 Authority Key Identifier: keyid:C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/CBF9AD5449E811E6BAF4525DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.222.238.0/24 103.245.176.0/24 103.247.180.0/24 IPv6: 2001:df7:a401::/48 Signature Algorithm: sha256WithRSAEncryption 8a:a9:78:cf:0b:7b:b0:f2:63:75:8d:e1:17:32:c1:ae:d4:30: 7e:1b:e4:b0:c0:e0:e0:4f:bb:44:ef:7f:38:46:0e:3d:af:a5: b2:a7:fe:f3:24:c9:66:f4:33:3c:c8:94:b5:af:60:d2:99:7d: 19:f6:ac:b3:74:e1:60:7b:fb:a8:5b:31:8a:3c:a4:79:93:eb: e2:81:8b:2a:fa:02:78:b0:85:64:b8:8b:0c:a8:f0:6d:19:45: 80:2f:7d:f0:b5:81:69:01:3a:61:2e:5c:e6:7f:c8:4d:03:dc: 37:43:bb:89:df:fe:54:72:e7:99:06:da:2c:a0:3a:75:18:e8: 09:dd:6c:9d:70:97:75:2f:d4:1b:3b:3b:ec:f0:81:45:e1:17: f9:46:97:98:b1:8d:22:5e:e5:83:c2:d2:06:b5:fa:c3:cf:d5: a7:c6:f4:97:1c:73:d5:5f:c1:01:3c:8e:d9:84:ee:7b:b5:f7: 8e:60:7b:6e:8c:c9:e3:c7:74:7b:40:f7:87:d3:88:1b:a4:f7: 89:17:af:81:1c:80:de:4d:10:4e:c2:fd:55:83:96:f6:66:ef: fe:5d:96:e8:1f:02:d4:3a:42:db:ee:eb:1a:00:62:31:a1:a8: 43:b2:ef:76:f3:93:52:66:54:ca:45:11:d4:79:35:a0:ae:b0: 6b:dc:db:4e -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICIgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczNDIxMTAvBgNVBAUTKEM0OTY2M0Q5NkJDOTMyRDc0Mzg0MEJDNjdGRDg3QkY4 RTAxNTQ2N0MwHhcNMjQwMTAyMTYxMzAyWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTk0MzYwZS1jNWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10tYj4VashUel/st4fXcLyjJryCZYyDVdYsmTm03uxgchD+wvm45aGvlNIvi 6KLVLOZw6j55Ur0PP2j+QftnsnqFyw5OVPIiYp97l6CEmaugA0tnQ1u9bgf241Y3 H3ErqyBI0pTLD9vHxEF7emBizpNhJgI3WtqJK6W3EoUOXeNn0jXOF3SpeXaXShZw 9B4txBdWuCrhDfoLqGCiTUynjknwQ88ASN1cuqbK8OsbbtVBiYA/TKQEmcXE5uap av292+I96Vl9965UtItikiZVGMjq6jbAoCaOPkIvEg2Pdb1JN5SoIRbwSmeLUXUt iHAtTFVsw0ZvD3a/GF/qZ8ZuDwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFMA8yIFs I/rE2VSXUVLLKl8ZdrZoMB8GA1UdIwQYMBaAFMSWY9lryTLXQ4QLxn/Ye/jgFUZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzM0Mi82RERCQzdGQzkz MjcxMUU1QTgxRjMwM0VDNEY5QUUwMi94SlpqMld2Sk10ZERoQXZHZjloNy1PQVZS bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKWmoyV3ZKTXRkRGhBdkdmOWg3LU9BVlJudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjczNDIvNkREQkM3RkM5MzI3MTFFNUE4MUYzMDNFQzRGOUFFMDIvQ0JGOUFENTQ0 OUU4MTFFNkJBRjQ1MjVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBABn3u4DBABn9bADBABn97QwDwQCAAIwCQMHACABDfekATAN BgkqhkiG9w0BAQsFAAOCAQEAiql4zwt7sPJjdY3hFzLBrtQwfhvksMDg4E+7RO9/ OEYOPa+lsqf+8yTJZvQzPMiUta9g0pl9Gfass3ThYHv7qFsxijykeZPr4oGLKvoC eLCFZLiLDKjwbRlFgC998LWBaQE6YS5c5n/ITQPcN0O7id/+VHLnmQbaLKA6dRjo Cd1snXCXdS/UGzs77PCBReEX+UaXmLGNIl7lg8LSBrX6w8/Vp8b0lxxz1V/BATyO 2YTue7X3jmB7bozJ48d0e0D3h9OIG6T3iRevgRyA3k0QTsL9VYOW9mbv/l2W6B8C 1DpC2+7rGgBiMaGoQ7LvdvOTUmZUykUR1Hk1oK6wa9zbTg== -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:57 2024 by rpki-client on console-ams.rpki-client.org