$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/9DFFBC7C12F011EDA0DB0B12C4F9AE02.roa File: 9DFFBC7C12F011EDA0DB0B12C4F9AE02.roa (raw, json) Hash identifier: I/KyU3geIWwBo8ZaiWc/F+HF/TbeVrVlUgdVYuSp+mY= Subject key identifier: B3:FC:FB:3E:4B:16:D1:43:BA:77:78:5E:DC:50:B4:23:6D:9C:72:22 Certificate issuer: /CN=A913EE46/serialNumber=63515B364113848FA554D2842F5841877CF6AF00 Certificate serial: 01DB Authority key identifier: 63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/9DFFBC7C12F011EDA0DB0B12C4F9AE02.roa Signing time: Fri 23 Aug 2024 03:16:10 +0000 ROA not before: Fri 23 Aug 2024 03:16:10 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 140976 IP address blocks: 103.83.82.0/23 maxlen: 23 103.83.82.0/24 maxlen: 24 103.83.83.0/24 maxlen: 24 2001:df1:1540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EE46/serialNumber=63515B364113848FA554D2842F5841877CF6AF00 Validity Not Before: Aug 23 03:16:10 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66c7fefa-5f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:93:c5:55:3b:21:02:56:8a:76:84:2e:4c:69: 77:eb:e6:b7:1a:c5:cc:ea:f7:48:90:24:9a:b0:bb: 67:dd:e7:88:44:35:a5:e1:c1:84:87:70:2f:f4:27: 33:8a:b8:1e:3d:04:4a:d3:da:e6:cb:3d:60:4a:db: 82:00:0e:e2:1c:32:f9:39:9f:e7:20:91:28:3f:8a: 60:c6:c9:39:81:b1:0e:b5:f2:0d:21:c1:9c:12:1d: 85:b4:a8:26:fb:a3:63:c4:ec:e7:93:23:1a:c4:ec: 38:63:f6:49:1b:c9:4b:74:ac:a7:4f:38:96:ed:58: f9:54:2b:ae:78:ca:33:d0:9f:7a:89:8a:59:75:bf: b8:b0:03:73:ab:a2:e0:cf:82:ba:94:3d:4e:08:72: 2c:7d:c7:9b:5d:51:95:aa:11:76:ac:68:11:28:1d: c1:06:59:cf:f4:a7:12:3a:35:c3:ab:0e:e1:fb:6a: 64:81:10:80:2c:15:8c:e2:d5:62:d8:7a:b3:9a:8e: 0b:a7:e6:97:d3:66:91:69:e7:5c:89:8f:60:78:71: 2d:15:11:42:5d:81:8b:04:65:87:e7:5c:69:11:12: 50:61:cf:a3:bf:58:96:cc:30:86:9a:7e:5f:00:05: 48:8d:ab:fd:bb:32:3d:85:81:0b:f5:3e:76:6f:66: 0c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:FC:FB:3E:4B:16:D1:43:BA:77:78:5E:DC:50:B4:23:6D:9C:72:22 X509v3 Authority Key Identifier: keyid:63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/9DFFBC7C12F011EDA0DB0B12C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.83.82.0/23 IPv6: 2001:df1:1540::/48 Signature Algorithm: sha256WithRSAEncryption 8c:36:ad:3b:25:3a:14:37:67:70:13:e8:b0:83:3b:8a:d7:5d: 8f:c8:75:62:84:4b:ed:7f:a4:ff:ca:a9:f8:e7:54:3f:3d:17: e3:4a:5a:96:0e:de:96:c0:9c:47:c9:16:e2:8f:17:c7:fc:33: 60:b5:64:75:61:5c:31:20:f1:83:45:4b:01:c4:04:ac:64:ca: 45:93:b4:02:fb:56:a7:f3:d1:6a:b8:1a:30:c6:7a:5d:73:03: 92:32:3a:f2:d9:1c:e8:3a:55:de:5f:09:cb:b8:67:02:19:66: 73:9c:01:ed:26:2f:d6:27:32:27:a6:47:c5:0c:ad:7d:0a:f5: 79:10:cc:00:e4:38:c6:d4:a9:80:7a:78:ca:8a:82:83:0e:8f: c1:d1:d7:b2:6e:d7:b1:44:53:31:14:05:4a:43:ce:9d:f7:2e: 66:b9:5e:74:34:3e:c4:c9:94:27:9f:c9:d4:7b:0a:9e:0a:c1: 85:c8:54:46:4d:69:28:82:5d:52:1b:10:2b:6a:0f:89:fb:50: 98:dc:aa:bc:c9:8b:a3:88:a0:12:04:63:b5:bc:95:13:a9:e6: 77:4b:ed:39:8c:52:e5:53:95:b9:fd:d6:fb:e2:f2:08:d1:ef: e8:0b:88:6e:b2:d2:61:88:cf:d9:dd:53:3d:16:1f:62:92:ec: ef:8c:6f:ce -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VFNDYxMTAvBgNVBAUTKDYzNTE1QjM2NDExMzg0OEZBNTU0RDI4NDJGNTg0MTg3 N0NGNkFGMDAwHhcNMjQwODIzMDMxNjEwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmM3ZmVmYS01ZjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspPFVTshAlaKdoQuTGl36+a3GsXM6vdIkCSasLtn3eeIRDWl4cGEh3Av9Ccz irgePQRK09rmyz1gStuCAA7iHDL5OZ/nIJEoP4pgxsk5gbEOtfINIcGcEh2FtKgm +6NjxOznkyMaxOw4Y/ZJG8lLdKynTziW7Vj5VCuueMoz0J96iYpZdb+4sANzq6Lg z4K6lD1OCHIsfcebXVGVqhF2rGgRKB3BBlnP9KcSOjXDqw7h+2pkgRCALBWM4tVi 2Hqzmo4Lp+aX02aRaedciY9geHEtFRFCXYGLBGWH51xpERJQYc+jv1iWzDCGmn5f AAVIjav9uzI9hYEL9T52b2YMSwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLP8+z5L FtFDund4XtxQtCNtnHIiMB8GA1UdIwQYMBaAFGNRWzZBE4SPpVTShC9YQYd89q8A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUU0Ni9BRTgyRTEyNjEy RUQxMUVEOUU0RDc2MEVDNEY5QUUwMi9ZMUZiTmtFVGhJLWxWTktFTDFoQmgzejJy d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kxRmJOa0VUaEktbFZOS0VMMWhCaDN6MnJ3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0VFNDYvQUU4MkUxMjYxMkVEMTFFRDlFNEQ3NjBFQzRGOUFFMDIvOURGRkJDN0Mx MkYwMTFFREEwREIwQjEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnU1IwDwQCAAIwCQMHACABDfEVQDANBgkqhkiG9w0BAQsF AAOCAQEAjDatOyU6FDdncBPosIM7itddj8h1YoRL7X+k/8qp+OdUPz0X40palg7e lsCcR8kW4o8Xx/wzYLVkdWFcMSDxg0VLAcQErGTKRZO0AvtWp/PRargaMMZ6XXMD kjI68tkc6DpV3l8Jy7hnAhlmc5wB7SYv1icyJ6ZHxQytfQr1eRDMAOQ4xtSpgHp4 yoqCgw6PwdHXsm7XsURTMRQFSkPOnfcuZrledDQ+xMmUJ5/J1HsKngrBhchURk1p KIJdUhsQK2oPiftQmNyqvMmLo4igEgRjtbyVE6nmd0vtOYxS5VOVuf3W++LyCNHv 6AuIbrLSYYjP2d1TPRYfYpLs74xvzg== -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:34 2024 by rpki-client on console-fra.rpki-client.org