$ rpki-client -vvf rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/6DCC06C231BC11EA9AACCA4BC4F9AE02.roa File: 6DCC06C231BC11EA9AACCA4BC4F9AE02.roa (raw, json) Hash identifier: +AY4f5uhDa+iIwRiDR23i6XlDUBAKMl99YAiHZiRwOM= Subject key identifier: 48:C6:63:32:28:57:2B:73:D9:76:E1:7A:43:A9:CD:21:E3:32:CD:C9 Certificate issuer: /CN=A9160701/serialNumber=E52DE8B1919338A3E255664E88048A5698A120D0 Certificate serial: 0A77 Authority key identifier: E5:2D:E8:B1:91:93:38:A3:E2:55:66:4E:88:04:8A:56:98:A1:20:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/6DCC06C231BC11EA9AACCA4BC4F9AE02.roa Signing time: Wed 24 Jan 2024 20:17:58 +0000 ROA not before: Wed 24 Jan 2024 20:17:58 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 56028 IP address blocks: 103.19.4.0/22 maxlen: 22 103.19.4.0/24 maxlen: 24 103.19.5.0/24 maxlen: 24 103.19.6.0/24 maxlen: 24 103.19.7.0/24 maxlen: 24 114.31.212.0/22 maxlen: 22 114.31.212.0/24 maxlen: 24 114.31.213.0/24 maxlen: 24 114.31.214.0/24 maxlen: 24 114.31.215.0/24 maxlen: 24 119.160.224.0/21 maxlen: 24 163.47.232.0/22 maxlen: 22 163.47.232.0/24 maxlen: 24 163.47.233.0/24 maxlen: 24 163.47.234.0/24 maxlen: 24 163.47.235.0/24 maxlen: 24 2406:1a00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.crl rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2679 (0xa77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160701/serialNumber=E52DE8B1919338A3E255664E88048A5698A120D0 Validity Not Before: Jan 24 20:17:58 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65b17076-7c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:20:4f:5f:dc:85:de:2b:65:78:fa:c7:41:2c: 7a:71:e6:bc:24:d7:18:ed:40:f6:01:f3:aa:54:05: d2:c5:37:b2:75:00:66:7d:25:2d:3b:c2:b0:22:ee: 69:05:b6:97:d4:66:e7:87:f6:06:88:4b:5e:ff:19: 0b:a1:de:34:2f:51:f8:70:7f:0d:2a:e9:7d:03:3f: d1:d6:5c:76:59:75:43:4a:bd:fc:17:2a:c8:7a:d8: 0f:cb:e4:8f:d5:82:49:5e:ae:6c:b4:65:c8:be:72: c5:ac:90:ed:93:7c:e4:e0:06:63:71:2c:f2:2f:d3: 3a:c0:9a:ba:4f:0c:88:5e:86:67:e7:8b:00:56:84: 4d:53:4f:35:05:17:22:3e:48:d1:95:ea:bf:72:2d: 6b:8d:0b:f5:49:25:6b:1b:f3:2d:32:8f:85:f5:58: c7:46:4b:ec:85:3a:a8:ed:5c:f7:fe:d6:95:93:95: 0b:90:96:47:8b:da:46:f9:0e:5e:cc:ad:1e:4c:96: 94:dd:6d:23:72:b6:49:e8:3b:6d:91:0d:09:8b:f2: d9:72:08:32:1e:69:3c:7b:2d:15:53:23:ad:d9:1a: 33:9f:fb:92:a6:e8:d6:c5:53:1b:c0:4f:04:c8:86: 39:11:0f:e0:73:53:57:60:3b:0e:57:45:c5:5b:6f: 74:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C6:63:32:28:57:2B:73:D9:76:E1:7A:43:A9:CD:21:E3:32:CD:C9 X509v3 Authority Key Identifier: keyid:E5:2D:E8:B1:91:93:38:A3:E2:55:66:4E:88:04:8A:56:98:A1:20:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/6DCC06C231BC11EA9AACCA4BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.19.4.0/22 114.31.212.0/22 119.160.224.0/21 163.47.232.0/22 IPv6: 2406:1a00::/32 Signature Algorithm: sha256WithRSAEncryption 89:1c:b0:ff:75:14:4f:be:89:2f:58:04:78:25:52:b4:15:0c: b1:3d:3a:bb:59:58:80:c1:aa:1a:26:9e:85:e0:01:c3:4e:73: ed:1a:3c:d5:5c:34:9c:02:3f:e8:36:88:75:30:a8:22:dd:c7: 5b:d9:f2:a6:90:e3:95:9b:f9:64:94:52:04:e0:e1:bc:6d:23: 48:6d:cb:e0:4a:72:58:19:40:4c:cd:18:95:b3:68:bd:b1:3f: 93:8c:b9:2c:17:1c:a0:93:79:6f:28:04:12:84:4b:b9:58:b6: e5:ce:23:3d:da:cf:04:8d:73:e9:11:7f:ba:a8:70:73:36:6f: e6:a0:b3:64:42:6d:2f:ba:b8:c9:b3:6b:af:2b:80:9b:88:72: 3d:c6:08:a8:4f:15:c4:98:d9:97:d8:16:c6:2f:ce:f2:09:f1: aa:b7:e4:92:74:f3:f7:34:c7:dc:ee:01:1d:1d:6f:c0:a3:eb: 5c:88:2c:9f:de:5a:df:dc:50:92:ef:0a:0b:1d:ed:2d:1d:44: c8:cc:cb:07:a0:73:4b:f6:19:5a:79:2a:1f:a2:59:cc:f6:95: 2d:da:13:d8:2c:67:57:50:68:25:9d:21:3b:a5:63:a1:d4:76: 60:44:8e:1b:02:1b:6f:09:bc:85:eb:db:70:7b:82:da:d0:ab: 74:b4:10:5a -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICCncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA3MDExMTAvBgNVBAUTKEU1MkRFOEIxOTE5MzM4QTNFMjU1NjY0RTg4MDQ4QTU2 OThBMTIwRDAwHhcNMjQwMTI0MjAxNzU4WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWIxNzA3Ni03YzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviBPX9yF3itlePrHQSx6cea8JNcY7UD2AfOqVAXSxTeydQBmfSUtO8KwIu5p BbaX1Gbnh/YGiEte/xkLod40L1H4cH8NKul9Az/R1lx2WXVDSr38FyrIetgPy+SP 1YJJXq5stGXIvnLFrJDtk3zk4AZjcSzyL9M6wJq6TwyIXoZn54sAVoRNU081BRci PkjRleq/ci1rjQv1SSVrG/MtMo+F9VjHRkvshTqo7Vz3/taVk5ULkJZHi9pG+Q5e zK0eTJaU3W0jcrZJ6DttkQ0Ji/LZcggyHmk8ey0VUyOt2Rozn/uSpujWxVMbwE8E yIY5EQ/gc1NXYDsOV0XFW2902wIDAQABo4ICtjCCArIwHQYDVR0OBBYEFEjGYzIo Vytz2XbhekOpzSHjMs3JMB8GA1UdIwQYMBaAFOUt6LGRkzij4lVmTogEilaYoSDQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDcwMS81NDAwQzQxODMw MzAxMUVBQTcyRjM2N0FDNEY5QUUwMi81UzNvc1pHVE9LUGlWV1pPaUFTS1ZwaWhJ TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVTM29zWkdUT0tQaVZXWk9pQVNLVnBpaElOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjA3MDEvNTQwMEM0MTgzMDMwMTFFQUE3MkYzNjdBQzRGOUFFMDIvNkRDQzA2QzIz MUJDMTFFQTlBQUNDQTRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAJnEwQDBAJyH9QDBAN3oOADBAKjL+gwDQQCAAIwBwMFACQG GgAwDQYJKoZIhvcNAQELBQADggEBAIkcsP91FE++iS9YBHglUrQVDLE9OrtZWIDB qhomnoXgAcNOc+0aPNVcNJwCP+g2iHUwqCLdx1vZ8qaQ45Wb+WSUUgTg4bxtI0ht y+BKclgZQEzNGJWzaL2xP5OMuSwXHKCTeW8oBBKES7lYtuXOIz3azwSNc+kRf7qo cHM2b+ags2RCbS+6uMmza68rgJuIcj3GCKhPFcSY2ZfYFsYvzvIJ8aq35JJ08/c0 x9zuAR0db8Cj61yILJ/eWt/cUJLvCgsd7S0dRMjMywegc0v2GVp5Kh+iWcz2lS3a E9gsZ1dQaCWdITulY6HUdmBEjhsCG28JvIXr23B7gtrQq3S0EFo= -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:58 2024 by rpki-client on console-fra.rpki-client.org