$ rpki-client -vvf rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/43854B4044D411EB85615640C4F9AE02.roa File: 43854B4044D411EB85615640C4F9AE02.roa (raw, json) Hash identifier: CB1GFrJ7tsJbFUks8uu9Gdd9FZeKLh0J1F3T+doC6dY= Subject key identifier: 2D:B9:69:89:DE:B4:75:2B:7A:5A:5A:76:29:0E:E8:8B:B2:39:6F:6A Certificate issuer: /CN=A9168197/serialNumber=C3B648EB2E23872A918D0577130F35853F6F639E Certificate serial: 0661 Authority key identifier: C3:B6:48:EB:2E:23:87:2A:91:8D:05:77:13:0F:35:85:3F:6F:63:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/43854B4044D411EB85615640C4F9AE02.roa Signing time: Mon 22 Jul 2024 23:00:46 +0000 ROA not before: Mon 22 Jul 2024 23:00:46 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 131448 IP address blocks: 103.69.136.0/22 maxlen: 22 103.69.136.0/24 maxlen: 24 103.69.137.0/24 maxlen: 24 103.69.138.0/24 maxlen: 24 103.69.139.0/24 maxlen: 24 116.66.180.0/22 maxlen: 22 116.66.180.0/24 maxlen: 24 116.66.181.0/24 maxlen: 24 116.66.182.0/24 maxlen: 24 116.66.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1633 (0x661) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168197/serialNumber=C3B648EB2E23872A918D0577130F35853F6F639E Validity Not Before: Jul 22 23:00:46 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=669ee49e-56bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a7:35:99:89:df:c6:1a:3d:70:45:af:00:38: c7:af:af:fe:09:fc:6a:62:0d:0b:e9:b1:47:95:61: 71:ef:4c:1b:d1:12:8c:4c:48:6a:b3:0d:e8:36:05: f2:77:bb:8a:7f:7b:d2:94:9d:9c:96:7a:7d:da:a7: 0d:77:7c:29:b3:23:86:f2:71:4b:67:48:58:fd:b0: e7:4d:a2:24:4e:a5:c4:9e:fd:fd:29:1a:a9:0f:9c: 5b:91:6f:93:c5:37:4e:9f:4f:eb:a8:9e:1f:28:3a: 65:d3:69:d5:01:9e:1c:7a:e3:1e:e9:e6:bf:2f:a0: 50:82:f9:70:09:a1:e4:f0:14:51:8f:1b:b0:7d:a6: 03:73:03:7e:27:49:49:2c:93:f4:11:4b:c6:43:78: b2:24:75:2d:86:cd:2c:49:fe:89:8c:b1:5c:c7:f9: 1a:ef:d6:0b:c1:56:fa:2e:d0:9c:11:a1:67:78:98: a4:dd:19:fd:09:d2:9d:75:8a:9f:73:96:41:0a:3a: bb:0f:e1:31:a7:07:44:89:df:e6:ae:e1:1d:2b:0d: 99:3a:a0:dd:7d:07:4f:e4:8f:3e:6b:3f:4d:12:f2: a9:27:71:a2:5e:c6:d9:3d:7f:ce:11:45:0f:f3:f9: 2b:96:8a:ea:1f:f2:99:96:4f:c0:82:2c:a2:98:eb: 58:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B9:69:89:DE:B4:75:2B:7A:5A:5A:76:29:0E:E8:8B:B2:39:6F:6A X509v3 Authority Key Identifier: keyid:C3:B6:48:EB:2E:23:87:2A:91:8D:05:77:13:0F:35:85:3F:6F:63:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/43854B4044D411EB85615640C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.69.136.0/22 116.66.180.0/22 Signature Algorithm: sha256WithRSAEncryption aa:ac:47:f8:e2:37:34:72:34:0d:61:13:1f:ed:16:74:00:02: 2d:75:ed:12:b7:81:91:1f:53:25:a1:63:b7:f7:65:b4:f3:ab: b2:32:4e:03:c6:d2:2b:bd:4d:46:02:38:a8:3d:c5:51:ba:57: 5d:fb:cb:7c:1f:18:3e:07:5d:96:28:92:19:e5:7e:03:46:bd: 9e:e8:69:fd:58:59:c9:c3:28:4c:8d:98:a2:07:f3:0d:06:27: a2:c3:b7:21:2b:55:79:e3:e2:0d:1a:92:66:40:37:96:c5:f1: af:a8:ce:d0:2f:31:40:a6:3f:52:bf:f8:d0:40:26:77:2f:52: 80:38:99:f4:27:a8:ae:47:3d:19:b5:c9:12:35:7e:bc:f9:20: 55:16:62:10:f7:bb:46:23:c0:0f:71:64:08:87:ab:6e:f1:d8: c8:ae:10:b8:23:79:1f:be:ff:83:a6:d9:dd:40:a4:c0:f3:1b: 13:07:f9:38:74:4d:a7:92:f5:e7:f3:74:6d:c2:c0:43:fc:df: e3:bc:21:10:48:9c:8d:63:b0:60:06:2b:e4:a9:06:62:88:34: 06:b9:44:fc:41:ac:da:fc:d9:e9:01:b9:c1:6c:b3:81:75:92: 57:a0:a3:b8:37:ec:ef:fe:ef:f2:77:70:62:8d:00:28:25:fb: 34:1d:87:f2 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxOTcxMTAvBgNVBAUTKEMzQjY0OEVCMkUyMzg3MkE5MThEMDU3NzEzMEYzNTg1 M0Y2RjYzOUUwHhcNMjQwNzIyMjMwMDQ2WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjllZTQ5ZS01NmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4qc1mYnfxho9cEWvADjHr6/+CfxqYg0L6bFHlWFx70wb0RKMTEhqsw3oNgXy d7uKf3vSlJ2clnp92qcNd3wpsyOG8nFLZ0hY/bDnTaIkTqXEnv39KRqpD5xbkW+T xTdOn0/rqJ4fKDpl02nVAZ4ceuMe6ea/L6BQgvlwCaHk8BRRjxuwfaYDcwN+J0lJ LJP0EUvGQ3iyJHUths0sSf6JjLFcx/ka79YLwVb6LtCcEaFneJik3Rn9CdKddYqf c5ZBCjq7D+ExpwdEid/mruEdKw2ZOqDdfQdP5I8+az9NEvKpJ3GiXsbZPX/OEUUP 8/krlorqH/KZlk/AgiyimOtYNQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFC25aYne tHUrelpadikO6IuyOW9qMB8GA1UdIwQYMBaAFMO2SOsuI4cqkY0FdxMPNYU/b2Oe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODE5Ny9BNEREQTUyNDQ0 RDIxMUVCQjEzNzlDM0VDNEY5QUUwMi93N1pJNnk0amh5cVJqUVYzRXc4MWhUOXZZ NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c3Wkk2eTRqaHlxUmpRVjNFdzgxaFQ5dlk1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjgxOTcvQTREREE1MjQ0NEQyMTFFQkIxMzc5QzNFQzRGOUFFMDIvNDM4NTRCNDA0 NEQ0MTFFQjg1NjE1NjQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnRYgDBAJ0QrQwDQYJKoZIhvcNAQELBQADggEBAKqsR/ji NzRyNA1hEx/tFnQAAi117RK3gZEfUyWhY7f3ZbTzq7IyTgPG0iu9TUYCOKg9xVG6 V137y3wfGD4HXZYokhnlfgNGvZ7oaf1YWcnDKEyNmKIH8w0GJ6LDtyErVXnj4g0a kmZAN5bF8a+oztAvMUCmP1K/+NBAJncvUoA4mfQnqK5HPRm1yRI1frz5IFUWYhD3 u0YjwA9xZAiHq27x2MiuELgjeR++/4Om2d1ApMDzGxMH+Th0TaeS9efzdG3CwEP8 3+O8IRBInI1jsGAGK+SpBmKINAa5RPxBrNr82ekBucFss4F1klego7g37O/+7/J3 cGKNACgl+zQdh/I= -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:41 2024 by rpki-client on console-ams.rpki-client.org