$ rpki-client -vvf rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/A2A3D38A05CE11EA80526530C4F9AE02.roa File: A2A3D38A05CE11EA80526530C4F9AE02.roa (raw, json) Hash identifier: 5qzdMRlHADmRGjRZ80Eu6WYWmObO/9cRl46Cear7KnU= Subject key identifier: EF:47:6F:61:3A:7F:C3:70:73:51:71:B0:A9:70:AA:22:62:BC:5B:0B Certificate issuer: /CN=A9171064/serialNumber=FD827C026B3967E2A140D4D2314E2B0E9C047430 Certificate serial: 0B9C Authority key identifier: FD:82:7C:02:6B:39:67:E2:A1:40:D4:D2:31:4E:2B:0E:9C:04:74:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/A2A3D38A05CE11EA80526530C4F9AE02.roa Signing time: Tue 02 Jul 2024 19:26:42 +0000 ROA not before: Tue 02 Jul 2024 19:26:42 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 137911 IP address blocks: 103.117.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:26:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2972 (0xb9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171064/serialNumber=FD827C026B3967E2A140D4D2314E2B0E9C047430 Validity Not Before: Jul 2 19:26:42 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66845472-589a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:84:bc:23:5a:02:f3:f3:7f:9d:12:18:72:36: 27:f2:1c:bb:f3:98:a2:8e:e6:e5:08:ca:30:7d:36: ce:3a:05:fb:ef:17:dd:6b:27:9c:6b:e7:89:12:8c: 99:3d:75:e7:5d:93:84:5b:cd:3d:28:8a:34:46:cd: ad:f0:38:53:e4:9b:09:32:a5:60:90:75:70:cc:7a: f2:dc:35:c6:e1:bc:0e:59:c0:d8:6a:89:46:30:94: fc:24:3e:d5:05:ad:3e:3b:46:e8:e5:04:ff:6e:70: 4b:9e:ac:b2:3a:51:5a:4d:d2:7c:e5:f2:63:d1:6e: 4a:fc:49:9a:9b:2b:fe:f7:16:a7:92:96:47:8e:1d: ad:45:b6:58:af:c7:d3:34:19:71:81:e1:0b:de:59: 3b:2c:54:b9:8b:80:93:e2:4f:d7:ac:77:97:12:5f: 97:b3:33:4d:b0:b9:67:7a:d5:ed:ae:67:38:85:6e: 23:d1:e6:bb:3c:30:0b:fc:72:be:f1:d8:2b:9d:7a: cb:a9:e7:d5:c2:77:04:d9:32:87:5f:57:9e:8b:be: cc:37:e5:e8:8f:f0:b3:08:08:f6:ed:63:b0:0c:bb: 7b:48:41:3c:c7:c8:ae:78:82:02:9d:52:67:97:3e: 22:70:cc:4f:18:18:96:36:95:41:10:cc:92:5f:17: c6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:47:6F:61:3A:7F:C3:70:73:51:71:B0:A9:70:AA:22:62:BC:5B:0B X509v3 Authority Key Identifier: keyid:FD:82:7C:02:6B:39:67:E2:A1:40:D4:D2:31:4E:2B:0E:9C:04:74:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/A2A3D38A05CE11EA80526530C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.117.11.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:58:c7:cf:53:f7:70:a5:d6:35:de:a2:aa:9a:68:22:fc:02: 36:48:30:de:a0:09:7c:12:7b:95:73:81:96:53:28:3d:0d:1e: e2:a6:17:25:b9:2f:20:ce:6e:cb:c1:4f:aa:a8:a0:cb:d7:ef: 5a:c5:a0:43:fb:05:62:a2:56:45:9b:52:03:1d:75:2e:32:51: 8f:61:2c:c6:75:06:5a:de:c5:82:39:e9:67:45:88:3a:10:bb: 76:04:03:65:fb:af:90:87:23:a1:c6:63:bf:e1:7b:40:3f:87: d4:b5:4e:be:79:80:f7:64:82:42:b0:ef:90:f6:e7:25:b5:13: b4:98:83:e0:6b:04:49:21:73:28:66:6c:02:37:eb:1f:cd:2d: 5e:55:36:19:98:d1:f3:4a:bd:e5:fb:cd:09:71:fb:88:e9:84: 31:9a:78:25:88:be:d9:17:4f:54:51:9c:88:fb:c7:96:32:8e: a3:54:9c:74:81:69:16:b9:96:91:43:59:cd:6e:50:9e:99:13: 44:24:0a:e3:e8:ca:57:1d:e1:be:bb:a6:02:9f:10:2a:ba:6e: 28:16:91:47:54:77:c8:0d:c0:dc:16:90:d9:95:c3:ef:1d:d6: 87:0e:1e:9e:47:3b:6e:b5:de:9f:fa:34:b6:cd:d0:e3:3c:2a: 80:59:7b:a9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEwNjQxMTAvBgNVBAUTKEZEODI3QzAyNkIzOTY3RTJBMTQwRDREMjMxNEUyQjBF OUMwNDc0MzAwHhcNMjQwNzAyMTkyNjQyWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njg0NTQ3Mi01ODlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYS8I1oC8/N/nRIYcjYn8hy785iijublCMowfTbOOgX77xfdayeca+eJEoyZ PXXnXZOEW809KIo0Rs2t8DhT5JsJMqVgkHVwzHry3DXG4bwOWcDYaolGMJT8JD7V Ba0+O0bo5QT/bnBLnqyyOlFaTdJ85fJj0W5K/Emamyv+9xankpZHjh2tRbZYr8fT NBlxgeEL3lk7LFS5i4CT4k/XrHeXEl+XszNNsLlnetXtrmc4hW4j0ea7PDAL/HK+ 8dgrnXrLqefVwncE2TKHX1eei77MN+Xoj/CzCAj27WOwDLt7SEE8x8iueIICnVJn lz4icMxPGBiWNpVBEMySXxfG4wIDAQABo4IClTCCApEwHQYDVR0OBBYEFO9Hb2E6 f8Nwc1FxsKlwqiJivFsLMB8GA1UdIwQYMBaAFP2CfAJrOWfioUDU0jFOKw6cBHQw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTA2NC8wNzYzOTYyMDA1 MkYxMUVBOEE5RTM5NDdDNEY5QUUwMi9fWUo4QW1zNVotS2hRTlRTTVU0ckRwd0Vk REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19ZSjhBbXM1Wi1LaFFOVFNNVTRyRHB3RWREQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzEwNjQvMDc2Mzk2MjAwNTJGMTFFQThBOUUzOTQ3QzRGOUFFMDIvQTJBM0QzOEEw NUNFMTFFQTgwNTI2NTMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABndQswDQYJKoZIhvcNAQELBQADggEBAJ1Yx89T93Cl1jXe oqqaaCL8AjZIMN6gCXwSe5VzgZZTKD0NHuKmFyW5LyDObsvBT6qooMvX71rFoEP7 BWKiVkWbUgMddS4yUY9hLMZ1BlrexYI56WdFiDoQu3YEA2X7r5CHI6HGY7/he0A/ h9S1Tr55gPdkgkKw75D25yW1E7SYg+BrBEkhcyhmbAI36x/NLV5VNhmY0fNKveX7 zQlx+4jphDGaeCWIvtkXT1RRnIj7x5YyjqNUnHSBaRa5lpFDWc1uUJ6ZE0QkCuPo ylcd4b67pgKfECq6bigWkUdUd8gNwNwWkNmVw+8d1ocOHp5HO2613p/6NLbN0OM8 KoBZe6k= -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:59 2024 by rpki-client on console-fra.rpki-client.org