$ rpki-client -vvf rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/95A08652730D11ECAB074439C4F9AE02.roa File: 95A08652730D11ECAB074439C4F9AE02.roa (raw, json) Hash identifier: 8SZ9w1bXpjgmgqCHhkJA4hqFkmJXaJwJe1y4R5qoWpI= Subject key identifier: 5C:FF:50:EA:7A:54:66:C6:BF:26:C3:0C:AF:E8:36:F4:51:84:B1:45 Certificate issuer: /CN=A9172154/serialNumber=9E994EF75E1133E60F01B9A48A09261952FB1B81 Certificate serial: 0967 Authority key identifier: 9E:99:4E:F7:5E:11:33:E6:0F:01:B9:A4:8A:09:26:19:52:FB:1B:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/95A08652730D11ECAB074439C4F9AE02.roa Signing time: Wed 06 Nov 2024 20:09:38 +0000 ROA not before: Wed 06 Nov 2024 20:09:38 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 137041 IP address blocks: 103.102.236.0/22 maxlen: 23 103.102.236.0/24 maxlen: 24 103.102.237.0/24 maxlen: 24 103.102.238.0/24 maxlen: 24 103.102.239.0/24 maxlen: 24 2401:ebc0::/32 maxlen: 32 2401:ebc0:1000::/36 maxlen: 36 2401:ebc0:2000::/36 maxlen: 36 2401:ebc0:3000::/36 maxlen: 36 2401:ebc0:4000::/36 maxlen: 36 2401:ebc0:5000::/36 maxlen: 36 2401:ebc0:6000::/36 maxlen: 36 2401:ebc0:7000::/36 maxlen: 36 2401:ebc0:8000::/36 maxlen: 36 2401:ebc0:9000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.crl rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:54:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2407 (0x967) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172154/serialNumber=9E994EF75E1133E60F01B9A48A09261952FB1B81 Validity Not Before: Nov 6 20:09:38 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=672bcd01-a823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:da:de:d1:2f:5b:40:fb:39:1f:48:3c:a6:73: e0:26:eb:04:79:b2:67:23:42:d4:29:9a:54:04:f2: e3:23:be:29:84:1d:05:0d:4a:40:33:fa:ce:fc:0e: ff:da:d0:d4:be:cb:67:01:ce:fe:ec:4f:94:7e:39: 2a:5d:a0:b8:60:14:26:9b:02:9d:7c:71:e9:68:27: e2:37:f2:7b:cc:04:04:ac:e0:f9:5b:64:31:25:51: 97:8b:fe:f6:2d:20:cf:d2:6e:ac:3d:29:0b:68:90: ee:48:ad:e4:ba:d2:ef:dd:15:39:fe:f7:84:3c:3e: 82:a3:ce:62:05:93:27:15:e6:7d:e2:a1:a4:e6:f8: 3a:ca:dd:54:67:d5:65:8f:3e:33:98:88:46:2f:44: d0:7e:43:af:bc:a5:d7:42:ea:a5:af:69:1b:58:fd: cc:ec:e4:fc:ca:47:e2:35:c3:89:6b:c9:7c:35:24: e5:9b:a5:f9:30:36:21:06:1d:f1:4c:2d:b4:66:d1: 8b:98:85:10:2b:a1:09:a2:83:00:c2:f5:2f:65:4b: 7b:be:d2:e7:6b:56:d3:54:9b:ce:07:69:f5:ae:f8: 09:dd:44:fd:38:ad:27:f6:f6:70:8e:1e:18:80:17: 9f:94:b6:25:3a:11:6a:07:4d:cc:1e:f3:ce:4d:05: 7c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FF:50:EA:7A:54:66:C6:BF:26:C3:0C:AF:E8:36:F4:51:84:B1:45 X509v3 Authority Key Identifier: keyid:9E:99:4E:F7:5E:11:33:E6:0F:01:B9:A4:8A:09:26:19:52:FB:1B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/95A08652730D11ECAB074439C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.102.236.0/22 IPv6: 2401:ebc0::/32 Signature Algorithm: sha256WithRSAEncryption 55:e2:0b:24:45:f4:5f:6e:d5:db:03:fa:ae:dc:28:2e:48:71: 89:6e:00:a5:bd:5f:e7:f8:61:c1:fd:1f:21:a0:60:ab:f6:25: dd:65:d8:fc:66:aa:cd:3f:02:2a:94:79:be:8b:97:ee:45:3b: 48:01:b4:56:06:8a:79:12:d9:16:0b:e4:4c:d6:9d:5b:86:ef: 4f:7e:3b:c4:ee:26:aa:b1:92:10:b3:c0:4f:c2:29:f9:d8:26: 70:16:23:67:b3:9d:e7:1e:38:b5:14:11:87:43:7b:cb:f8:ec: 6d:04:01:0f:e9:e2:25:a8:7d:18:c1:50:a4:7e:08:9d:a7:9a: b6:1d:9b:0e:97:c7:06:a0:27:60:e2:da:ac:87:dd:c4:67:59: 03:1a:c2:f9:24:94:d3:b9:41:b6:66:75:08:d2:f5:71:08:4f: 36:0a:a0:d3:3b:b6:1b:d0:7c:e4:d5:bb:b4:44:8d:e3:28:3f: 06:03:2d:8d:bd:2f:32:cd:d3:fb:b8:4b:39:cc:b1:9a:c3:2e: 1d:39:be:07:d4:82:d1:66:a0:5a:4a:c0:5b:09:d0:da:1f:43: d2:b8:a3:cf:c7:85:92:03:2e:79:60:20:e4:9a:40:ea:2b:4b: 1b:d0:eb:9b:a2:cd:db:97:d3:cd:c7:cb:53:22:de:27:ed:cc: fc:53:0c:3c -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzIxNTQxMTAvBgNVBAUTKDlFOTk0RUY3NUUxMTMzRTYwRjAxQjlBNDhBMDkyNjE5 NTJGQjFCODEwHhcNMjQxMTA2MjAwOTM4WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJiY2QwMS1hODIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtre0S9bQPs5H0g8pnPgJusEebJnI0LUKZpUBPLjI74phB0FDUpAM/rO/A7/ 2tDUvstnAc7+7E+UfjkqXaC4YBQmmwKdfHHpaCfiN/J7zAQErOD5W2QxJVGXi/72 LSDP0m6sPSkLaJDuSK3kutLv3RU5/veEPD6Co85iBZMnFeZ94qGk5vg6yt1UZ9Vl jz4zmIhGL0TQfkOvvKXXQuqlr2kbWP3M7OT8ykfiNcOJa8l8NSTlm6X5MDYhBh3x TC20ZtGLmIUQK6EJooMAwvUvZUt7vtLna1bTVJvOB2n1rvgJ3UT9OK0n9vZwjh4Y gBeflLYlOhFqB03MHvPOTQV8tQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFFz/UOp6 VGbGvybDDK/oNvRRhLFFMB8GA1UdIwQYMBaAFJ6ZTvdeETPmDwG5pIoJJhlS+xuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjE1NC8zOUE2Q0YyQTgw OTExMUVBQUQxMzRENkJDNEY5QUUwMi9ucGxPOTE0Uk0tWVBBYm1raWdrbUdWTDdH NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25wbE85MTRSTS1ZUEFibWtpZ2ttR1ZMN0c0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzIxNTQvMzlBNkNGMkE4MDkxMTFFQUFEMTM0RDZCQzRGOUFFMDIvOTVBMDg2NTI3 MzBEMTFFQ0FCMDc0NDM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnZuwwDQQCAAIwBwMFACQB68AwDQYJKoZIhvcNAQELBQAD ggEBAFXiCyRF9F9u1dsD+q7cKC5IcYluAKW9X+f4YcH9HyGgYKv2Jd1l2Pxmqs0/ AiqUeb6Ll+5FO0gBtFYGinkS2RYL5EzWnVuG709+O8TuJqqxkhCzwE/CKfnYJnAW I2ezneceOLUUEYdDe8v47G0EAQ/p4iWofRjBUKR+CJ2nmrYdmw6XxwagJ2Di2qyH 3cRnWQMawvkklNO5QbZmdQjS9XEITzYKoNM7thvQfOTVu7REjeMoPwYDLY29LzLN 0/u4SznMsZrDLh05vgfUgtFmoFpKwFsJ0NofQ9K4o8/HhZIDLnlgIOSaQOorSxvQ 65uizduX083Hy1Mi3iftzPxTDDw= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:30 2024 by rpki-client on console-ams.rpki-client.org