$ rpki-client -vvf rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/425CC4DAAA4E11EF9D8A4460C4F9AE02.roa File: 425CC4DAAA4E11EF9D8A4460C4F9AE02.roa (raw, json) Hash identifier: P4zJ7Jd+dn3sbCteOeoTWImYz955dIan+LSjsCEgH40= Subject key identifier: D2:AA:23:3F:55:8C:15:C6:6E:7E:31:B5:31:7E:29:B2:AA:CC:B5:19 Certificate issuer: /CN=A9176909/serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913 Certificate serial: 0196 Authority key identifier: 3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/425CC4DAAA4E11EF9D8A4460C4F9AE02.roa Signing time: Sun 24 Nov 2024 10:24:17 +0000 ROA not before: Sun 24 Nov 2024 10:24:17 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 137526 IP address blocks: 103.20.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176909/serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913 Validity Not Before: Nov 24 10:24:17 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6742fed1-17fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ca:b8:4a:db:e6:88:67:44:7d:47:f2:8c:41: 49:0e:c1:30:12:d4:2b:c4:d9:45:a6:6f:95:a0:d4: b8:c8:65:03:25:a1:8f:53:d6:20:6b:31:72:0e:0f: 3d:c6:27:d2:4d:62:9f:36:12:ee:25:7c:0c:df:b7: 09:89:c2:20:07:a3:0c:80:b8:b1:a3:5e:e5:d6:2e: 76:b0:12:a2:97:07:30:d1:fb:a4:e3:d9:b0:c4:62: 29:2d:e1:95:ef:d4:99:1a:9c:d4:7f:59:d6:36:29: 77:51:96:9c:68:1b:b3:64:a2:03:ed:5b:52:80:1c: 67:12:76:7c:28:dd:be:c1:2a:2d:59:32:cf:60:81: 7f:19:f2:0b:a1:8f:b7:30:ba:64:9b:cb:e4:ea:ff: 7b:45:8d:e3:cf:99:02:d0:e1:fc:e2:5a:8f:ca:18: 76:65:a3:96:8e:09:79:fb:a1:12:3e:91:9c:ac:8c: 47:8a:1a:8c:b2:96:7c:67:c4:09:db:56:72:b7:c4: 3d:e6:d6:08:09:ee:7f:b6:a4:33:8a:b3:c6:cd:2f: a0:10:c6:66:98:a6:50:65:6c:5a:fc:a8:6c:3a:d4: 0d:22:7e:36:59:d1:e3:34:2b:83:cd:38:e6:06:cd: c7:2a:6e:0e:0c:74:db:c6:76:e5:e8:c0:ad:ac:ab: 73:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:AA:23:3F:55:8C:15:C6:6E:7E:31:B5:31:7E:29:B2:AA:CC:B5:19 X509v3 Authority Key Identifier: keyid:3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/425CC4DAAA4E11EF9D8A4460C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.20.243.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:10:7d:34:13:28:54:4f:55:dd:13:0b:17:e7:09:05:67:99: a3:89:8a:a0:b0:5c:b6:a7:a3:69:49:10:8a:78:b6:3b:3f:8f: 5b:af:1b:a3:94:19:8e:c1:96:6e:f0:2d:87:35:45:c5:fb:88: 97:1a:d5:db:be:cb:f2:22:c7:71:be:54:32:e9:ff:cc:de:11: 31:c2:30:56:8d:ef:09:e8:e4:ed:da:6a:74:d9:f1:34:5e:98: 99:2d:7e:0a:3b:a0:c9:50:48:27:df:79:09:1f:d5:ab:58:7d: 3c:82:14:c4:ef:09:80:40:0c:cb:c4:6d:ed:ab:b3:19:b1:68: d1:45:15:05:dc:8d:be:61:88:ad:bd:c0:16:2c:46:05:83:96: e5:b0:db:58:36:60:4c:d0:88:37:6b:19:70:35:b8:61:f3:e4: 1d:ad:92:79:9b:4b:77:70:cb:db:60:cf:16:f7:d8:d4:0b:51: 43:e9:2a:0d:89:89:f0:aa:57:24:70:0a:a5:1c:73:f8:a9:b1: f7:a3:fb:74:2a:d4:a1:16:47:00:1f:4b:ab:7e:f2:42:03:e1: cd:38:62:50:83:2b:97:95:25:35:96:04:c8:33:54:6d:d2:a6: f8:5f:3d:0d:54:e2:ae:74:dc:62:d9:68:ff:46:0f:e0:13:01: 2c:d8:80:12 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY5MDkxMTAvBgNVBAUTKDNCNDhBQjg2MTY1MkZBRUVEN0UxRDEyNTgzRjE2QkI3 RkJCMjg5MTMwHhcNMjQxMTI0MTAyNDE3WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQyZmVkMS0xN2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Mq4StvmiGdEfUfyjEFJDsEwEtQrxNlFpm+VoNS4yGUDJaGPU9YgazFyDg89 xifSTWKfNhLuJXwM37cJicIgB6MMgLixo17l1i52sBKilwcw0fuk49mwxGIpLeGV 79SZGpzUf1nWNil3UZacaBuzZKID7VtSgBxnEnZ8KN2+wSotWTLPYIF/GfILoY+3 MLpkm8vk6v97RY3jz5kC0OH84lqPyhh2ZaOWjgl5+6ESPpGcrIxHihqMspZ8Z8QJ 21Zyt8Q95tYICe5/tqQzirPGzS+gEMZmmKZQZWxa/KhsOtQNIn42WdHjNCuDzTjm Bs3HKm4ODHTbxnbl6MCtrKtz+QIDAQABo4IClTCCApEwHQYDVR0OBBYEFNKqIz9V jBXGbn4xtTF+KbKqzLUZMB8GA1UdIwQYMBaAFDtIq4YWUvru1+HRJYPxa7f7sokT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjkwOS85QUJBQ0FDODRE Q0IxMUVEODI5NjFCMzZDNEY5QUUwMi9PMGlyaGhaUy11N1g0ZEVsZ19GcnRfdXlp Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08waXJoaFpTLXU3WDRkRWxnX0ZydF91eWlSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzY5MDkvOUFCQUNBQzg0RENCMTFFRDgyOTYxQjM2QzRGOUFFMDIvNDI1Q0M0REFB QTRFMTFFRjlEOEE0NDYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnFPMwDQYJKoZIhvcNAQELBQADggEBAE0QfTQTKFRPVd0T CxfnCQVnmaOJiqCwXLano2lJEIp4tjs/j1uvG6OUGY7Blm7wLYc1RcX7iJca1du+ y/Iix3G+VDLp/8zeETHCMFaN7wno5O3aanTZ8TRemJktfgo7oMlQSCffeQkf1atY fTyCFMTvCYBADMvEbe2rsxmxaNFFFQXcjb5hiK29wBYsRgWDluWw21g2YEzQiDdr GXA1uGHz5B2tknmbS3dwy9tgzxb32NQLUUPpKg2JifCqVyRwCqUcc/ipsfej+3Qq 1KEWRwAfS6t+8kID4c04YlCDK5eVJTWWBMgzVG3SpvhfPQ1U4q503GLZaP9GD+AT ASzYgBI= -----END CERTIFICATE-----Generated at Sun Nov 24 11:36:08 2024 by rpki-client on console-fra.rpki-client.org