$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/9C9660D4FC6E11E9BC6D4822C4F9AE02.roa File: 9C9660D4FC6E11E9BC6D4822C4F9AE02.roa (raw, json) Hash identifier: EOLnTEdfXy1O9hBrCXZNu4tSMYJmY5yEW4EBIrgMUzQ= Subject key identifier: 2B:7E:23:CF:15:3D:68:CF:46:97:81:D5:BF:B3:08:33:82:47:3A:CE Certificate issuer: /CN=A918E4E6/serialNumber=97F9B906284765308EC268855D563DAB9186305B Certificate serial: 0B3F Authority key identifier: 97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/9C9660D4FC6E11E9BC6D4822C4F9AE02.roa Signing time: Thu 12 Oct 2023 19:07:19 +0000 ROA not before: Thu 12 Oct 2023 19:07:19 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 139647 IP address blocks: 103.143.34.0/23 maxlen: 23 103.143.34.0/24 maxlen: 24 103.143.35.0/24 maxlen: 24 2001:df1:6a80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 19:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2879 (0xb3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4E6/serialNumber=97F9B906284765308EC268855D563DAB9186305B Validity Not Before: Oct 12 19:07:19 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=652843e7-b079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:93:7f:43:d4:bf:61:5c:b5:a5:68:15:b3:5b: 2f:35:7b:db:14:90:36:b6:ec:a2:24:4b:80:3b:b2: 4d:a0:3e:9e:86:ec:53:68:76:74:69:dc:ee:25:64: 08:96:14:82:30:0f:26:47:f6:1b:05:b3:ec:1d:f1: b7:49:2c:a6:fc:93:96:62:ec:29:e1:43:fc:f6:47: 56:22:8d:6f:ab:21:8a:26:82:65:03:99:bc:4f:38: ff:2e:7e:62:da:27:52:c2:81:c1:b6:d2:ae:1e:4f: 56:94:c2:f8:35:16:55:0a:8a:ca:e7:e2:c1:9b:68: e4:9c:ac:cf:b3:e5:52:e8:56:9f:43:2c:5e:77:9b: 3c:1d:57:f3:55:48:2d:ee:ee:f8:55:67:7a:7a:f9: d5:12:ae:40:70:92:62:5f:3a:d1:50:17:19:61:f9: f2:42:a6:49:02:fd:1d:2f:f0:05:9d:02:e5:98:db: c4:25:d7:e5:cf:c5:a3:6e:7a:b0:8b:be:69:3b:d8: 40:2b:d4:f4:c0:5d:5d:20:86:89:8e:14:dc:76:7f: 9f:ea:68:0d:80:0a:06:9d:c2:f7:0b:79:0d:89:d3: ee:05:b8:3b:5f:97:1e:f2:5b:6a:ed:27:de:94:33: 31:a0:a0:17:43:8f:cc:ba:fb:d5:3b:b0:63:08:f4: a0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7E:23:CF:15:3D:68:CF:46:97:81:D5:BF:B3:08:33:82:47:3A:CE X509v3 Authority Key Identifier: keyid:97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/9C9660D4FC6E11E9BC6D4822C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.143.34.0/23 IPv6: 2001:df1:6a80::/48 Signature Algorithm: sha256WithRSAEncryption 31:6d:a9:fe:f7:7b:30:9c:62:73:9f:59:d6:6d:06:60:40:79: 3a:52:64:73:7a:af:83:20:e8:f6:01:db:38:29:2a:93:28:c9: ed:97:e4:2f:6e:f8:9e:42:23:6c:ce:55:fe:de:79:1f:37:55: b5:6d:68:18:e1:7a:5e:81:f0:c9:d0:92:36:f1:86:a4:b2:fd: 8b:ef:da:de:6f:da:07:f5:18:10:4a:c2:ef:49:a2:d3:30:92: c6:14:be:90:f5:b0:0a:54:d4:4c:44:2d:52:d1:cc:bc:a2:08: 96:f0:e9:ba:f9:05:30:96:74:e9:ad:e9:8a:85:e9:36:81:f3: c0:b3:9b:4b:4e:ba:20:d7:41:32:ff:9e:c1:0b:4f:ab:5f:0c: 72:3f:ba:4f:96:f4:22:c1:58:87:85:d6:c0:a1:29:e1:f1:d0: b0:ec:f8:ab:d7:3c:63:b0:52:13:ca:7b:40:c7:01:b0:f1:5f: 20:01:1b:5a:c0:d7:20:ba:2d:cb:e6:45:1b:db:12:95:fe:dd: 0a:89:8a:f9:0a:c4:68:aa:1c:68:40:88:96:03:08:fd:55:e5: a7:b6:6f:32:06:a8:58:ef:65:f3:36:b8:a6:6a:b1:b8:26:e0: bb:6a:69:ce:b8:59:82:1a:13:f0:5c:8f:e1:c0:24:af:f8:9f: 73:f0:46:15 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0RTYxMTAvBgNVBAUTKDk3RjlCOTA2Mjg0NzY1MzA4RUMyNjg4NTVENTYzREFC OTE4NjMwNUIwHhcNMjMxMDEyMTkwNzE5WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTI4NDNlNy1iMDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8pN/Q9S/YVy1pWgVs1svNXvbFJA2tuyiJEuAO7JNoD6ehuxTaHZ0adzuJWQI lhSCMA8mR/YbBbPsHfG3SSym/JOWYuwp4UP89kdWIo1vqyGKJoJlA5m8Tzj/Ln5i 2idSwoHBttKuHk9WlML4NRZVCorK5+LBm2jknKzPs+VS6FafQyxed5s8HVfzVUgt 7u74VWd6evnVEq5AcJJiXzrRUBcZYfnyQqZJAv0dL/AFnQLlmNvEJdflz8Wjbnqw i75pO9hAK9T0wF1dIIaJjhTcdn+f6mgNgAoGncL3C3kNidPuBbg7X5ce8ltq7Sfe lDMxoKAXQ4/MuvvVO7BjCPSg9QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFCt+I88V PWjPRpeB1b+zCDOCRzrOMB8GA1UdIwQYMBaAFJf5uQYoR2UwjsJohV1WPauRhjBb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRFNi8yQjNCMkZDRUZD NkQxMUU5OEZDMkM5MUNDNEY5QUUwMi9sX201QmloSFpUQ093bWlGWFZZOXE1R0dN RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xfbTVCaWhIWlRDT3dtaUZYVlk5cTVHR01Gcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU0RTYvMkIzQjJGQ0VGQzZEMTFFOThGQzJDOTFDQzRGOUFFMDIvOUM5NjYwRDRG QzZFMTFFOUJDNkQ0ODIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnjyIwDwQCAAIwCQMHACABDfFqgDANBgkqhkiG9w0BAQsF AAOCAQEAMW2p/vd7MJxic59Z1m0GYEB5OlJkc3qvgyDo9gHbOCkqkyjJ7ZfkL274 nkIjbM5V/t55HzdVtW1oGOF6XoHwydCSNvGGpLL9i+/a3m/aB/UYEErC70mi0zCS xhS+kPWwClTUTEQtUtHMvKIIlvDpuvkFMJZ06a3pioXpNoHzwLObS066INdBMv+e wQtPq18Mcj+6T5b0IsFYh4XWwKEp4fHQsOz4q9c8Y7BSE8p7QMcBsPFfIAEbWsDX ILoty+ZFG9sSlf7dComK+QrEaKocaECIlgMI/VXlp7ZvMgaoWO9l8za4pmqxuCbg u2ppzrhZghoT8FyP4cAkr/ifc/BGFQ== -----END CERTIFICATE-----Generated at Sun Jun 16 21:31:03 2024 by rpki-client on console-fra.rpki-client.org