$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9514EB4CEEA111EB9CD2AA3BC4F9AE02.roa File: 9514EB4CEEA111EB9CD2AA3BC4F9AE02.roa (raw, json) Hash identifier: EEXykRMUmWeLBmxrLSfsHPtDTxFpLkcZvVTGQObYySM= Subject key identifier: AF:D8:81:0B:F0:9C:65:BC:D0:C7:81:51:A5:FE:C8:AF:7C:5E:A2:96 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 9824 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9514EB4CEEA111EB9CD2AA3BC4F9AE02.roa Signing time: Fri 06 Sep 2024 07:18:53 +0000 ROA not before: Fri 06 Sep 2024 07:18:53 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 142470 IP address blocks: 103.159.70.0/24 maxlen: 24 103.170.50.0/23 maxlen: 24 103.175.74.0/23 maxlen: 24 103.176.158.0/23 maxlen: 24 2001:df2:cc40::/48 maxlen: 48 2001:df5:7780::/48 maxlen: 48 2407:adc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38948 (0x9824) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Sep 6 07:18:53 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66daacdd-0246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3f:da:c7:cd:f1:4e:d9:25:1d:cf:71:37:eb: b1:2d:22:d1:51:cc:36:be:4f:6d:ad:e9:85:15:ec: d2:8b:26:c0:99:3d:1b:47:0d:08:17:89:1f:d0:a3: 14:d5:b5:4d:df:fb:34:1e:e9:e6:02:47:8c:bd:e0: d5:d3:97:79:ed:ad:97:be:23:af:e7:ee:5d:4d:5e: 56:87:f2:09:d3:ac:92:3b:1b:b9:fe:b1:03:00:d5: 86:70:03:43:2e:23:ce:3f:54:5b:2a:99:3f:ad:3b: ba:94:18:80:8a:00:71:12:f1:86:33:3a:eb:df:c8: b7:8f:56:1c:62:ed:7c:a2:51:0c:11:4e:88:90:6a: 90:41:02:cc:31:86:34:3e:64:43:30:81:fc:72:50: 0b:42:98:7d:b2:0a:37:16:31:65:73:80:9f:d7:d9: 74:8d:29:65:b0:81:8d:f1:df:a8:8a:58:a4:ca:91: cb:97:fa:e2:34:b6:45:15:a1:2d:c1:67:ce:e8:db: c3:ba:2e:1d:fd:d2:80:e0:2a:59:1f:c9:43:96:bf: 6a:27:4a:91:33:3c:6e:0f:48:99:1a:58:67:61:e8: d7:8d:34:29:ab:0a:66:0f:d4:10:22:2e:84:e8:c0: bf:ff:fe:3c:9f:6d:67:8f:e3:9f:23:2c:3a:ec:c9: 22:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D8:81:0B:F0:9C:65:BC:D0:C7:81:51:A5:FE:C8:AF:7C:5E:A2:96 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9514EB4CEEA111EB9CD2AA3BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.159.70.0/24 103.170.50.0/23 103.175.74.0/23 103.176.158.0/23 IPv6: 2001:df2:cc40::/48 2001:df5:7780::/48 2407:adc0::/32 Signature Algorithm: sha256WithRSAEncryption 3e:d0:84:aa:97:3d:8f:2b:86:8e:dc:ef:c3:75:96:c7:5e:dc: d4:da:c2:79:c8:e3:56:88:42:4a:33:d0:c6:27:01:68:e9:ff: 5c:3d:cb:28:29:12:33:12:b7:c9:f6:13:9a:6f:d6:99:e3:0f: 4d:0c:81:27:4c:d6:c7:e5:6b:ca:12:cc:a9:23:cf:31:04:58: 52:8e:ce:75:84:04:82:5a:96:9c:a2:45:95:1f:89:c8:47:6e: fc:62:a9:32:16:df:39:23:f9:2e:c9:4a:9a:c9:d2:c1:18:84: a2:81:63:dd:d2:6a:77:0f:8c:82:c2:57:f1:5d:0c:27:7f:02: f5:a2:a5:26:1e:00:7c:ea:8f:da:f2:8c:fb:01:07:8a:74:bb: ab:3f:06:f8:0a:58:25:3c:80:6e:53:4a:0e:f3:f0:2e:5c:6f: 09:e8:39:49:99:7b:65:82:d7:ac:4a:8d:78:9d:c5:49:cd:85: d6:5e:9d:db:35:43:a6:88:ff:87:59:c6:ec:b8:b3:66:8c:6a: d4:df:45:2e:c6:22:e9:bf:12:02:ab:f4:ba:e4:0a:c4:99:bc: 30:fb:48:08:f1:09:6e:c7:12:50:c1:19:9a:94:20:5a:bc:b8: 74:28:fe:20:e7:9c:7d:1e:6a:92:56:1f:f0:7d:f6:f7:90:e8: 4f:4b:8c:3a -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgIDAJgkMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDkwNjA3MTg1M1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjZkYWFjZGQtMDI0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKg/2sfN8U7ZJR3PcTfrsS0i0VHMNr5Pba3phRXs0osmwJk9G0cNCBeJH9Cj FNW1Td/7NB7p5gJHjL3g1dOXee2tl74jr+fuXU1eVofyCdOskjsbuf6xAwDVhnAD Qy4jzj9UWyqZP607upQYgIoAcRLxhjM669/It49WHGLtfKJRDBFOiJBqkEECzDGG ND5kQzCB/HJQC0KYfbIKNxYxZXOAn9fZdI0pZbCBjfHfqIpYpMqRy5f64jS2RRWh LcFnzujbw7ouHf3SgOAqWR/JQ5a/aidKkTM8bg9ImRpYZ2Ho1400KasKZg/UECIu hOjAv//+PJ9tZ4/jnyMsOuzJIkMCAwEAAaOCAsgwggLEMB0GA1UdDgQWBBSv2IEL 8JxlvNDHgVGl/sivfF6iljAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzk1MTRFQjRD RUVBMTExRUI5Q0QyQUEzQkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMFIGCCsGAQUFBwEHAQH/ BEMwQTAeBAIAATAYAwQAZ59GAwQBZ6oyAwQBZ69KAwQBZ7CeMB8EAgACMBkDBwAg AQ3yzEADBwAgAQ31d4ADBQAkB63AMA0GCSqGSIb3DQEBCwUAA4IBAQA+0ISqlz2P K4aO3O/DdZbHXtzU2sJ5yONWiEJKM9DGJwFo6f9cPcsoKRIzErfJ9hOab9aZ4w9N DIEnTNbH5WvKEsypI88xBFhSjs51hASCWpacokWVH4nIR278YqkyFt85I/kuyUqa ydLBGISigWPd0mp3D4yCwlfxXQwnfwL1oqUmHgB86o/a8oz7AQeKdLurPwb4Clgl PIBuU0oO8/AuXG8J6DlJmXtlgtesSo14ncVJzYXWXp3bNUOmiP+HWcbsuLNmjGrU 30UuxiLpvxICq/S65ArEmbww+0gI8QluxxJQwRmalCBavLh0KP4g55x9HmqSVh/w ffb3kOhPS4w6 -----END CERTIFICATE-----Generated at Mon Nov 25 13:05:02 2024 by rpki-client on console-fra.rpki-client.org