$ rpki-client -vvf rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/A9CC8E6A3EDA11EEA0B19A82C4F9AE02.roa File: A9CC8E6A3EDA11EEA0B19A82C4F9AE02.roa (raw, json) Hash identifier: S4Khcskw/DdZNCxM5HrO1/1NZZrfI783Z/DCs0lEu7s= Subject key identifier: 1D:0E:81:23:FC:92:4F:80:E4:66:C3:31:C0:16:9A:89:82:C8:D5:C1 Certificate issuer: /CN=A9197390/serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF Certificate serial: 6B Authority key identifier: A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/A9CC8E6A3EDA11EEA0B19A82C4F9AE02.roa Signing time: Thu 11 Jan 2024 06:27:50 +0000 ROA not before: Thu 11 Jan 2024 06:27:50 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 17439 IP address blocks: 45.115.119.0/24 maxlen: 24 103.57.17.0/24 maxlen: 24 103.57.18.0/24 maxlen: 24 103.57.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197390/serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF Validity Not Before: Jan 11 06:27:50 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=659f8a66-9e10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d2:da:50:95:ee:59:1d:71:e0:2c:9a:34:f9: 16:86:6d:36:a2:49:75:92:6d:59:c1:1f:8d:c0:7e: d7:ab:13:2a:c3:3c:2e:1b:7b:7f:3f:96:e3:be:8c: da:c3:7c:d9:0f:b7:4c:42:2b:1b:09:6b:0b:5b:ef: 6b:e8:b4:3c:ef:23:36:f7:b9:4b:98:a5:fc:19:e7: 37:fd:cf:e8:03:fb:3b:1f:56:01:9f:ec:c7:6b:24: c1:25:57:40:a0:68:9a:55:62:96:33:27:41:ca:15: cb:c6:f8:81:84:f3:d3:43:5e:33:03:6e:22:d6:7b: 43:77:8a:3c:73:61:b3:70:d7:ba:98:13:11:ad:30: 36:a3:a0:c6:69:e2:bd:eb:a2:13:42:7b:9d:20:85: a1:85:e3:46:91:85:d6:e7:bc:8e:16:14:00:e6:3d: 9f:4d:8b:f4:c9:54:a0:2a:93:e8:e0:ef:ed:cf:cc: 15:61:32:93:84:65:08:b2:88:06:87:9e:e6:32:c6: b0:53:f8:47:19:0c:a9:62:98:2f:8b:9c:49:69:d5: 21:a6:4b:c2:83:ac:b6:25:af:c7:7b:fe:d4:9f:29: f6:cc:65:dc:cb:ab:7f:1b:4c:89:f5:f0:ad:d1:b6: c9:60:d8:58:94:8c:7d:7e:e0:b6:7f:0c:f1:3a:43: fe:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:0E:81:23:FC:92:4F:80:E4:66:C3:31:C0:16:9A:89:82:C8:D5:C1 X509v3 Authority Key Identifier: keyid:A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/A9CC8E6A3EDA11EEA0B19A82C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.115.119.0/24 103.57.17.0-103.57.19.255 Signature Algorithm: sha256WithRSAEncryption 23:da:1b:b7:dc:fb:01:1f:30:b5:89:fd:d9:65:0f:14:de:a3: 02:d6:4d:d0:30:fb:83:01:43:c4:8e:d9:99:86:25:73:c3:28: f4:0f:8d:66:1f:e6:7c:bb:d8:c1:b2:d4:a5:56:70:41:a6:95: 8f:ce:42:5c:42:64:00:21:ae:99:0e:92:4a:a7:26:30:2a:75: f4:a8:64:55:c1:ca:4b:68:49:46:fc:2e:36:91:fc:34:72:00: 8a:31:81:c2:6e:1b:7e:d7:48:5a:e2:b8:56:47:12:b0:77:79: 2d:69:62:d6:57:30:d0:b8:f9:23:82:d6:20:77:25:da:96:4b: 1b:8e:7a:19:d6:dd:14:2d:c8:cc:fb:7e:ef:c5:87:1b:8b:2d: 5a:9d:24:71:ca:d2:90:45:5a:28:4d:10:95:6d:c9:f0:f1:02: 50:48:17:01:a3:a5:59:af:bb:fe:19:67:21:a1:2c:b2:a6:01: 7f:b0:eb:96:aa:d2:41:7b:35:33:d4:45:2e:0f:dd:05:35:c2: d5:4e:88:00:a1:c9:28:a7:dc:44:8e:a0:4c:20:b2:16:90:f1: 0e:5b:d4:8b:a6:c5:f5:f7:f2:ce:67:e4:fa:b2:34:cd:7a:98: 36:a8:03:53:0e:e0:5b:0e:c8:65:2e:df:fd:a1:5c:db:75:4e: dc:91:1d:71 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NzM5MDExMC8GA1UEBRMoQTEzNUI4MTRFMUVCMUUyN0M5NTk3RUVEMkU4MjI4NTQ5 MzBEM0ZDRjAeFw0yNDAxMTEwNjI3NTBaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY1OWY4YTY2LTllMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+0tpQle5ZHXHgLJo0+RaGbTaiSXWSbVnBH43AfterEyrDPC4be38/luO+jNrD fNkPt0xCKxsJawtb72votDzvIzb3uUuYpfwZ5zf9z+gD+zsfVgGf7MdrJMElV0Cg aJpVYpYzJ0HKFcvG+IGE89NDXjMDbiLWe0N3ijxzYbNw17qYExGtMDajoMZp4r3r ohNCe50ghaGF40aRhdbnvI4WFADmPZ9Ni/TJVKAqk+jg7+3PzBVhMpOEZQiyiAaH nuYyxrBT+EcZDKlimC+LnElp1SGmS8KDrLYlr8d7/tSfKfbMZdzLq38bTIn18K3R tslg2FiUjH1+4LZ/DPE6Q/65AgMBAAGjggKjMIICnzAdBgNVHQ4EFgQUHQ6BI/yS T4DkZsMxwBaaiYLI1cEwHwYDVR0jBBgwFoAUoTW4FOHrHifJWX7tLoIoVJMNP88w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3MzkwL0QyQzdFNzE2M0U3 QTExRUVBOTc3RDYyMEM0RjlBRTAyL29UVzRGT0hySGlmSldYN3RMb0lvVkpNTlA4 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1RXNEZPSHJIaWZKV1g3dExvSW9WSk1OUDg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzM5MC9EMkM3RTcxNjNFN0ExMUVFQTk3N0Q2MjBDNEY5QUUwMi9BOUNDOEU2QTNF REExMUVFQTBCMTlBODJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAtBggrBgEFBQcBBwEB/wQe MBwwGgQCAAEwFAMEAC1zdzAMAwQAZzkRAwQCZzkQMA0GCSqGSIb3DQEBCwUAA4IB AQAj2hu33PsBHzC1if3ZZQ8U3qMC1k3QMPuDAUPEjtmZhiVzwyj0D41mH+Z8u9jB stSlVnBBppWPzkJcQmQAIa6ZDpJKpyYwKnX0qGRVwcpLaElG/C42kfw0cgCKMYHC bht+10ha4rhWRxKwd3ktaWLWVzDQuPkjgtYgdyXalksbjnoZ1t0ULcjM+37vxYcb iy1anSRxytKQRVooTRCVbcnw8QJQSBcBo6VZr7v+GWchoSyypgF/sOuWqtJBezUz 1EUuD90FNcLVTogAockop9xEjqBMILIWkPEOW9SLpsX19/LOZ+T6sjTNepg2qANT DuBbDshlLt/9oVzbdU7ckR1x -----END CERTIFICATE-----Generated at Sat Jun 1 09:10:35 2024 by rpki-client on console-fra.rpki-client.org