$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/C9C70AEA696F11EFA4DA475FC4F9AE02.roa File: C9C70AEA696F11EFA4DA475FC4F9AE02.roa (raw, json) Hash identifier: Y16G28ble7sDhlK1gqeIJ/fe7Scn5O8XUtCkp4Our/k= Subject key identifier: 77:70:78:1F:B9:DB:0D:97:7F:BC:D1:4B:4C:2B:5C:70:F0:C0:B0:80 Certificate issuer: /CN=A91D3307/serialNumber=53C94817EB1365F1DE8C3C2B4402239881C1943D Certificate serial: 0420 Authority key identifier: 53:C9:48:17:EB:13:65:F1:DE:8C:3C:2B:44:02:23:98:81:C1:94:3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/C9C70AEA696F11EFA4DA475FC4F9AE02.roa Signing time: Mon 02 Sep 2024 21:11:08 +0000 ROA not before: Mon 02 Sep 2024 21:11:08 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 138637 IP address blocks: 103.135.84.0/22 maxlen: 24 103.248.188.0/24 maxlen: 24 180.94.238.0/23 maxlen: 24 2404:77c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.crl rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1056 (0x420) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3307/serialNumber=53C94817EB1365F1DE8C3C2B4402239881C1943D Validity Not Before: Sep 2 21:11:08 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=66d629ec-1cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d0:37:cf:b5:b9:f1:8f:3a:f8:26:d5:c2:30: 16:f9:d1:df:b4:05:58:48:ef:01:d7:b0:ff:a4:19: 7b:9d:d7:29:31:ac:82:ca:39:3c:48:a1:52:ee:9c: 3c:0f:e7:65:1a:77:e6:bc:98:32:ca:a7:12:d4:c8: 44:58:a2:34:0f:a2:8a:af:d8:89:3d:79:d5:d0:10: 4b:47:92:c9:9e:a0:d6:47:0d:28:95:15:e7:0b:47: 1c:a7:9b:15:7e:8a:6b:02:71:df:fa:c2:7b:df:67: 17:0d:05:9e:ad:09:6a:f4:3b:33:a9:5a:e9:21:84: cc:be:17:85:2a:3d:8a:be:2e:50:fc:52:32:7b:43: b3:f8:2d:c0:a9:41:67:72:36:cf:87:65:85:87:ef: 90:a9:9f:fb:5c:15:90:59:6e:e7:6e:0e:a1:a3:68: 81:47:c8:6d:f8:44:bb:6b:13:c3:16:74:a5:ed:76: ad:ec:f4:12:4d:d6:fb:26:7e:4b:0c:75:43:40:ff: 97:f4:9d:a5:15:4b:69:7f:24:45:60:c4:22:95:cc: e2:b8:5f:23:3d:29:85:b0:9c:17:75:cf:fe:74:e9: 51:15:59:33:77:51:cd:74:73:37:a4:31:32:95:cd: 11:32:39:9e:50:5e:d1:e5:f5:9c:69:6d:03:bc:24: 87:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:70:78:1F:B9:DB:0D:97:7F:BC:D1:4B:4C:2B:5C:70:F0:C0:B0:80 X509v3 Authority Key Identifier: keyid:53:C9:48:17:EB:13:65:F1:DE:8C:3C:2B:44:02:23:98:81:C1:94:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/C9C70AEA696F11EFA4DA475FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.135.84.0/22 103.248.188.0/24 180.94.238.0/23 IPv6: 2404:77c0::/32 Signature Algorithm: sha256WithRSAEncryption 05:3e:ec:9e:fe:57:05:df:63:0a:fd:6d:17:2f:66:fe:59:2a: f1:89:df:f4:af:52:6b:47:6d:2b:bd:2f:b0:d7:d9:8e:f9:ac: 64:b0:03:49:ca:74:7d:0c:80:75:9f:e6:cf:b9:8c:f5:97:ec: 59:7a:10:4d:23:fd:c1:43:4d:48:0c:27:81:b8:6c:fc:85:78: f8:7f:62:85:e4:e2:e8:73:de:52:e1:35:be:a3:99:03:9e:8c: 5f:79:b6:c8:5c:eb:b8:c6:6d:65:09:db:0d:d4:0b:da:11:5c: 45:2d:30:0d:68:e4:dc:8c:a6:77:3f:21:08:fc:60:ec:ed:82: 74:8e:c9:95:97:6a:a4:4c:b9:7c:32:71:92:f2:8d:a9:5b:65: 63:1e:ff:e0:1c:34:e9:0f:5f:af:22:b6:eb:ea:c7:53:da:17: 8c:07:20:47:30:ff:48:f2:b7:00:4e:2a:de:60:24:cf:94:8e: 1c:1a:d6:99:62:35:ef:f6:a0:54:bc:76:b6:26:1e:aa:45:26: 8c:1e:66:44:4f:bf:90:03:6e:43:c6:5a:db:2c:6f:c9:6b:db: 47:d4:c8:91:fd:2d:54:cb:c0:42:5a:8c:00:f6:f5:df:1f:52: 7a:f9:f2:d3:48:c1:c8:ef:23:77:a6:b0:fb:c3:97:b7:6f:f6: 91:89:e8:ac -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICBCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMzMDcxMTAvBgNVBAUTKDUzQzk0ODE3RUIxMzY1RjFERThDM0MyQjQ0MDIyMzk4 ODFDMTk0M0QwHhcNMjQwOTAyMjExMTA4WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ2MjllYy0xY2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtA3z7W58Y86+CbVwjAW+dHftAVYSO8B17D/pBl7ndcpMayCyjk8SKFS7pw8 D+dlGnfmvJgyyqcS1MhEWKI0D6KKr9iJPXnV0BBLR5LJnqDWRw0olRXnC0ccp5sV foprAnHf+sJ732cXDQWerQlq9DszqVrpIYTMvheFKj2Kvi5Q/FIye0Oz+C3AqUFn cjbPh2WFh++QqZ/7XBWQWW7nbg6ho2iBR8ht+ES7axPDFnSl7Xat7PQSTdb7Jn5L DHVDQP+X9J2lFUtpfyRFYMQilcziuF8jPSmFsJwXdc/+dOlRFVkzd1HNdHM3pDEy lc0RMjmeUF7R5fWcaW0DvCSHdwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFHdweB+5 2w2Xf7zRS0wrXHDwwLCAMB8GA1UdIwQYMBaAFFPJSBfrE2Xx3ow8K0QCI5iBwZQ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzMwNy8zNDJEODMyODQy Q0MxMUVDOEYxMzMyMERDNEY5QUUwMi9VOGxJRi1zVFpmSGVqRHdyUkFJam1JSEJs RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U4bElGLXNUWmZIZWpEd3JSQUlqbUlIQmxEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDMzMDcvMzQyRDgzMjg0MkNDMTFFQzhGMTMzMjBEQzRGOUFFMDIvQzlDNzBBRUE2 OTZGMTFFRkE0REE0NzVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAJnh1QDBABn+LwDBAG0Xu4wDQQCAAIwBwMFACQEd8AwDQYJ KoZIhvcNAQELBQADggEBAAU+7J7+VwXfYwr9bRcvZv5ZKvGJ3/SvUmtHbSu9L7DX 2Y75rGSwA0nKdH0MgHWf5s+5jPWX7Fl6EE0j/cFDTUgMJ4G4bPyFePh/YoXk4uhz 3lLhNb6jmQOejF95tshc67jGbWUJ2w3UC9oRXEUtMA1o5NyMpnc/IQj8YOztgnSO yZWXaqRMuXwycZLyjalbZWMe/+AcNOkPX68ituvqx1PaF4wHIEcw/0jytwBOKt5g JM+Ujhwa1pliNe/2oFS8drYmHqpFJoweZkRPv5ADbkPGWtssb8lr20fUyJH9LVTL wEJajAD29d8fUnr58tNIwcjvI3emsPvDl7dv9pGJ6Kw= -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:38 2024 by rpki-client on console-fra.rpki-client.org