$ rpki-client -vvf rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/3DF2A2EC3AB311EC977A5D60C4F9AE02.roa File: 3DF2A2EC3AB311EC977A5D60C4F9AE02.roa (raw, json) Hash identifier: Ccp5i/dm7+8eXzkZNFr+8Fkp38efiWixun6YhIXlQUA= Subject key identifier: B2:59:99:28:F2:D6:94:C7:9D:BC:9C:D4:DA:16:53:7F:3B:69:D9:D4 Certificate issuer: /CN=A9112407/serialNumber=CF21526D926CB832374C8E9BD5CE1D5BBCD66084 Certificate serial: 05D9 Authority key identifier: CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/3DF2A2EC3AB311EC977A5D60C4F9AE02.roa Signing time: Thu 10 Oct 2024 23:02:28 +0000 ROA not before: Thu 10 Oct 2024 23:02:28 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 9723 IP address blocks: 103.72.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1497 (0x5d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112407/serialNumber=CF21526D926CB832374C8E9BD5CE1D5BBCD66084 Validity Not Before: Oct 10 23:02:28 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=67085d04-78b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:82:b3:20:bf:2b:21:ed:6e:cc:1f:0a:dc:3d: a3:bd:b3:0e:0e:89:ad:f7:4c:8a:f2:62:a4:fc:66: f1:e4:2f:21:dc:39:67:2a:63:c4:e3:b5:27:a8:96: 3b:fb:6d:0b:41:ac:71:b0:69:de:a9:e3:a2:5f:9d: 4f:b2:9c:07:79:78:eb:34:c0:91:66:39:e7:d6:30: 74:5a:c6:ca:5d:37:35:92:2a:01:3a:b0:59:a0:a6: e3:e2:82:e5:90:42:6a:a6:6d:90:bc:06:31:c3:52: 7b:df:9b:b7:04:7b:f2:f5:1a:46:23:fe:0a:f4:59: f4:c8:7d:60:01:5d:76:19:58:ae:9f:c9:9e:03:9c: 9c:b5:41:5e:9a:38:bd:ab:7f:56:5b:98:19:eb:24: 4e:5d:08:8b:f6:f5:62:f3:5d:bd:56:95:20:4e:ac: 13:87:43:f1:e0:b0:42:ae:18:23:7a:f0:8a:7b:47: b3:a4:e1:75:4d:25:ce:ec:6e:f3:17:d2:7e:26:e9: 79:87:a3:8c:2d:bd:01:94:f6:7e:80:f4:fe:ca:3f: a7:a3:bf:5c:26:cb:c2:87:b9:50:28:22:8e:72:52: a1:27:2b:f1:bc:a4:16:a5:72:26:25:f2:19:76:4c: 70:74:1f:3f:6e:56:a1:5e:6b:bd:ab:1f:73:9b:c9: 2d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:59:99:28:F2:D6:94:C7:9D:BC:9C:D4:DA:16:53:7F:3B:69:D9:D4 X509v3 Authority Key Identifier: keyid:CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/3DF2A2EC3AB311EC977A5D60C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.72.202.0/23 Signature Algorithm: sha256WithRSAEncryption 45:24:58:36:4c:2c:66:9d:83:7e:f4:3c:bf:51:f5:72:c2:3d: fe:99:c8:f8:e7:64:ee:2c:59:5e:0b:fc:95:6d:55:a5:38:5c: 9e:54:09:92:a8:d5:2e:38:de:f8:65:7b:00:8b:f4:87:aa:97: 25:69:3e:d9:a7:7f:5f:8d:ca:17:c9:6c:cf:78:1d:50:57:33: 89:c3:12:2d:68:fc:7c:cf:c5:79:78:4b:28:00:7f:22:47:8c: 19:1e:fa:7e:7d:ae:18:13:4c:54:ea:3a:75:4c:13:24:ad:7c: 5e:5e:d3:a8:cf:f5:60:fc:61:64:e7:4c:08:06:8c:4b:cb:cb: 87:c9:f8:1a:a1:36:7b:0d:31:a6:33:77:44:b5:dc:b7:da:22: 16:e7:48:7e:ed:9d:4b:85:a8:d8:4c:eb:5f:3e:e9:61:1a:66: 63:a1:2c:0c:06:37:72:cd:e3:f1:7d:d0:11:ec:71:2a:f0:b1: 12:6f:4c:58:d1:8a:cd:3d:d8:a7:e6:e4:64:44:38:d2:4e:2e: df:6e:bf:99:ea:90:9a:14:b6:92:77:8e:60:35:36:4b:60:16: be:0f:16:6f:bc:a9:68:c0:a4:94:3e:44:ca:d9:52:6b:58:b7: 28:34:7b:2d:1b:d6:6b:86:56:2b:dd:16:c8:9d:f0:17:a0:82: 0c:a5:bc:26 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI0MDcxMTAvBgNVBAUTKENGMjE1MjZEOTI2Q0I4MzIzNzRDOEU5QkQ1Q0UxRDVC QkNENjYwODQwHhcNMjQxMDEwMjMwMjI4WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzA4NWQwNC03OGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo4KzIL8rIe1uzB8K3D2jvbMODomt90yK8mKk/Gbx5C8h3DlnKmPE47UnqJY7 +20LQaxxsGneqeOiX51PspwHeXjrNMCRZjnn1jB0WsbKXTc1kioBOrBZoKbj4oLl kEJqpm2QvAYxw1J735u3BHvy9RpGI/4K9Fn0yH1gAV12GViun8meA5yctUFemji9 q39WW5gZ6yROXQiL9vVi8129VpUgTqwTh0Px4LBCrhgjevCKe0ezpOF1TSXO7G7z F9J+Jul5h6OMLb0BlPZ+gPT+yj+no79cJsvCh7lQKCKOclKhJyvxvKQWpXImJfIZ dkxwdB8/blahXmu9qx9zm8ktWQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLJZmSjy 1pTHnbyc1NoWU387adnUMB8GA1UdIwQYMBaAFM8hUm2SbLgyN0yOm9XOHVu81mCE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjQwNy85MDBERkY1RTkw NTkxMUVCOEYxRUVFMTBDNEY5QUUwMi96eUZTYlpKc3VESTNUSTZiMWM0ZFc3eldZ SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p5RlNiWkpzdURJM1RJNmIxYzRkVzd6V1lJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTI0MDcvOTAwREZGNUU5MDU5MTFFQjhGMUVFRTEwQzRGOUFFMDIvM0RGMkEyRUMz QUIzMTFFQzk3N0E1RDYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnSMowDQYJKoZIhvcNAQELBQADggEBAEUkWDZMLGadg370 PL9R9XLCPf6ZyPjnZO4sWV4L/JVtVaU4XJ5UCZKo1S443vhlewCL9IeqlyVpPtmn f1+NyhfJbM94HVBXM4nDEi1o/HzPxXl4SygAfyJHjBke+n59rhgTTFTqOnVMEySt fF5e06jP9WD8YWTnTAgGjEvLy4fJ+BqhNnsNMaYzd0S13LfaIhbnSH7tnUuFqNhM 618+6WEaZmOhLAwGN3LN4/F90BHscSrwsRJvTFjRis092Kfm5GREONJOLt9uv5nq kJoUtpJ3jmA1NktgFr4PFm+8qWjApJQ+RMrZUmtYtyg0ey0b1muGVivdFsid8Beg ggylvCY= -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:35 2024 by rpki-client on console-ams.rpki-client.org