$ rpki-client -vvf rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/4022ED5A1E0E11EB8169D187C4F9AE02.roa File: 4022ED5A1E0E11EB8169D187C4F9AE02.roa (raw, json) Hash identifier: j2zHgmp8Nt5vKv0t1qg4uegQ3l4vSDeq4GLVEWp1JqE= Subject key identifier: FA:FF:D2:A8:9A:F1:48:F3:6E:D4:C2:70:7F:AF:81:AD:01:B1:B2:EF Certificate issuer: /CN=A9112804/serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01 Certificate serial: 062B Authority key identifier: 09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/4022ED5A1E0E11EB8169D187C4F9AE02.roa Signing time: Fri 28 Jul 2023 18:56:19 +0000 ROA not before: Fri 28 Jul 2023 18:56:19 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 136815 IP address blocks: 103.97.160.0/23 maxlen: 23 103.97.160.0/24 maxlen: 24 103.97.161.0/24 maxlen: 24 2401:91c0::/32 maxlen: 32 2401:91c0::/33 maxlen: 33 2401:91c0:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1579 (0x62b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112804/serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01 Validity Not Before: Jul 28 18:56:19 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64c40f53-04ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e4:c6:15:3d:7d:4f:53:be:77:eb:cf:42:24: b3:bb:90:30:5f:f6:04:c7:89:a8:f6:65:52:3a:a5: e7:c5:e4:97:16:bc:94:bb:64:bf:3a:cb:10:5a:25: bd:35:ac:5d:b9:4a:3b:10:d6:5c:e6:f4:ef:ee:37: 75:59:4f:25:87:b9:23:06:42:4e:03:41:3d:96:47: 20:be:3d:c1:ba:24:bd:be:5d:27:81:63:e7:07:39: 26:51:77:63:e2:87:5a:50:9c:cd:f6:c3:4f:e0:85: 3a:1b:66:4e:d6:fc:72:14:46:d1:75:5b:f9:1e:0c: 71:e2:16:e9:1a:7f:f0:17:d5:ca:51:9b:1d:1c:f4: bf:98:b2:a7:1f:bb:13:33:a7:5d:68:19:b4:84:af: 15:db:3c:85:91:59:09:0b:99:9b:cf:7d:02:75:ca: 00:a3:f4:18:45:73:72:6c:61:6f:51:0c:17:41:9c: 7d:c1:11:34:d2:94:ad:9c:4b:50:da:44:84:98:f8: 46:c8:7b:04:fb:1a:e7:3a:eb:8a:1e:45:00:b5:29: c8:a4:b7:07:01:93:99:57:bd:cc:ca:f2:46:40:b3: dc:48:de:17:55:ae:7a:a2:55:f0:3e:dd:95:22:50: 00:8e:1d:09:6b:68:fa:a3:0a:f2:f7:cb:27:8f:a8: c0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:FF:D2:A8:9A:F1:48:F3:6E:D4:C2:70:7F:AF:81:AD:01:B1:B2:EF X509v3 Authority Key Identifier: keyid:09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/4022ED5A1E0E11EB8169D187C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.97.160.0/23 IPv6: 2401:91c0::/32 Signature Algorithm: sha256WithRSAEncryption 8d:5a:4c:16:cf:03:ba:17:79:04:28:c5:61:85:ea:47:72:50: f1:9e:b2:88:54:5f:a0:75:26:97:00:43:25:d2:77:bc:71:69: d5:ab:09:64:6f:3d:1e:df:17:27:a7:41:77:d5:9b:f1:81:a9: 7b:0f:d6:e8:10:b7:81:98:8f:e2:01:bf:2a:f0:45:c2:09:13: 08:c3:d1:f4:6f:68:70:81:b8:54:bc:0a:0c:59:6d:66:d5:f3: 22:a5:e3:d4:af:0c:39:f0:9c:63:9a:c4:4e:3f:f4:93:ee:d3: 1f:72:d9:6a:fa:31:72:59:b8:fd:a6:8c:78:69:2c:66:24:de: b6:19:7e:50:45:7b:32:32:f0:61:70:23:99:a3:0e:ba:66:a5: fb:6f:e2:e9:cd:cd:97:7d:52:e8:98:51:00:8f:7f:a2:cb:e8: b0:d1:65:18:8e:bc:a5:f6:19:29:e6:bd:fb:31:6a:ed:bb:24: 69:3d:0d:63:8f:90:6d:70:bd:47:69:44:76:32:f0:7b:4c:89: ae:f6:aa:66:11:39:68:0f:c1:75:e9:cb:17:3c:a0:a9:00:94: 57:c7:96:f8:f4:a5:62:ca:c0:03:0b:25:bf:ae:3f:83:a9:1c: 77:b3:37:46:b3:43:8e:94:a6:c4:fc:d5:4b:5e:6f:2b:e3:12: 07:da:d1:78 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4MDQxMTAvBgNVBAUTKDA5OTJDM0NERUY4MjUwMDY3M0NDRDdBMTc2MDVGRDMz RDg2NEZGMDEwHhcNMjMwNzI4MTg1NjE5WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGM0MGY1My0wNGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOTGFT19T1O+d+vPQiSzu5AwX/YEx4mo9mVSOqXnxeSXFryUu2S/OssQWiW9 NaxduUo7ENZc5vTv7jd1WU8lh7kjBkJOA0E9lkcgvj3BuiS9vl0ngWPnBzkmUXdj 4odaUJzN9sNP4IU6G2ZO1vxyFEbRdVv5Hgxx4hbpGn/wF9XKUZsdHPS/mLKnH7sT M6ddaBm0hK8V2zyFkVkJC5mbz30CdcoAo/QYRXNybGFvUQwXQZx9wRE00pStnEtQ 2kSEmPhGyHsE+xrnOuuKHkUAtSnIpLcHAZOZV73MyvJGQLPcSN4XVa56olXwPt2V IlAAjh0Ja2j6owry98snj6jAVwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFPr/0qia 8UjzbtTCcH+vga0BsbLvMB8GA1UdIwQYMBaAFAmSw83vglAGc8zXoXYF/TPYZP8B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjgwNC8zNkVDREE1NEY0 RkExMUU5OTkxODQzM0RDNEY5QUUwMi9DWkxEemUtQ1VBWnp6TmVoZGdYOU05aGtf d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaTER6ZS1DVUFaenpOZWhkZ1g5TTloa193RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTI4MDQvMzZFQ0RBNTRGNEZBMTFFOTk5MTg0MzNEQzRGOUFFMDIvNDAyMkVENUEx RTBFMTFFQjgxNjlEMTg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnYaAwDQQCAAIwBwMFACQBkcAwDQYJKoZIhvcNAQELBQAD ggEBAI1aTBbPA7oXeQQoxWGF6kdyUPGesohUX6B1JpcAQyXSd7xxadWrCWRvPR7f FyenQXfVm/GBqXsP1ugQt4GYj+IBvyrwRcIJEwjD0fRvaHCBuFS8CgxZbWbV8yKl 49SvDDnwnGOaxE4/9JPu0x9y2Wr6MXJZuP2mjHhpLGYk3rYZflBFezIy8GFwI5mj Drpmpftv4unNzZd9UuiYUQCPf6LL6LDRZRiOvKX2GSnmvfsxau27JGk9DWOPkG1w vUdpRHYy8HtMia72qmYROWgPwXXpyxc8oKkAlFfHlvj0pWLKwAMLJb+uP4OpHHez N0azQ46UpsT81UtebyvjEgfa0Xg= -----END CERTIFICATE-----Generated at Fri May 10 20:45:21 2024 by rpki-client on console-ams.rpki-client.org