$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/444375E25B9C11EFA181A044C4F9AE02.roa File: 444375E25B9C11EFA181A044C4F9AE02.roa (raw, json) Hash identifier: cZUk0GjwHyhCgvrA9p0spIEgaP2VdUy22G42gnbqnlc= Subject key identifier: CF:F6:07:2A:3A:C7:EF:ED:09:F4:CA:88:AD:B0:43:8B:6D:46:79:23 Certificate issuer: /CN=A9114D4F/serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3 Certificate serial: 02 Authority key identifier: 68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/444375E25B9C11EFA181A044C4F9AE02.roa Signing time: Fri 16 Aug 2024 06:53:39 +0000 ROA not before: Fri 16 Aug 2024 06:53:39 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 26658 IP address blocks: 103.205.0.0/22 maxlen: 22 203.76.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D4F/serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3 Validity Not Before: Aug 16 06:53:39 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=66bef773-ba5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c6:78:3e:df:d0:ed:c3:f2:ff:96:2a:71:97: 14:d7:6b:2b:45:b6:f1:54:c1:1b:d4:9c:34:11:ee: d7:c9:a2:d8:4d:f4:f0:4b:91:c7:02:6b:0f:d3:b8: 2f:e8:a9:26:18:de:e0:6b:18:44:a5:5b:da:96:f8: 5d:3b:b6:39:95:cb:f1:49:9b:09:f5:ff:a7:39:58: ae:85:33:b7:44:aa:71:87:63:2d:42:2c:ea:10:fd: a6:d0:f0:e2:e4:b2:62:86:f0:9a:72:4d:16:e5:75: 52:a4:a7:e8:27:74:c8:1f:cb:34:94:52:a7:a2:93: 40:3c:14:07:72:9e:c2:7b:0c:41:c5:cd:3d:64:e0: 96:01:6a:15:7c:d3:53:1d:50:42:1e:b8:19:65:55: 43:5f:dd:df:6e:53:f2:b3:d9:5b:d1:e5:89:11:c1: 59:89:3f:4d:71:78:8a:4c:30:a9:e9:71:92:c8:c4: 60:7f:f7:87:0b:f8:d8:b5:5a:42:3b:17:c8:8d:d9: 9a:ac:e8:90:ce:a6:b7:c7:bc:5e:74:51:b8:d1:0c: 95:7a:4c:26:8b:a4:7c:ae:6b:4c:17:9c:55:a7:d1: 4e:f0:51:4b:b3:e3:34:51:12:5f:19:24:ec:a9:ac: 30:b0:e1:4f:45:49:d9:0e:d4:af:85:84:7e:64:39: 63:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F6:07:2A:3A:C7:EF:ED:09:F4:CA:88:AD:B0:43:8B:6D:46:79:23 X509v3 Authority Key Identifier: keyid:68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/444375E25B9C11EFA181A044C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.205.0.0/22 203.76.236.0/22 Signature Algorithm: sha256WithRSAEncryption 82:d3:a6:c1:a7:f0:46:94:bf:3b:59:0f:44:d1:5f:2d:91:1b: 48:ce:aa:77:f0:14:32:b0:ae:86:87:b7:7a:24:12:51:29:30: db:ef:c5:11:2b:0a:78:b4:e2:53:6b:e8:29:3f:c2:81:e7:1b: 25:5f:1c:c4:80:5e:ad:7c:e7:e3:34:94:ca:e5:ce:85:9b:d2: 5b:a2:b4:11:5e:fb:b0:d8:ea:23:7b:82:59:9a:16:ab:ba:ef: 55:b7:37:57:51:c0:05:e8:32:d2:33:ac:c7:47:7b:0a:7f:f2: 5a:4b:45:a4:86:91:a4:42:9c:85:e5:28:a3:12:31:7a:0d:f7: 1a:21:1d:66:b4:b9:cb:d6:43:31:e0:43:6d:c4:88:12:2f:3a: b2:7f:11:07:4e:0d:29:9a:37:4b:7b:ef:b3:c5:56:f3:1d:c6: b2:fe:bb:52:22:6b:73:57:8e:6c:1b:3d:0b:e0:e0:6f:b8:5f: 26:9f:a2:ad:ff:e2:c8:30:df:dc:74:92:9e:3d:e6:e8:00:1c: 65:1d:3e:5f:3d:9d:f2:ec:9f:50:58:ff:08:9a:b8:72:0e:f6: fb:32:13:ba:05:ce:cb:cc:e4:a7:3d:37:07:e2:11:d3:a2:6e: 3b:7a:fd:10:d5:51:91:91:16:d0:5e:b5:0b:eb:4f:57:65:82: e6:10:a9:8b -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NEQ0RjExMC8GA1UEBRMoNjg3NzQxREUxNUNEODgzQzEwRERCQzRGQzNBMkRDRjU0 ODVFN0RGMzAeFw0yNDA4MTYwNjUzMzlaFw0yNTAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YmVmNzczLWJhNWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFxng+39Dtw/L/lipxlxTXaytFtvFUwRvUnDQR7tfJothN9PBLkccCaw/TuC/o qSYY3uBrGESlW9qW+F07tjmVy/FJmwn1/6c5WK6FM7dEqnGHYy1CLOoQ/abQ8OLk smKG8JpyTRbldVKkp+gndMgfyzSUUqeik0A8FAdynsJ7DEHFzT1k4JYBahV801Md UEIeuBllVUNf3d9uU/Kz2VvR5YkRwVmJP01xeIpMMKnpcZLIxGB/94cL+Ni1WkI7 F8iN2Zqs6JDOprfHvF50UbjRDJV6TCaLpHyua0wXnFWn0U7wUUuz4zRREl8ZJOyp rDCw4U9FSdkO1K+FhH5kOWP7AgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUz/YHKjrH 7+0J9MqIrbBDi21GeSMwHwYDVR0jBBgwFoAUaHdB3hXNiDwQ3bxPw6Lc9UheffMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0RDRGLzBFM0FDQ0ZDNUI5 QzExRUY5QjE1NDk0NEM0RjlBRTAyL2FIZEIzaFhOaUR3UTNieFB3NkxjOVVoZWZm TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYUhkQjNoWE5pRHdRM2J4UHc2TGM5VWhlZmZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEQ0Ri8wRTNBQ0NGQzVCOUMxMUVGOUIxNTQ5NDRDNEY5QUUwMi80NDQzNzVFMjVC OUMxMUVGQTE4MUEwNDRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAmfNAAMEAstM7DANBgkqhkiG9w0BAQsFAAOCAQEAgtOmwafw RpS/O1kPRNFfLZEbSM6qd/AUMrCuhoe3eiQSUSkw2+/FESsKeLTiU2voKT/Cgecb JV8cxIBerXzn4zSUyuXOhZvSW6K0EV77sNjqI3uCWZoWq7rvVbc3V1HABegy0jOs x0d7Cn/yWktFpIaRpEKcheUooxIxeg33GiEdZrS5y9ZDMeBDbcSIEi86sn8RB04N KZo3S3vvs8VW8x3Gsv67UiJrc1eObBs9C+Dgb7hfJp+irf/iyDDf3HSSnj3m6AAc ZR0+Xz2d8uyfUFj/CJq4cg72+zITugXOy8zkpz03B+IR06JuO3r9ENVRkZEW0F61 C+tPV2WC5hCpiw== -----END CERTIFICATE-----Generated at Thu Sep 19 07:13:43 2024 by rpki-client on console-fra.rpki-client.org