$ rpki-client -vvf rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/17C7450485BD11ED8E81A718C4F9AE02.roa File: 17C7450485BD11ED8E81A718C4F9AE02.roa (raw, json) Hash identifier: Nj8SE/2vr5cf3rH0v6qhNfdaldrHo20W07Sk5ZyCo9E= Subject key identifier: 3D:F5:F6:2E:A7:61:B0:EF:69:C0:83:5C:AB:09:39:4E:5B:FD:4A:B4 Certificate issuer: /CN=A911636A/serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445 Certificate serial: 0172 Authority key identifier: 5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/17C7450485BD11ED8E81A718C4F9AE02.roa Signing time: Sat 19 Oct 2024 10:29:37 +0000 ROA not before: Sat 19 Oct 2024 10:29:37 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 150434 IP address blocks: 103.40.156.0/23 maxlen: 24 103.137.162.0/23 maxlen: 24 2400:c360::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:05:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911636A/serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445 Validity Not Before: Oct 19 10:29:37 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67138a11-1a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4e:98:63:8a:5a:56:16:77:b0:9c:97:34:9c: 57:e6:85:bb:03:64:d1:82:5e:3f:df:ee:4e:4c:9c: 2f:db:d7:95:af:45:93:07:59:3e:8e:59:ba:79:6e: bb:c1:ee:45:03:57:4a:14:98:d4:be:ef:89:55:ea: c9:de:c2:f7:b0:68:07:87:12:08:fe:3d:b6:da:db: c0:6e:a3:4d:b7:6a:74:76:f4:d5:e2:e0:f0:83:d5: ea:52:b2:b1:27:0e:48:a7:64:bb:24:42:b6:f3:f8: 9b:5c:00:9e:20:44:b3:7d:a7:5e:13:f6:1d:aa:0e: e3:02:ff:12:88:6c:e3:68:74:83:1d:56:72:b1:63: 9b:46:d5:62:d5:71:dd:1f:78:d0:44:e8:06:ab:db: 78:ed:56:d1:60:f5:50:d2:7a:bd:af:42:f5:40:39: d3:55:fb:9b:32:02:a3:ad:6d:6f:af:58:26:b6:dc: cf:62:90:98:78:79:c2:10:30:23:9a:a5:b4:11:45: 13:8a:f5:3e:4a:14:e0:a1:85:fe:e6:38:a1:9f:91: 06:24:4b:34:a2:d3:b5:f0:23:e9:0a:71:fa:f0:b0: 3d:f6:92:0e:62:5d:bd:35:bb:36:8d:e1:05:bc:77: 5a:48:5f:71:c9:7f:d2:c4:11:8b:03:05:0e:58:64: 87:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F5:F6:2E:A7:61:B0:EF:69:C0:83:5C:AB:09:39:4E:5B:FD:4A:B4 X509v3 Authority Key Identifier: keyid:5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/17C7450485BD11ED8E81A718C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.40.156.0/23 103.137.162.0/23 IPv6: 2400:c360::/32 Signature Algorithm: sha256WithRSAEncryption 9b:49:9f:7b:ec:60:b0:8c:49:69:d2:56:af:60:ec:89:b7:67: 4a:d4:91:b9:82:c2:f6:1d:58:15:68:e6:81:5d:75:bb:a1:90: 54:f2:7d:0e:c6:0f:d6:29:25:a4:4c:11:56:a2:29:94:7e:1c: de:d0:5a:24:f1:a6:65:c8:28:88:a7:60:58:b9:c5:4b:3e:90: 46:5d:e1:bc:4c:0d:b3:9d:a4:24:45:e5:cb:48:84:e8:22:32: e8:9d:53:c9:72:1d:e5:4b:ce:a5:b9:d0:f5:09:04:c1:7a:7e: 33:3c:92:ce:9b:fa:f5:bd:f2:72:77:32:b1:83:00:07:c7:c4: f9:7e:f7:3d:36:2f:52:e7:7c:d7:7c:8f:52:fa:b6:03:17:c1: 85:66:16:a1:e2:1e:57:65:e2:17:5a:da:19:42:40:28:c8:96: 8b:fb:ed:8c:9e:a0:80:b0:77:11:b4:ee:e5:82:a7:dc:c6:14: 7e:19:7d:f6:d2:5c:14:03:69:12:a6:97:21:ba:c3:9c:49:ad: 35:e4:7c:1e:fb:a3:52:10:bb:aa:12:f7:cc:3f:3c:03:e1:89: 18:61:e0:e8:06:6d:68:b5:1d:dc:fd:80:79:db:43:aa:a6:7f: 7f:52:84:3c:da:b7:44:7b:4a:e9:cf:86:c3:fb:86:25:c8:a4: a5:b8:84:a5 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYzNkExMTAvBgNVBAUTKDVDOUNDMTE0MkE5MDc1NjBDRDk5RjA2RTVERDAyREU0 RTIyRTk0NDUwHhcNMjQxMDE5MTAyOTM3WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzEzOGExMS0xYTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm06YY4paVhZ3sJyXNJxX5oW7A2TRgl4/3+5OTJwv29eVr0WTB1k+jlm6eW67 we5FA1dKFJjUvu+JVerJ3sL3sGgHhxII/j222tvAbqNNt2p0dvTV4uDwg9XqUrKx Jw5Ip2S7JEK28/ibXACeIESzfadeE/Ydqg7jAv8SiGzjaHSDHVZysWObRtVi1XHd H3jQROgGq9t47VbRYPVQ0nq9r0L1QDnTVfubMgKjrW1vr1gmttzPYpCYeHnCEDAj mqW0EUUTivU+ShTgoYX+5jihn5EGJEs0otO18CPpCnH68LA99pIOYl29Nbs2jeEF vHdaSF9xyX/SxBGLAwUOWGSHqwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFD319i6n YbDvacCDXKsJOU5b/Uq0MB8GA1UdIwQYMBaAFFycwRQqkHVgzZnwbl3QLeTiLpRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjM2QS9CMEYzM0QyQTY2 RUUxMUVEQjNCNDFBNURDNEY5QUUwMi9YSnpCRkNxUWRXRE5tZkJ1WGRBdDVPSXVs RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hKekJGQ3FRZFdETm1mQnVYZEF0NU9JdWxFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTYzNkEvQjBGMzNEMkE2NkVFMTFFREIzQjQxQTVEQzRGOUFFMDIvMTdDNzQ1MDQ4 NUJEMTFFRDhFODFBNzE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAFnKJwDBAFniaIwDQQCAAIwBwMFACQAw2AwDQYJKoZIhvcN AQELBQADggEBAJtJn3vsYLCMSWnSVq9g7Im3Z0rUkbmCwvYdWBVo5oFddbuhkFTy fQ7GD9YpJaRMEVaiKZR+HN7QWiTxpmXIKIinYFi5xUs+kEZd4bxMDbOdpCRF5ctI hOgiMuidU8lyHeVLzqW50PUJBMF6fjM8ks6b+vW98nJ3MrGDAAfHxPl+9z02L1Ln fNd8j1L6tgMXwYVmFqHiHldl4hda2hlCQCjIlov77YyeoICwdxG07uWCp9zGFH4Z ffbSXBQDaRKmlyG6w5xJrTXkfB77o1IQu6oS98w/PAPhiRhh4OgGbWi1Hdz9gHnb Q6qmf39ShDzat0R7SunPhsP7hiXIpKW4hKU= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:32 2024 by rpki-client on console-ams.rpki-client.org