$ rpki-client -vvf rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/53409F861D9C11EAA3FD402FC4F9AE02.roa File: 53409F861D9C11EAA3FD402FC4F9AE02.roa (raw, json) Hash identifier: JDQqvRw4ZPlyW1Qs7m60+Ohq51xFppw3tiFaV+jNmJM= Subject key identifier: BF:BD:B4:03:1E:80:4F:F2:0E:94:69:03:E4:FC:35:21:16:B3:A2:D6 Certificate issuer: /CN=A9117FA3/serialNumber=1B8212DBF1553C3B761F199E5E05A2D1098DCD47 Certificate serial: 0B35 Authority key identifier: 1B:82:12:DB:F1:55:3C:3B:76:1F:19:9E:5E:05:A2:D1:09:8D:CD:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/53409F861D9C11EAA3FD402FC4F9AE02.roa Signing time: Tue 30 Jul 2024 19:37:28 +0000 ROA not before: Tue 30 Jul 2024 19:37:28 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 139237 IP address blocks: 103.29.114.0/24 maxlen: 24 103.140.53.0/24 maxlen: 24 2001:df0:ac80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.crl rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2869 (0xb35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117FA3/serialNumber=1B8212DBF1553C3B761F199E5E05A2D1098DCD47 Validity Not Before: Jul 30 19:37:28 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66a940f7-420c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:13:4b:96:72:92:31:6d:c9:83:b2:7d:87:02: 7e:33:74:0b:18:e5:f6:84:e6:2e:15:24:af:b9:6a: 97:df:3b:ee:0a:62:f6:4e:91:2e:73:9d:42:76:1d: cf:e6:ce:42:aa:df:79:ae:7a:89:38:d8:9c:d0:1c: 0d:74:9f:ed:0e:c2:d6:34:ae:2b:17:80:58:40:da: 48:b2:08:e7:8e:e3:7e:a1:41:e8:b5:4d:7f:78:3d: 68:e8:0b:e3:63:0d:f5:25:18:3e:24:25:d6:f7:af: cf:f2:84:f5:e7:73:84:74:c8:8c:e8:b2:37:c3:57: 91:98:b0:e4:c9:ae:a9:fd:6e:c7:a6:0a:8a:23:ac: 72:af:88:dc:82:f4:c9:cb:8f:a6:b0:6c:39:db:ef: 30:27:55:53:44:bd:3d:17:07:fb:21:c6:a6:08:9f: c7:d6:6d:1c:71:03:6b:cb:a7:d9:f9:a5:c8:49:1f: 64:60:49:24:0b:c7:44:ea:39:c5:61:30:ba:ee:c6: 46:f3:90:0b:82:f9:ca:d5:fa:8c:00:68:4b:ac:ff: a4:fc:53:12:c7:d9:51:24:d8:31:1c:c2:b7:e0:db: 60:06:38:93:bd:c4:d9:68:10:40:ef:1a:c1:e3:53: b3:4b:80:ac:2d:30:d0:00:ed:2e:97:db:7f:e7:16: 45:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BD:B4:03:1E:80:4F:F2:0E:94:69:03:E4:FC:35:21:16:B3:A2:D6 X509v3 Authority Key Identifier: keyid:1B:82:12:DB:F1:55:3C:3B:76:1F:19:9E:5E:05:A2:D1:09:8D:CD:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/53409F861D9C11EAA3FD402FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.29.114.0/24 103.140.53.0/24 IPv6: 2001:df0:ac80::/48 Signature Algorithm: sha256WithRSAEncryption 26:c7:ca:42:16:ac:54:e4:bc:e8:0c:49:43:77:f3:5b:20:81: d4:01:73:59:93:be:89:ad:ec:3b:f2:51:9e:f9:97:57:7b:af: 60:85:ed:86:98:06:99:65:b1:89:c0:bb:1e:76:e3:68:72:b9: 3b:8d:06:98:8a:9e:0d:a5:2e:44:70:c6:2a:e3:3d:e3:d5:e8: af:f7:be:4c:04:be:4d:47:a8:2c:c9:84:c6:b8:2a:27:c3:9b: 95:9e:bb:4a:05:02:dc:38:60:8f:93:f2:c8:f4:6c:bc:ac:d7: e9:9c:c6:1b:8e:6a:3f:0a:7e:01:84:58:8b:97:74:ea:50:fe: 36:56:89:65:45:a3:58:fa:04:22:e4:6b:27:b7:4a:a4:f1:6c: a8:a1:df:9c:a5:a9:db:38:8b:aa:29:e3:b0:5f:25:f4:bc:22: 0f:96:e5:90:18:ae:44:86:fb:f5:4f:30:f4:af:43:0d:d9:ea: 32:18:71:c1:d6:74:23:d8:02:d4:2d:a5:90:d6:fe:a5:cb:5e: f4:e6:d2:99:11:ae:dd:af:f4:4a:51:a9:27:49:f5:2f:22:88: 83:14:33:fe:74:ee:dc:b5:ba:db:02:ba:27:bb:19:ac:fc:33: 8a:cc:44:02:7b:e0:fc:22:2e:ff:26:78:b7:fb:dc:b3:02:d4: a6:a4:35:71 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICCzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdGQTMxMTAvBgNVBAUTKDFCODIxMkRCRjE1NTNDM0I3NjFGMTk5RTVFMDVBMkQx MDk4RENENDcwHhcNMjQwNzMwMTkzNzI4WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmE5NDBmNy00MjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3hNLlnKSMW3Jg7J9hwJ+M3QLGOX2hOYuFSSvuWqX3zvuCmL2TpEuc51Cdh3P 5s5Cqt95rnqJONic0BwNdJ/tDsLWNK4rF4BYQNpIsgjnjuN+oUHotU1/eD1o6Avj Yw31JRg+JCXW96/P8oT153OEdMiM6LI3w1eRmLDkya6p/W7HpgqKI6xyr4jcgvTJ y4+msGw52+8wJ1VTRL09Fwf7IcamCJ/H1m0ccQNry6fZ+aXISR9kYEkkC8dE6jnF YTC67sZG85ALgvnK1fqMAGhLrP+k/FMSx9lRJNgxHMK34NtgBjiTvcTZaBBA7xrB 41OzS4CsLTDQAO0ul9t/5xZFmQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFL+9tAMe gE/yDpRpA+T8NSEWs6LWMB8GA1UdIwQYMBaAFBuCEtvxVTw7dh8Znl4FotEJjc1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0ZBMy81OTMwNzMzNjFE OUIxMUVBODYwRUNCMkRDNEY5QUUwMi9HNElTMl9GVlBEdDJIeG1lWGdXaTBRbU56 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0SVMyX0ZWUER0Mkh4bWVYZ1dpMFFtTnpVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTdGQTMvNTkzMDczMzYxRDlCMTFFQTg2MEVDQjJEQzRGOUFFMDIvNTM0MDlGODYx RDlDMTFFQUEzRkQ0MDJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnHXIDBABnjDUwDwQCAAIwCQMHACABDfCsgDANBgkqhkiG 9w0BAQsFAAOCAQEAJsfKQhasVOS86AxJQ3fzWyCB1AFzWZO+ia3sO/JRnvmXV3uv YIXthpgGmWWxicC7HnbjaHK5O40GmIqeDaUuRHDGKuM949Xor/e+TAS+TUeoLMmE xrgqJ8OblZ67SgUC3Dhgj5PyyPRsvKzX6ZzGG45qPwp+AYRYi5d06lD+NlaJZUWj WPoEIuRrJ7dKpPFsqKHfnKWp2ziLqinjsF8l9LwiD5blkBiuRIb79U8w9K9DDdnq MhhxwdZ0I9gC1C2lkNb+pcte9ObSmRGu3a/0SlGpJ0n1LyKIgxQz/nTu3LW62wK6 J7sZrPwzisxEAnvg/CIu/yZ4t/vcswLUpqQ1cQ== -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:55 2024 by rpki-client on console-fra.rpki-client.org