$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6E9FF116ACC311EBA28FAD5FC4F9AE02.roa File: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (raw, json) Hash identifier: hc4+KqIoRZD4XQ5nNQcHzKLPhAv34gWPnKJZSG2cyV8= Subject key identifier: DF:2E:6C:E5:A0:DF:A8:04:55:DC:F7:65:1E:87:85:D5:7F:20:E6:DF Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Certificate serial: 059A Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6E9FF116ACC311EBA28FAD5FC4F9AE02.roa Signing time: Sat 28 Sep 2024 23:13:05 +0000 ROA not before: Sat 28 Sep 2024 23:13:05 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 138538 IP address blocks: 103.155.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1434 (0x59a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Validity Not Before: Sep 28 23:13:05 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66f88d81-0def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ea:00:ba:5e:ee:cb:f3:87:db:48:6b:19:19: 7c:1e:43:7d:a4:bf:8f:27:34:b7:a1:8a:ff:56:1c: e6:64:ac:fb:a7:5e:fe:56:55:8b:f1:95:5e:c0:fe: b5:56:80:a1:05:aa:ee:9a:4b:69:b8:c5:54:01:f6: 56:fe:32:87:61:de:26:8f:05:9c:f0:f7:1a:eb:c0: 96:7f:b0:fe:9e:f9:da:3c:75:e5:d2:ea:1e:1b:65: 2d:e5:23:dc:11:b6:4c:a8:6b:93:f6:d0:f8:7b:62: 2c:8c:95:9d:b9:d3:a4:15:94:23:a3:d9:7d:b6:2c: 26:86:4b:f7:a2:a7:95:8e:6b:7b:80:7b:90:cf:9b: 9e:a0:d6:85:fc:dd:bb:98:09:82:7d:82:df:b0:57: e5:fb:f1:d9:72:20:f0:e4:55:d4:f4:4d:cc:82:4a: d3:7f:d9:71:3b:d0:4f:f2:23:5b:12:dc:c6:bb:f3: fa:16:ee:11:c6:6c:6b:4c:a3:0a:3a:4e:59:f9:ed: 23:fd:c4:79:09:e7:f2:23:cf:17:d6:30:b4:76:67: 71:d7:ef:3a:a0:57:31:f5:16:a5:40:fc:41:9f:20: 79:f5:1d:d4:c8:60:ba:d8:ff:b6:7c:67:35:bd:84: 6d:3e:dd:02:70:c5:91:d8:b8:ba:c1:7d:33:e9:c4: 1d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2E:6C:E5:A0:DF:A8:04:55:DC:F7:65:1E:87:85:D5:7F:20:E6:DF X509v3 Authority Key Identifier: keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6E9FF116ACC311EBA28FAD5FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.155.110.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:d6:e9:79:03:5a:4d:53:4e:8f:45:a0:b1:22:7f:75:79:dd: c1:c3:1f:c4:08:b0:8d:69:3b:3f:0f:c5:58:e1:2a:16:7e:80: 4e:b4:6e:9b:22:1a:11:5b:a1:06:3b:ae:03:47:8b:e5:71:c7: 6e:9a:f9:d2:7f:24:11:05:e6:7f:a8:ac:4d:22:bb:6d:e3:b3: 48:7a:66:46:4b:85:94:08:fe:b8:d3:5c:e4:4c:4a:ec:63:1d: ce:9e:33:3c:33:00:5a:08:31:1c:c2:ff:4e:8c:57:11:35:3c: 4d:e1:b2:81:58:8a:8e:91:93:8d:95:79:2a:e2:f3:47:d8:00: 30:61:b6:b3:0e:44:f0:d9:4d:ba:6d:8e:ba:ee:0c:05:34:45: 4d:69:8f:2b:b8:71:42:b2:85:cb:31:a6:f3:24:36:d6:61:32: 08:60:3e:dd:f0:62:f5:22:93:c7:11:19:8e:1b:95:83:27:81: ff:76:25:d2:21:58:fb:bf:e5:3c:5e:bf:c7:55:0a:95:76:45: 43:f6:ac:f6:21:ad:67:18:29:0e:c4:09:72:4a:c2:9f:0b:b9: b2:69:87:94:1c:27:39:15:b6:fc:bd:90:a8:f2:0b:4c:02:25: e5:e4:73:d2:f8:1b:c5:83:f9:c2:8c:3d:b7:4b:03:de:72:b6: bc:12:dd:90 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1MDgxMTAvBgNVBAUTKDFENzI1QzkxQzBENDcyMkYzNDAwODhEMTM3NEREMkRB RjM3RDgzMTIwHhcNMjQwOTI4MjMxMzA1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmY4OGQ4MS0wZGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm+oAul7uy/OH20hrGRl8HkN9pL+PJzS3oYr/VhzmZKz7p17+VlWL8ZVewP61 VoChBarumktpuMVUAfZW/jKHYd4mjwWc8Pca68CWf7D+nvnaPHXl0uoeG2Ut5SPc EbZMqGuT9tD4e2IsjJWdudOkFZQjo9l9tiwmhkv3oqeVjmt7gHuQz5ueoNaF/N27 mAmCfYLfsFfl+/HZciDw5FXU9E3MgkrTf9lxO9BP8iNbEtzGu/P6Fu4RxmxrTKMK Ok5Z+e0j/cR5CefyI88X1jC0dmdx1+86oFcx9RalQPxBnyB59R3UyGC62P+2fGc1 vYRtPt0CcMWR2Li6wX0z6cQdrwIDAQABo4IClTCCApEwHQYDVR0OBBYEFN8ubOWg 36gEVdz3ZR6HhdV/IObfMB8GA1UdIwQYMBaAFB1yXJHA1HIvNACI0TdN0trzfYMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUwOC8wMDAyMDI3MkFD QzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNpODBBSWpSTjAzUzJ2Tjln eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hYSmNrY0RVY2k4MEFJalJOMDNTMnZOOWd4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTk1MDgvMDAwMjAyNzJBQ0MyMTFFQkFCRTE5NTVFQzRGOUFFMDIvNkU5RkYxMTZB Q0MzMTFFQkEyOEZBRDVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnm24wDQYJKoZIhvcNAQELBQADggEBADvW6XkDWk1TTo9F oLEif3V53cHDH8QIsI1pOz8PxVjhKhZ+gE60bpsiGhFboQY7rgNHi+Vxx26a+dJ/ JBEF5n+orE0iu23js0h6ZkZLhZQI/rjTXORMSuxjHc6eMzwzAFoIMRzC/06MVxE1 PE3hsoFYio6Rk42VeSri80fYADBhtrMORPDZTbptjrruDAU0RU1pjyu4cUKyhcsx pvMkNtZhMghgPt3wYvUik8cRGY4blYMngf92JdIhWPu/5Txev8dVCpV2RUP2rPYh rWcYKQ7ECXJKwp8LubJph5QcJzkVtvy9kKjyC0wCJeXkc9L4G8WD+cKMPbdLA95y trwS3ZA= -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:22 2024 by rpki-client on console-fra.rpki-client.org