$ rpki-client -vvf rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/6C27C19E4BFA11ECA6797F6DC4F9AE02.roa File: 6C27C19E4BFA11ECA6797F6DC4F9AE02.roa (raw, json) Hash identifier: SODAYGPYQawO4rdlay5Bj39kX/bHXB46bA4JgyNvlAw= Subject key identifier: AD:F7:32:08:B8:D7:F3:66:1C:84:74:62:FB:77:F0:86:EC:EF:DE:83 Certificate issuer: /CN=A9119B43/serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79 Certificate serial: 036F Authority key identifier: 5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/6C27C19E4BFA11ECA6797F6DC4F9AE02.roa Signing time: Tue 09 Jan 2024 02:23:47 +0000 ROA not before: Tue 09 Jan 2024 02:23:47 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 4764 IP address blocks: 103.176.60.0/24 maxlen: 24 2400:3120::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 879 (0x36f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119B43/serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79 Validity Not Before: Jan 9 02:23:47 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=659cae32-6546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:03:1f:e6:8e:3f:f1:7a:d7:fa:1f:f4:76:5f: 03:59:cc:57:b4:81:c6:be:94:c1:89:fb:41:09:7e: e4:28:17:4b:87:44:e8:5c:90:d7:3f:d4:78:1b:58: 5b:42:99:60:7d:15:99:1b:8a:83:db:03:e9:8f:96: 53:12:9f:91:96:24:85:09:7f:42:3f:b6:cd:7c:e9: 22:fa:4e:4b:e5:65:54:7c:99:f1:42:8c:5d:5c:a4: bd:f5:06:e1:31:38:f2:f7:43:15:f8:12:2f:52:3e: 7d:81:da:90:b3:c5:da:c8:f6:f3:5f:02:81:2b:1f: 00:d0:e1:76:c0:01:a0:0a:86:ef:24:f4:9e:7a:1c: 7d:6e:af:78:53:60:23:39:9a:8d:89:09:77:19:b6: 6d:0e:fc:66:58:26:6e:d3:c6:50:66:7b:84:30:65: b4:44:53:52:1c:66:db:2c:ab:27:1c:ab:6e:7b:54: c0:83:4f:e9:e3:57:11:cc:d9:2c:d0:6a:7c:3b:b8: 98:b5:fa:8c:77:c1:18:2b:bb:cf:ee:d6:ba:da:19: 2e:f8:b3:80:e2:4e:91:eb:19:57:b3:6c:ef:80:6e: d3:6f:a3:7e:09:71:8b:9c:fc:b1:0f:73:96:dc:e7: 60:63:a4:69:d4:e2:85:fe:cf:b9:58:f6:db:79:3e: 82:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F7:32:08:B8:D7:F3:66:1C:84:74:62:FB:77:F0:86:EC:EF:DE:83 X509v3 Authority Key Identifier: keyid:5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/6C27C19E4BFA11ECA6797F6DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.176.60.0/24 IPv6: 2400:3120::/36 Signature Algorithm: sha256WithRSAEncryption 12:ed:e1:d5:a7:97:3c:dc:67:96:d2:46:d0:d4:29:a1:3c:ea: 0f:b9:f3:1b:63:aa:90:68:16:55:42:89:08:d4:ed:66:09:1b: 92:1b:f5:15:84:c9:43:0b:89:a9:34:35:67:56:3f:03:27:7f: fb:a9:43:e3:92:99:59:d8:aa:e0:98:cf:7c:ff:96:37:e8:aa: 4d:93:8d:84:f9:c7:80:81:e9:2d:19:42:6b:27:d3:a6:06:0d: 79:d3:cd:3f:b4:16:2b:d6:8f:d0:77:20:63:5d:6d:7b:0f:64: 9e:89:fb:ba:14:af:5d:77:0d:af:ca:fd:63:bd:d4:89:82:37: 91:4a:ce:36:c6:47:f8:99:47:7d:b9:94:8b:9f:28:85:74:c5: 7f:ed:96:91:cc:4e:76:80:45:b7:9c:76:52:38:03:c2:93:c3: ab:cb:8e:62:74:5e:b0:3d:42:c8:8f:48:5b:22:e2:1c:44:c8: cc:24:88:e3:7b:4e:0e:13:88:a7:57:21:df:e3:b9:a8:75:53: 64:f0:49:aa:27:7b:9d:b3:c0:6b:95:36:5e:af:1b:c9:15:b8: ec:a9:f5:cb:8a:ed:0a:90:15:cc:4a:7d:e4:e9:03:c1:37:f3: b2:00:86:fd:17:19:ad:b5:47:a8:e9:ce:bf:04:67:59:c1:88: ce:36:86:24 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICA28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlCNDMxMTAvBgNVBAUTKDVFRDg2OERBODcyQUY4RDY5NkE1QzFBOUZBNzgyOUY2 NTI3M0NBNzkwHhcNMjQwMTA5MDIyMzQ3WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTljYWUzMi02NTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgMf5o4/8XrX+h/0dl8DWcxXtIHGvpTBiftBCX7kKBdLh0ToXJDXP9R4G1hb QplgfRWZG4qD2wPpj5ZTEp+RliSFCX9CP7bNfOki+k5L5WVUfJnxQoxdXKS99Qbh MTjy90MV+BIvUj59gdqQs8XayPbzXwKBKx8A0OF2wAGgCobvJPSeehx9bq94U2Aj OZqNiQl3GbZtDvxmWCZu08ZQZnuEMGW0RFNSHGbbLKsnHKtue1TAg0/p41cRzNks 0Gp8O7iYtfqMd8EYK7vP7ta62hku+LOA4k6R6xlXs2zvgG7Tb6N+CXGLnPyxD3OW 3OdgY6Rp1OKF/s+5WPbbeT6CUwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFK33Mgi4 1/NmHIR0Yvt38Ibs796DMB8GA1UdIwQYMBaAFF7YaNqHKvjWlqXBqfp4KfZSc8p5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUI0My9FNUI4Mzk4MjRC M0ExMUVDOTkyRTgxNTBDNEY5QUUwMi9YdGhvMm9jcS1OYVdwY0dwLW5ncDlsSnp5 bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h0aG8yb2NxLU5hV3BjR3AtbmdwOWxKenluay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTlCNDMvRTVCODM5ODI0QjNBMTFFQzk5MkU4MTUwQzRGOUFFMDIvNkMyN0MxOUU0 QkZBMTFFQ0E2Nzk3RjZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E IDAeMAwEAgABMAYDBABnsDwwDgQCAAIwCAMGBCQAMSAAMA0GCSqGSIb3DQEBCwUA A4IBAQAS7eHVp5c83GeW0kbQ1CmhPOoPufMbY6qQaBZVQokI1O1mCRuSG/UVhMlD C4mpNDVnVj8DJ3/7qUPjkplZ2KrgmM98/5Y36KpNk42E+ceAgektGUJrJ9OmBg15 080/tBYr1o/QdyBjXW17D2Seifu6FK9ddw2vyv1jvdSJgjeRSs42xkf4mUd9uZSL nyiFdMV/7ZaRzE52gEW3nHZSOAPCk8Ory45idF6wPULIj0hbIuIcRMjMJIjje04O E4inVyHf47modVNk8EmqJ3uds8BrlTZerxvJFbjsqfXLiu0KkBXMSn3k6QPBN/Oy AIb9FxmttUeo6c6/BGdZwYjONoYk -----END CERTIFICATE-----Generated at Thu Nov 21 01:31:52 2024 by rpki-client on console-fra.rpki-client.org