$ rpki-client -vvf rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/5169DA6EA05D11ED9406DE26C4F9AE02.roa File: 5169DA6EA05D11ED9406DE26C4F9AE02.roa (raw, json) Hash identifier: ubMDKoV/0Mf8cskkFN+EzNxMhabm1KL1nBOoaD8bcg8= Subject key identifier: DA:14:0F:5C:B7:FA:3E:47:27:B8:C8:D1:6D:D9:D4:B8:BA:D5:34:8B Certificate issuer: /CN=A911A70E/serialNumber=D439EED60D319709872474B90706630473B6DE5E Certificate serial: 0141 Authority key identifier: D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/5169DA6EA05D11ED9406DE26C4F9AE02.roa Signing time: Tue 03 Sep 2024 04:47:14 +0000 ROA not before: Tue 03 Sep 2024 04:47:14 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 138033 IP address blocks: 103.120.84.0/24 maxlen: 32 103.120.85.0/24 maxlen: 32 103.120.86.0/24 maxlen: 32 103.120.87.0/24 maxlen: 32 2403:5440::/32 maxlen: 47 2403:5440::/48 maxlen: 63 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:27:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A70E/serialNumber=D439EED60D319709872474B90706630473B6DE5E Validity Not Before: Sep 3 04:47:14 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d694d2-3648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:46:0a:b1:7b:61:69:d7:7f:77:56:ec:2d:1b: 76:4a:de:97:8c:5c:d2:21:78:1a:d9:e4:8f:55:b2: d1:66:23:34:71:79:e3:14:97:42:6b:c5:6b:28:51: f9:8e:6f:63:99:73:e3:92:1f:ec:19:5f:20:1a:1c: d9:ed:34:f2:04:8b:c6:f9:09:a9:ff:2d:7f:5b:bb: 0a:9a:6e:38:21:31:04:20:25:c2:41:01:17:d5:c9: 34:e2:aa:26:2f:c3:6e:f3:df:a1:62:2c:d3:1b:7a: 1e:57:e6:e4:b5:bb:f6:26:31:f1:86:59:84:ff:f8: 1d:d0:51:de:e2:96:dd:2c:1f:ce:9f:61:20:c8:1e: cc:19:be:8e:8e:9e:62:bf:5a:52:eb:1b:30:a7:2a: d6:5b:66:67:ca:9f:4d:e6:e6:48:47:88:3a:ee:ab: 65:d0:5f:b7:f1:54:8e:e1:7d:e9:d5:e1:ce:a5:c6: dc:09:d2:28:35:e2:d3:15:cc:a8:99:8d:ab:a6:09: de:31:96:1d:cc:67:6a:64:e2:2c:5e:bd:0e:76:81: 15:93:36:55:4b:7b:02:0f:bd:8a:38:6e:9a:2b:ad: 1e:70:81:5e:2d:52:f3:b3:b8:a0:c5:9f:b6:b5:13: 89:7d:d7:75:32:62:78:17:d4:1f:0f:da:14:23:e0: c0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:14:0F:5C:B7:FA:3E:47:27:B8:C8:D1:6D:D9:D4:B8:BA:D5:34:8B X509v3 Authority Key Identifier: keyid:D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/5169DA6EA05D11ED9406DE26C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.120.84.0/22 IPv6: 2403:5440::/32 Signature Algorithm: sha256WithRSAEncryption a7:84:2a:88:b2:be:fb:f4:c8:7b:37:b7:bd:12:80:8c:0f:b9: 9d:99:05:ab:f5:35:68:2a:61:08:07:43:f2:e3:09:41:1b:bc: c3:2c:5c:56:d1:10:48:b1:e7:e0:87:65:ea:86:7c:47:c6:d5: 64:27:30:6e:17:de:45:55:64:a2:53:1d:60:bf:29:94:8b:07: a2:98:14:4d:9e:cb:6b:db:a1:cf:3f:69:1d:6b:1a:f8:ee:1c: 6d:8a:f8:e7:ed:a1:12:05:06:f2:fd:47:aa:05:fa:91:c5:c1: c2:7a:84:38:c2:af:1e:15:19:2c:42:46:c4:e3:37:b5:17:aa: 19:44:6d:92:10:05:ad:53:96:bb:a0:41:78:94:21:1e:ca:15: be:14:e0:e6:46:96:a6:0f:d1:08:7b:dd:5b:0f:69:a2:c0:3c: 76:42:c0:1e:d7:7b:d5:ea:63:b5:fa:89:6c:d3:a9:61:c6:91: 32:38:e0:bd:d6:75:e8:8a:8c:96:7e:4e:5a:90:67:05:58:75: f1:99:a0:d3:e7:4d:c9:56:ea:dd:26:42:16:56:ad:80:e6:aa: cc:bd:d7:1b:7f:fb:02:6a:af:9f:8a:77:db:b7:ba:54:d4:39: 38:fb:36:f0:ef:ef:db:eb:93:5f:d5:55:17:9d:6c:2c:8f:2e: c9:04:a9:20 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE3MEUxMTAvBgNVBAUTKEQ0MzlFRUQ2MEQzMTk3MDk4NzI0NzRCOTA3MDY2MzA0 NzNCNkRFNUUwHhcNMjQwOTAzMDQ0NzE0WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ2OTRkMi0zNjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kYKsXthadd/d1bsLRt2St6XjFzSIXga2eSPVbLRZiM0cXnjFJdCa8VrKFH5 jm9jmXPjkh/sGV8gGhzZ7TTyBIvG+Qmp/y1/W7sKmm44ITEEICXCQQEX1ck04qom L8Nu89+hYizTG3oeV+bktbv2JjHxhlmE//gd0FHe4pbdLB/On2EgyB7MGb6Ojp5i v1pS6xswpyrWW2Znyp9N5uZIR4g67qtl0F+38VSO4X3p1eHOpcbcCdIoNeLTFcyo mY2rpgneMZYdzGdqZOIsXr0OdoEVkzZVS3sCD72KOG6aK60ecIFeLVLzs7igxZ+2 tROJfdd1MmJ4F9QfD9oUI+DAlQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFNoUD1y3 +j5HJ7jI0W3Z1Li61TSLMB8GA1UdIwQYMBaAFNQ57tYNMZcJhyR0uQcGYwRztt5e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTcwRS8wMDA4M0ZBQzlE NTcxMUVEOUY5ODk1MzBDNEY5QUUwMi8xRG51MWcweGx3bUhKSFM1QndaakJITzIz bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFEbnUxZzB4bHdtSEpIUzVCd1pqQkhPMjNsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUE3MEUvMDAwODNGQUM5RDU3MTFFRDlGOTg5NTMwQzRGOUFFMDIvNTE2OURBNkVB MDVEMTFFRDk0MDZERTI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJneFQwDQQCAAIwBwMFACQDVEAwDQYJKoZIhvcNAQELBQAD ggEBAKeEKoiyvvv0yHs3t70SgIwPuZ2ZBav1NWgqYQgHQ/LjCUEbvMMsXFbREEix 5+CHZeqGfEfG1WQnMG4X3kVVZKJTHWC/KZSLB6KYFE2ey2vboc8/aR1rGvjuHG2K +OftoRIFBvL9R6oF+pHFwcJ6hDjCrx4VGSxCRsTjN7UXqhlEbZIQBa1TlrugQXiU IR7KFb4U4OZGlqYP0Qh73VsPaaLAPHZCwB7Xe9XqY7X6iWzTqWHGkTI44L3WdeiK jJZ+TlqQZwVYdfGZoNPnTclW6t0mQhZWrYDmqsy91xt/+wJqr5+Kd9u3ulTUOTj7 NvDv79vrk1/VVRedbCyPLskEqSA= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:32 2024 by rpki-client on console-ams.rpki-client.org