$ rpki-client -vvf rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/AA9183060FDC11ED9718606AC4F9AE02.roa File: AA9183060FDC11ED9718606AC4F9AE02.roa (raw, json) Hash identifier: esmrf2BFTjhprHyQQ5D38sZ0HfzZ4jtc/m9nB8i0g9E= Subject key identifier: A8:F7:28:4F:87:95:C1:8D:F6:58:1E:36:17:ED:47:CF:EF:FE:0A:42 Certificate issuer: /CN=A912082A/serialNumber=C3B82A2F7451E6956C3FA39340DC7322D0E78CA6 Certificate serial: 01C3 Authority key identifier: C3:B8:2A:2F:74:51:E6:95:6C:3F:A3:93:40:DC:73:22:D0:E7:8C:A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/AA9183060FDC11ED9718606AC4F9AE02.roa Signing time: Thu 23 May 2024 04:38:37 +0000 ROA not before: Thu 23 May 2024 04:38:37 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 150142 IP address blocks: 103.191.240.0/23 maxlen: 23 103.191.240.0/24 maxlen: 24 103.191.241.0/24 maxlen: 24 2001:df1:9c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.crl rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912082A/serialNumber=C3B82A2F7451E6956C3FA39340DC7322D0E78CA6 Validity Not Before: May 23 04:38:37 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=664ec84d-9841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e4:64:40:15:59:5a:29:40:fe:8d:6a:6a:3b: fc:bb:75:aa:aa:5d:19:2f:0a:d3:40:f5:b4:a0:30: 98:07:5a:cd:df:54:af:ae:d5:bb:bc:dc:19:f4:ed: 02:5f:90:da:9d:c2:f3:04:9c:c0:1a:70:b3:2a:ef: 4c:52:b6:90:a3:8b:b9:72:a4:b4:5b:a0:28:93:51: 23:0a:8e:94:75:a8:7d:35:b4:79:66:c8:b9:58:50: 9d:40:2b:96:8e:eb:36:5e:7b:f5:8a:63:92:4c:aa: 5d:e0:96:19:e3:86:26:74:97:2c:a8:dc:5f:66:aa: c3:f9:48:71:88:b0:e8:27:21:b2:e9:6b:02:72:df: 9c:87:b5:82:a6:ba:93:56:ee:be:6a:ae:48:d2:b5: d9:a8:71:9c:d6:60:18:e5:14:88:d6:9b:22:4f:86: a4:79:ac:37:00:ad:c9:59:5c:ff:54:09:0a:63:21: a1:ef:75:5a:dd:31:85:0a:1d:ad:1b:8e:de:04:ec: 1d:23:dd:13:75:cb:b1:43:d1:ba:0a:6c:fb:49:e2: 7a:48:6e:e7:ff:c4:1c:76:1a:1e:a5:d1:e7:a5:53: 69:84:b6:18:ef:35:71:be:6c:e7:fc:ce:1c:24:13: 23:6c:fb:bd:88:c4:37:2b:7d:25:08:8f:6e:32:6e: 67:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F7:28:4F:87:95:C1:8D:F6:58:1E:36:17:ED:47:CF:EF:FE:0A:42 X509v3 Authority Key Identifier: keyid:C3:B8:2A:2F:74:51:E6:95:6C:3F:A3:93:40:DC:73:22:D0:E7:8C:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/AA9183060FDC11ED9718606AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.191.240.0/23 IPv6: 2001:df1:9c0::/48 Signature Algorithm: sha256WithRSAEncryption 33:04:b4:6b:de:f8:48:7b:26:df:7a:d8:1d:46:01:80:e9:05: c8:3f:40:bc:44:d7:68:da:5d:56:02:56:22:da:70:fe:27:37: 0e:ca:3d:2c:c5:3b:d2:3b:94:e9:24:fb:0c:5f:cd:31:8d:03: 19:a7:79:ac:05:97:04:17:a8:53:05:1e:bb:26:80:cb:2b:f2: b0:af:94:b5:4e:e8:58:be:53:05:eb:1d:f2:2f:1a:29:c5:4b: f1:66:d2:0a:99:7b:a0:2a:cf:59:bf:9e:e6:f1:3b:d0:dc:20: c0:af:11:63:8b:41:a7:b1:fd:ce:0c:39:fe:55:56:60:da:a9: 0a:14:cc:f6:44:f9:03:89:39:1e:17:b4:24:e2:d7:37:b8:a1: 3c:8e:32:7c:e1:01:73:8c:fc:06:69:bc:11:a0:97:d8:b5:f8: 37:68:13:f3:a4:b1:9c:63:6c:29:12:55:e4:ca:d9:5f:00:ad: 5f:10:51:fe:8d:7e:99:1e:48:cc:ad:ea:e2:b2:82:4c:33:0a: 92:bf:5b:23:b3:69:a2:98:c4:02:98:c1:5d:26:35:f0:80:03: a7:0a:f5:4a:47:76:c3:7c:34:16:ca:4a:95:c3:da:b0:7d:b2: 5e:cd:ea:17:59:3f:47:f4:ea:f3:3b:a6:20:31:de:da:8b:fc: 85:f6:57:c6 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA4MkExMTAvBgNVBAUTKEMzQjgyQTJGNzQ1MUU2OTU2QzNGQTM5MzQwREM3MzIy RDBFNzhDQTYwHhcNMjQwNTIzMDQzODM3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjRlYzg0ZC05ODQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1uRkQBVZWilA/o1qajv8u3Wqql0ZLwrTQPW0oDCYB1rN31SvrtW7vNwZ9O0C X5DancLzBJzAGnCzKu9MUraQo4u5cqS0W6Aok1EjCo6Udah9NbR5Zsi5WFCdQCuW jus2Xnv1imOSTKpd4JYZ44YmdJcsqNxfZqrD+UhxiLDoJyGy6WsCct+ch7WCprqT Vu6+aq5I0rXZqHGc1mAY5RSI1psiT4akeaw3AK3JWVz/VAkKYyGh73Va3TGFCh2t G47eBOwdI90TdcuxQ9G6Cmz7SeJ6SG7n/8QcdhoepdHnpVNphLYY7zVxvmzn/M4c JBMjbPu9iMQ3K30lCI9uMm5nuQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKj3KE+H lcGN9lgeNhftR8/v/gpCMB8GA1UdIwQYMBaAFMO4Ki90UeaVbD+jk0DccyLQ54ym MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDgyQS8yNkRFNjRDODBF NkMxMUVEOTZDNUIwMkZDNEY5QUUwMi93N2dxTDNSUjVwVnNQNk9UUU54ekl0RG5q S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c3Z3FMM1JSNXBWc1A2T1RRTnh6SXREbmpLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjA4MkEvMjZERTY0QzgwRTZDMTFFRDk2QzVCMDJGQzRGOUFFMDIvQUE5MTgzMDYw RkRDMTFFRDk3MTg2MDZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnv/AwDwQCAAIwCQMHACABDfEJwDANBgkqhkiG9w0BAQsF AAOCAQEAMwS0a974SHsm33rYHUYBgOkFyD9AvETXaNpdVgJWItpw/ic3Dso9LMU7 0juU6ST7DF/NMY0DGad5rAWXBBeoUwUeuyaAyyvysK+UtU7oWL5TBesd8i8aKcVL 8WbSCpl7oCrPWb+e5vE70NwgwK8RY4tBp7H9zgw5/lVWYNqpChTM9kT5A4k5Hhe0 JOLXN7ihPI4yfOEBc4z8Bmm8EaCX2LX4N2gT86SxnGNsKRJV5MrZXwCtXxBR/o1+ mR5IzK3q4rKCTDMKkr9bI7NpopjEApjBXSY18IADpwr1Skd2w3w0FspKlcPasH2y Xs3qF1k/R/Tq8zumIDHe2ov8hfZXxg== -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:31 2024 by rpki-client on console-ams.rpki-client.org