$ rpki-client -vvf rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/C20F71E0992A11EEBDE4AF84C4F9AE02.roa File: C20F71E0992A11EEBDE4AF84C4F9AE02.roa (raw, json) Hash identifier: OYx0ivaLSuUbR/65DlkjyPYiwNzBJusc4fYNblQt2KA= Subject key identifier: 74:53:1F:7A:DA:F1:64:22:FB:8F:5C:55:1C:9F:4A:00:BD:22:A4:65 Certificate issuer: /CN=A9122EA2/serialNumber=092B54D2F9E96D3FCE1F0C0DBB31B1B82C8D2CE0 Certificate serial: 0174 Authority key identifier: 09:2B:54:D2:F9:E9:6D:3F:CE:1F:0C:0D:BB:31:B1:B8:2C:8D:2C:E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/C20F71E0992A11EEBDE4AF84C4F9AE02.roa Signing time: Mon 11 Nov 2024 02:17:28 +0000 ROA not before: Mon 11 Nov 2024 02:17:28 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 132831 IP address blocks: 103.54.78.0/24 maxlen: 24 103.54.79.0/24 maxlen: 24 103.124.187.0/24 maxlen: 24 103.134.118.0/24 maxlen: 24 103.134.119.0/24 maxlen: 24 103.242.126.0/24 maxlen: 24 103.242.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.crl rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122EA2/serialNumber=092B54D2F9E96D3FCE1F0C0DBB31B1B82C8D2CE0 Validity Not Before: Nov 11 02:17:28 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=67316938-daba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:df:cd:59:33:55:46:11:1b:46:0e:69:64:65: b1:2c:5d:10:13:3c:c3:6d:56:36:f0:a3:a6:6e:58: 2b:60:af:59:73:bf:55:46:de:88:5e:9e:40:0e:8c: d5:01:81:b4:7a:a3:5c:5d:fd:e4:64:ff:6c:6e:cc: 03:10:a3:b5:92:c6:45:a7:4b:88:96:c6:92:ce:c8: 6d:c2:34:ba:93:1e:eb:35:09:95:3c:80:4d:0d:27: 79:8b:a6:4b:62:3c:7a:13:9f:c7:aa:9e:b7:73:51: 75:06:c4:ea:d1:5d:60:80:1a:59:6c:05:06:f3:5d: 21:0e:2e:34:e3:d1:a3:70:9d:7c:79:01:65:0e:0e: 28:30:08:8f:ed:3b:56:5c:7f:7d:3c:0c:71:02:14: cf:85:d9:90:69:7b:fb:94:73:b8:a7:4a:6e:f6:01: 3e:3c:03:45:d6:05:97:0f:fc:4b:db:1b:b0:5d:1c: bd:e2:ca:2c:34:db:3c:bc:ad:f9:9e:83:2e:e9:b8: cb:64:33:d8:15:1a:95:1b:70:85:48:65:92:5f:c5: 96:51:f2:96:85:c7:95:27:43:4a:57:2f:e9:50:46: d7:c2:fe:ea:b4:b1:c3:9b:c8:e1:82:50:7d:23:db: c4:15:fd:0f:be:33:d8:a8:21:6d:b7:a1:25:a4:16: c8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:53:1F:7A:DA:F1:64:22:FB:8F:5C:55:1C:9F:4A:00:BD:22:A4:65 X509v3 Authority Key Identifier: keyid:09:2B:54:D2:F9:E9:6D:3F:CE:1F:0C:0D:BB:31:B1:B8:2C:8D:2C:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/C20F71E0992A11EEBDE4AF84C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.54.78.0/23 103.124.187.0/24 103.134.118.0/23 103.242.126.0/23 Signature Algorithm: sha256WithRSAEncryption 38:ad:ac:3b:bc:08:3b:38:55:19:0e:4b:2f:3e:0f:60:d7:51: 82:d2:0a:e2:53:95:8a:9b:7c:22:b7:aa:2b:1c:82:5c:82:b0: 9a:17:d1:fa:0e:b2:b2:de:94:55:ec:84:6f:a0:bd:78:f3:36: bd:ac:48:86:b7:04:0b:94:f1:61:fc:0b:ba:74:bb:a7:31:bd: e2:03:02:5c:72:90:5c:43:17:9b:6a:c7:fd:1e:a2:ec:a4:d1: 80:4d:86:19:f3:3e:ed:70:b7:fa:9b:1b:ad:b6:be:92:72:e7: 62:ce:bb:da:1f:81:75:3b:40:c9:3e:6a:3a:79:23:98:f1:d5: 1a:e5:4f:d0:28:5e:12:44:2a:b0:19:ab:85:4f:bf:67:97:39: 18:ff:3c:7e:3a:39:ae:b3:0f:52:11:f6:23:c6:09:2f:f4:50: 44:96:aa:18:cf:70:3c:ea:d9:36:55:0d:aa:6a:36:9b:ee:35: cd:8b:3f:0e:e6:59:5d:d8:2a:48:b4:5f:48:85:69:22:aa:98: fa:05:24:54:a6:67:80:bf:75:3a:94:7f:3e:21:d9:1b:ee:32: 17:95:20:cb:90:6d:63:c4:fe:17:bd:86:c9:8b:e0:32:6f:a2: de:e2:51:77:5f:d3:51:ac:93:ee:c4:de:ff:f2:7a:7a:c6:2a: e7:94:23:8f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFQTIxMTAvBgNVBAUTKDA5MkI1NEQyRjlFOTZEM0ZDRTFGMEMwREJCMzFCMUI4 MkM4RDJDRTAwHhcNMjQxMTExMDIxNzI4WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzMxNjkzOC1kYWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA69/NWTNVRhEbRg5pZGWxLF0QEzzDbVY28KOmblgrYK9Zc79VRt6IXp5ADozV AYG0eqNcXf3kZP9sbswDEKO1ksZFp0uIlsaSzshtwjS6kx7rNQmVPIBNDSd5i6ZL Yjx6E5/Hqp63c1F1BsTq0V1ggBpZbAUG810hDi4049GjcJ18eQFlDg4oMAiP7TtW XH99PAxxAhTPhdmQaXv7lHO4p0pu9gE+PANF1gWXD/xL2xuwXRy94sosNNs8vK35 noMu6bjLZDPYFRqVG3CFSGWSX8WWUfKWhceVJ0NKVy/pUEbXwv7qtLHDm8jhglB9 I9vEFf0PvjPYqCFtt6ElpBbIgQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFHRTH3ra 8WQi+49cVRyfSgC9IqRlMB8GA1UdIwQYMBaAFAkrVNL56W0/zh8MDbsxsbgsjSzg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkVBMi8xNTI1MzQxNDg1 NjMxMUVEODJGQjEwMkRDNEY5QUUwMi9DU3RVMHZucGJUX09Id3dOdXpHeHVDeU5M T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NTdFUwdm5wYlRfT0h3d051ekd4dUN5TkxPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjJFQTIvMTUyNTM0MTQ4NTYzMTFFRDgyRkIxMDJEQzRGOUFFMDIvQzIwRjcxRTA5 OTJBMTFFRUJERTRBRjg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAFnNk4DBABnfLsDBAFnhnYDBAFn8n4wDQYJKoZIhvcNAQEL BQADggEBADitrDu8CDs4VRkOSy8+D2DXUYLSCuJTlYqbfCK3qiscglyCsJoX0foO srLelFXshG+gvXjzNr2sSIa3BAuU8WH8C7p0u6cxveIDAlxykFxDF5tqx/0eouyk 0YBNhhnzPu1wt/qbG622vpJy52LOu9ofgXU7QMk+ajp5I5jx1RrlT9AoXhJEKrAZ q4VPv2eXORj/PH46Oa6zD1IR9iPGCS/0UESWqhjPcDzq2TZVDapqNpvuNc2LPw7m WV3YKki0X0iFaSKqmPoFJFSmZ4C/dTqUfz4h2RvuMheVIMuQbWPE/he9hsmL4DJv ot7iUXdf01Gsk+7E3v/yenrGKueUI48= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:35 2024 by rpki-client on console-ams.rpki-client.org