$ rpki-client -vvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1B4BA08497A711EDA815F80AC4F9AE02.roa File: 1B4BA08497A711EDA815F80AC4F9AE02.roa (raw, json) Hash identifier: i3AC8vPuhzwp18lBIjdc3QexvCV8/oJkEtYwjXr5lB0= Subject key identifier: DC:F7:0C:AE:A7:70:AD:F1:9A:7A:D2:3D:ED:97:08:31:7A:53:88:37 Certificate issuer: /CN=A91233F8/serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759 Certificate serial: 0140 Authority key identifier: D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1B4BA08497A711EDA815F80AC4F9AE02.roa Signing time: Thu 19 Sep 2024 00:03:58 +0000 ROA not before: Thu 19 Sep 2024 00:03:58 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 142643 IP address blocks: 103.171.144.0/23 maxlen: 23 103.171.144.0/24 maxlen: 24 103.171.145.0/24 maxlen: 24 115.178.26.0/23 maxlen: 23 115.178.26.0/24 maxlen: 24 115.178.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91233F8/serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759 Validity Not Before: Sep 19 00:03:58 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66eb6a6e-664b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b4:34:35:d6:c3:c2:fd:8c:1f:ce:b2:22:d2: 5a:cd:43:0a:41:56:a1:32:17:5a:78:48:5c:3b:b0: c4:15:70:b1:a8:d7:e5:b6:e9:9e:2b:e2:61:90:18: a4:46:7c:27:b2:31:bb:f5:79:a2:67:5a:ae:d4:ec: db:03:16:c2:10:f4:7b:53:cc:4d:bc:7b:ff:fb:46: a6:d4:db:fd:19:69:74:20:59:4d:8c:ec:3c:8c:c2: 7c:f1:46:54:31:e4:af:24:ca:bc:c7:f2:b3:c1:b2: 8e:04:ed:de:74:47:ab:9c:7b:cd:de:33:e3:6a:de: 66:2c:25:95:91:9f:a2:f9:08:b5:49:f3:eb:f3:cb: 5e:bd:d2:cc:d5:02:d9:05:c1:28:96:e5:8e:8a:04: b5:e7:e4:a6:70:12:e4:58:e5:6c:a6:23:ce:11:a4: 4a:43:92:df:7d:73:ba:11:5b:d0:bf:91:c1:b0:1c: 07:29:f1:20:62:a2:9e:db:7a:84:35:47:4e:4a:d8: 37:28:f6:79:9f:5b:8e:3b:57:14:2c:24:28:5c:1f: c7:95:e4:cf:67:07:80:0f:20:07:7f:40:6f:d4:18: 68:bd:58:e8:4f:52:73:9a:cc:9e:79:08:6d:9d:01: f3:3c:ae:eb:82:92:05:cd:85:d4:87:a8:42:b7:af: 47:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F7:0C:AE:A7:70:AD:F1:9A:7A:D2:3D:ED:97:08:31:7A:53:88:37 X509v3 Authority Key Identifier: keyid:D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1B4BA08497A711EDA815F80AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.171.144.0/23 115.178.26.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:fb:2f:f8:a9:35:9b:2c:54:c3:9b:ed:6f:1b:8e:c2:d5:da: fb:bb:6a:c4:1d:13:d0:9e:8d:5b:bd:b7:4b:fa:bd:8b:6f:65: b2:c0:97:c4:bc:c6:2d:c3:4b:b7:06:b4:b1:3c:0a:9b:96:91: 7e:8a:f6:06:0f:fa:1a:c1:75:1d:d7:45:9a:95:6e:3f:05:de: da:41:34:b6:98:fd:ce:ec:3c:c2:d6:70:92:35:01:c5:43:f6: fd:20:91:ba:b3:97:c7:83:d9:24:c3:b4:37:85:d1:14:a6:50: 6e:77:65:cc:34:c6:4c:d1:1c:0d:84:d7:6e:06:1c:de:de:1e: f2:35:c6:8f:ea:f4:54:55:3f:77:c7:87:27:b4:2f:0c:4e:6e: be:ac:62:41:5c:f6:57:a0:bc:e7:4f:52:22:bb:ee:2f:65:88: 3b:f4:fd:fe:0a:a7:aa:3e:e0:09:1b:bd:ce:1f:57:90:7e:87: 04:90:1a:f3:4f:29:3f:e3:ae:f5:e8:14:db:84:6a:d8:d5:5d: 2d:c5:b4:4d:2b:2b:a2:c4:cf:5b:80:bc:36:fe:9d:c2:db:7f: 24:07:69:a8:d3:e6:93:d2:42:a6:4d:d8:4b:23:46:1b:6a:01: 80:0c:ed:64:f7:6a:ed:74:fe:52:93:7b:f2:3d:bb:9d:b6:c6: 7c:5b:9c:b8 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMzRjgxMTAvBgNVBAUTKEQ0MzRFNTlFOThFNDUwOEVFQUE0MERGOTYwREE0RjMz NDI0MTY3NTkwHhcNMjQwOTE5MDAwMzU4WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmViNmE2ZS02NjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7Q0NdbDwv2MH86yItJazUMKQVahMhdaeEhcO7DEFXCxqNfltumeK+JhkBik RnwnsjG79XmiZ1qu1OzbAxbCEPR7U8xNvHv/+0am1Nv9GWl0IFlNjOw8jMJ88UZU MeSvJMq8x/KzwbKOBO3edEernHvN3jPjat5mLCWVkZ+i+Qi1SfPr88tevdLM1QLZ BcEoluWOigS15+SmcBLkWOVspiPOEaRKQ5LffXO6EVvQv5HBsBwHKfEgYqKe23qE NUdOStg3KPZ5n1uOO1cULCQoXB/HleTPZweADyAHf0Bv1BhovVjoT1JzmsyeeQht nQHzPK7rgpIFzYXUh6hCt69HXwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNz3DK6n cK3xmnrSPe2XCDF6U4g3MB8GA1UdIwQYMBaAFNQ05Z6Y5FCO6qQN+WDaTzNCQWdZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNGOC9GMDkwMTlENjFC QjcxMUVDOTAzRDhBNENDNEY5QUUwMi8xRFRsbnBqa1VJN3FwQTM1WU5wUE0wSkJa MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFEVGxucGprVUk3cXBBMzVZTnBQTTBKQloxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjMzRjgvRjA5MDE5RDYxQkI3MTFFQzkwM0Q4QTRDQzRGOUFFMDIvMUI0QkEwODQ5 N0E3MTFFREE4MTVGODBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnq5ADBAFzshowDQYJKoZIhvcNAQELBQADggEBAGz7L/ip NZssVMOb7W8bjsLV2vu7asQdE9CejVu9t0v6vYtvZbLAl8S8xi3DS7cGtLE8CpuW kX6K9gYP+hrBdR3XRZqVbj8F3tpBNLaY/c7sPMLWcJI1AcVD9v0gkbqzl8eD2STD tDeF0RSmUG53Zcw0xkzRHA2E124GHN7eHvI1xo/q9FRVP3fHhye0LwxObr6sYkFc 9legvOdPUiK77i9liDv0/f4Kp6o+4Akbvc4fV5B+hwSQGvNPKT/jrvXoFNuEatjV XS3FtE0rK6LEz1uAvDb+ncLbfyQHaajT5pPSQqZN2EsjRhtqAYAM7WT3au10/lKT e/I9u522xnxbnLg= -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:32 2024 by rpki-client on console-fra.rpki-client.org