$ rpki-client -vvf rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/422287F0D30511EE8753D541C4F9AE02.roa File: 422287F0D30511EE8753D541C4F9AE02.roa (raw, json) Hash identifier: 4KkZhlwS8BwldE+nm9AJgbyzDDEgaxmp/JCW8JNKT3c= Subject key identifier: 31:44:93:4B:BA:BF:04:83:D2:88:1F:AA:25:08:58:08:97:72:44:2C Certificate issuer: /CN=A9129F42/serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5 Certificate serial: 02AE Authority key identifier: DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/422287F0D30511EE8753D541C4F9AE02.roa Signing time: Mon 03 Jun 2024 04:31:34 +0000 ROA not before: Mon 03 Jun 2024 04:31:34 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 150748 IP address blocks: 103.186.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 00:51:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 686 (0x2ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129F42/serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5 Validity Not Before: Jun 3 04:31:34 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=665d4726-b347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e0:f8:49:fd:36:cf:7b:81:49:96:d7:f1:59: 3c:c4:8f:9a:3c:69:d4:28:f6:68:06:77:55:a3:3b: 70:4d:ea:ff:c3:ac:d8:95:db:1a:7f:86:eb:39:43: b3:6f:74:39:b8:e6:e5:d6:74:43:32:6b:18:7a:60: a3:7e:a6:d3:dc:f3:3f:1a:fd:a1:b6:a9:b2:ad:c9: 65:14:cf:25:90:3f:fe:9c:2a:ba:e9:68:52:fc:2b: f0:3b:98:4d:a5:05:26:5a:4d:96:35:89:2e:07:e4: bc:c4:67:31:85:d1:23:95:6c:c7:2f:ed:37:75:90: 8f:6a:ea:7b:7e:ef:e2:fd:96:1c:d4:10:58:bf:fa: 2c:33:c8:bf:b6:c2:77:d5:1d:54:45:f2:15:46:4b: 8a:fb:5d:d8:ff:1c:5a:83:7b:28:a8:ad:26:45:13: 83:3d:c0:c5:21:cf:ba:4f:a4:15:8c:73:e3:74:e1: c4:de:ff:b5:f2:bf:02:cc:48:77:59:3d:1f:19:b5: d3:2c:f2:f7:db:8d:08:f9:e2:82:40:7a:07:9d:aa: 14:97:13:e4:d2:9b:a3:ea:8f:8a:c7:33:97:cc:de: 34:c8:f2:d7:0d:39:c8:70:f2:12:04:5a:a3:2e:f7: 9a:a7:5c:2b:1c:3c:c9:82:45:f8:e4:45:3e:ae:82: fa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:44:93:4B:BA:BF:04:83:D2:88:1F:AA:25:08:58:08:97:72:44:2C X509v3 Authority Key Identifier: keyid:DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/422287F0D30511EE8753D541C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.186.57.0/24 Signature Algorithm: sha256WithRSAEncryption a4:f8:84:af:a1:4a:a2:56:10:66:4e:2c:67:4d:98:43:80:58: 19:f5:66:08:32:dd:07:b9:72:ca:be:e1:c9:ef:bf:54:34:a2: 5b:a3:f7:fa:3e:70:5d:d6:83:e5:d7:a6:19:14:fe:b1:58:be: 35:96:f4:b6:a1:dd:7b:48:4e:cc:c4:f5:a8:0f:1f:f8:29:46: 55:ac:79:47:97:3f:ef:f0:81:a0:f7:01:01:7e:b1:98:81:16: 08:5b:64:2f:53:35:cf:7e:79:54:64:5b:33:d7:fb:0b:5f:57: 8c:5f:12:4c:74:47:39:d8:7d:2d:ad:61:5f:fa:d4:5e:ef:e6: 1c:cd:aa:6f:93:bd:84:91:3c:2d:be:6a:49:b0:5c:68:e2:32: 95:58:5d:8f:8c:40:70:7e:ca:cb:f8:4a:d5:ed:68:59:e6:f4: 47:22:70:0b:cb:e6:b7:4c:e4:bd:21:a5:47:92:07:30:83:8b: 1a:b4:50:3e:45:17:06:61:9d:7f:a9:e6:5d:fa:10:8c:4a:bb: 53:dc:df:07:c6:46:f3:f0:78:73:52:01:ca:95:fd:7c:69:ec: ca:ef:6c:f1:2c:10:eb:e3:98:10:7b:b9:15:f9:01:8c:4e:17: 57:74:a8:62:67:97:5f:fa:40:da:76:a5:6e:83:58:49:39:44: 8c:f9:b2:31 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlGNDIxMTAvBgNVBAUTKERCQUZGQzBDMDAyRDQzREM0NzM0NkJDNEUxOUZFQjNF QkYzQkI0RDUwHhcNMjQwNjAzMDQzMTM0WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjVkNDcyNi1iMzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+D4Sf02z3uBSZbX8Vk8xI+aPGnUKPZoBndVoztwTer/w6zYldsaf4brOUOz b3Q5uObl1nRDMmsYemCjfqbT3PM/Gv2htqmyrcllFM8lkD/+nCq66WhS/CvwO5hN pQUmWk2WNYkuB+S8xGcxhdEjlWzHL+03dZCPaup7fu/i/ZYc1BBYv/osM8i/tsJ3 1R1URfIVRkuK+13Y/xxag3soqK0mRRODPcDFIc+6T6QVjHPjdOHE3v+18r8CzEh3 WT0fGbXTLPL3240I+eKCQHoHnaoUlxPk0puj6o+KxzOXzN40yPLXDTnIcPISBFqj Lveap1wrHDzJgkX45EU+roL6zQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDFEk0u6 vwSD0ogfqiUIWAiXckQsMB8GA1UdIwQYMBaAFNuv/AwALUPcRzRrxOGf6z6/O7TV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUY0Mi82MUY2MDFGQ0JB MjQxMUVDOTc1MEI5NEFDNEY5QUUwMi8yNl84REFBdFE5eEhOR3ZFNFpfclByODd0 TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI2XzhEQUF0UTl4SE5HdkU0Wl9yUHI4N3ROVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjlGNDIvNjFGNjAxRkNCQTI0MTFFQzk3NTBCOTRBQzRGOUFFMDIvNDIyMjg3RjBE MzA1MTFFRTg3NTNENTQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnujkwDQYJKoZIhvcNAQELBQADggEBAKT4hK+hSqJWEGZO LGdNmEOAWBn1Zggy3Qe5csq+4cnvv1Q0oluj9/o+cF3Wg+XXphkU/rFYvjWW9Lah 3XtITszE9agPH/gpRlWseUeXP+/wgaD3AQF+sZiBFghbZC9TNc9+eVRkWzPX+wtf V4xfEkx0RznYfS2tYV/61F7v5hzNqm+TvYSRPC2+akmwXGjiMpVYXY+MQHB+ysv4 StXtaFnm9EcicAvL5rdM5L0hpUeSBzCDixq0UD5FFwZhnX+p5l36EIxKu1Pc3wfG RvPweHNSAcqV/Xxp7MrvbPEsEOvjmBB7uRX5AYxOF1d0qGJnl1/6QNp2pW6DWEk5 RIz5sjE= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:36 2024 by rpki-client on console-ams.rpki-client.org