$ rpki-client -vvf rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/9E82296E5FA611EF9A75477FC4F9AE02.roa File: 9E82296E5FA611EF9A75477FC4F9AE02.roa (raw, json) Hash identifier: lV6jMb5h9nbmgpZPjhxFVRMKMVNkKVjEOjsDZ14+HCA= Subject key identifier: 9C:C8:12:D3:9A:EB:DE:02:57:7F:F3:70:0C:CE:46:89:96:AB:D9:EA Certificate issuer: /CN=A912A138/serialNumber=E889DDD5542C6D2C9DC740E1246A9E748E751352 Certificate serial: 06A1 Authority key identifier: E8:89:DD:D5:54:2C:6D:2C:9D:C7:40:E1:24:6A:9E:74:8E:75:13:52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/9E82296E5FA611EF9A75477FC4F9AE02.roa Signing time: Wed 21 Aug 2024 10:21:40 +0000 ROA not before: Wed 21 Aug 2024 10:21:40 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 15830 IP address blocks: 103.140.211.0/24 maxlen: 24 180.189.52.0/23 maxlen: 23 180.189.54.0/23 maxlen: 23 2405:4c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.crl rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1697 (0x6a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A138 Validity Not Before: Aug 21 10:21:40 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66c5bfb4-2dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5c:bd:3a:aa:2b:b8:f9:39:2a:b2:de:70:9d: 8c:f5:87:78:b4:67:7a:5f:b8:f3:6e:6d:1c:6f:77: 5d:21:b3:73:4e:88:48:93:bf:01:3e:0a:9b:02:92: 72:c0:25:a3:72:b9:f5:1d:64:2f:c2:de:4c:9c:bb: 04:0b:86:f6:fb:fa:04:9c:bd:d8:84:e9:fd:ce:6b: b7:53:d8:86:81:cc:1c:80:36:91:b1:c0:af:e2:77: c6:3c:d5:e5:5c:db:cb:f4:78:60:e6:23:af:78:0d: 7c:0f:94:c1:1b:6d:ca:07:bd:01:ff:ab:f0:52:7e: a8:72:dc:21:ac:16:65:ea:08:22:4d:7e:a1:de:2a: 57:e7:5d:22:10:9c:3b:5d:e4:55:06:d8:60:ee:fe: 33:0c:c7:25:0a:56:f8:ad:68:ff:45:a8:fc:25:e2: 71:f9:00:7a:6d:63:0f:b0:2c:e2:5d:63:80:a6:7e: 9f:5d:a4:df:58:61:4a:13:f9:15:43:79:bb:a5:40: f1:2f:93:be:f5:5a:95:c2:f6:9a:bb:e7:05:e6:ba: 7a:84:a2:57:2c:a7:6d:ee:22:ea:9f:4f:95:fa:32: e2:44:32:a4:25:ea:93:69:8e:7c:c4:80:7e:96:e5: 97:70:53:40:97:5e:f1:e5:97:bc:b4:e2:1e:0f:f3: df:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C8:12:D3:9A:EB:DE:02:57:7F:F3:70:0C:CE:46:89:96:AB:D9:EA X509v3 Authority Key Identifier: keyid:E8:89:DD:D5:54:2C:6D:2C:9D:C7:40:E1:24:6A:9E:74:8E:75:13:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/9E82296E5FA611EF9A75477FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.211.0/24 180.189.52.0/22 IPv6: 2405:4c0::/32 Signature Algorithm: sha256WithRSAEncryption 3f:01:1e:37:09:47:b9:fe:63:8c:3d:60:a3:6b:f2:4e:cf:61: 9e:55:94:9b:22:fd:fd:46:a8:c4:2e:6d:56:65:88:3c:7c:f7: 63:fe:d9:27:1e:68:ea:16:8c:b9:27:a6:34:f7:01:21:e5:67: a2:00:2b:a1:2a:74:54:80:74:95:a5:69:68:60:c1:b5:0d:41: f1:45:77:1e:fa:46:58:05:cc:6e:12:bb:26:11:62:7e:96:7a: 0a:d3:c5:8e:56:6d:d6:91:a4:b7:57:91:7d:ce:1c:13:d3:b8: 66:80:90:2d:b3:21:f5:75:20:f3:f4:4e:62:01:3a:06:22:2f: d7:06:4b:6c:7b:ca:64:08:b3:72:71:30:a2:56:ee:e0:e8:65: a7:f0:9d:9b:60:25:d6:46:e8:3f:0f:8f:f2:4c:b4:e8:09:87: be:cb:45:ce:01:4f:ff:cc:d9:11:b7:f8:95:69:49:8d:df:b3: cc:40:17:94:02:ce:8d:25:73:4e:f3:fd:26:0f:2b:11:f7:22: a8:a5:d9:fb:0b:88:5c:c2:6c:ab:82:29:ce:ff:40:5b:7f:df: f3:77:5a:82:ff:80:1f:52:76:e3:dd:43:de:68:49:19:ec:fd: 5b:7c:8a:0c:c8:61:d9:9e:03:b6:3d:d2:3b:ee:0d:0e:63:db: 91:60:8d:0f -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICBqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkExMzgxMTAvBgNVBAUTKEU4ODlEREQ1NTQyQzZEMkM5REM3NDBFMTI0NkE5RTc0 OEU3NTEzNTIwHhcNMjQwODIxMTAyMTQwWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmM1YmZiNC0yZGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVy9OqoruPk5KrLecJ2M9Yd4tGd6X7jzbm0cb3ddIbNzTohIk78BPgqbApJy wCWjcrn1HWQvwt5MnLsEC4b2+/oEnL3YhOn9zmu3U9iGgcwcgDaRscCv4nfGPNXl XNvL9Hhg5iOveA18D5TBG23KB70B/6vwUn6octwhrBZl6ggiTX6h3ipX510iEJw7 XeRVBthg7v4zDMclClb4rWj/Raj8JeJx+QB6bWMPsCziXWOApn6fXaTfWGFKE/kV Q3m7pUDxL5O+9VqVwvaau+cF5rp6hKJXLKdt7iLqn0+V+jLiRDKkJeqTaY58xIB+ luWXcFNAl17x5Ze8tOIeD/PfBwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFJzIEtOa 694CV3/zcAzORomWq9nqMB8GA1UdIwQYMBaAFOiJ3dVULG0sncdA4SRqnnSOdRNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTEzOC9CQjA2QjMzODM5 MjcxMUVCOUY5NTVFN0VDNEY5QUUwMi82SW5kMVZRc2JTeWR4MERoSkdxZWRJNTFF MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZJbmQxVlFzYlN5ZHgwRGhKR3FlZEk1MUUxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkExMzgvQkIwNkIzMzgzOTI3MTFFQjlGOTU1RTdFQzRGOUFFMDIvOUU4MjI5NkU1 RkE2MTFFRjlBNzU0NzdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBABnjNMDBAK0vTQwDQQCAAIwBwMFACQFBMAwDQYJKoZIhvcN AQELBQADggEBAD8BHjcJR7n+Y4w9YKNr8k7PYZ5VlJsi/f1GqMQubVZliDx892P+ 2SceaOoWjLknpjT3ASHlZ6IAK6EqdFSAdJWlaWhgwbUNQfFFdx76RlgFzG4SuyYR Yn6WegrTxY5WbdaRpLdXkX3OHBPTuGaAkC2zIfV1IPP0TmIBOgYiL9cGS2x7ymQI s3JxMKJW7uDoZafwnZtgJdZG6D8Pj/JMtOgJh77LRc4BT//M2RG3+JVpSY3fs8xA F5QCzo0lc07z/SYPKxH3Iqil2fsLiFzCbKuCKc7/QFt/3/N3WoL/gB9SduPdQ95o SRns/Vt8igzIYdmeA7Y90jvuDQ5j25FgjQ8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:43 2025 by rpki-client