$ rpki-client -vvf rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/1D11FFD4352D11EE9543B52FC4F9AE02.roa File: 1D11FFD4352D11EE9543B52FC4F9AE02.roa (raw, json) Hash identifier: +bSIgtlzLpxye6Dc57u3Y5cAYurLZS353ZEqcNfs/mc= Subject key identifier: A9:A6:55:C6:3A:D7:BD:6C:2C:80:6F:27:42:9B:FB:CB:3F:EB:04:4A Certificate issuer: /CN=A912B017/serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Certificate serial: C1 Authority key identifier: D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/1D11FFD4352D11EE9543B52FC4F9AE02.roa Signing time: Wed 03 Jul 2024 11:53:45 +0000 ROA not before: Wed 03 Jul 2024 11:53:45 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 132366 IP address blocks: 103.242.8.0/24 maxlen: 24 2401:1d20::/48 maxlen: 48 2401:1d20:4::/48 maxlen: 48 2401:1d20:5::/48 maxlen: 48 2401:1d20:6::/48 maxlen: 48 2401:1d20:7::/48 maxlen: 48 2401:1d20:8::/48 maxlen: 48 2401:1d20:9::/48 maxlen: 48 2401:1d20:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B017/serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Validity Not Before: Jul 3 11:53:45 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66853bc9-0581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e3:4b:ac:d6:14:04:08:f6:42:c2:ac:4f:47: 07:12:0c:a4:e2:9b:3d:be:07:f2:fe:74:97:2a:7b: d8:4e:42:13:45:ad:eb:4d:5c:e0:48:57:a4:65:69: dc:1b:a2:e6:2f:26:b4:65:1b:05:e1:8c:12:6d:29: ba:bd:1c:f9:22:96:ad:4d:55:d8:1d:03:f6:75:db: 87:5b:d1:82:03:dd:55:5e:41:f2:b8:f6:7e:72:b9: 4c:14:4e:80:7e:57:b8:86:bf:41:dc:21:72:67:2a: 4f:ca:4d:f2:98:bb:ef:2d:e5:cc:ca:84:68:3f:e6: 85:9c:a0:47:af:63:b5:8f:3f:be:24:cd:03:24:8a: 87:03:88:01:49:aa:61:04:1b:9c:57:92:70:44:5c: bf:da:b2:da:60:9a:df:88:b2:18:9e:1e:80:3a:aa: c0:bf:f4:57:05:f8:5c:4f:2d:3a:3f:d6:8b:6c:9a: 58:11:0e:dc:80:8f:a9:cb:95:15:e8:b5:cc:e6:07: b6:4b:01:9a:64:48:5e:8b:eb:8c:ec:04:43:7e:4a: 17:f9:8d:e9:ba:5f:ec:9d:0a:63:9f:de:35:b8:d7: af:a3:21:df:ed:41:9e:39:1c:92:ef:46:53:ed:a6: 94:4a:1b:50:c4:ae:e9:9b:61:75:4d:ad:36:fb:11: 1b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A6:55:C6:3A:D7:BD:6C:2C:80:6F:27:42:9B:FB:CB:3F:EB:04:4A X509v3 Authority Key Identifier: keyid:D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/1D11FFD4352D11EE9543B52FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.242.8.0/24 IPv6: 2401:1d20::/48 2401:1d20:4::-2401:1d20:9:ffff:ffff:ffff:ffff:ffff 2401:1d20:b::/48 Signature Algorithm: sha256WithRSAEncryption 9a:26:20:b4:d5:bb:bc:de:3f:3c:71:ad:2a:0a:8b:d8:30:11: 18:a9:a3:21:c3:dd:bd:40:b6:df:f9:d9:34:33:2f:6e:5b:14: dc:3a:42:a8:ec:0e:a3:03:a5:72:be:e2:9f:e3:28:ff:c6:72: 2c:fb:5f:af:93:21:47:a5:d5:60:a9:a1:fe:c6:21:bc:30:bc: 7e:6d:4b:c0:6b:a5:58:02:19:8a:f5:15:f3:3d:7e:64:55:59: 25:6a:49:38:72:aa:80:5e:66:90:f4:06:9a:a4:fc:98:b1:ad: a5:9e:d7:31:fe:a3:a1:5e:a4:13:5e:e1:3a:dd:4a:1e:82:ed: 60:e6:54:f4:52:a2:5a:3f:09:24:8b:c2:5c:05:f3:8d:4a:99: be:23:1d:47:be:2d:aa:f9:06:8c:f7:10:11:46:75:2f:66:64: e7:ed:29:f3:74:04:fd:33:de:23:ee:2e:70:7d:9a:40:8d:17: f3:6d:3c:34:8b:6e:44:33:01:cc:f2:4c:8e:2b:2f:5f:ae:e3: 33:ca:77:8c:f5:27:cb:04:ce:58:c4:45:b0:60:24:49:00:07: 78:fb:e6:39:03:94:9d:94:90:f3:69:e7:3b:9e:cf:69:2f:13: 8e:2c:f2:72:dc:6f:40:0c:48:2f:88:68:54:72:c3:2e:9b:29: f5:0a:35:ca -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwMTcxMTAvBgNVBAUTKEQzRDNEODYwRjg2OEM5M0VEMTBFMkVENUE5N0E4Nzk0 NTRDODRDMTYwHhcNMjQwNzAzMTE1MzQ1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njg1M2JjOS0wNTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+NLrNYUBAj2QsKsT0cHEgyk4ps9vgfy/nSXKnvYTkITRa3rTVzgSFekZWnc G6LmLya0ZRsF4YwSbSm6vRz5IpatTVXYHQP2dduHW9GCA91VXkHyuPZ+crlMFE6A fle4hr9B3CFyZypPyk3ymLvvLeXMyoRoP+aFnKBHr2O1jz++JM0DJIqHA4gBSaph BBucV5JwRFy/2rLaYJrfiLIYnh6AOqrAv/RXBfhcTy06P9aLbJpYEQ7cgI+py5UV 6LXM5ge2SwGaZEhei+uM7ARDfkoX+Y3pul/snQpjn941uNevoyHf7UGeORyS70ZT 7aaUShtQxK7pm2F1Ta02+xEbsQIDAQABo4ICwzCCAr8wHQYDVR0OBBYEFKmmVcY6 171sLIBvJ0Kb+8s/6wRKMB8GA1UdIwQYMBaAFNPT2GD4aMk+0Q4u1al6h5RUyEwW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjAxNy9ERTc1RjIyMjJB MTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lUN1JEaTdWcVhxSGxGVElU QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5UFlZUGhveVQ3UkRpN1ZxWHFIbEZUSVRCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkIwMTcvREU3NUYyMjIyQTEzMTFFRTk1RDU4QTY2QzRGOUFFMDIvMUQxMUZGRDQz NTJEMTFFRTk1NDNCNTJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTQYIKwYBBQUHAQcBAf8E PjA8MAwEAgABMAYDBABn8ggwLAQCAAIwJgMHACQBHSAAADASAwcCJAEdIAAEAwcB JAEdIAAIAwcAJAEdIAALMA0GCSqGSIb3DQEBCwUAA4IBAQCaJiC01bu83j88ca0q CovYMBEYqaMhw929QLbf+dk0My9uWxTcOkKo7A6jA6VyvuKf4yj/xnIs+1+vkyFH pdVgqaH+xiG8MLx+bUvAa6VYAhmK9RXzPX5kVVklakk4cqqAXmaQ9AaapPyYsa2l ntcx/qOhXqQTXuE63Uoegu1g5lT0UqJaPwkki8JcBfONSpm+Ix1Hvi2q+QaM9xAR RnUvZmTn7SnzdAT9M94j7i5wfZpAjRfzbTw0i25EMwHM8kyOKy9fruMzyneM9SfL BM5YxEWwYCRJAAd4++Y5A5SdlJDzaec7ns9pLxOOLPJy3G9ADEgviGhUcsMumyn1 CjXK -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:45 2024 by rpki-client on console-fra.rpki-client.org