$ rpki-client -vvf rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/CDB922F074AF11EFA0B26646C4F9AE02.roa File: CDB922F074AF11EFA0B26646C4F9AE02.roa (raw, json) Hash identifier: RMUDFetuMqLLtNk8QIeQRLs2fwAMqvw/hlrVesjOyK4= Subject key identifier: 35:49:E0:4D:D2:DF:EE:D0:BF:DB:CD:77:7C:2C:38:5D:6A:8E:09:64 Certificate issuer: /CN=A9133F6B/serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F Certificate serial: 03 Authority key identifier: 34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/CDB922F074AF11EFA0B26646C4F9AE02.roa Signing time: Tue 17 Sep 2024 04:46:29 +0000 ROA not before: Tue 17 Sep 2024 04:46:29 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 132300 IP address blocks: 103.212.36.0/22 maxlen: 22 103.212.36.0/24 maxlen: 24 103.212.37.0/24 maxlen: 24 103.212.38.0/24 maxlen: 24 103.212.39.0/24 maxlen: 24 139.5.144.0/24 maxlen: 24 139.5.145.0/24 maxlen: 24 139.5.146.0/24 maxlen: 24 139.5.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.crl rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Dec 2024 05:54:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133F6B/serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F Validity Not Before: Sep 17 04:46:29 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66e909a5-d765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:dc:d2:ca:1c:a4:dc:00:90:f9:66:c4:fd:0c: 58:be:90:9b:3a:e9:56:30:7b:c5:4b:1c:32:99:81: 8e:9d:fe:d8:e8:81:b6:64:f2:5b:df:87:db:18:da: 2c:92:fe:08:c4:ba:8f:5a:fe:7a:96:d3:20:f5:22: 78:99:23:54:ec:87:db:9f:95:d5:04:bd:61:13:67: 81:4e:ad:28:b4:bc:ba:14:56:8c:3a:48:c3:77:2e: 3d:df:d2:de:2f:72:7b:51:e5:cd:07:5b:59:27:d6: ab:44:43:38:e3:4c:11:38:03:b5:d2:00:48:b1:2f: 06:7f:7f:57:f3:4a:53:e1:36:eb:f3:8c:58:ad:dd: 1f:5c:37:51:07:b3:77:5c:28:d8:c2:4f:6d:51:7c: 19:0e:86:c2:8b:a0:08:c3:99:99:65:1a:ee:0d:2c: 4a:02:4c:5d:37:ac:88:a7:2d:c4:d6:65:b2:02:84: 03:54:45:9b:31:0a:f8:dd:82:5e:81:0e:ec:71:c4: b0:7c:c0:02:1f:7f:87:a0:14:a6:ca:5e:1a:59:c7: a8:5e:0d:2f:17:a6:47:28:aa:e0:c4:aa:8a:ca:f2: b2:a8:2a:73:cb:4b:39:df:e5:d2:88:5d:78:8c:f9: 62:db:91:0e:aa:7c:3d:63:bb:85:2f:5e:7b:bc:d0: 20:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:49:E0:4D:D2:DF:EE:D0:BF:DB:CD:77:7C:2C:38:5D:6A:8E:09:64 X509v3 Authority Key Identifier: keyid:34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/CDB922F074AF11EFA0B26646C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.212.36.0/22 139.5.144.0/22 Signature Algorithm: sha256WithRSAEncryption 00:96:99:da:2f:f9:f3:8e:b5:ea:98:07:5d:06:c0:ff:7d:bb: e8:b1:6c:42:ad:e4:91:6d:62:77:ab:41:60:dc:30:04:e2:6b: a5:bc:90:41:6c:bf:8b:7e:d6:3a:33:27:b7:22:30:af:dd:84: 85:90:00:d3:89:45:82:f5:1b:2f:e6:55:b3:81:36:16:6c:a9: b6:0f:10:6e:28:89:b3:e6:5c:d2:fd:6e:20:4a:c9:30:ce:8e: e8:8b:57:4f:29:0d:ba:ef:37:78:fa:e6:7d:4b:71:1d:83:35: 66:b5:3a:fd:7f:6b:f1:3f:a2:63:89:51:0b:79:21:f2:56:b5: 14:a3:58:45:a8:11:c2:96:41:22:87:63:0f:7e:cd:7f:f8:39: cf:81:46:d8:99:d7:1a:cd:88:af:fb:b9:1e:8b:7f:bd:d8:2c: 4d:72:d1:34:69:a7:e4:e4:96:aa:d8:e1:de:4a:de:52:93:fa: 05:28:c1:93:85:2e:27:90:eb:17:c4:12:da:69:80:6b:34:a9: 6b:e6:51:43:be:57:a4:75:e1:81:4d:ec:e4:f2:40:f0:47:d6: 69:4b:0b:1a:eb:42:43:3d:39:d7:6f:d4:57:ef:63:e7:33:36: cf:cf:07:b4:0f:ec:a9:42:ef:58:70:55:66:cb:aa:99:d1:d6: 0e:83:a8:d6 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz M0Y2QjExMC8GA1UEBRMoMzREN0JENjE0Mzk2QUU0NDUxNzBFMDU4RTBBRURDRUJB RDQ5NDA1RjAeFw0yNDA5MTcwNDQ2MjlaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZTkwOWE1LWQ3NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDM3NLKHKTcAJD5ZsT9DFi+kJs66VYwe8VLHDKZgY6d/tjogbZk8lvfh9sY2iyS /gjEuo9a/nqW0yD1IniZI1Tsh9ufldUEvWETZ4FOrSi0vLoUVow6SMN3Lj3f0t4v cntR5c0HW1kn1qtEQzjjTBE4A7XSAEixLwZ/f1fzSlPhNuvzjFit3R9cN1EHs3dc KNjCT21RfBkOhsKLoAjDmZllGu4NLEoCTF03rIinLcTWZbIChANURZsxCvjdgl6B DuxxxLB8wAIff4egFKbKXhpZx6heDS8XpkcoquDEqorK8rKoKnPLSznf5dKIXXiM +WLbkQ6qfD1ju4UvXnu80CDfAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUNUngTdLf 7tC/2813fCw4XWqOCWQwHwYDVR0jBBgwFoAUNNe9YUOWrkRRcOBY4K7c661JQF8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzRjZCLzk4NTI5MzNFNzRB NjExRUZBQjRCMDUzQ0M0RjlBRTAyL05OZTlZVU9XcmtSUmNPQlk0SzdjNjYxSlFG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTk5lOVlVT1dya1JSY09CWTRLN2M2NjFKUUY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0Y2Qi85ODUyOTMzRTc0QTYxMUVGQUI0QjA1M0NDNEY5QUUwMi9DREI5MjJGMDc0 QUYxMUVGQTBCMjY2NDZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAmfUJAMEAosFkDANBgkqhkiG9w0BAQsFAAOCAQEAAJaZ2i/5 84616pgHXQbA/3276LFsQq3kkW1id6tBYNwwBOJrpbyQQWy/i37WOjMntyIwr92E hZAA04lFgvUbL+ZVs4E2Fmyptg8QbiiJs+Zc0v1uIErJMM6O6ItXTykNuu83ePrm fUtxHYM1ZrU6/X9r8T+iY4lRC3kh8la1FKNYRagRwpZBIodjD37Nf/g5z4FG2JnX Gs2Ir/u5Hot/vdgsTXLRNGmn5OSWqtjh3kreUpP6BSjBk4UuJ5DrF8QS2mmAazSp a+ZRQ75XpHXhgU3s5PJA8EfWaUsLGutCQz0512/UV+9j5zM2z88HtA/sqULvWHBV ZsuqmdHWDoOo1g== -----END CERTIFICATE-----Generated at Wed Nov 27 07:12:32 2024 by rpki-client on console-fra.rpki-client.org