$ rpki-client -vvf rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/20DA8B7E571D11EEAA430244C4F9AE02.roa File: 20DA8B7E571D11EEAA430244C4F9AE02.roa (raw, json) Hash identifier: dRKaSZEwPfTmZ9fnNDPlpvp0Ujh9QZMuM+RN8ZLvFSw= Subject key identifier: CE:74:21:10:78:21:CC:F0:E6:CC:E8:B8:E6:CD:ED:11:64:1B:F2:80 Certificate issuer: /CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Certificate serial: C9 Authority key identifier: AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/20DA8B7E571D11EEAA430244C4F9AE02.roa Signing time: Wed 25 Sep 2024 04:19:16 +0000 ROA not before: Wed 25 Sep 2024 04:19:16 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 135391 IP address blocks: 103.158.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Validity Not Before: Sep 25 04:19:16 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66f38f44-8fe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a6:ed:53:9f:f4:bf:40:97:1d:05:20:0f:d5: 32:e0:1f:af:ce:ca:f5:08:d6:f9:75:0b:e4:db:13: 59:e5:72:c4:1b:8f:fb:67:61:61:45:fb:83:df:5e: 23:8d:d5:8a:9e:45:f4:5a:2d:ee:a1:91:59:1c:bb: ec:4a:82:37:bd:e0:a5:cd:48:f0:36:ad:c2:ee:dd: 1a:14:0a:10:8a:01:ca:52:50:c3:45:7f:fa:0c:9d: 6d:af:be:5c:6e:39:2a:10:40:ef:9c:59:bf:88:21: b1:07:36:37:8d:70:62:c9:6b:ae:fe:d0:54:67:7d: 44:2d:cd:a9:af:ab:78:8f:82:6e:c1:bc:a7:62:14: 0c:ff:ac:36:5f:eb:a0:e6:b5:e6:d9:ab:33:a8:b7: 90:55:c0:c2:57:0a:99:9d:c2:e9:8f:00:2c:fc:ee: 9a:4d:de:1f:b0:32:a6:7c:15:cf:76:48:3f:26:d9: a3:8f:f5:a1:fc:0e:a8:c6:47:fb:34:fd:17:10:b3: 0b:6a:e3:80:17:62:b7:57:1d:8f:02:cd:24:d5:af: 21:bf:02:36:ad:7e:2d:d1:06:9b:cf:7f:06:d7:0d: 07:9b:e6:34:66:98:b2:b1:04:11:8f:f7:46:38:ca: b0:0c:e6:43:ae:27:ed:ea:2e:df:25:8d:b4:78:7d: 4b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:74:21:10:78:21:CC:F0:E6:CC:E8:B8:E6:CD:ED:11:64:1B:F2:80 X509v3 Authority Key Identifier: keyid:AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/20DA8B7E571D11EEAA430244C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.158.82.0/24 Signature Algorithm: sha256WithRSAEncryption 66:84:3e:c4:b3:20:2e:eb:4e:8a:d5:89:11:f6:53:57:b7:fc: ec:5a:68:f1:73:1f:04:6d:ad:65:89:9c:23:70:48:76:eb:4e: 35:6c:94:12:07:eb:69:a9:bc:2d:01:a1:db:dc:0c:6e:c9:27: e3:3a:2a:cb:da:7a:3e:81:02:e9:e3:61:6d:54:a5:a1:a7:e3: 95:32:c0:37:d1:db:eb:16:61:17:56:95:33:62:56:e6:bb:2b: f1:cf:32:c6:a8:9f:f2:2d:9f:ad:4c:1a:f0:59:b6:b6:bc:b5: 9b:ea:67:8f:95:ee:0d:ee:23:cd:e6:7e:4e:61:f4:85:92:9e: a9:d2:6e:12:c3:30:3e:8b:e9:8f:8b:0d:b1:a7:03:d9:bc:7b: eb:7f:b5:2e:d2:2e:7c:21:74:51:f4:a8:93:1b:1a:07:27:be: 58:de:ce:c8:2a:be:b7:bc:e3:03:03:25:45:50:13:74:71:cc: e7:79:95:44:1a:39:b2:ce:01:3c:ad:73:b7:f4:62:4b:86:d4: 0c:66:40:fa:dd:0b:34:a6:05:24:80:da:5f:ff:32:17:80:6c: cb:35:bb:19:fb:db:1f:b2:bf:33:51:de:1d:ff:32:98:94:68: b9:84:12:f0:ed:f0:3f:5d:60:66:e1:b3:9c:17:0f:3c:35:43: cd:43:ce:c9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDQjMxMTAvBgNVBAUTKEFCNDVEQkZDMzU1NzdGMjdDOTlGQ0Y0MEEzOUIzODZC MzIzNTBBREEwHhcNMjQwOTI1MDQxOTE2WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmYzOGY0NC04ZmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6btU5/0v0CXHQUgD9Uy4B+vzsr1CNb5dQvk2xNZ5XLEG4/7Z2FhRfuD314j jdWKnkX0Wi3uoZFZHLvsSoI3veClzUjwNq3C7t0aFAoQigHKUlDDRX/6DJ1tr75c bjkqEEDvnFm/iCGxBzY3jXBiyWuu/tBUZ31ELc2pr6t4j4JuwbynYhQM/6w2X+ug 5rXm2aszqLeQVcDCVwqZncLpjwAs/O6aTd4fsDKmfBXPdkg/Jtmjj/Wh/A6oxkf7 NP0XELMLauOAF2K3Vx2PAs0k1a8hvwI2rX4t0Qabz38G1w0Hm+Y0ZpiysQQRj/dG OMqwDOZDrift6i7fJY20eH1LTQIDAQABo4IClTCCApEwHQYDVR0OBBYEFM50IRB4 Iczw5szouObN7RFkG/KAMB8GA1UdIwQYMBaAFKtF2/w1V38nyZ/PQKObOGsyNQra MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkNCMy9BNUZEODRGMjU3 MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5ZkpuODlBbzVzNGF6STFD dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EwWGJfRFZYZnlmSm44OUFvNXM0YXpJMUN0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzZDQjMvQTVGRDg0RjI1NzFCMTFFRUI0MThBQjNFQzRGOUFFMDIvMjBEQThCN0U1 NzFEMTFFRUFBNDMwMjQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnnlIwDQYJKoZIhvcNAQELBQADggEBAGaEPsSzIC7rTorV iRH2U1e3/OxaaPFzHwRtrWWJnCNwSHbrTjVslBIH62mpvC0BodvcDG7JJ+M6Ksva ej6BAunjYW1UpaGn45UywDfR2+sWYRdWlTNiVua7K/HPMsaon/Itn61MGvBZtra8 tZvqZ4+V7g3uI83mfk5h9IWSnqnSbhLDMD6L6Y+LDbGnA9m8e+t/tS7SLnwhdFH0 qJMbGgcnvljezsgqvre84wMDJUVQE3RxzOd5lUQaObLOATytc7f0YkuG1AxmQPrd CzSmBSSA2l//MheAbMs1uxn72x+yvzNR3h3/MpiUaLmEEvDt8D9dYGbhs5wXDzw1 Q81Dzsk= -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:55 2024 by rpki-client on console-fra.rpki-client.org