$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/0DA4853256FC11EC8032440FC4F9AE02.roa File: 0DA4853256FC11EC8032440FC4F9AE02.roa (raw, json) Hash identifier: VvXC5qsmdR6YGob44Y/Iy57cV4LdW3QDFZsUSIeluVE= Subject key identifier: A3:F4:A6:B4:EE:14:D3:DA:37:77:5C:57:8F:40:F9:B9:81:BD:A5:86 Certificate issuer: /CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F Certificate serial: 038F Authority key identifier: F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/0DA4853256FC11EC8032440FC4F9AE02.roa Signing time: Tue 21 May 2024 03:06:24 +0000 ROA not before: Tue 21 May 2024 03:06:24 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 133451 IP address blocks: 103.132.232.0/24 maxlen: 24 103.212.192.0/23 maxlen: 23 103.229.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 911 (0x38f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F Validity Not Before: May 21 03:06:24 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=664c0faf-6c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f6:03:3f:f5:7f:b3:e5:5a:68:42:42:7b:70: a5:f4:0b:32:9b:d0:09:95:98:ea:ac:bb:4b:a2:0a: 79:e2:a4:bd:50:ff:e4:1f:31:e9:95:29:5f:e5:2a: 71:33:64:8c:10:5b:e8:92:13:ca:3f:cf:af:85:11: 04:67:80:66:99:26:2d:3d:ce:05:df:ee:2c:b7:73: 82:6c:49:36:2e:64:eb:5a:65:7c:46:4a:e7:0b:61: f8:47:2a:52:7f:fb:03:e2:bc:ed:da:11:42:99:fa: c5:66:38:af:8a:69:55:b1:c2:7c:c9:b2:8b:29:f4: 5f:a5:bc:f8:93:ae:cc:34:7c:ac:01:de:9d:3b:be: d7:0b:d8:af:e2:bc:c5:5c:3c:55:81:5b:22:87:12: 8a:f1:e7:4a:e2:bb:64:af:65:07:af:c0:50:16:ce: 72:3a:f2:6f:0b:51:d7:e6:5a:61:63:b2:3a:2e:cc: 12:70:ff:04:9b:0a:df:27:5e:f2:d9:0f:f5:00:82: 91:c8:76:d7:1d:13:19:a9:af:17:29:e2:16:49:ad: 12:cf:fb:5f:41:93:52:c5:05:b2:86:bc:91:f4:3b: 93:69:7e:eb:83:ac:21:1f:f3:10:41:f0:28:79:43: 47:2a:1c:4d:97:33:fb:d5:34:02:2f:f1:bb:a0:a2: fc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F4:A6:B4:EE:14:D3:DA:37:77:5C:57:8F:40:F9:B9:81:BD:A5:86 X509v3 Authority Key Identifier: keyid:F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/0DA4853256FC11EC8032440FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.132.232.0/24 103.212.192.0/23 103.229.248.0/24 Signature Algorithm: sha256WithRSAEncryption 98:ce:d1:66:54:7f:84:08:81:0c:36:ce:aa:9a:cb:63:1f:bc: 73:67:76:95:99:fd:79:4e:f8:73:01:27:57:4a:71:16:92:dd: aa:3a:e4:57:44:9d:4d:d7:9a:c9:d6:5a:7a:76:7d:68:9a:a7: 8c:92:7d:97:38:fa:a8:95:20:40:fa:bf:72:3d:ce:3c:40:f1: ea:ff:2c:c8:21:5e:96:af:32:b6:22:d2:09:3c:44:1e:ea:97: 6c:8f:f0:58:43:0e:68:f1:d0:37:8e:14:26:e9:02:19:c7:62: 58:c6:c5:9b:3b:64:6d:62:e7:d3:ee:39:4d:60:c0:e1:a4:d0: dd:90:a7:d8:ff:b2:38:f4:8b:c8:48:e6:ba:3e:b9:e6:0a:e0: 56:3d:91:7d:3b:00:6c:e8:85:61:3b:bc:51:09:39:31:4a:b6: 9e:e1:1e:ad:eb:03:9e:fd:0a:79:f1:70:53:b0:ce:16:ea:aa: b9:ea:de:81:59:35:37:02:dc:d8:dd:82:27:43:13:02:f7:dd: 5d:94:53:d9:cb:01:32:1a:9d:02:ae:9b:40:a2:0e:f2:18:1f: 63:b6:6c:ad:37:78:88:98:73:2a:dd:87:35:b6:d7:cf:84:e0: c3:24:22:a4:9f:79:e5:0e:28:a4:36:3e:9e:e7:ca:32:33:d0: 60:af:83:ca -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICA48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhBNTAxMTAvBgNVBAUTKEYzODgyMDlDQUNCMkM2QjgxNENBQzU3ODVENEJGNEQz NkNDNDk3MUYwHhcNMjQwNTIxMDMwNjI0WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjRjMGZhZi02Yzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/YDP/V/s+VaaEJCe3Cl9Asym9AJlZjqrLtLogp54qS9UP/kHzHplSlf5Spx M2SMEFvokhPKP8+vhREEZ4BmmSYtPc4F3+4st3OCbEk2LmTrWmV8RkrnC2H4RypS f/sD4rzt2hFCmfrFZjivimlVscJ8ybKLKfRfpbz4k67MNHysAd6dO77XC9iv4rzF XDxVgVsihxKK8edK4rtkr2UHr8BQFs5yOvJvC1HX5lphY7I6LswScP8EmwrfJ17y 2Q/1AIKRyHbXHRMZqa8XKeIWSa0Sz/tfQZNSxQWyhryR9DuTaX7rg6whH/MQQfAo eUNHKhxNlzP71TQCL/G7oKL8KwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFKP0prTu FNPaN3dcV49A+bmBvaWGMB8GA1UdIwQYMBaAFPOIIJysssa4FMrFeF1L9NNsxJcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEE1MC9DOUE3QTQzODU2 RjkxMUVDODM2RTkxMERDNEY5QUUwMi84NGdnbkt5eXhyZ1V5c1Y0WFV2MDAyekVs eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg0Z2duS3l5eHJnVXlzVjRYVXYwMDJ6RWx4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzhBNTAvQzlBN0E0Mzg1NkY5MTFFQzgzNkU5MTBEQzRGOUFFMDIvMERBNDg1MzI1 NkZDMTFFQzgwMzI0NDBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABnhOgDBAFn1MADBABn5fgwDQYJKoZIhvcNAQELBQADggEB AJjO0WZUf4QIgQw2zqqay2MfvHNndpWZ/XlO+HMBJ1dKcRaS3ao65FdEnU3XmsnW Wnp2fWiap4ySfZc4+qiVIED6v3I9zjxA8er/LMghXpavMrYi0gk8RB7ql2yP8FhD Dmjx0DeOFCbpAhnHYljGxZs7ZG1i59PuOU1gwOGk0N2Qp9j/sjj0i8hI5ro+ueYK 4FY9kX07AGzohWE7vFEJOTFKtp7hHq3rA579CnnxcFOwzhbqqrnq3oFZNTcC3Njd gidDEwL33V2UU9nLATIanQKum0CiDvIYH2O2bK03eIiYcyrdhzW218+E4MMkIqSf eeUOKKQ2Pp7nyjIz0GCvg8o= -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:21 2024 by rpki-client on console-ams.rpki-client.org