$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/919E2B20E52811ED863E8C34C4F9AE02.roa File: 919E2B20E52811ED863E8C34C4F9AE02.roa (raw, json) Hash identifier: 7MNA9dPvkOQAxUzxfSAOm5WYyKnM85R6DhJr7ODfPcw= Subject key identifier: 95:00:F1:83:49:88:63:BC:E8:1F:BB:45:3C:F7:47:2E:A2:6E:DB:36 Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Certificate serial: 04EB Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/919E2B20E52811ED863E8C34C4F9AE02.roa Signing time: Mon 18 Sep 2023 22:21:32 +0000 ROA not before: Mon 18 Sep 2023 22:21:32 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 42960 IP address blocks: 103.30.76.0/22 maxlen: 24 103.171.34.0/23 maxlen: 24 2001:df7:3480::/48 maxlen: 48 2401:2660:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Jun 2024 02:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1259 (0x4eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Validity Not Before: Sep 18 22:21:32 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=6508cd6c-364a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6d:eb:d6:b3:83:fe:35:6e:e0:65:8b:7f:39: 43:18:2d:e9:18:b2:11:06:f1:f9:4e:ee:2e:d7:ed: a7:cb:e4:5b:75:de:0b:dc:18:f6:13:d5:ce:35:a9: 63:4b:e5:70:8e:2b:71:64:c6:15:78:0c:39:4d:f4: 93:91:08:58:c9:64:12:10:1e:17:83:d7:ca:5d:2d: 55:cd:04:32:91:4e:13:1a:1c:2a:4a:fe:ff:69:18: 10:b8:7a:ac:fe:f3:2b:32:07:a7:2f:85:e5:20:15: b8:f5:86:a9:d4:6e:8c:2c:88:39:63:02:1d:3b:67: 81:05:9f:e9:55:9a:46:b2:bc:08:e6:3d:c5:d3:74: f0:e6:25:df:b8:f6:23:0d:fa:62:e9:57:1e:c4:50: 2f:ad:a2:9d:d5:f8:9c:fc:00:f3:75:b9:e9:03:91: ae:eb:87:e9:13:c5:65:a3:5b:74:ec:b0:63:ea:ac: a7:ef:82:a2:3d:3a:58:b3:a2:5e:a1:ab:73:0e:9a: 82:50:09:fd:39:da:c6:e9:bb:34:81:82:a8:53:ca: 6f:fb:dd:b5:1d:69:1b:48:21:2b:e0:07:4d:de:ea: 06:05:af:fa:bf:9c:1e:27:14:4e:ab:6d:9b:7b:c9: 5a:36:81:0a:a8:59:ee:cb:ba:4a:5d:e4:82:be:98: 11:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:00:F1:83:49:88:63:BC:E8:1F:BB:45:3C:F7:47:2E:A2:6E:DB:36 X509v3 Authority Key Identifier: keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/919E2B20E52811ED863E8C34C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.30.76.0/22 103.171.34.0/23 IPv6: 2001:df7:3480::/48 2401:2660:1000::/36 Signature Algorithm: sha256WithRSAEncryption 36:cf:45:56:e8:a0:d4:7d:ac:48:4b:b6:50:59:2f:cc:44:37: bb:d7:08:a4:7b:6b:80:b8:cb:72:07:e1:76:5a:47:96:27:be: 75:7a:d1:ed:0f:c4:56:00:49:54:3e:d5:14:ae:0a:bf:9e:52: 0f:f3:0a:6f:fa:1a:94:c3:a9:a7:1e:44:1a:2e:35:05:23:12: c6:ef:cf:ad:54:17:82:86:1c:c4:20:b6:ba:02:cc:47:2f:27: 58:0c:22:b8:82:ba:49:ed:88:bd:c4:55:63:c2:71:81:de:ff: 9f:fd:de:f2:2d:f0:8b:7b:2a:fd:0c:00:7b:f3:a8:89:43:40: 99:29:af:75:a3:ca:fb:7d:db:f2:da:44:97:29:cb:b1:ca:f0: 12:01:eb:a6:a3:07:e3:e4:56:09:3f:ec:82:6a:74:71:f8:82: 89:bf:11:f5:5e:e2:4a:cb:41:c7:0f:d0:44:1a:d1:8d:9c:dc: 06:b0:24:6e:1f:2f:a0:33:8a:31:9c:8c:83:e0:3f:78:73:0a: 99:97:e1:4e:c1:81:61:7d:0c:02:8e:db:2d:b5:2b:71:57:d7: c7:54:03:f8:2a:47:b3:86:18:14:0b:07:6e:64:68:d0:d3:f1: ff:d7:8d:db:5c:e6:f4:c1:ab:55:45:eb:dc:70:91:91:c2:5a: 83:35:50:6f -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgICBOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKEVEQzU0N0JEMEU2QzBDMDcwNkExODU4MzM4MzVGNjVF QTNDNzEwMTMwHhcNMjMwOTE4MjIyMTMyWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTA4Y2Q2Yy0zNjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyW3r1rOD/jVu4GWLfzlDGC3pGLIRBvH5Tu4u1+2ny+Rbdd4L3Bj2E9XONalj S+VwjitxZMYVeAw5TfSTkQhYyWQSEB4Xg9fKXS1VzQQykU4TGhwqSv7/aRgQuHqs /vMrMgenL4XlIBW49Yap1G6MLIg5YwIdO2eBBZ/pVZpGsrwI5j3F03Tw5iXfuPYj Dfpi6VcexFAvraKd1fic/ADzdbnpA5Gu64fpE8Vlo1t07LBj6qyn74KiPTpYs6Je oatzDpqCUAn9OdrG6bs0gYKoU8pv+921HWkbSCEr4AdN3uoGBa/6v5weJxROq22b e8laNoEKqFnuy7pKXeSCvpgRvQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFJUA8YNJ iGO86B+7RTz3Ry6ibts2MB8GA1UdIwQYMBaAFO3FR70ObAwHBqGFgzg19l6jxxAT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi8yQ0IxRUVCQUY2 NTMxMUVCQTFCNEE2MUFDNEY5QUUwMi83Y1ZIdlE1c0RBY0dvWVdET0RYMlhxUEhF Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdjVkh2UTVzREFjR29ZV0RPRFgyWHFQSEVCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzkzMjIvMkNCMUVFQkFGNjUzMTFFQkExQjRBNjFBQzRGOUFFMDIvOTE5RTJCMjBF NTI4MTFFRDg2M0U4QzM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPgYIKwYBBQUHAQcBAf8E LzAtMBIEAgABMAwDBAJnHkwDBAFnqyIwFwQCAAIwEQMHACABDfc0gAMGBCQBJmAQ MA0GCSqGSIb3DQEBCwUAA4IBAQA2z0VW6KDUfaxIS7ZQWS/MRDe71wike2uAuMty B+F2WkeWJ751etHtD8RWAElUPtUUrgq/nlIP8wpv+hqUw6mnHkQaLjUFIxLG78+t VBeChhzEILa6AsxHLydYDCK4grpJ7Yi9xFVjwnGB3v+f/d7yLfCLeyr9DAB786iJ Q0CZKa91o8r7fdvy2kSXKcuxyvASAeumowfj5FYJP+yCanRx+IKJvxH1XuJKy0HH D9BEGtGNnNwGsCRuHy+gM4oxnIyD4D94cwqZl+FOwYFhfQwCjtsttStxV9fHVAP4 KkezhhgUCwduZGjQ0/H/143bXOb0watVRevccJGRwlqDNVBv -----END CERTIFICATE-----Generated at Tue Jun 11 04:24:44 2024 by rpki-client on console-ams.rpki-client.org