$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/0BC405C092CD11EFB1C8E669C4F9AE02.roa File: 0BC405C092CD11EFB1C8E669C4F9AE02.roa (raw, json) Hash identifier: PHX6rBB1gYL020QSQQUa5cF0QDgu1xf32btZ+B5lqT8= Subject key identifier: 4C:DA:24:88:D7:DF:1E:D3:F7:0D:63:22:C9:53:C9:8E:3E:48:F3:FD Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE Certificate serial: 17DA Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/0BC405C092CD11EFB1C8E669C4F9AE02.roa Signing time: Mon 04 Nov 2024 15:53:09 +0000 ROA not before: Mon 04 Nov 2024 15:53:09 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 59254 IP address blocks: 103.224.12.0/24 maxlen: 24 103.224.13.0/24 maxlen: 24 103.224.14.0/24 maxlen: 24 103.224.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6106 (0x17da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE Validity Not Before: Nov 4 15:53:09 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=6728ede4-8c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:90:4c:cd:9f:eb:2e:ef:b4:8a:60:86:6b:b6: 05:02:bd:6a:55:73:96:2a:6f:ad:f8:7f:03:77:b5: 79:64:d6:62:96:e3:cb:1e:9f:80:c8:48:2e:fb:5f: fc:6a:3c:24:84:25:d9:79:a6:1b:2b:fc:03:e3:f1: f3:20:13:e5:23:e0:8f:08:47:07:67:15:4f:26:8c: b5:67:6f:aa:83:4c:e3:71:35:14:a2:08:14:4f:ef: 0b:84:aa:77:2a:04:91:13:22:9e:f2:fb:8f:e1:94: 11:cb:81:02:c1:55:73:2f:1d:56:fd:d7:81:bf:5e: 92:e4:f3:c3:8a:1c:cf:67:4f:a7:7e:9d:24:25:9b: 7e:67:46:37:6a:43:89:bb:95:58:81:4e:2f:45:ce: b5:48:11:11:20:be:b7:b5:53:28:16:5e:77:be:20: b0:c0:f9:3e:1d:01:35:d1:23:f6:71:36:1c:1b:91: 1f:80:26:da:e9:6b:7c:0c:7d:50:e5:94:ef:3d:2e: 72:22:a6:a1:0c:5e:2a:ae:0f:ba:02:15:fe:9f:9d: 8c:b3:99:89:af:3b:28:03:34:1a:08:be:bb:5b:de: 78:74:24:a7:65:4a:fc:46:4d:8d:d7:41:13:9c:74: f2:b9:0c:9c:8a:49:78:ec:c5:87:a0:a3:3f:45:c8: c0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DA:24:88:D7:DF:1E:D3:F7:0D:63:22:C9:53:C9:8E:3E:48:F3:FD X509v3 Authority Key Identifier: keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/0BC405C092CD11EFB1C8E669C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.224.12.0/22 Signature Algorithm: sha256WithRSAEncryption 59:7d:29:97:7c:fa:64:df:af:03:09:7c:01:be:2f:73:19:67: ec:ed:c8:c3:5a:c3:62:e7:a7:ea:7d:30:00:cf:ea:e0:6b:6b: e3:cb:98:9d:4e:14:30:5c:ca:2a:d6:5d:53:f4:65:aa:4b:42: 32:4f:52:6f:9e:02:07:90:75:c6:48:46:d0:cd:5d:4f:cd:08: a7:12:28:25:df:b9:c4:ef:64:9c:a7:97:59:bf:5c:49:af:f5: 09:e1:1c:8e:43:71:75:c3:c2:ec:2f:31:21:f7:ac:83:ed:2a: 6f:f8:f9:88:1a:d0:6e:f4:bb:44:34:34:24:52:37:aa:1c:f5: b0:a6:5c:5a:05:b0:37:e9:68:8d:40:3c:14:56:15:de:ac:e0: 28:69:2c:10:4c:81:73:55:07:09:3d:92:3d:79:b3:97:84:ca: bd:e4:d4:4b:d4:da:22:3f:77:1a:9a:cb:59:ef:d4:56:a9:83: 86:d5:9b:a1:ce:a8:9b:9c:ec:3d:20:19:cc:22:ac:97:74:3c: 14:f0:8a:ce:de:f6:c0:8b:18:0b:bb:7d:78:86:5d:a5:7b:a3: ad:ec:4e:7d:fc:95:db:26:15:9f:56:e8:0c:3c:c2:06:fb:ff: b9:20:e3:02:e4:20:ef:44:04:a2:c8:b2:ed:c8:9f:2f:9a:dd: 66:9d:0f:07 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICF9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzlCNDkxMTAvBgNVBAUTKDRFRTU0MEE0OEFEOTczRkJEODMxQUJEMDI2MDNCNUZC MEZCOTQ1QkUwHhcNMjQxMTA0MTU1MzA5WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzI4ZWRlNC04YzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo5BMzZ/rLu+0imCGa7YFAr1qVXOWKm+t+H8Dd7V5ZNZiluPLHp+AyEgu+1/8 ajwkhCXZeaYbK/wD4/HzIBPlI+CPCEcHZxVPJoy1Z2+qg0zjcTUUoggUT+8LhKp3 KgSREyKe8vuP4ZQRy4ECwVVzLx1W/deBv16S5PPDihzPZ0+nfp0kJZt+Z0Y3akOJ u5VYgU4vRc61SBERIL63tVMoFl53viCwwPk+HQE10SP2cTYcG5EfgCba6Wt8DH1Q 5ZTvPS5yIqahDF4qrg+6AhX+n52Ms5mJrzsoAzQaCL67W954dCSnZUr8Rk2N10ET nHTyuQycikl47MWHoKM/RcjAXwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEzaJIjX 3x7T9w1jIslTyY4+SPP9MB8GA1UdIwQYMBaAFE7lQKSK2XP72DGr0CYDtfsPuUW+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUI0OS8wNzgwQjk5MEM5 RjgxMUU3OUVGMTIwMDlDNEY5QUUwMi9UdVZBcElyWmNfdllNYXZRSmdPMS13LTVS YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R1VkFwSXJaY192WU1hdlFKZ08xLXctNVJiNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzlCNDkvMDc4MEI5OTBDOUY4MTFFNzlFRjEyMDA5QzRGOUFFMDIvMEJDNDA1QzA5 MkNEMTFFRkIxQzhFNjY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn4AwwDQYJKoZIhvcNAQELBQADggEBAFl9KZd8+mTfrwMJ fAG+L3MZZ+ztyMNaw2Lnp+p9MADP6uBra+PLmJ1OFDBcyirWXVP0ZapLQjJPUm+e AgeQdcZIRtDNXU/NCKcSKCXfucTvZJynl1m/XEmv9QnhHI5DcXXDwuwvMSH3rIPt Km/4+Yga0G70u0Q0NCRSN6oc9bCmXFoFsDfpaI1APBRWFd6s4ChpLBBMgXNVBwk9 kj15s5eEyr3k1EvU2iI/dxqay1nv1Fapg4bVm6HOqJuc7D0gGcwirJd0PBTwis7e 9sCLGAu7fXiGXaV7o63sTn38ldsmFZ9W6Aw8wgb7/7kg4wLkIO9EBKLIsu3Iny+a 3WadDwc= -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:41 2024 by rpki-client on console-fra.rpki-client.org