$ rpki-client -vvf rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/1F63D776D29011EDA849876CC4F9AE02.roa File: 1F63D776D29011EDA849876CC4F9AE02.roa (raw, json) Hash identifier: LK0ZOJt3bvu7IHmDVNJ+cUrmzRXOPpiZ1YyLnrDVzpA= Subject key identifier: A9:BE:AD:85:99:10:1E:04:5A:E6:12:60:9B:A9:43:A1:E3:CF:E4:B6 Certificate issuer: /CN=A9140B3F/serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173 Certificate serial: F8 Authority key identifier: A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/1F63D776D29011EDA849876CC4F9AE02.roa Signing time: Wed 17 Jul 2024 08:58:13 +0000 ROA not before: Wed 17 Jul 2024 08:58:13 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 45352 IP address blocks: 36.255.140.0/24 maxlen: 24 36.255.141.0/24 maxlen: 24 36.255.142.0/23 maxlen: 23 103.209.156.0/22 maxlen: 22 103.209.156.0/23 maxlen: 24 103.209.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140B3F/serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173 Validity Not Before: Jul 17 08:58:13 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=669787a4-0aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:54:2e:b1:13:09:f3:db:23:aa:8b:30:36:dd: b4:fb:f0:65:00:9d:ae:a3:f9:08:1e:4d:59:30:75: d5:00:bc:66:71:16:09:0c:09:4b:3b:c3:9b:6c:de: 8b:f0:e2:48:11:8b:52:2f:5a:b6:cf:8d:85:0b:23: 5f:48:de:bd:40:3d:24:7c:b5:9f:d8:69:06:6d:d0: 5b:90:7d:ad:85:ee:d5:e3:d0:be:52:7a:96:39:61: e2:20:80:cd:d3:0f:95:65:b2:5b:b4:cd:5a:4a:a9: 36:47:d5:67:f5:c9:23:4a:d2:33:0d:58:7b:80:f7: e1:24:0f:a7:05:f7:61:d6:00:02:92:98:b6:bb:b0: 4d:b3:a1:7d:60:4a:06:16:cd:c8:e2:62:30:0b:72: ae:e8:50:af:c3:9a:2a:04:69:6c:e8:31:75:29:9c: 92:3b:03:08:b9:75:7b:05:6b:fd:85:ca:f0:ab:b4: 1c:ff:fb:44:0a:30:10:4d:c5:62:50:f7:ae:ba:27: 2d:35:86:6b:a4:bb:f0:65:0f:ca:1a:fe:dc:52:a7: 09:1f:93:ee:ac:6b:9c:59:73:41:d2:78:bc:f3:3a: 9a:94:36:3c:fb:12:33:4a:a7:3b:12:20:2e:d5:ee: 1b:5a:65:88:06:2b:2e:79:60:85:05:1e:b0:86:92: 66:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:BE:AD:85:99:10:1E:04:5A:E6:12:60:9B:A9:43:A1:E3:CF:E4:B6 X509v3 Authority Key Identifier: keyid:A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/1F63D776D29011EDA849876CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.140.0/22 103.209.156.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:fc:e2:ca:40:f2:91:f5:1c:8d:9b:f6:ac:f9:18:d3:fb:ce: c0:c2:b3:d4:bd:f8:e9:7f:a0:c0:a2:f2:29:a8:0a:03:37:a0: 2b:f1:de:63:f3:f4:f4:0b:a7:d4:5b:10:b4:49:e6:d0:87:93: 23:87:0e:5a:d8:0b:3d:0d:07:12:7f:2f:5c:7f:fd:13:f5:ed: 27:be:71:f5:04:3f:9a:2a:ee:a0:18:c8:f5:78:f9:98:80:e1: f8:b9:f8:ba:9f:52:bd:6b:02:3c:56:ba:e7:2f:c9:d6:3f:d8: cd:f2:5b:1e:77:9f:81:2b:a6:50:62:54:14:99:15:ca:c2:f6: 4f:a7:70:20:d6:1a:0f:16:86:8e:f1:ff:33:ad:89:a3:d2:f5: 85:ab:e5:b0:86:02:ae:31:30:22:27:62:3d:5e:39:27:b1:44: 33:09:42:dc:aa:00:3a:f5:db:a3:12:a0:37:e9:8a:97:f4:df: 29:fc:df:77:47:5c:42:57:99:33:f6:bf:0b:dc:ac:6e:53:84: 64:fc:81:4c:23:a2:12:e7:98:7c:1a:01:fd:63:a8:19:db:c4: a2:b1:42:a3:69:b2:98:c2:68:40:29:12:26:19:6b:8e:eb:23: b6:d5:a1:76:52:bb:31:70:dd:c0:ce:25:ae:26:57:85:2a:2d: 4f:c2:a5:67 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBCM0YxMTAvBgNVBAUTKEEwRkJGREUzNTE1OTcwOTJCNjg3RUNDNjQwRUM4NURD MjlGMjAxNzMwHhcNMjQwNzE3MDg1ODEzWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02Njk3ODdhNC0wYWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnFQusRMJ89sjqoswNt20+/BlAJ2uo/kIHk1ZMHXVALxmcRYJDAlLO8ObbN6L 8OJIEYtSL1q2z42FCyNfSN69QD0kfLWf2GkGbdBbkH2the7V49C+UnqWOWHiIIDN 0w+VZbJbtM1aSqk2R9Vn9ckjStIzDVh7gPfhJA+nBfdh1gACkpi2u7BNs6F9YEoG Fs3I4mIwC3Ku6FCvw5oqBGls6DF1KZySOwMIuXV7BWv9hcrwq7Qc//tECjAQTcVi UPeuuictNYZrpLvwZQ/KGv7cUqcJH5PurGucWXNB0ni88zqalDY8+xIzSqc7EiAu 1e4bWmWIBisueWCFBR6whpJmIwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKm+rYWZ EB4EWuYSYJupQ6Hjz+S2MB8GA1UdIwQYMBaAFKD7/eNRWXCStofsxkDshdwp8gFz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEIzRi9GOEQ3MkNEQ0Qy OEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNKSzJoLXpHUU95RjNDbnlB WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Qdjk0MUZaY0pLMmgtekdRT3lGM0NueUFYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDBCM0YvRjhENzJDRENEMjhDMTFFREJBRTlFRTZBQzRGOUFFMDIvMUY2M0Q3NzZE MjkwMTFFREE4NDk4NzZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIk/4wDBAJn0ZwwDQYJKoZIhvcNAQELBQADggEBAA/84spA 8pH1HI2b9qz5GNP7zsDCs9S9+Ol/oMCi8imoCgM3oCvx3mPz9PQLp9RbELRJ5tCH kyOHDlrYCz0NBxJ/L1x//RP17Se+cfUEP5oq7qAYyPV4+ZiA4fi5+LqfUr1rAjxW uucvydY/2M3yWx53n4ErplBiVBSZFcrC9k+ncCDWGg8Who7x/zOtiaPS9YWr5bCG Aq4xMCInYj1eOSexRDMJQtyqADr126MSoDfpipf03yn833dHXEJXmTP2vwvcrG5T hGT8gUwjohLnmHwaAf1jqBnbxKKxQqNpspjCaEApEiYZa47rI7bVoXZSuzFw3cDO Ja4mV4UqLU/CpWc= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:38 2024 by rpki-client on console-ams.rpki-client.org