$ rpki-client -vvf rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/D0A3F15AC94A11ED9CF16D3EC4F9AE02.roa File: D0A3F15AC94A11ED9CF16D3EC4F9AE02.roa (raw, json) Hash identifier: zWaIqaHAeF3IDFN30by8k1qGMUUc6D4nHYZ/YmwMWH4= Subject key identifier: 15:82:CF:9E:F6:DD:C0:AD:0F:5F:F4:15:17:E9:69:43:AD:C8:26:93 Certificate issuer: /CN=A9141796/serialNumber=E79CD208E94DE950BE3EA9FAA6EF807B4E905973 Certificate serial: F4 Authority key identifier: E7:9C:D2:08:E9:4D:E9:50:BE:3E:A9:FA:A6:EF:80:7B:4E:90:59:73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55zSCOlN6VC-Pqn6pu-Ae06QWXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/D0A3F15AC94A11ED9CF16D3EC4F9AE02.roa Signing time: Tue 11 Jun 2024 06:43:17 +0000 ROA not before: Tue 11 Jun 2024 06:43:17 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 151046 IP address blocks: 103.119.176.0/23 maxlen: 23 103.119.176.0/24 maxlen: 24 103.119.177.0/24 maxlen: 24 2001:df2:2fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.crl rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55zSCOlN6VC-Pqn6pu-Ae06QWXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141796/serialNumber=E79CD208E94DE950BE3EA9FAA6EF807B4E905973 Validity Not Before: Jun 11 06:43:17 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6667f205-77d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:79:f9:d8:21:6b:f5:7b:db:33:69:3b:f2:05: 96:2e:be:e1:cf:05:f2:9b:d5:cf:7b:98:be:34:54: ac:67:cd:25:ee:07:f3:89:f5:5e:ed:00:25:72:69: 72:6a:48:7b:94:71:ee:e7:7b:b6:a5:f6:79:96:99: 4c:86:40:89:b7:7e:ef:35:a5:44:49:7e:cb:b2:50: 6d:e7:e8:c3:02:32:fc:41:76:49:98:ea:9e:d5:e4: 23:fa:7f:ba:6a:9a:2e:32:bc:f0:a9:cc:58:68:7a: 44:c1:69:9f:22:f5:b7:3d:ff:6f:4f:1e:c7:98:a1: 81:6b:c5:bc:ba:7a:db:62:e5:c5:ef:d3:b5:41:b2: 4d:90:94:e9:1e:b1:54:b8:4e:87:9b:2e:ac:a6:63: 0e:b6:f3:3b:51:b2:18:f6:d2:32:a0:6a:16:0c:3d: a9:91:c6:07:cb:46:35:2a:35:9b:55:7b:29:94:67: 3a:aa:7c:c9:1e:ff:0a:ef:e1:5c:1d:43:d7:3c:71: 33:e4:32:10:0f:8e:b8:39:f4:2b:47:81:63:ef:c9: 5a:9f:cb:b7:1e:9f:9f:49:f1:fc:a8:6e:95:4d:3e: 51:79:ad:ce:5f:c4:ba:fd:c5:b9:98:7e:ba:6e:a3: 65:a4:41:27:a3:1e:58:67:2c:49:9b:97:89:c3:42: 87:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:82:CF:9E:F6:DD:C0:AD:0F:5F:F4:15:17:E9:69:43:AD:C8:26:93 X509v3 Authority Key Identifier: keyid:E7:9C:D2:08:E9:4D:E9:50:BE:3E:A9:FA:A6:EF:80:7B:4E:90:59:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55zSCOlN6VC-Pqn6pu-Ae06QWXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/D0A3F15AC94A11ED9CF16D3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.119.176.0/23 IPv6: 2001:df2:2fc0::/48 Signature Algorithm: sha256WithRSAEncryption 65:78:de:16:8d:1f:0d:d7:2f:5f:f7:c3:74:d0:8a:75:f7:86: b9:75:a4:ae:50:ea:e1:dd:34:8e:47:14:8f:89:7f:f0:d6:d1: 5e:cf:db:a6:d1:d1:ca:39:88:b1:ae:58:53:6b:b4:6e:6b:b8: b8:c6:38:df:10:84:c1:6d:22:07:d7:0f:e3:be:63:6d:c3:f8: 02:dc:b5:59:fe:94:0e:06:c2:6e:2d:a3:6f:4e:8a:2a:c0:6c: 39:3c:84:14:3e:f7:da:45:88:e8:81:f1:d7:db:ea:c0:6b:db: 87:e2:1b:ab:ac:68:28:33:a4:65:46:db:15:75:ab:cf:f8:a1: d3:49:8f:86:fc:66:d5:22:57:70:a2:1a:19:df:f4:16:90:a5: e7:59:ea:6a:1f:a0:ca:69:bc:55:37:7c:2a:76:1c:d1:d5:08: 2d:09:0c:e2:b9:b6:2d:b8:cd:9c:c5:da:0b:ec:58:bb:9a:e8: 08:0e:19:f4:58:51:ec:3c:3b:2c:ff:75:c7:1f:7f:dc:21:95: 83:49:01:c3:27:01:19:e0:ce:6e:04:d2:4d:f4:64:1b:42:83: da:d1:61:1b:d3:75:4a:df:9b:ab:db:96:96:a3:85:de:97:30: cc:cf:8c:e4:cd:cc:04:22:56:6f:73:fc:78:68:67:29:8a:19: 9a:8a:e2:b9 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE3OTYxMTAvBgNVBAUTKEU3OUNEMjA4RTk0REU5NTBCRTNFQTlGQUE2RUY4MDdC NEU5MDU5NzMwHhcNMjQwNjExMDY0MzE3WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjY3ZjIwNS03N2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3n52CFr9XvbM2k78gWWLr7hzwXym9XPe5i+NFSsZ80l7gfzifVe7QAlcmly akh7lHHu53u2pfZ5lplMhkCJt37vNaVESX7LslBt5+jDAjL8QXZJmOqe1eQj+n+6 apouMrzwqcxYaHpEwWmfIvW3Pf9vTx7HmKGBa8W8unrbYuXF79O1QbJNkJTpHrFU uE6Hmy6spmMOtvM7UbIY9tIyoGoWDD2pkcYHy0Y1KjWbVXsplGc6qnzJHv8K7+Fc HUPXPHEz5DIQD464OfQrR4Fj78lan8u3Hp+fSfH8qG6VTT5Rea3OX8S6/cW5mH66 bqNlpEEnox5YZyxJm5eJw0KHRwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBWCz572 3cCtD1/0FRfpaUOtyCaTMB8GA1UdIwQYMBaAFOec0gjpTelQvj6p+qbvgHtOkFlz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTc5Ni9FNzQzNTIzQ0M5 NDcxMUVEOEFDQzY1M0RDNEY5QUUwMi81NXpTQ09sTjZWQy1QcW42cHUtQWUwNlFX WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU1elNDT2xONlZDLVBxbjZwdS1BZTA2UVdYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDE3OTYvRTc0MzUyM0NDOTQ3MTFFRDhBQ0M2NTNEQzRGOUFFMDIvRDBBM0YxNUFD OTRBMTFFRDlDRjE2RDNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnd7AwDwQCAAIwCQMHACABDfIvwDANBgkqhkiG9w0BAQsF AAOCAQEAZXjeFo0fDdcvX/fDdNCKdfeGuXWkrlDq4d00jkcUj4l/8NbRXs/bptHR yjmIsa5YU2u0bmu4uMY43xCEwW0iB9cP475jbcP4Aty1Wf6UDgbCbi2jb06KKsBs OTyEFD732kWI6IHx19vqwGvbh+Ibq6xoKDOkZUbbFXWrz/ih00mPhvxm1SJXcKIa Gd/0FpCl51nqah+gymm8VTd8KnYc0dUILQkM4rm2LbjNnMXaC+xYu5roCA4Z9FhR 7Dw7LP91xx9/3CGVg0kBwycBGeDObgTSTfRkG0KD2tFhG9N1St+bq9uWlqOF3pcw zM+M5M3MBCJWb3P8eGhnKYoZmoriuQ== -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:47 2024 by rpki-client on console-fra.rpki-client.org