$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/485B32A8607B11EFB27C6C5DC4F9AE02.roa File: 485B32A8607B11EFB27C6C5DC4F9AE02.roa (raw, json) Hash identifier: g7W9G3ij02vVGRhQiw6Ym1yygIWGPWKSpCEET+ZTaHQ= Subject key identifier: 1A:12:09:DC:7B:CC:8A:72:D9:32:0F:80:60:ED:79:0C:D2:A2:75:DB Certificate issuer: /CN=A9143B0A/serialNumber=099506EC987C8B19405853B08C718B5BBE4AC692 Certificate serial: 02 Authority key identifier: 09:95:06:EC:98:7C:8B:19:40:58:53:B0:8C:71:8B:5B:BE:4A:C6:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/485B32A8607B11EFB27C6C5DC4F9AE02.roa Signing time: Thu 22 Aug 2024 11:40:08 +0000 ROA not before: Thu 22 Aug 2024 11:40:08 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 136812 IP address blocks: 103.121.232.0/24 maxlen: 24 103.121.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.crl rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B0A/serialNumber=099506EC987C8B19405853B08C718B5BBE4AC692 Validity Not Before: Aug 22 11:40:08 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66c72398-52ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:04:56:34:55:0b:2b:38:45:23:a3:f3:c0:28: 4f:58:fd:ef:a4:27:25:b0:54:18:5a:2c:3b:3d:f9: c5:62:79:bf:64:3f:19:46:50:cd:a2:76:77:6d:a2: 62:8f:06:76:6c:a5:f5:b6:67:93:e0:3c:0c:8d:48: b9:42:85:a5:18:38:af:3a:88:f0:12:d1:3c:45:1e: cc:1e:2d:fa:7f:f1:bb:1c:6f:7f:db:4e:f9:80:f6: bc:af:6e:3c:46:3f:eb:70:4b:ad:d9:26:37:54:83: 6a:3d:7e:fd:5c:3f:8b:a2:3d:01:e6:eb:0f:00:90: d1:71:a2:84:c3:f2:cc:60:4a:02:59:c1:ca:f9:a7: f5:a9:40:6e:b7:77:eb:29:74:d2:3b:1c:ac:30:49: 09:e1:59:40:af:a1:47:85:9f:ca:3c:79:42:43:b0: 9f:8a:9d:55:1e:c0:60:9a:8e:07:76:94:30:53:fa: 47:76:58:61:56:4e:c8:e7:03:51:8c:bc:ae:90:4e: 34:3c:9d:de:32:62:9c:b2:2c:fa:b1:9c:cc:d3:54: 7e:b7:f0:bb:5f:1d:ee:9c:93:41:a1:f9:7b:cd:b5: 70:88:ca:c2:c8:97:f2:3a:7f:e4:ac:1b:f3:f0:58: 00:c3:35:78:0c:9b:06:ed:7d:62:44:18:03:e8:82: bd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:12:09:DC:7B:CC:8A:72:D9:32:0F:80:60:ED:79:0C:D2:A2:75:DB X509v3 Authority Key Identifier: keyid:09:95:06:EC:98:7C:8B:19:40:58:53:B0:8C:71:8B:5B:BE:4A:C6:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/485B32A8607B11EFB27C6C5DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.121.232.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:17:44:8f:59:f3:ba:d2:46:8f:30:1e:c0:31:1b:a0:62:c9: 7a:f6:52:b1:74:5d:da:ff:9a:7d:a9:7e:38:58:fc:8a:0b:9a: 34:7e:eb:d8:59:fa:98:eb:43:10:2a:ef:68:e2:cf:94:8a:b2: eb:97:1c:4a:bd:55:bb:1e:8c:2a:27:fd:db:d8:9b:81:cb:73: a1:ba:f9:ab:94:3b:da:4a:ac:f6:67:cb:a0:5b:2e:82:29:a9: 3b:da:85:ea:fd:53:3b:cb:54:5e:95:aa:dd:31:c0:22:22:b0: 68:e6:46:ac:5c:3d:9b:73:d0:7f:8e:5e:7f:76:ca:b3:f4:c6: 7f:d0:fb:e1:82:23:c2:35:e3:e5:b0:49:fe:9f:eb:ab:74:7d: e9:2c:68:d2:91:1c:6b:26:9a:87:b1:24:b5:66:f3:7f:f7:b6: eb:c0:cb:b1:a0:ca:6e:01:b8:9e:04:86:41:10:76:a4:ca:cf: a0:18:43:af:a0:f9:c4:2a:cf:58:9f:fa:45:03:64:7a:77:60: 95:84:9b:4c:dd:ba:91:41:fd:31:d1:a4:79:be:8e:5d:46:9a: a8:e8:9f:de:57:ea:bf:d0:77:b3:7f:a3:fa:36:6d:0c:9a:4f: 11:1d:c0:6c:13:10:63:6a:4a:ac:91:3a:ab:d3:d6:8f:fc:b6: a6:c1:d4:41 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 M0IwQTExMC8GA1UEBRMoMDk5NTA2RUM5ODdDOEIxOTQwNTg1M0IwOEM3MThCNUJC RTRBQzY5MjAeFw0yNDA4MjIxMTQwMDhaFw0yNTEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YzcyMzk4LTUyYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZBFY0VQsrOEUjo/PAKE9Y/e+kJyWwVBhaLDs9+cVieb9kPxlGUM2idndtomKP BnZspfW2Z5PgPAyNSLlChaUYOK86iPAS0TxFHsweLfp/8bscb3/bTvmA9ryvbjxG P+twS63ZJjdUg2o9fv1cP4uiPQHm6w8AkNFxooTD8sxgSgJZwcr5p/WpQG63d+sp dNI7HKwwSQnhWUCvoUeFn8o8eUJDsJ+KnVUewGCajgd2lDBT+kd2WGFWTsjnA1GM vK6QTjQ8nd4yYpyyLPqxnMzTVH638LtfHe6ck0Gh+XvNtXCIysLIl/I6f+SsG/Pw WADDNXgMmwbtfWJEGAPogr0jAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUGhIJ3HvM inLZMg+AYO15DNKiddswHwYDVR0jBBgwFoAUCZUG7Jh8ixlAWFOwjHGLW75KxpIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzQjBBL0Q1REI2REY2NjA3 QTExRUY4NjlBQTY1Q0M0RjlBRTAyL0NaVUc3Smg4aXhsQVdGT3dqSEdMVzc1S3hw SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1pVRzdKaDhpeGxBV0ZPd2pIR0xXNzVLeHBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0IwQS9ENURCNkRGNjYwN0ExMUVGODY5QUE2NUNDNEY5QUUwMi80ODVCMzJBODYw N0IxMUVGQjI3QzZDNURDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWd56DANBgkqhkiG9w0BAQsFAAOCAQEAPRdEj1nzutJGjzAe wDEboGLJevZSsXRd2v+afal+OFj8iguaNH7r2Fn6mOtDECrvaOLPlIqy65ccSr1V ux6MKif929ibgctzobr5q5Q72kqs9mfLoFsugimpO9qF6v1TO8tUXpWq3THAIiKw aOZGrFw9m3PQf45ef3bKs/TGf9D74YIjwjXj5bBJ/p/rq3R96Sxo0pEcayaah7Ek tWbzf/e268DLsaDKbgG4ngSGQRB2pMrPoBhDr6D5xCrPWJ/6RQNkendglYSbTN26 kUH9MdGkeb6OXUaaqOif3lfqv9B3s3+j+jZtDJpPER3AbBMQY2pKrJE6q9PWj/y2 psHUQQ== -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:02 2024 by rpki-client on console-ams.rpki-client.org