$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/A6864ACE7BA911EDB41A851EC4F9AE02.roa File: A6864ACE7BA911EDB41A851EC4F9AE02.roa (raw, json) Hash identifier: kYULKBF0f+X2lym6gobBhgJLTHESp77NMJYuJ7TqmJw= Subject key identifier: A5:8A:8C:A5:60:24:90:B1:3F:69:33:65:49:26:27:5F:B7:4D:4B:75 Certificate issuer: /CN=A9143FE9/serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254 Certificate serial: 0672 Authority key identifier: 15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/A6864ACE7BA911EDB41A851EC4F9AE02.roa Signing time: Fri 02 Aug 2024 12:45:09 +0000 ROA not before: Fri 02 Aug 2024 12:45:09 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 134465 IP address blocks: 103.160.144.0/23 maxlen: 23 103.160.144.0/24 maxlen: 24 2001:df5:a380::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1650 (0x672) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143FE9/serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254 Validity Not Before: Aug 2 12:45:09 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=66acd4d5-7bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f2:bf:38:7c:a8:bc:0d:14:61:2f:77:19:da: b7:60:61:45:e3:4d:a6:d3:74:8c:4c:43:a3:3f:92: cb:ba:ea:db:ea:50:63:9c:a0:9b:5c:1e:f0:7c:b1: da:a2:57:02:5f:5f:78:e2:72:90:96:85:e8:0b:96: 6d:8e:2d:b4:c0:d5:1e:f6:b9:46:18:29:a2:36:db: e3:93:63:48:13:aa:b8:97:91:87:08:ba:a2:0b:03: 85:fa:5a:ec:d7:69:27:d5:45:a3:3f:4d:47:32:2f: bf:ed:b2:d3:e3:3f:70:b7:5f:b3:41:c2:f9:4e:21: 02:96:67:46:a0:4d:23:d0:36:41:a1:97:f6:4c:de: 03:23:d7:f1:6b:fa:e1:55:57:73:e5:96:74:25:75: 22:90:12:28:5f:ef:95:ff:d8:e8:79:a0:7a:be:5e: 04:54:bc:1f:dc:59:3a:7e:02:2d:ff:5f:ab:47:75: a6:22:88:0c:48:83:98:72:3c:8c:72:35:ee:6b:30: cc:cc:ad:ea:9a:c3:78:7b:41:d3:6a:e1:10:32:a6: f9:c0:85:89:b4:63:4a:f5:9d:78:2a:19:07:fd:9a: 47:9a:8f:7d:9a:d8:6b:d8:d8:02:f6:fb:7f:7c:42: ca:ef:96:5f:ac:cb:ff:24:c0:8a:be:78:fb:dd:0c: 50:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:8A:8C:A5:60:24:90:B1:3F:69:33:65:49:26:27:5F:B7:4D:4B:75 X509v3 Authority Key Identifier: keyid:15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/A6864ACE7BA911EDB41A851EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.160.144.0/23 IPv6: 2001:df5:a380::/48 Signature Algorithm: sha256WithRSAEncryption 9a:e6:41:88:48:2a:94:f7:47:3b:63:28:9c:1d:8f:ab:8a:b6: be:39:6b:2f:3d:6a:89:43:ee:39:2b:94:43:e8:43:7c:17:fc: 59:45:36:6f:32:3e:cf:05:4c:6b:7d:a9:8f:5b:13:f8:3f:7c: ba:c9:15:55:0a:61:a1:1a:fd:ba:9e:71:96:78:8c:4a:0b:af: 24:2f:d2:66:70:ab:79:77:3a:4e:6f:45:62:67:e3:62:cd:6f: b5:a4:be:4d:20:b8:62:81:00:5d:b3:07:fe:27:2f:61:be:14: fc:93:d1:97:bc:a1:d3:82:26:fa:04:98:62:b5:65:30:30:cf: 3d:82:6e:bd:d0:32:df:8e:fb:56:3e:3d:63:0e:77:8c:bb:8d: b0:18:ce:d4:f3:e0:06:60:fe:c7:fe:46:ed:c7:a8:75:68:48: f2:55:50:12:21:66:2c:70:d9:a7:47:fd:eb:2f:51:e8:1f:ab: 16:cc:8b:2d:0d:27:c4:ce:a6:4c:12:29:1f:95:34:26:d5:8d: b0:d8:a8:33:52:89:08:6e:0a:da:89:81:71:5f:8c:a7:2f:28: 17:da:6b:4e:fe:33:eb:cf:08:00:70:e3:06:3c:89:13:e5:ab: 47:ed:f0:c3:2d:18:2a:07:c9:e8:bb:0a:30:95:36:37:b4:94: 00:b2:66:58 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGRTkxMTAvBgNVBAUTKDE1MjBGMkIzNEFCRERDQUU5NEZBOTIyRUY0NzU3Q0Qz NjE0MEYyNTQwHhcNMjQwODAyMTI0NTA5WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmFjZDRkNS03YmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfK/OHyovA0UYS93Gdq3YGFF402m03SMTEOjP5LLuurb6lBjnKCbXB7wfLHa olcCX1944nKQloXoC5Ztji20wNUe9rlGGCmiNtvjk2NIE6q4l5GHCLqiCwOF+lrs 12kn1UWjP01HMi+/7bLT4z9wt1+zQcL5TiEClmdGoE0j0DZBoZf2TN4DI9fxa/rh VVdz5ZZ0JXUikBIoX++V/9joeaB6vl4EVLwf3Fk6fgIt/1+rR3WmIogMSIOYcjyM cjXuazDMzK3qmsN4e0HTauEQMqb5wIWJtGNK9Z14KhkH/ZpHmo99mthr2NgC9vt/ fELK75ZfrMv/JMCKvnj73QxQEQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKWKjKVg JJCxP2kzZUkmJ1+3TUt1MB8GA1UdIwQYMBaAFBUg8rNKvdyulPqSLvR1fNNhQPJU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0ZFOS9GOUU2NUUyMDQ0 MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNLNlUtcEl1OUhWODAyRkE4 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTRHlzMHE5M0s2VS1wSXU5SFY4MDJGQThsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDNGRTkvRjlFNjVFMjA0NDM4MTFFQkFENDQzRjc0QzRGOUFFMDIvQTY4NjRBQ0U3 QkE5MTFFREI0MUE4NTFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnoJAwDwQCAAIwCQMHACABDfWjgDANBgkqhkiG9w0BAQsF AAOCAQEAmuZBiEgqlPdHO2MonB2Pq4q2vjlrLz1qiUPuOSuUQ+hDfBf8WUU2bzI+ zwVMa32pj1sT+D98uskVVQphoRr9up5xlniMSguvJC/SZnCreXc6Tm9FYmfjYs1v taS+TSC4YoEAXbMH/icvYb4U/JPRl7yh04Im+gSYYrVlMDDPPYJuvdAy3477Vj49 Yw53jLuNsBjO1PPgBmD+x/5G7ceodWhI8lVQEiFmLHDZp0f96y9R6B+rFsyLLQ0n xM6mTBIpH5U0JtWNsNioM1KJCG4K2omBcV+Mpy8oF9prTv4z688IAHDjBjyJE+Wr R+3wwy0YKgfJ6LsKMJU2N7SUALJmWA== -----END CERTIFICATE-----Generated at Wed Nov 20 23:11:44 2024 by rpki-client on console-fra.rpki-client.org