$ rpki-client -vvf rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/85EAFFD806F911EC9558C827C4F9AE02.roa File: 85EAFFD806F911EC9558C827C4F9AE02.roa (raw, json) Hash identifier: 9v3EHVS6OF29hHJXAC8+0BpNbFO1DRfm0tNrOjvIm8c= Subject key identifier: 82:CE:BA:7B:02:17:F8:42:55:91:C2:E6:77:91:BA:8E:0F:F8:89:4F Certificate issuer: /CN=A9144266/serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D Certificate serial: 04A9 Authority key identifier: 2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/85EAFFD806F911EC9558C827C4F9AE02.roa Signing time: Fri 11 Oct 2024 00:03:41 +0000 ROA not before: Fri 11 Oct 2024 00:03:41 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 146988 IP address blocks: 103.172.112.0/24 maxlen: 24 103.172.113.0/24 maxlen: 24 2001:df7:6f80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.crl rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1193 (0x4a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144266/serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D Validity Not Before: Oct 11 00:03:41 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=67086b5d-6568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:72:29:e9:03:65:22:bc:27:a0:a0:e1:56:29: d0:0f:d5:fa:37:c6:e5:e6:10:c1:1f:18:f1:b8:65: 6c:d7:8d:da:17:e9:ee:90:56:10:f5:75:7a:2f:d9: 5b:76:6d:b5:3a:d2:4a:56:d1:4f:6d:c2:dc:2f:9b: 6d:fa:8a:ac:79:1c:e2:d2:3b:6c:cb:79:69:0d:8c: be:6f:e2:c6:ba:2d:19:95:89:64:44:04:a9:87:06: c2:79:6a:dc:cd:43:d1:56:65:e8:2b:f6:79:c2:4e: 31:a3:28:2e:17:e9:e4:66:7e:8c:3b:9e:9e:65:af: e3:1a:db:da:d8:c8:8e:55:0a:57:78:62:d8:fc:d5: 96:ca:d9:90:db:43:c2:a9:9f:aa:f6:e8:fa:57:49: 80:31:f4:9c:29:b2:85:2a:90:0b:4f:57:bb:65:a8: b8:f5:7a:b5:22:e7:cf:f4:e9:90:db:43:df:79:8f: db:a6:9b:36:f1:9c:21:64:c5:6f:44:58:54:2e:fa: e7:a5:37:6b:66:be:21:48:49:7e:7b:4b:4b:8a:2b: 8e:66:50:a0:a8:7f:5a:5b:c2:5c:df:5d:58:18:d8: 1f:85:b3:0a:5e:45:d9:19:d1:50:02:dd:49:45:0e: 5a:c2:0e:e1:e5:80:cf:48:a3:5c:10:7a:8b:fb:26: e0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CE:BA:7B:02:17:F8:42:55:91:C2:E6:77:91:BA:8E:0F:F8:89:4F X509v3 Authority Key Identifier: keyid:2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/85EAFFD806F911EC9558C827C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.172.112.0/23 IPv6: 2001:df7:6f80::/48 Signature Algorithm: sha256WithRSAEncryption cc:d7:3f:e8:23:9f:13:94:45:b7:ab:be:b7:0c:ff:5a:68:83: c1:6d:77:bd:1e:85:aa:5c:71:d7:7d:c7:11:c4:32:4e:91:ec: 46:6e:e0:80:8e:2c:70:1f:6f:3f:8b:28:0f:8e:92:f6:c6:b0: a5:a6:eb:07:c3:b6:b7:50:68:36:7b:4b:6f:c6:ab:78:1b:e6: 47:81:91:b6:27:73:31:9e:bd:d2:94:d7:47:3b:2f:58:9e:90: 1e:d4:35:b2:c9:3e:47:f6:0f:fb:09:28:e6:cc:f4:8b:7c:93: 78:2d:0b:56:03:57:0f:d1:01:02:a2:56:58:94:2d:90:33:31: 17:91:27:3e:4a:aa:22:90:24:a0:76:a3:e6:f9:2d:00:be:21: 41:c7:91:f4:97:ac:c7:84:06:2f:20:a3:11:e9:b9:cb:8d:8e: b1:91:1a:1f:02:5a:77:ae:14:26:ab:16:40:09:5e:66:5d:d5: 1c:82:c6:54:dc:21:75:fa:f4:ed:bf:d8:16:fa:89:6e:10:d4: bb:c3:96:78:a1:20:26:a2:b0:4e:3b:2d:a1:be:2f:ac:76:56: ed:92:80:14:6c:7b:c5:35:a4:d8:49:4a:91:09:7b:30:b7:e4: ca:e2:50:3c:13:ac:59:47:86:1c:71:ba:b5:9f:03:f5:d4:fc: 1a:6c:0e:de -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQyNjYxMTAvBgNVBAUTKDJGOUFDNjhBNkIwMERGNjA1NkY3MEFCQzVBQUM2REI5 MjBBQjFCMUQwHhcNMjQxMDExMDAwMzQxWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzA4NmI1ZC02NTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3XIp6QNlIrwnoKDhVinQD9X6N8bl5hDBHxjxuGVs143aF+nukFYQ9XV6L9lb dm21OtJKVtFPbcLcL5tt+oqseRzi0jtsy3lpDYy+b+LGui0ZlYlkRASphwbCeWrc zUPRVmXoK/Z5wk4xoyguF+nkZn6MO56eZa/jGtva2MiOVQpXeGLY/NWWytmQ20PC qZ+q9uj6V0mAMfScKbKFKpALT1e7Zai49Xq1IufP9OmQ20PfeY/bpps28ZwhZMVv RFhULvrnpTdrZr4hSEl+e0tLiiuOZlCgqH9aW8Jc311YGNgfhbMKXkXZGdFQAt1J RQ5awg7h5YDPSKNcEHqL+ybglQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFILOunsC F/hCVZHC5neRuo4P+IlPMB8GA1UdIwQYMBaAFC+axoprAN9gVvcKvFqsbbkgqxsd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDI2Ni8wRTg1OEUyODA2 Q0IxMUVDOTlCMEVBM0JDNEY5QUUwMi9MNXJHaW1zQTMyQlc5d3E4V3F4dHVTQ3JH eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w1ckdpbXNBMzJCVzl3cThXcXh0dVNDckd4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDQyNjYvMEU4NThFMjgwNkNCMTFFQzk5QjBFQTNCQzRGOUFFMDIvODVFQUZGRDgw NkY5MTFFQzk1NThDODI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnrHAwDwQCAAIwCQMHACABDfdvgDANBgkqhkiG9w0BAQsF AAOCAQEAzNc/6COfE5RFt6u+twz/WmiDwW13vR6Fqlxx133HEcQyTpHsRm7ggI4s cB9vP4soD46S9sawpabrB8O2t1BoNntLb8areBvmR4GRtidzMZ690pTXRzsvWJ6Q HtQ1ssk+R/YP+wko5sz0i3yTeC0LVgNXD9EBAqJWWJQtkDMxF5EnPkqqIpAkoHaj 5vktAL4hQceR9Jesx4QGLyCjEem5y42OsZEaHwJad64UJqsWQAleZl3VHILGVNwh dfr07b/YFvqJbhDUu8OWeKEgJqKwTjstob4vrHZW7ZKAFGx7xTWk2ElKkQl7MLfk yuJQPBOsWUeGHHG6tZ8D9dT8GmwO3g== -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:21 2024 by rpki-client on console-ams.rpki-client.org