$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/BCE8827C4EB011ECA708A867C4F9AE02.roa File: BCE8827C4EB011ECA708A867C4F9AE02.roa (raw, json) Hash identifier: YiFunTZL5LVn069EwrhiVsys5tG1ZsT1/SQk8scoDqU= Subject key identifier: 7C:A8:2C:25:77:81:DD:E3:E2:F4:14:B9:A1:53:C2:95:CB:73:FF:6A Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Certificate serial: 04A0 Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/BCE8827C4EB011ECA708A867C4F9AE02.roa Signing time: Tue 03 Sep 2024 01:15:47 +0000 ROA not before: Tue 03 Sep 2024 01:15:47 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 209242 IP address blocks: 103.172.110.0/23 maxlen: 23 103.204.13.0/24 maxlen: 24 2001:df7:6e80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1184 (0x4a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Validity Not Before: Sep 3 01:15:47 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66d66343-6262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:35:9d:fe:c2:01:6d:50:73:30:f5:9a:28:90: 19:0f:71:2c:a0:9c:6f:f6:42:1e:fd:22:4b:1d:bc: 1c:ba:9b:11:c2:d2:a9:22:81:de:4d:d5:23:c4:41: 39:3e:10:e9:31:77:5d:38:b8:f8:11:36:da:b8:ca: b4:d2:0f:55:de:5f:18:5f:18:cd:6e:c3:ea:1f:ac: f8:f3:e4:78:c0:9f:39:a6:65:20:0d:39:e2:68:20: 8f:2b:02:61:e0:cb:37:fc:d8:dd:56:66:26:85:af: 94:77:22:6a:b4:ba:f8:b6:08:7c:8e:bb:93:a3:27: 32:fb:97:61:a5:b4:d8:02:77:8c:14:12:75:93:5e: 78:6e:4e:63:f8:35:f7:54:cd:d8:1f:fe:df:6e:97: ba:f4:13:45:00:c6:a3:59:5a:04:36:69:d1:c7:77: a5:bd:93:5f:87:62:6e:14:d1:63:d1:7b:91:65:e1: e8:3f:f1:c6:6c:9e:4b:c9:03:db:a4:17:ec:ae:c8: 64:75:0a:da:4b:c4:56:c6:16:72:3c:a6:82:ed:cf: 11:8f:c4:a7:c3:3a:7e:80:7a:f5:b0:cd:ba:09:24: 11:68:f2:cb:65:75:f1:f8:ef:c6:f1:a0:24:ec:c7: b1:bf:53:8a:52:44:51:ea:a5:e0:37:a3:1b:50:d5: bb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A8:2C:25:77:81:DD:E3:E2:F4:14:B9:A1:53:C2:95:CB:73:FF:6A X509v3 Authority Key Identifier: keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/BCE8827C4EB011ECA708A867C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.172.110.0/23 103.204.13.0/24 IPv6: 2001:df7:6e80::/48 Signature Algorithm: sha256WithRSAEncryption 07:28:4d:9c:2a:83:17:35:96:7e:0f:07:3c:52:40:72:68:cb: 1f:2a:5b:ae:5e:88:2f:53:11:11:3e:d2:be:6f:f5:5f:57:d0: bb:aa:d1:c5:5f:ba:63:48:44:c6:60:7a:69:da:f1:d5:24:69: 22:a0:47:93:12:69:eb:91:2c:bc:39:2b:ed:04:c9:3d:fb:39: 8d:38:db:b1:12:5e:40:06:da:2f:a7:94:9b:67:82:fb:36:77: 00:c2:6c:62:2a:f9:bf:39:2b:30:da:75:f5:25:34:20:2f:4e: f3:73:fc:e0:ef:96:90:7f:bd:de:6b:08:65:5e:81:62:b0:5f: 64:c3:99:0a:9e:8a:ec:ce:22:40:9f:8b:6d:47:e7:e1:ed:ac: 58:5e:02:ce:12:cc:53:9f:5e:78:f1:67:39:60:bd:0c:8b:23: 67:86:38:71:19:9f:49:f9:7b:1f:2a:e5:ef:01:ba:e7:a3:03: 87:a0:8a:35:c3:cf:45:d7:87:e2:95:c4:f1:6c:b8:35:2c:7d: f8:60:e5:b6:b9:44:27:1b:51:a1:0e:50:22:b3:ca:41:83:ba: b0:49:19:84:75:5b:b3:4f:80:07:2d:c6:44:7c:d2:54:70:d8: 00:9c:a6:f0:f6:ad:3c:4d:0a:72:1f:35:b5:49:43:a1:c2:ea: e9:92:d4:42 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICBKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYzQTRDQUE2REE0 MjQ5NjI5MUQwHhcNMjQwOTAzMDExNTQ3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ2NjM0My02MjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszWd/sIBbVBzMPWaKJAZD3EsoJxv9kIe/SJLHbwcupsRwtKpIoHeTdUjxEE5 PhDpMXddOLj4ETbauMq00g9V3l8YXxjNbsPqH6z48+R4wJ85pmUgDTniaCCPKwJh 4Ms3/NjdVmYmha+UdyJqtLr4tgh8jruToycy+5dhpbTYAneMFBJ1k154bk5j+DX3 VM3YH/7fbpe69BNFAMajWVoENmnRx3elvZNfh2JuFNFj0XuRZeHoP/HGbJ5LyQPb pBfsrshkdQraS8RWxhZyPKaC7c8Rj8Snwzp+gHr1sM26CSQRaPLLZXXx+O/G8aAk 7Mexv1OKUkRR6qXgN6MbUNW79QIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFHyoLCV3 gd3j4vQUuaFTwpXLc/9qMB8GA1UdIwQYMBaAFMLyjp0YhDnE/mn2OkyqbaQklikd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQyNS82N0YyQjBEODBC RDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9jVC1hZlk2VEtwdHBDU1dL UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d2S09uUmlFT2NULWFmWTZUS3B0cENTV0tSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDVEMjUvNjdGMkIwRDgwQkQyMTFFQ0JBQTQ4MDZBQzRGOUFFMDIvQkNFODgyN0M0 RUIwMTFFQ0E3MDhBODY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAFnrG4DBABnzA0wDwQCAAIwCQMHACABDfdugDANBgkqhkiG 9w0BAQsFAAOCAQEAByhNnCqDFzWWfg8HPFJAcmjLHypbrl6IL1MRET7Svm/1X1fQ u6rRxV+6Y0hExmB6adrx1SRpIqBHkxJp65EsvDkr7QTJPfs5jTjbsRJeQAbaL6eU m2eC+zZ3AMJsYir5vzkrMNp19SU0IC9O83P84O+WkH+93msIZV6BYrBfZMOZCp6K 7M4iQJ+LbUfn4e2sWF4CzhLMU59eePFnOWC9DIsjZ4Y4cRmfSfl7Hyrl7wG656MD h6CKNcPPRdeH4pXE8Wy4NSx9+GDltrlEJxtRoQ5QIrPKQYO6sEkZhHVbs0+ABy3G RHzSVHDYAJym8PatPE0Kch81tUlDocLq6ZLUQg== -----END CERTIFICATE-----Generated at Thu Nov 21 01:25:57 2024 by rpki-client on console-ams.rpki-client.org