$ rpki-client -vvf rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/67CDF190321211EEA6FE6D43C4F9AE02.roa File: 67CDF190321211EEA6FE6D43C4F9AE02.roa (raw, json) Hash identifier: vFUGfYTbO0hXtZL5WrXZO6Ff20WnBskmHAy+Zz+UlEY= Subject key identifier: 8B:52:23:65:C9:F1:4B:3D:72:DE:CF:17:61:78:BE:7D:89:2B:ED:92 Certificate issuer: /CN=A9146ABC/serialNumber=574985E26D8C7716B09ED50319B4CE64961DE70D Certificate serial: EA Authority key identifier: 57:49:85:E2:6D:8C:77:16:B0:9E:D5:03:19:B4:CE:64:96:1D:E7:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/67CDF190321211EEA6FE6D43C4F9AE02.roa Signing time: Wed 09 Oct 2024 04:18:34 +0000 ROA not before: Wed 09 Oct 2024 04:18:34 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 6939 IP address blocks: 103.100.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.crl rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 03:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146ABC/serialNumber=574985E26D8C7716B09ED50319B4CE64961DE70D Validity Not Before: Oct 9 04:18:34 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6706041a-d659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:93:ce:e5:e2:47:5c:de:b5:d2:40:47:cb:05: c5:a6:0d:79:71:d6:29:ee:d8:af:4d:0c:62:8e:9f: 18:89:0d:84:16:cb:a9:9f:fe:3c:22:41:e8:f9:c3: 48:4e:f0:ba:22:85:ff:52:1c:39:18:8d:65:96:e7: da:f3:5a:54:13:04:42:e5:c3:71:bb:3e:3f:5b:a8: e6:1c:33:a4:4b:41:7a:07:a1:01:13:13:f9:08:50: e1:66:77:f3:2b:14:d2:f9:f5:42:44:a0:62:64:cb: 5a:7e:47:e2:92:8b:f2:ef:56:06:99:e7:e0:89:35: ea:ab:a0:8f:e9:f4:24:2d:1b:c3:2f:f9:e9:01:d6: 36:6e:72:fc:ea:ed:46:5a:53:bb:1d:3d:07:65:36: 71:31:8d:a1:42:e3:b0:eb:21:99:5b:d9:e8:af:ed: a6:3b:e9:3b:20:36:14:1e:db:2b:07:1d:e1:ae:8c: 45:d5:ab:b2:1f:e8:72:58:20:de:40:02:91:a0:ca: 5f:71:12:43:56:30:e0:2a:0b:f5:ca:1a:96:d1:5a: b2:ba:d7:6c:a6:85:d3:42:55:38:15:46:3b:4b:cb: 55:d3:66:24:dc:8c:bc:1f:e6:26:15:d0:68:03:7f: 9d:82:57:55:3c:cc:b3:cb:82:3a:51:58:c6:fc:51: f4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:52:23:65:C9:F1:4B:3D:72:DE:CF:17:61:78:BE:7D:89:2B:ED:92 X509v3 Authority Key Identifier: keyid:57:49:85:E2:6D:8C:77:16:B0:9E:D5:03:19:B4:CE:64:96:1D:E7:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/67CDF190321211EEA6FE6D43C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.100.138.0/24 Signature Algorithm: sha256WithRSAEncryption aa:a8:b1:57:f9:41:ae:e2:02:97:1e:f6:c6:3d:bc:4d:04:8b: 15:9c:bc:ab:8b:b6:d6:26:75:5d:38:af:66:c5:4e:6b:2d:e8: df:af:b6:df:6f:a6:cc:2f:78:56:d8:81:4a:26:2b:4e:d8:da: e3:13:90:aa:a0:98:a7:34:b4:0d:de:94:b1:8a:b0:39:94:7f: 8c:21:98:91:d3:05:f9:ea:09:76:da:a8:e0:80:b0:06:dc:80: 2b:e5:01:fe:d5:d8:58:94:d9:9b:dc:58:14:bf:34:01:6f:72: f2:66:c8:6c:3f:46:05:41:f0:56:f6:7f:de:f7:bd:42:1f:02: ae:df:a4:68:0f:4e:fb:b4:18:4e:c7:c1:85:cd:1a:b5:8f:44: 2f:e0:25:c1:71:c3:2f:73:a1:b3:6b:7d:7d:89:b7:50:87:0e: f8:ad:2b:8b:81:7a:ae:d0:57:d8:44:c6:9c:e0:37:00:81:5d: 48:72:b8:5c:b5:50:96:51:7f:e5:37:1a:f9:49:26:9d:79:17: 7c:c8:22:c1:0f:e1:f7:e5:59:89:ab:f9:e7:3d:39:12:b8:32: 8d:67:4e:70:9c:b6:40:38:b0:10:bd:39:35:25:56:3f:6b:cb: 50:19:00:fe:a8:0f:4d:43:a4:6b:e2:18:e1:52:6e:c3:0f:f3: 5a:39:b4:ed -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBQkMxMTAvBgNVBAUTKDU3NDk4NUUyNkQ4Qzc3MTZCMDlFRDUwMzE5QjRDRTY0 OTYxREU3MEQwHhcNMjQxMDA5MDQxODM0WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzA2MDQxYS1kNjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA65PO5eJHXN610kBHywXFpg15cdYp7tivTQxijp8YiQ2EFsupn/48IkHo+cNI TvC6IoX/Uhw5GI1llufa81pUEwRC5cNxuz4/W6jmHDOkS0F6B6EBExP5CFDhZnfz KxTS+fVCRKBiZMtafkfikovy71YGmefgiTXqq6CP6fQkLRvDL/npAdY2bnL86u1G WlO7HT0HZTZxMY2hQuOw6yGZW9nor+2mO+k7IDYUHtsrBx3hroxF1auyH+hyWCDe QAKRoMpfcRJDVjDgKgv1yhqW0VqyutdspoXTQlU4FUY7S8tV02Yk3Iy8H+YmFdBo A3+dgldVPMyzy4I6UVjG/FH00QIDAQABo4IClTCCApEwHQYDVR0OBBYEFItSI2XJ 8Us9ct7PF2F4vn2JK+2SMB8GA1UdIwQYMBaAFFdJheJtjHcWsJ7VAxm0zmSWHecN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkFCQy9GMEU3OTg3QzMw RUMxMUVFOTgwRUIyNDdDNEY5QUUwMi9WMG1GNG0yTWR4YXdudFVER2JUT1pKWWQ1 dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1YwbUY0bTJNZHhhd250VURHYlRPWkpZZDV3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDZBQkMvRjBFNzk4N0MzMEVDMTFFRTk4MEVCMjQ3QzRGOUFFMDIvNjdDREYxOTAz MjEyMTFFRUE2RkU2RDQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnZIowDQYJKoZIhvcNAQELBQADggEBAKqosVf5Qa7iApce 9sY9vE0EixWcvKuLttYmdV04r2bFTmst6N+vtt9vpswveFbYgUomK07Y2uMTkKqg mKc0tA3elLGKsDmUf4whmJHTBfnqCXbaqOCAsAbcgCvlAf7V2FiU2ZvcWBS/NAFv cvJmyGw/RgVB8Fb2f973vUIfAq7fpGgPTvu0GE7HwYXNGrWPRC/gJcFxwy9zobNr fX2Jt1CHDvitK4uBeq7QV9hExpzgNwCBXUhyuFy1UJZRf+U3GvlJJp15F3zIIsEP 4fflWYmr+ec9ORK4Mo1nTnCctkA4sBC9OTUlVj9ry1AZAP6oD01DpGviGOFSbsMP 81o5tO0= -----END CERTIFICATE-----Generated at Mon Nov 25 04:43:53 2024 by rpki-client on console-ams.rpki-client.org