$ rpki-client -vvf rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/9FB96E16929A11EE8CC5D033C4F9AE02.roa File: 9FB96E16929A11EE8CC5D033C4F9AE02.roa (raw, json) Hash identifier: EsEKbWC4WA6ZCtUbUMwn5+A+yLzgnyso48+dg3mdnLg= Subject key identifier: C2:C9:00:7A:25:E2:0E:ED:C2:59:F0:E2:34:DC:5A:A1:98:FD:0E:48 Certificate issuer: /CN=A9147C4C/serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866 Certificate serial: 0832 Authority key identifier: 2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/9FB96E16929A11EE8CC5D033C4F9AE02.roa Signing time: Mon 12 Aug 2024 21:18:54 +0000 ROA not before: Mon 12 Aug 2024 21:18:54 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 29066 IP address blocks: 103.66.180.0/22 maxlen: 24 103.244.112.0/22 maxlen: 24 2406:f380::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2098 (0x832) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147C4C/serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866 Validity Not Before: Aug 12 21:18:54 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66ba7c3d-29c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:63:f8:cf:fd:9e:5c:9d:bc:ea:25:9c:f4:b4: d7:cf:53:e2:71:ec:1a:e0:17:5f:71:c2:5f:8d:0c: 31:7e:19:a2:96:59:92:6f:b9:f1:89:9d:2b:50:f9: fb:c1:b4:87:91:06:88:15:a5:fe:a5:fa:cb:e9:20: f8:32:3a:30:b2:53:c2:98:b8:10:ef:92:72:c9:a9: 05:56:54:dc:aa:a3:2f:ee:e9:75:9b:d2:57:10:f6: 6c:71:66:a3:10:6d:90:fa:15:76:b6:51:fd:d5:0f: 3c:94:46:1e:84:8d:57:3f:f4:8d:89:4e:31:f6:6d: 3b:d6:67:9f:b7:ef:60:61:fa:d0:91:6b:dd:d8:76: 39:a6:6f:4f:75:cf:c2:69:f4:1a:8b:4a:21:91:3b: e6:42:1c:74:c0:2e:06:96:c2:9d:48:c5:87:4b:4c: 76:cb:27:36:8a:52:12:03:84:86:ac:83:60:9b:e5: be:e1:56:62:5b:53:fe:b6:eb:bf:0f:a4:e3:20:6f: 25:84:c4:20:60:0e:ed:74:ef:06:84:ce:db:92:ac: 62:2d:c4:7e:af:3e:9c:d6:67:af:73:f9:bc:90:83: 48:f6:04:dd:3f:21:e8:c2:0b:e2:87:92:97:3e:64: c8:cd:55:41:35:bf:b5:60:9c:10:d0:5a:d5:e6:d6: e2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C9:00:7A:25:E2:0E:ED:C2:59:F0:E2:34:DC:5A:A1:98:FD:0E:48 X509v3 Authority Key Identifier: keyid:2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/9FB96E16929A11EE8CC5D033C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.66.180.0/22 103.244.112.0/22 IPv6: 2406:f380::/32 Signature Algorithm: sha256WithRSAEncryption 82:2d:53:20:e7:24:89:fb:8d:b1:dc:42:0e:88:91:84:db:d5: f4:30:a4:d0:45:22:f1:02:70:cf:ad:a0:9b:ed:55:a8:05:05: 25:ce:b3:98:97:74:bb:a8:07:36:99:2e:1e:22:92:0e:b4:a0: fd:d0:c1:25:79:92:e6:30:45:e4:fc:15:de:11:45:7b:a0:bf: 0b:2e:5a:5d:fa:28:0b:65:1b:76:2b:9c:c8:9e:0c:b7:f5:8d: 89:30:a1:0a:d1:3f:d1:ba:bc:fb:7c:fa:c4:75:ec:bd:4e:7e: 38:46:d7:05:6b:00:d8:ff:32:5a:ff:5d:7b:4e:f1:bf:16:d0: 89:09:d1:1a:b2:33:00:04:ac:3a:92:2c:11:2a:a4:84:d9:77: ca:fd:22:29:d4:04:66:a5:53:6a:a7:96:13:d7:59:9c:10:11: 7f:ce:2d:18:a4:01:47:d9:9b:36:e8:5f:af:b7:2f:8c:56:a0: 86:80:91:f1:fa:fa:b9:7e:81:58:23:ca:98:a8:48:44:49:da: b6:6a:0c:41:14:47:fb:cf:06:dc:99:11:84:46:ec:83:2d:2d: 01:e3:8a:66:3a:32:10:84:8e:6d:89:90:b7:02:57:dd:eb:de: 64:bf:24:29:4f:47:33:37:a1:1e:4b:74:fb:81:4e:20:52:79: 2b:95:a3:4c -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdDNEMxMTAvBgNVBAUTKDJBOUFFRjZCQzEyOTkxNENBMEI5MTA1QzkyNzFERUFG MzlEQkM4NjYwHhcNMjQwODEyMjExODU0WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmJhN2MzZC0yOWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmmP4z/2eXJ286iWc9LTXz1Picewa4BdfccJfjQwxfhmillmSb7nxiZ0rUPn7 wbSHkQaIFaX+pfrL6SD4MjowslPCmLgQ75JyyakFVlTcqqMv7ul1m9JXEPZscWaj EG2Q+hV2tlH91Q88lEYehI1XP/SNiU4x9m071meft+9gYfrQkWvd2HY5pm9Pdc/C afQai0ohkTvmQhx0wC4GlsKdSMWHS0x2yyc2ilISA4SGrINgm+W+4VZiW1P+tuu/ D6TjIG8lhMQgYA7tdO8GhM7bkqxiLcR+rz6c1mevc/m8kINI9gTdPyHowgvih5KX PmTIzVVBNb+1YJwQ0FrV5tbixQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFMLJAHol 4g7twlnw4jTcWqGY/Q5IMB8GA1UdIwQYMBaAFCqa72vBKZFMoLkQXJJx3q8528hm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0M0Qy9DQ0IyMDM1NEI5 RTIxMUVBQkM1NTRCODNDNEY5QUUwMi9LcHJ2YThFcGtVeWd1UkJja25IZXJ6bmJ5 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0twcnZhOEVwa1V5Z3VSQmNrbkhlcnpuYnlHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDdDNEMvQ0NCMjAzNTRCOUUyMTFFQUJDNTU0QjgzQzRGOUFFMDIvOUZCOTZFMTY5 MjlBMTFFRThDQzVEMDMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnQrQDBAJn9HAwDQQCAAIwBwMFACQG84AwDQYJKoZIhvcN AQELBQADggEBAIItUyDnJIn7jbHcQg6IkYTb1fQwpNBFIvECcM+toJvtVagFBSXO s5iXdLuoBzaZLh4ikg60oP3QwSV5kuYwReT8Fd4RRXugvwsuWl36KAtlG3YrnMie DLf1jYkwoQrRP9G6vPt8+sR17L1OfjhG1wVrANj/Mlr/XXtO8b8W0IkJ0RqyMwAE rDqSLBEqpITZd8r9IinUBGalU2qnlhPXWZwQEX/OLRikAUfZmzboX6+3L4xWoIaA kfH6+rl+gVgjypioSERJ2rZqDEEUR/vPBtyZEYRG7IMtLQHjimY6MhCEjm2JkLcC V93r3mS/JClPRzM3oR5LdPuBTiBSeSuVo0w= -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:47 2024 by rpki-client on console-ams.rpki-client.org