$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/4D470362C55811EB981FA987C4F9AE02.roa File: 4D470362C55811EB981FA987C4F9AE02.roa (raw, json) Hash identifier: RVfGnSNi7Gc2NDwMnGvANcouUDMPNtTfLB5zmPwCbz8= Subject key identifier: 12:7B:F9:C9:3C:8F:82:CD:B5:3C:7E:97:A5:25:18:00:46:1B:EE:E3 Certificate issuer: /CN=A9148F32/serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78 Certificate serial: 04F6 Authority key identifier: FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/4D470362C55811EB981FA987C4F9AE02.roa Signing time: Fri 03 May 2024 01:43:54 +0000 ROA not before: Fri 03 May 2024 01:43:54 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 140072 IP address blocks: 103.166.172.0/23 maxlen: 24 2407:59c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1270 (0x4f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F32/serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78 Validity Not Before: May 3 01:43:54 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6634415a-dffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9b:22:98:cb:29:a2:e7:7d:09:38:9e:59:3f: 92:63:29:a4:5f:4c:cb:1f:52:7c:ce:c2:4f:0d:c2: 63:4b:97:da:27:5d:bc:bb:22:67:61:6d:78:d5:11: e0:d9:54:49:2f:9b:dc:fd:2f:8e:4d:00:34:a1:dd: 85:2a:e8:f1:a0:d0:a3:f2:e4:c1:b2:6d:b9:d6:5e: b1:94:cf:84:b6:2e:8c:76:38:6f:58:34:ad:eb:5e: 6f:67:31:18:af:69:1f:b2:dc:3c:11:d3:d4:af:31: 61:b6:4c:b3:d9:35:59:25:c5:9b:45:00:9f:c0:02: 6a:be:6d:9a:38:cd:1f:a7:1c:ad:63:24:49:e6:02: e1:c2:4e:b2:4e:b0:a5:2f:82:ed:3e:f8:68:8e:fd: 72:9e:65:de:87:6b:8c:72:89:3e:52:80:03:1a:de: a7:e3:62:0c:94:78:56:6f:d5:8b:59:fc:b2:dd:8c: 61:10:54:b9:fd:f0:38:da:2d:9f:d6:a6:c3:d2:ea: 74:e7:4d:6f:ee:0c:6d:95:01:f6:7c:27:f6:58:f9: da:00:44:51:f0:49:97:16:e6:4d:25:ee:2a:65:e0: 1d:f9:e4:eb:f4:e3:3a:03:b7:ab:c3:a8:52:3d:65: d8:5f:7c:46:ea:a8:ab:31:55:3d:ef:c8:b0:13:64: 66:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:7B:F9:C9:3C:8F:82:CD:B5:3C:7E:97:A5:25:18:00:46:1B:EE:E3 X509v3 Authority Key Identifier: keyid:FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/4D470362C55811EB981FA987C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.166.172.0/23 IPv6: 2407:59c0::/32 Signature Algorithm: sha256WithRSAEncryption b7:0e:1c:74:a1:7b:6b:34:b9:83:5c:6a:8c:7b:fe:37:6e:08: 6c:5a:0a:2a:ac:b3:09:9a:f0:63:23:56:36:4c:a6:01:99:95: 8c:88:4a:da:c4:50:6c:0d:38:bd:3a:76:a4:7c:28:d3:c0:38: 7f:42:93:b0:2e:c1:6b:eb:14:8f:0d:4c:11:62:c2:d8:c7:f5: 12:3a:5b:53:5f:87:53:92:93:77:80:c5:7a:a5:6f:a9:34:af: f0:a0:17:02:25:90:b4:17:0e:87:5c:bc:bc:eb:c7:c1:25:e0: 88:f5:89:f8:e7:57:bb:86:06:74:7b:46:04:c7:51:e3:9e:64: e7:e0:2d:04:b7:7e:79:65:bb:f5:7c:38:0a:0b:b6:5f:2e:a9: 22:06:45:74:5a:50:aa:bf:f6:64:e2:e1:35:83:57:6b:f6:62: 44:c3:86:40:2b:95:a3:94:a6:fa:d3:4a:49:63:6d:45:40:64: a2:58:48:3c:c4:1f:b4:d3:47:25:f1:17:01:f5:90:66:8b:bd: 12:71:14:a1:67:ab:09:17:e6:69:55:86:3f:3e:e3:82:92:d0: 17:73:0c:6e:f3:e8:5b:5d:40:bb:c4:34:ec:da:34:8a:4e:b0: ce:48:00:64:23:e3:c0:8b:7b:9b:a5:26:a3:ee:12:c9:7a:2b: 7d:ed:a2:6b -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGMzIxMTAvBgNVBAUTKEZBRENCOTU1QTNBQzE0NjU5OTdEMDhGMjQ4QkY4NkM0 MzM0NEZCNzgwHhcNMjQwNTAzMDE0MzU0WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjM0NDE1YS1kZmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZsimMspoud9CTieWT+SYymkX0zLH1J8zsJPDcJjS5faJ128uyJnYW141RHg 2VRJL5vc/S+OTQA0od2FKujxoNCj8uTBsm251l6xlM+Eti6MdjhvWDSt615vZzEY r2kfstw8EdPUrzFhtkyz2TVZJcWbRQCfwAJqvm2aOM0fpxytYyRJ5gLhwk6yTrCl L4LtPvhojv1ynmXeh2uMcok+UoADGt6n42IMlHhWb9WLWfyy3YxhEFS5/fA42i2f 1qbD0up0501v7gxtlQH2fCf2WPnaAERR8EmXFuZNJe4qZeAd+eTr9OM6A7erw6hS PWXYX3xG6qirMVU978iwE2RmeQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFBJ7+ck8 j4LNtTx+l6UlGABGG+7jMB8GA1UdIwQYMBaAFPrcuVWjrBRlmX0I8ki/hsQzRPt4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEYzMi9FMDY0NzVDRUM1 NTUxMUVCOUFFNTlFODZDNEY5QUUwMi8tdHk1VmFPc0ZHV1pmUWp5U0wtR3hETkUt M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10eTVWYU9zRkdXWmZRanlTTC1HeERORS0zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhGMzIvRTA2NDc1Q0VDNTU1MTFFQjlBRTU5RTg2QzRGOUFFMDIvNEQ0NzAzNjJD NTU4MTFFQjk4MUZBOTg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnpqwwDQQCAAIwBwMFACQHWcAwDQYJKoZIhvcNAQELBQAD ggEBALcOHHShe2s0uYNcaox7/jduCGxaCiqsswma8GMjVjZMpgGZlYyIStrEUGwN OL06dqR8KNPAOH9Ck7AuwWvrFI8NTBFiwtjH9RI6W1Nfh1OSk3eAxXqlb6k0r/Cg FwIlkLQXDodcvLzrx8El4Ij1ifjnV7uGBnR7RgTHUeOeZOfgLQS3fnllu/V8OAoL tl8uqSIGRXRaUKq/9mTi4TWDV2v2YkTDhkArlaOUpvrTSkljbUVAZKJYSDzEH7TT RyXxFwH1kGaLvRJxFKFnqwkX5mlVhj8+44KS0BdzDG7z6FtdQLvENOzaNIpOsM5I AGQj48CLe5ulJqPuEsl6K33toms= -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:39 2024 by rpki-client on console-ams.rpki-client.org