$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/A607F8965F4611EE80BD8D2DC4F9AE02.roa File: A607F8965F4611EE80BD8D2DC4F9AE02.roa (raw, json) Hash identifier: i9O1XjNiOxohoSOkwBSOCWg1fccYbraqqs7MGV2WXXs= Subject key identifier: 01:F7:A3:19:DC:4C:54:8B:C9:B3:F1:3E:89:4C:16:8F:9B:DC:49:09 Certificate issuer: /CN=A9149C2D/serialNumber=1BDC4767A6D5EBE0BEFA5CA1235308F75E48891A Certificate serial: 1AAA Authority key identifier: 1B:DC:47:67:A6:D5:EB:E0:BE:FA:5C:A1:23:53:08:F7:5E:48:89:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/A607F8965F4611EE80BD8D2DC4F9AE02.roa Signing time: Wed 31 Jan 2024 16:53:49 +0000 ROA not before: Wed 31 Jan 2024 16:53:49 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 63927 IP address blocks: 103.44.232.0/22 maxlen: 24 2401:da80::/32 maxlen: 32 2401:da80::/36 maxlen: 36 2401:da80:1000::/36 maxlen: 36 2401:da80:2000::/36 maxlen: 36 2401:da80:3000::/36 maxlen: 36 2401:da80:4000::/36 maxlen: 36 2401:da80:5000::/36 maxlen: 36 2401:da80:6000::/36 maxlen: 36 2401:da80:7000::/36 maxlen: 36 2401:da80:8000::/36 maxlen: 36 2401:da80:9000::/36 maxlen: 36 2401:da80:a000::/36 maxlen: 36 2401:da80:b000::/36 maxlen: 36 2401:da80:c000::/36 maxlen: 36 2401:da80:d000::/36 maxlen: 36 2401:da80:e000::/36 maxlen: 36 2401:da80:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.crl rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:17:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6826 (0x1aaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149C2D/serialNumber=1BDC4767A6D5EBE0BEFA5CA1235308F75E48891A Validity Not Before: Jan 31 16:53:49 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65ba7b1c-3f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1b:6e:31:67:fc:d8:73:27:c4:2d:c9:66:b7: 05:56:97:41:cf:f7:98:41:a0:93:d5:94:bf:7b:82: 6d:90:68:28:be:f0:71:51:27:7d:ce:ce:f6:01:74: 92:5e:46:07:c3:38:0e:14:d8:9c:57:55:bc:44:3d: 15:77:29:20:f6:58:b9:63:3c:a4:d6:6e:7c:ff:11: aa:33:93:b1:38:71:14:01:e7:9d:0c:37:16:ee:8c: fb:c6:f6:4e:53:f1:fd:c7:88:28:d4:61:d2:e4:93: 20:e7:ec:82:c2:fd:27:85:34:60:be:19:da:9f:12: 36:03:64:24:d8:31:83:ca:ed:b0:6a:91:76:dc:78: 31:75:23:25:f4:86:ca:24:13:37:d0:b8:e9:08:bf: 65:17:87:f7:f5:2e:5e:71:2a:2b:98:4a:34:93:7e: 0d:24:ab:8a:02:48:1c:f3:e4:7f:62:d8:7f:98:69: 0f:71:8e:32:b1:76:7d:65:df:32:fa:ba:01:b1:e0: 7b:5e:27:8d:e4:49:b5:03:1d:b3:ad:fa:51:dd:a9: 02:a5:65:9a:23:07:6a:b5:ae:5f:d1:fd:e1:b1:11: 44:14:50:57:b9:0b:88:fa:86:ea:1e:9c:71:70:60: 95:72:c5:99:bd:d4:ed:83:63:35:fa:f4:7f:9d:43: 61:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F7:A3:19:DC:4C:54:8B:C9:B3:F1:3E:89:4C:16:8F:9B:DC:49:09 X509v3 Authority Key Identifier: keyid:1B:DC:47:67:A6:D5:EB:E0:BE:FA:5C:A1:23:53:08:F7:5E:48:89:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/A607F8965F4611EE80BD8D2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.44.232.0/22 IPv6: 2401:da80::/32 Signature Algorithm: sha256WithRSAEncryption 57:04:ce:f1:4e:18:e0:f4:e6:98:19:0a:a7:46:95:6e:4f:d9: 7a:f1:83:16:5c:f6:67:97:66:7a:aa:0c:fe:a3:f8:19:44:52: 90:56:e8:2c:36:ca:1e:0f:86:62:08:cf:fb:cb:68:74:7a:46: 57:f5:d1:41:ab:07:5c:66:0f:0b:1f:6b:26:bc:40:c1:1c:1d: 41:83:c1:83:4a:a7:16:3f:d8:3b:1f:44:54:82:b9:57:67:9c: 10:47:83:ee:fe:09:60:78:65:10:2e:bc:4b:92:9d:5c:51:26: 47:f6:26:43:3d:a0:44:42:1d:6a:0c:27:39:3d:a9:27:ea:26: 9e:82:5b:2a:f0:19:ca:9c:fc:0a:02:31:0b:6b:3e:3b:64:c2: 56:3e:63:73:64:4b:ed:13:2b:b3:5f:89:11:d1:7f:af:c1:87: df:61:82:3a:e8:19:02:3e:d7:9d:40:9b:8d:47:c8:0c:f8:9f: 5b:b8:f2:6a:a5:3f:66:f9:a2:04:df:0e:1c:1e:54:05:c2:eb: 2d:15:a9:bf:a2:1e:c5:80:51:04:e1:98:93:5b:6c:31:5e:4d: 10:04:a6:9f:e6:07:1a:1f:83:04:04:c7:9c:e8:73:bd:3c:bd: e4:e2:69:94:97:2b:ff:95:83:45:6b:89:1f:35:e1:d7:eb:aa: 7b:33:36:8a -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICGqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlDMkQxMTAvBgNVBAUTKDFCREM0NzY3QTZENUVCRTBCRUZBNUNBMTIzNTMwOEY3 NUU0ODg5MUEwHhcNMjQwMTMxMTY1MzQ5WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWJhN2IxYy0zZjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhtuMWf82HMnxC3JZrcFVpdBz/eYQaCT1ZS/e4JtkGgovvBxUSd9zs72AXSS XkYHwzgOFNicV1W8RD0Vdykg9li5Yzyk1m58/xGqM5OxOHEUAeedDDcW7oz7xvZO U/H9x4go1GHS5JMg5+yCwv0nhTRgvhnanxI2A2Qk2DGDyu2wapF23HgxdSMl9IbK JBM30LjpCL9lF4f39S5ecSormEo0k34NJKuKAkgc8+R/Yth/mGkPcY4ysXZ9Zd8y +roBseB7XieN5Em1Ax2zrfpR3akCpWWaIwdqta5f0f3hsRFEFFBXuQuI+obqHpxx cGCVcsWZvdTtg2M1+vR/nUNh0wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFAH3oxnc TFSLybPxPolMFo+b3EkJMB8GA1UdIwQYMBaAFBvcR2em1evgvvpcoSNTCPdeSIka MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUMyRC80RDVBNzg4MDA4 NzMxMUU3OUM4MzlCMDlDNEY5QUUwMi9HOXhIWjZiVjYtQy0tbHloSTFNSTkxNUlp Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c5eEhaNmJWNi1DLS1seWhJMU1JOTE1SWlSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlDMkQvNEQ1QTc4ODAwODczMTFFNzlDODM5QjA5QzRGOUFFMDIvQTYwN0Y4OTY1 RjQ2MTFFRTgwQkQ4RDJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnLOgwDQQCAAIwBwMFACQB2oAwDQYJKoZIhvcNAQELBQAD ggEBAFcEzvFOGOD05pgZCqdGlW5P2XrxgxZc9meXZnqqDP6j+BlEUpBW6Cw2yh4P hmIIz/vLaHR6Rlf10UGrB1xmDwsfaya8QMEcHUGDwYNKpxY/2DsfRFSCuVdnnBBH g+7+CWB4ZRAuvEuSnVxRJkf2JkM9oERCHWoMJzk9qSfqJp6CWyrwGcqc/AoCMQtr PjtkwlY+Y3NkS+0TK7NfiRHRf6/Bh99hgjroGQI+151Am41HyAz4n1u48mqlP2b5 ogTfDhweVAXC6y0Vqb+iHsWAUQThmJNbbDFeTRAEpp/mBxofgwQEx5zoc708veTi aZSXK/+Vg0VriR814dfrqnszNoo= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:01 2024 by rpki-client on console-ams.rpki-client.org