$ rpki-client -vvf rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/9A826D9059D611EF814F004DC4F9AE02.roa File: 9A826D9059D611EF814F004DC4F9AE02.roa (raw, json) Hash identifier: L57EG0Fn/DrFvp2TO2K+O7e/Z9P96vwgKEdxXex5oZ0= Subject key identifier: C7:D6:65:13:34:C6:48:AB:85:28:70:39:DC:44:6D:74:EF:A2:79:B1 Certificate issuer: /CN=A914F7F0/serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940 Certificate serial: 04 Authority key identifier: 61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/9A826D9059D611EF814F004DC4F9AE02.roa Signing time: Wed 14 Aug 2024 01:07:33 +0000 ROA not before: Wed 14 Aug 2024 01:07:33 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 135065 IP address blocks: 103.208.36.0/22 maxlen: 22 103.208.36.0/24 maxlen: 24 103.208.37.0/24 maxlen: 24 103.208.38.0/24 maxlen: 24 103.208.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F7F0/serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940 Validity Not Before: Aug 14 01:07:33 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=66bc0355-a587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:17:53:b4:47:2f:75:49:a1:db:b6:ae:fb:7d: 28:98:65:0b:29:37:a1:d3:bb:76:24:57:de:80:44: 4a:83:ff:1c:d2:c1:c0:cc:b3:77:95:24:21:d3:8a: 80:a0:f6:0d:98:3b:60:38:89:9f:4f:af:01:c0:6c: 5b:da:97:52:43:72:77:3d:4e:25:9d:41:46:b8:2b: ce:05:38:12:c8:dd:de:ce:6f:55:d7:b7:8c:14:9e: c9:fe:62:0f:52:0f:87:33:e3:a7:41:c4:5a:0f:d0: 73:03:15:f5:c2:eb:d7:d6:c2:e5:ce:8b:ac:77:5b: 53:1c:37:57:78:61:65:bf:48:b6:17:27:e9:37:14: b1:04:d0:e5:f9:dc:8e:8b:91:7c:fd:cb:95:96:61: bd:7b:55:d9:a4:8e:2a:14:21:17:6c:47:35:f6:65: fb:c2:c7:f1:86:19:c0:4b:8c:78:d8:a9:dc:55:6f: 84:08:b1:a1:e9:33:9f:62:bb:3e:fd:af:14:f5:d0: 65:01:37:9c:36:9c:1d:be:ef:ba:35:dc:50:67:5a: 78:d8:45:e8:1a:d0:53:66:10:b1:07:9a:29:8f:02: a1:3d:10:ed:ac:ff:d6:d0:b1:8c:d4:a5:1c:9a:4a: 72:5f:84:7c:5a:b6:7d:e3:83:f4:31:68:15:2e:08: 20:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D6:65:13:34:C6:48:AB:85:28:70:39:DC:44:6D:74:EF:A2:79:B1 X509v3 Authority Key Identifier: keyid:61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/9A826D9059D611EF814F004DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.208.36.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:74:74:3c:5e:bd:b1:7f:e3:f2:2d:fd:59:fa:b3:ec:84:20: db:01:61:70:20:e8:29:7b:c6:28:ef:ff:86:37:83:01:cf:81: 35:25:3f:c6:ff:0f:31:63:6a:05:01:78:ac:21:70:14:90:81: 7e:91:b8:a3:55:ea:bc:4f:42:79:5e:22:58:68:22:a7:7c:fa: e3:c7:77:04:a1:2d:38:07:22:ba:3e:0e:2d:42:e0:fd:31:be: 55:6a:69:59:f8:f9:f3:f8:15:55:a3:cb:ce:12:61:db:51:6b: b1:8d:3b:f6:8b:8f:4c:73:8b:74:f0:b8:9a:76:b6:5c:5b:50: ad:6c:67:5a:3c:e8:be:2e:65:36:2b:75:45:9d:d3:69:8d:5b: cb:21:e3:cc:56:4c:c5:54:49:bf:f4:7b:e9:6f:c5:ea:70:61: de:7c:8e:34:16:a5:5a:c8:1a:4b:33:05:10:d4:c8:6c:2b:42: 65:05:4a:14:87:26:15:74:09:7e:f1:5c:56:b5:5b:20:00:d1: fc:21:18:0c:bb:78:3d:d3:ba:c7:5f:0d:22:46:5b:bb:b0:4f: 2c:27:da:5c:ae:d0:d0:51:7b:2c:81:b5:77:0a:30:3e:1d:9f: d4:a4:84:07:0a:72:2c:2f:c7:09:17:0d:e6:d5:d7:b7:a8:7e: 4e:15:69:57 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RjdGMDExMC8GA1UEBRMoNjExQ0I1NTZDODdCQzA0OUE1QTQzRUIxRjI5NzEwN0VG RjFCNzk0MDAeFw0yNDA4MTQwMTA3MzNaFw0yNTA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YmMwMzU1LWE1ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+F1O0Ry91SaHbtq77fSiYZQspN6HTu3YkV96AREqD/xzSwcDMs3eVJCHTioCg 9g2YO2A4iZ9PrwHAbFval1JDcnc9TiWdQUa4K84FOBLI3d7Ob1XXt4wUnsn+Yg9S D4cz46dBxFoP0HMDFfXC69fWwuXOi6x3W1McN1d4YWW/SLYXJ+k3FLEE0OX53I6L kXz9y5WWYb17VdmkjioUIRdsRzX2ZfvCx/GGGcBLjHjYqdxVb4QIsaHpM59iuz79 rxT10GUBN5w2nB2+77o13FBnWnjYRega0FNmELEHmimPAqE9EO2s/9bQsYzUpRya SnJfhHxatn3jg/QxaBUuCCAXAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUx9ZlEzTG SKuFKHA53ERtdO+iebEwHwYDVR0jBBgwFoAUYRy1Vsh7wEmlpD6x8pcQfv8beUAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRGN0YwL0M3NEVCNjlBNTlE NTExRUY4M0QyOEI0QkM0RjlBRTAyL1lSeTFWc2g3d0VtbHBENng4cGNRZnY4YmVV QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWVJ5MVZzaDd3RW1scEQ2eDhwY1FmdjhiZVVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjdGMC9DNzRFQjY5QTU5RDUxMUVGODNEMjhCNEJDNEY5QUUwMi85QTgyNkQ5MDU5 RDYxMUVGODE0RjAwNERDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmfQJDANBgkqhkiG9w0BAQsFAAOCAQEADnR0PF69sX/j8i39 Wfqz7IQg2wFhcCDoKXvGKO//hjeDAc+BNSU/xv8PMWNqBQF4rCFwFJCBfpG4o1Xq vE9CeV4iWGgip3z648d3BKEtOAciuj4OLULg/TG+VWppWfj58/gVVaPLzhJh21Fr sY079ouPTHOLdPC4mna2XFtQrWxnWjzovi5lNit1RZ3TaY1byyHjzFZMxVRJv/R7 6W/F6nBh3nyONBalWsgaSzMFENTIbCtCZQVKFIcmFXQJfvFcVrVbIADR/CEYDLt4 PdO6x18NIkZbu7BPLCfaXK7Q0FF7LIG1dwowPh2f1KSEBwpyLC/HCRcN5tXXt6h+ ThVpVw== -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:07 2024 by rpki-client on console-ams.rpki-client.org