$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/5BC9A0B0C91211ED91C9A325C4F9AE02.roa File: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (raw, json) Hash identifier: bWFskxvhi7CkjX9KQtUg/L6OTceIBUoGJSArRRh8yOc= Subject key identifier: 5E:F5:3A:1C:0D:85:7E:96:9D:8D:53:33:49:15:43:09:F8:06:55:92 Certificate issuer: /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Certificate serial: 0480 Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/5BC9A0B0C91211ED91C9A325C4F9AE02.roa Signing time: Thu 03 Oct 2024 00:33:36 +0000 ROA not before: Thu 03 Oct 2024 00:33:36 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 136258 IP address blocks: 103.75.116.0/24 maxlen: 24 103.75.118.0/24 maxlen: 24 103.75.119.0/24 maxlen: 24 103.97.203.0/24 maxlen: 24 103.106.228.0/24 maxlen: 24 103.106.229.0/24 maxlen: 24 103.106.230.0/24 maxlen: 24 103.106.231.0/24 maxlen: 24 223.165.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 23:28:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1152 (0x480) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Validity Not Before: Oct 3 00:33:36 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=66fde660-be0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:91:a3:af:0e:57:2f:66:24:2b:df:2d:c3:34: 9d:e4:d2:16:cb:99:82:69:46:07:d9:9d:04:81:1b: 85:ed:16:7c:73:d4:77:68:9e:8e:d7:bf:27:9e:d4: 0d:6c:df:0b:fc:6c:7f:7d:b8:2c:94:31:dd:de:a8: 3d:2c:a9:9c:9c:74:b7:f6:24:e6:1a:2a:ef:66:ed: d2:bc:d6:15:5c:d3:ef:05:43:d9:9c:56:88:d5:1f: 4d:03:31:ac:8c:61:85:50:62:38:4b:75:ae:f4:71: 19:48:79:18:d5:e8:08:15:b3:a1:11:72:d9:94:01: 9b:9b:c2:18:e7:86:fb:25:86:6e:68:e8:61:a9:15: 72:28:3f:46:c8:55:08:d5:02:bc:54:91:54:bf:c3: 0b:b5:3c:d4:10:0b:43:45:ba:d6:44:83:07:24:42: f1:d3:9a:19:ee:29:8e:03:6d:89:27:b0:4a:2e:71: f9:44:53:10:3b:23:20:59:c7:6d:6c:c5:08:0e:a4: 5a:33:92:4e:73:14:45:f2:75:0e:f0:3a:28:19:aa: 97:55:21:71:11:ee:2d:ac:c8:96:fa:1d:c8:a6:08: b1:95:d9:33:65:0d:34:fe:ff:a6:e0:ba:9f:2d:66: ef:fa:85:5b:13:ef:33:fa:cb:a6:ac:57:59:c0:e4: d9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F5:3A:1C:0D:85:7E:96:9D:8D:53:33:49:15:43:09:F8:06:55:92 X509v3 Authority Key Identifier: keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/5BC9A0B0C91211ED91C9A325C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.75.116.0/24 103.75.118.0/23 103.97.203.0/24 103.106.228.0/22 223.165.5.0/24 Signature Algorithm: sha256WithRSAEncryption 52:b0:a9:fb:27:9d:9a:71:55:e4:f7:16:c4:0f:b6:be:af:b7: 04:38:13:00:30:70:db:34:7e:55:b5:59:a5:b1:fe:d2:88:c3: fd:04:81:0f:93:6e:42:c9:a9:a4:be:a6:61:51:99:98:1c:e2: 33:49:9c:dc:b9:a4:70:ef:bd:b0:84:74:eb:34:a0:04:6d:00: 13:c4:6a:5e:ec:44:44:5d:77:70:29:90:c5:4d:56:f6:6e:88: 54:df:86:98:60:f0:85:10:f4:a4:59:c4:9b:ac:f7:1d:24:68: 2b:96:dd:be:48:f4:04:64:d2:0f:c0:1a:e7:67:d7:be:33:94: 5c:a2:7f:57:63:e3:bf:0a:50:f8:7f:80:dc:1c:56:6a:66:c1: 2b:c6:2b:46:2c:8b:1b:8c:7e:c1:9a:58:e9:ca:56:4c:19:fa: 70:82:b8:13:85:43:fc:4d:33:43:9b:04:99:b2:ad:6a:17:bf: 9c:d7:57:94:3e:95:67:51:9c:83:b0:59:a2:38:18:ee:74:37: 97:2d:a8:a7:38:d2:27:93:39:11:2f:fd:6c:e6:6d:60:3d:ed: 19:61:b2:47:7c:f6:d7:f4:a9:ea:03:96:2d:94:1b:f1:17:63: 3f:f7:c0:9d:28:0a:2a:05:6b:df:c1:16:a8:39:80:a7:c2:fb: 6f:d6:24:17 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICBIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFNzAxMTAvBgNVBAUTKDA2RDMzQzhENkJBNEE2MjIyREZDQjkwQzJCNDBBNEI3 OTI5Mzc2N0EwHhcNMjQxMDAzMDAzMzM2WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZkZTY2MC1iZTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5Gjrw5XL2YkK98twzSd5NIWy5mCaUYH2Z0EgRuF7RZ8c9R3aJ6O178nntQN bN8L/Gx/fbgslDHd3qg9LKmcnHS39iTmGirvZu3SvNYVXNPvBUPZnFaI1R9NAzGs jGGFUGI4S3Wu9HEZSHkY1egIFbOhEXLZlAGbm8IY54b7JYZuaOhhqRVyKD9GyFUI 1QK8VJFUv8MLtTzUEAtDRbrWRIMHJELx05oZ7imOA22JJ7BKLnH5RFMQOyMgWcdt bMUIDqRaM5JOcxRF8nUO8DooGaqXVSFxEe4trMiW+h3IpgixldkzZQ00/v+m4Lqf LWbv+oVbE+8z+sumrFdZwOTZdwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFF71OhwN hX6WnY1TM0kVQwn4BlWSMB8GA1UdIwQYMBaAFAbTPI1rpKYiLfy5DCtApLeSk3Z6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkU3MC9CRUM1Q0E3MjIx MUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3BpSXRfTGtNSzBDa3Q1S1Rk bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J0TThqV3VrcGlJdF9Ma01LMENrdDVLVGRuby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTJFNzAvQkVDNUNBNzIyMTFCMTFFQ0I0NUZENDJGQzRGOUFFMDIvNUJDOUEwQjBD OTEyMTFFRDkxQzlBMzI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBABnS3QDBAFnS3YDBABnYcsDBAJnauQDBADfpQUwDQYJKoZI hvcNAQELBQADggEBAFKwqfsnnZpxVeT3FsQPtr6vtwQ4EwAwcNs0flW1WaWx/tKI w/0EgQ+TbkLJqaS+pmFRmZgc4jNJnNy5pHDvvbCEdOs0oARtABPEal7sRERdd3Ap kMVNVvZuiFTfhphg8IUQ9KRZxJus9x0kaCuW3b5I9ARk0g/AGudn174zlFyif1dj 478KUPh/gNwcVmpmwSvGK0YsixuMfsGaWOnKVkwZ+nCCuBOFQ/xNM0ObBJmyrWoX v5zXV5Q+lWdRnIOwWaI4GO50N5ctqKc40ieTOREv/WzmbWA97Rlhskd89tf0qeoD li2UG/EXYz/3wJ0oCioFa9/BFqg5gKfC+2/WJBc= -----END CERTIFICATE-----Generated at Mon Nov 25 01:01:27 2024 by rpki-client on console-ams.rpki-client.org