$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/99C6F94CF52511E7948D5A0BC4F9AE02.roa File: 99C6F94CF52511E7948D5A0BC4F9AE02.roa (raw, json) Hash identifier: vVPzJlO8vaF4Vh+BV9iHSW1TnZ35r0+ZhJx7At1qJd0= Subject key identifier: D5:7A:25:AB:90:29:32:73:D8:38:10:70:0D:FD:D2:6F:EC:05:7A:C0 Certificate issuer: /CN=A9153AA6/serialNumber=E5C3A686C83DEE6D33BFEC541EACB4A4A0899279 Certificate serial: 1640 Authority key identifier: E5:C3:A6:86:C8:3D:EE:6D:33:BF:EC:54:1E:AC:B4:A4:A0:89:92:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/99C6F94CF52511E7948D5A0BC4F9AE02.roa Signing time: Wed 28 Aug 2024 17:24:41 +0000 ROA not before: Wed 28 Aug 2024 17:24:41 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 132365 IP address blocks: 103.72.109.0/24 maxlen: 24 103.90.0.0/23 maxlen: 23 103.90.0.0/24 maxlen: 24 103.90.1.0/24 maxlen: 24 103.90.2.0/24 maxlen: 24 2401:3b40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.crl rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5696 (0x1640) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153AA6/serialNumber=E5C3A686C83DEE6D33BFEC541EACB4A4A0899279 Validity Not Before: Aug 28 17:24:41 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66cf5d58-c77f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:20:f4:84:ed:69:40:f8:4c:7e:d8:f4:1b:65: 5b:cc:50:43:5f:b8:cd:a6:50:00:af:8c:fb:25:8b: a1:22:b7:7f:b9:37:1f:94:ce:d7:3f:21:10:d4:a1: 2f:20:1d:6b:bb:61:9e:53:a8:d9:81:7f:6b:2d:6a: e0:5d:b6:f4:d1:05:85:3f:1b:fc:65:f8:37:29:42: 67:33:10:f0:33:06:22:5f:2a:91:9b:4e:48:1b:d2: c8:b3:55:7a:cd:e8:f6:5c:fa:ea:64:9e:d2:6a:fa: 80:f7:5c:eb:71:de:2d:79:e6:0d:ee:bb:93:af:f1: eb:aa:10:62:ba:ae:be:d5:4b:22:70:16:20:19:fd: ef:b4:e5:84:66:77:54:1e:58:8f:2a:14:78:10:63: fa:2e:9b:0e:6c:bd:64:7f:01:b8:1d:6f:54:fd:cd: 78:bf:77:81:32:55:6b:aa:78:b1:16:9b:d8:df:9d: 94:b3:9b:0f:ca:20:ca:29:a4:ee:a3:2b:2a:f9:4a: a8:78:1b:d4:da:47:aa:a9:f9:1c:c3:63:ee:4b:5d: 0a:56:cf:3c:68:d6:73:eb:3b:77:a6:d2:df:a0:73: 79:ba:04:d8:89:8d:a5:6a:a3:73:27:74:db:52:38: aa:aa:30:47:ca:dc:77:ac:d0:31:55:60:89:61:f0: c6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:7A:25:AB:90:29:32:73:D8:38:10:70:0D:FD:D2:6F:EC:05:7A:C0 X509v3 Authority Key Identifier: keyid:E5:C3:A6:86:C8:3D:EE:6D:33:BF:EC:54:1E:AC:B4:A4:A0:89:92:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/99C6F94CF52511E7948D5A0BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.72.109.0/24 103.90.0.0-103.90.2.255 IPv6: 2401:3b40::/32 Signature Algorithm: sha256WithRSAEncryption 1d:bc:8b:3d:55:d7:4f:c2:cd:f1:83:24:d0:37:73:1e:8f:d9: d3:12:97:4d:9d:52:d9:ba:65:66:d4:21:30:4d:42:e9:36:81: 1c:d9:d7:69:8c:2c:de:6b:4f:29:ea:53:a3:ed:fa:aa:f6:67: c5:a3:4d:61:b7:76:36:f8:85:33:80:1c:e2:dd:16:b6:ea:c5: 45:ec:1d:a6:97:e9:c4:cc:27:c3:21:da:26:d5:99:24:02:91: e6:a5:d1:3d:da:b5:88:0b:c4:57:37:63:29:4e:9b:2f:a0:9e: d8:de:65:69:18:96:74:48:c6:c7:16:ab:55:12:17:e8:2d:a9: 37:be:2a:11:08:a2:0a:ca:19:85:7c:9c:2a:8d:0d:43:ea:5e: bc:97:69:d4:c8:fb:54:02:02:73:f8:b4:10:c4:3c:cd:88:84: 32:3e:85:8a:88:82:f6:b0:ef:bd:ac:f2:4a:0a:07:a3:c8:4b: 0c:cc:a3:62:50:06:6e:c5:9a:fb:83:0a:53:60:4d:0d:a6:e7: 74:e9:d0:8e:58:0f:ba:af:5e:9d:f9:23:ed:10:ba:a0:db:93: 26:d6:79:01:42:6e:3b:8c:f9:4b:a7:6f:a7:2e:26:14:1b:9b: 6a:37:50:54:dc:e1:d4:73:e9:6d:4a:43:b1:82:e9:2a:10:14: 1a:c0:83:7d -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICFkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNBQTYxMTAvBgNVBAUTKEU1QzNBNjg2QzgzREVFNkQzM0JGRUM1NDFFQUNCNEE0 QTA4OTkyNzkwHhcNMjQwODI4MTcyNDQxWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmNmNWQ1OC1jNzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSD0hO1pQPhMftj0G2VbzFBDX7jNplAAr4z7JYuhIrd/uTcflM7XPyEQ1KEv IB1ru2GeU6jZgX9rLWrgXbb00QWFPxv8Zfg3KUJnMxDwMwYiXyqRm05IG9LIs1V6 zej2XPrqZJ7SavqA91zrcd4teeYN7ruTr/HrqhBiuq6+1UsicBYgGf3vtOWEZndU HliPKhR4EGP6LpsObL1kfwG4HW9U/c14v3eBMlVrqnixFpvY352Us5sPyiDKKaTu oysq+UqoeBvU2keqqfkcw2PuS10KVs88aNZz6zt3ptLfoHN5ugTYiY2laqNzJ3Tb UjiqqjBHytx3rNAxVWCJYfDGZQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFNV6JauQ KTJz2DgQcA390m/sBXrAMB8GA1UdIwQYMBaAFOXDpobIPe5tM7/sVB6stKSgiZJ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FBNi85QzNEODdFNkY1 MjQxMUU3OTY0NEIwMDlDNEY5QUUwMi81Y09taHNnOTdtMHp2LXhVSHF5MHBLQ0pr bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVjT21oc2c5N20wenYteFVIcXkwcEtDSmtuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTNBQTYvOUMzRDg3RTZGNTI0MTFFNzk2NDRCMDA5QzRGOUFFMDIvOTlDNkY5NENG NTI1MTFFNzk0OEQ1QTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOwYIKwYBBQUHAQcBAf8E LDAqMBkEAgABMBMDBABnSG0wCwMDAWdaAwQAZ1oCMA0EAgACMAcDBQAkATtAMA0G CSqGSIb3DQEBCwUAA4IBAQAdvIs9VddPws3xgyTQN3Mej9nTEpdNnVLZumVm1CEw TULpNoEc2ddpjCzea08p6lOj7fqq9mfFo01ht3Y2+IUzgBzi3Ra26sVF7B2ml+nE zCfDIdom1ZkkApHmpdE92rWIC8RXN2MpTpsvoJ7Y3mVpGJZ0SMbHFqtVEhfoLak3 vioRCKIKyhmFfJwqjQ1D6l68l2nUyPtUAgJz+LQQxDzNiIQyPoWKiIL2sO+9rPJK CgejyEsMzKNiUAZuxZr7gwpTYE0Npud06dCOWA+6r16d+SPtELqg25Mm1nkBQm47 jPlLp2+nLiYUG5tqN1BU3OHUc+ltSkOxgukqEBQawIN9 -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:45 2024 by rpki-client on console-fra.rpki-client.org