$ rpki-client -vvf rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/C772BB4AF7A111ED874BEC62C4F9AE02.roa File: C772BB4AF7A111ED874BEC62C4F9AE02.roa (raw, json) Hash identifier: TrFSsPwA7RPnYiidHGIHv6OtRucjU2tMRDQgBehdETM= Subject key identifier: 31:06:2C:6A:BC:5A:46:FB:DE:13:76:63:A9:A8:5B:14:E7:F1:7B:2C Certificate issuer: /CN=A9154020/serialNumber=F6699264417C228B51FE15B3B1ECB7867F2A2743 Certificate serial: 1701 Authority key identifier: F6:69:92:64:41:7C:22:8B:51:FE:15:B3:B1:EC:B7:86:7F:2A:27:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/C772BB4AF7A111ED874BEC62C4F9AE02.roa Signing time: Tue 14 Nov 2023 17:04:32 +0000 ROA not before: Tue 14 Nov 2023 17:04:32 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 137020 IP address blocks: 103.126.60.0/23 maxlen: 23 103.126.60.0/24 maxlen: 24 103.126.61.0/24 maxlen: 24 2404:af40::/32 maxlen: 32 2404:af40::/48 maxlen: 48 2404:af40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.crl rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 17:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5889 (0x1701) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154020/serialNumber=F6699264417C228B51FE15B3B1ECB7867F2A2743 Validity Not Before: Nov 14 17:04:32 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=6553a8a0-c546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:12:56:7f:58:7c:42:82:8d:d9:eb:05:94:f2: b3:d8:46:b2:12:aa:08:2e:bd:03:30:1f:f1:1a:3c: 94:9e:5a:d8:3b:d1:2b:e5:f8:ad:1e:3f:4d:e7:e6: 63:05:5b:50:81:9c:6f:cc:d0:c6:d3:cf:29:08:74: f4:fd:80:d2:04:27:c0:40:d3:f9:8f:2a:48:be:d2: 89:1b:6f:83:d4:d9:63:1c:41:97:e4:a2:1f:01:a9: 0b:5f:99:a1:5f:e5:62:e5:fb:d4:17:70:66:b6:f2: 83:3b:27:3c:27:94:18:77:cf:33:6e:3c:a3:95:70: 82:f6:3b:dd:ab:07:dd:4d:4b:e4:da:0c:54:2f:de: 39:7d:fb:6b:a3:39:7a:39:92:b0:69:21:bb:16:4e: fa:51:f7:29:5c:a6:58:31:90:cb:d9:7e:bf:1f:fe: a0:cd:34:4a:08:a9:bc:66:68:83:01:eb:f2:9e:6a: 10:d7:ce:9f:f5:f3:5e:89:77:7e:dd:5c:79:a0:10: 87:9f:2a:a1:a5:48:ac:94:85:2b:1c:39:dd:53:4b: 12:8f:e6:02:fb:d8:25:cd:b0:6b:5e:2e:24:3e:89: e7:60:82:f9:6f:97:e4:d0:62:54:08:e1:f8:0e:47: b5:31:d8:af:68:fb:37:98:20:51:b4:27:f8:2a:27: ec:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:06:2C:6A:BC:5A:46:FB:DE:13:76:63:A9:A8:5B:14:E7:F1:7B:2C X509v3 Authority Key Identifier: keyid:F6:69:92:64:41:7C:22:8B:51:FE:15:B3:B1:EC:B7:86:7F:2A:27:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/C772BB4AF7A111ED874BEC62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.126.60.0/23 IPv6: 2404:af40::/32 Signature Algorithm: sha256WithRSAEncryption bb:c3:ab:6b:e7:5e:7e:97:d0:d1:41:78:cf:e8:fd:98:63:c9: d8:b6:0f:ea:7d:8a:a3:a3:14:c5:e7:53:e5:a4:a7:b9:46:16: b4:b4:c8:07:9e:bd:c3:89:98:80:9d:68:ae:8c:b8:ae:dc:4e: c4:f8:42:41:02:ad:4b:19:7e:12:18:21:a7:01:73:55:44:9f: ed:05:0a:1b:36:22:ef:01:ae:7d:ce:b5:9b:04:79:4c:d8:68: 29:32:d6:6b:e7:2f:bc:1d:ab:14:09:2d:50:99:e9:a0:2b:69: 06:a3:8e:cb:83:23:a9:f0:fd:c6:9f:27:65:98:c0:bf:e4:e6: 09:15:7f:51:dd:d5:fc:d0:a3:f7:1c:a7:8f:38:40:9b:5f:f2: ac:e3:d9:82:ef:fd:80:b0:7b:a8:87:c0:fe:f0:a0:62:cc:72: cc:42:02:b8:57:af:f9:a7:71:18:01:53:69:c3:e4:55:77:50: da:6f:cd:0b:4b:ec:8f:b7:1b:f0:ad:ac:74:cc:f1:ad:da:5f: e5:6f:81:2c:6b:7c:f1:ed:fb:26:4f:d3:84:fd:27:fa:18:bc: 98:d4:31:29:9e:46:38:ea:8f:4c:59:b8:b2:f5:ab:10:24:32: 34:db:57:f6:c8:6f:1f:8d:e9:a5:f0:12:e6:52:ec:e0:8b:a0: 17:db:fa:78 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICFwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQwMjAxMTAvBgNVBAUTKEY2Njk5MjY0NDE3QzIyOEI1MUZFMTVCM0IxRUNCNzg2 N0YyQTI3NDMwHhcNMjMxMTE0MTcwNDMyWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTUzYThhMC1jNTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhJWf1h8QoKN2esFlPKz2EayEqoILr0DMB/xGjyUnlrYO9Er5fitHj9N5+Zj BVtQgZxvzNDG088pCHT0/YDSBCfAQNP5jypIvtKJG2+D1NljHEGX5KIfAakLX5mh X+Vi5fvUF3BmtvKDOyc8J5QYd88zbjyjlXCC9jvdqwfdTUvk2gxUL945fftrozl6 OZKwaSG7Fk76UfcpXKZYMZDL2X6/H/6gzTRKCKm8ZmiDAevynmoQ186f9fNeiXd+ 3Vx5oBCHnyqhpUislIUrHDndU0sSj+YC+9glzbBrXi4kPonnYIL5b5fk0GJUCOH4 Dke1MdivaPs3mCBRtCf4Kifs5QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFDEGLGq8 Wkb73hN2Y6moWxTn8XssMB8GA1UdIwQYMBaAFPZpkmRBfCKLUf4Vs7Hst4Z/KidD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDAyMC9BRDFCOERFNEI0 MDQxMUU3ODlDRkE1NDFDNEY5QUUwMi85bW1TWkVGOElvdFJfaFd6c2V5M2huOHFK ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzltbVNaRUY4SW90Ul9oV3pzZXkzaG44cUowTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTQwMjAvQUQxQjhERTRCNDA0MTFFNzg5Q0ZBNTQxQzRGOUFFMDIvQzc3MkJCNEFG N0ExMTFFRDg3NEJFQzYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnfjwwDQQCAAIwBwMFACQEr0AwDQYJKoZIhvcNAQELBQAD ggEBALvDq2vnXn6X0NFBeM/o/Zhjydi2D+p9iqOjFMXnU+Wkp7lGFrS0yAeevcOJ mICdaK6MuK7cTsT4QkECrUsZfhIYIacBc1VEn+0FChs2Iu8Brn3OtZsEeUzYaCky 1mvnL7wdqxQJLVCZ6aAraQajjsuDI6nw/cafJ2WYwL/k5gkVf1Hd1fzQo/ccp484 QJtf8qzj2YLv/YCwe6iHwP7woGLMcsxCArhXr/mncRgBU2nD5FV3UNpvzQtL7I+3 G/CtrHTM8a3aX+VvgSxrfPHt+yZP04T9J/oYvJjUMSmeRjjqj0xZuLL1qxAkMjTb V/bIbx+N6aXwEuZS7OCLoBfb+ng= -----END CERTIFICATE-----Generated at Thu May 16 18:26:04 2024 by rpki-client on console-fra.rpki-client.org