$ rpki-client -vvf rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/8789C45E384311EAAA40EE51C4F9AE02.roa File: 8789C45E384311EAAA40EE51C4F9AE02.roa (raw, json) Hash identifier: srLpp+xocz4bwmTO830ebrOgQWtT6RHMkR4y8UuRo2o= Subject key identifier: 7E:E6:5A:24:2E:3F:CF:25:49:37:36:F5:C0:DF:1D:5A:D9:03:83:B7 Certificate issuer: /CN=A9154534/serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9 Certificate serial: 0AA0 Authority key identifier: 55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/8789C45E384311EAAA40EE51C4F9AE02.roa Signing time: Fri 12 Jul 2024 20:18:08 +0000 ROA not before: Fri 12 Jul 2024 20:18:08 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 137510 IP address blocks: 103.220.4.0/22 maxlen: 24 2405:7f80::/32 maxlen: 32 2405:7f80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:07:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2720 (0xaa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154534/serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9 Validity Not Before: Jul 12 20:18:08 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66918f7f-f5ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d6:fb:b1:17:89:d0:1e:80:b9:53:5d:f7:95: 72:7a:29:23:8a:c7:d3:08:1f:68:6b:25:0b:bf:dd: 98:de:62:cf:9d:b6:91:01:4a:7a:32:f3:b8:97:7e: c2:b3:74:b6:60:53:31:45:09:41:13:41:85:71:cb: f8:38:be:5a:d0:04:02:4d:e5:14:83:44:dd:de:ae: 8f:2b:e4:9a:d1:41:9e:4d:b2:77:e8:8a:df:77:fd: d7:fe:ec:fa:92:df:6e:24:b4:5b:f5:e0:10:93:b4: bc:58:72:1c:5b:19:6b:63:2d:81:9c:b1:6e:d1:07: 7c:d0:59:c1:18:f9:8c:db:64:b4:41:32:b9:c2:b6: 9f:ee:d1:1b:0f:83:c0:aa:a2:16:82:cb:4d:24:70: 5f:98:bf:89:26:8d:d1:7a:f5:46:5f:2d:c8:39:ae: 97:cd:c5:d0:f9:eb:e0:46:8b:b7:82:9d:e2:fc:06: f3:7d:e0:4f:5e:0d:5a:b5:16:9f:db:42:63:d5:b9: e6:8a:39:7c:32:fd:67:a6:39:86:e3:bd:b1:28:55: 5e:12:26:ea:5a:33:ff:f6:17:be:20:ef:11:ec:81: c2:44:94:ce:b4:18:0a:35:33:09:10:98:56:fd:f3: bc:30:05:e8:b7:fe:3e:14:ff:d4:67:53:ac:f1:78: 7e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E6:5A:24:2E:3F:CF:25:49:37:36:F5:C0:DF:1D:5A:D9:03:83:B7 X509v3 Authority Key Identifier: keyid:55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/8789C45E384311EAAA40EE51C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.220.4.0/22 IPv6: 2405:7f80::/32 Signature Algorithm: sha256WithRSAEncryption 25:bf:ad:6e:83:9d:6e:2a:0d:71:d2:ba:57:28:43:ea:aa:f7: fb:b9:a9:f3:20:1e:11:f0:a3:8a:0b:9c:f4:04:8d:42:68:e8: 39:6f:a6:6f:5d:de:1a:1b:64:ef:89:49:2b:be:dc:91:a6:d2: e8:36:36:e2:54:ea:05:11:bd:3b:b8:7e:6d:fe:b1:4d:5d:89: e0:02:df:02:1e:8c:5b:53:25:82:11:17:19:d1:4f:c0:3d:36: f7:07:b1:fe:b3:c7:b8:cd:78:1a:2a:62:3b:db:ea:2f:b2:b0: e9:65:fb:4a:f3:76:6c:33:bd:21:a8:30:92:9b:9b:42:a3:10: 4d:41:c3:43:85:e9:63:54:28:44:92:88:5f:62:3b:d5:56:04: 28:87:8f:8b:2e:2a:87:99:df:f1:02:43:38:4b:06:74:c0:0d: 04:ae:76:1e:8f:66:66:f1:7b:f3:d4:25:9f:c1:83:a3:a8:28: d1:ea:89:08:c3:dd:db:d7:a8:89:20:f2:e8:f8:22:bc:1e:5f: e7:bc:83:4f:40:7d:5b:af:94:d8:f2:31:24:f1:1f:00:cd:a4: 3c:4a:cc:1b:1a:3a:7e:49:a6:92:e7:73:1c:08:36:d1:f8:d4: e4:24:ad:d6:0f:d4:47:aa:01:a2:45:e1:33:6a:7e:9c:c5:e1: b8:b5:11:29 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ1MzQxMTAvBgNVBAUTKDU1QzQ2ODU1Q0M5MUFDNTRBQzA3NUMyOTdCNzUzMUZB ODhBNzM1RDkwHhcNMjQwNzEyMjAxODA4WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjkxOGY3Zi1mNWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Nb7sReJ0B6AuVNd95VyeikjisfTCB9oayULv92Y3mLPnbaRAUp6MvO4l37C s3S2YFMxRQlBE0GFccv4OL5a0AQCTeUUg0Td3q6PK+Sa0UGeTbJ36Irfd/3X/uz6 kt9uJLRb9eAQk7S8WHIcWxlrYy2BnLFu0Qd80FnBGPmM22S0QTK5wraf7tEbD4PA qqIWgstNJHBfmL+JJo3RevVGXy3IOa6XzcXQ+evgRou3gp3i/AbzfeBPXg1atRaf 20Jj1bnmijl8Mv1npjmG472xKFVeEibqWjP/9he+IO8R7IHCRJTOtBgKNTMJEJhW /fO8MAXot/4+FP/UZ1Os8Xh+tQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFH7mWiQu P88lSTc29cDfHVrZA4O3MB8GA1UdIwQYMBaAFFXEaFXMkaxUrAdcKXt1MfqIpzXZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDUzNC9CRDI2OTA5RTM4 NDExMUVBOUZFRDVENEZDNEY5QUUwMi9WY1JvVmN5UnJGU3NCMXdwZTNVeC1vaW5O ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZjUm9WY3lSckZTc0Ixd3BlM1V4LW9pbk5kay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTQ1MzQvQkQyNjkwOUUzODQxMTFFQTlGRUQ1RDRGQzRGOUFFMDIvODc4OUM0NUUz ODQzMTFFQUFBNDBFRTUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJn3AQwDQQCAAIwBwMFACQFf4AwDQYJKoZIhvcNAQELBQAD ggEBACW/rW6DnW4qDXHSulcoQ+qq9/u5qfMgHhHwo4oLnPQEjUJo6Dlvpm9d3hob ZO+JSSu+3JGm0ug2NuJU6gURvTu4fm3+sU1dieAC3wIejFtTJYIRFxnRT8A9NvcH sf6zx7jNeBoqYjvb6i+ysOll+0rzdmwzvSGoMJKbm0KjEE1Bw0OF6WNUKESSiF9i O9VWBCiHj4suKoeZ3/ECQzhLBnTADQSudh6PZmbxe/PUJZ/Bg6OoKNHqiQjD3dvX qIkg8uj4IrweX+e8g09AfVuvlNjyMSTxHwDNpDxKzBsaOn5JppLncxwINtH41OQk rdYP1EeqAaJF4TNqfpzF4bi1ESk= -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:28 2024 by rpki-client on console-fra.rpki-client.org