$ rpki-client -vvf rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/4B3AC7DC5FC811ED869A6956C4F9AE02.roa File: 4B3AC7DC5FC811ED869A6956C4F9AE02.roa (raw, json) Hash identifier: hwrYZn+i2OUNCmUoK3ena1siLJOV1HVO2m5EjPVb3kw= Subject key identifier: A6:9C:FC:DB:0B:55:6E:A7:C7:4D:CE:DF:53:39:0A:15:F2:D1:9D:36 Certificate issuer: /CN=A9154FE7/serialNumber=CBE3D2A165B194B958EEC3B6A94457772A3A092A Certificate serial: 07B2 Authority key identifier: CB:E3:D2:A1:65:B1:94:B9:58:EE:C3:B6:A9:44:57:77:2A:3A:09:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/4B3AC7DC5FC811ED869A6956C4F9AE02.roa Signing time: Thu 24 Oct 2024 21:10:40 +0000 ROA not before: Thu 24 Oct 2024 21:10:40 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 45177 IP address blocks: 103.123.164.0/22 maxlen: 22 103.123.164.0/24 maxlen: 24 103.123.165.0/24 maxlen: 24 103.123.166.0/24 maxlen: 24 103.123.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.crl rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1970 (0x7b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154FE7/serialNumber=CBE3D2A165B194B958EEC3B6A94457772A3A092A Validity Not Before: Oct 24 21:10:40 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=671ab7cf-21c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1c:a1:c2:a6:6a:87:58:38:90:0a:79:6d:e8: 6d:41:9a:d3:fe:dc:39:dd:67:25:01:bb:66:4d:46: 87:79:b0:c8:9c:19:04:3d:30:3b:76:91:82:1b:01: 81:09:f1:2e:be:75:0c:68:13:d5:8f:9f:81:2b:16: 43:d1:e8:38:00:36:c5:1a:67:52:17:3b:6d:39:cd: 91:f8:b4:f8:42:d6:92:5b:7f:cd:e9:cf:ac:4c:96: 3d:54:d0:b1:c5:b0:50:b4:03:2b:b5:f4:33:de:57: 81:a4:45:49:b2:47:cf:e1:48:1c:a5:35:3c:f1:4e: b1:31:37:e0:5c:4c:f3:c4:89:3f:bf:d4:0a:1d:f8: 8a:b6:9b:32:95:01:a5:03:97:18:75:89:12:43:5a: df:6b:4c:bb:c4:a0:fc:e8:60:04:97:d1:5b:54:df: 4f:5f:4a:ed:81:a1:f5:26:95:c5:0d:de:48:27:21: 48:bc:fb:a0:15:12:ec:e4:45:e5:59:cb:18:fe:63: d8:1a:f5:e2:6c:f0:99:67:af:68:8e:86:d3:a5:14: fe:81:5a:ad:ab:4d:98:aa:f9:f6:d8:b7:ae:08:60: bb:1f:f8:df:84:a1:17:a6:6c:31:b8:fe:61:43:d9: ae:20:a1:38:15:79:e8:3e:39:27:f5:69:77:d5:9f: c2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:9C:FC:DB:0B:55:6E:A7:C7:4D:CE:DF:53:39:0A:15:F2:D1:9D:36 X509v3 Authority Key Identifier: keyid:CB:E3:D2:A1:65:B1:94:B9:58:EE:C3:B6:A9:44:57:77:2A:3A:09:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/4B3AC7DC5FC811ED869A6956C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.123.164.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:be:66:67:4c:37:68:1f:f8:8a:b1:21:0c:f7:dd:31:b1:7c: 2f:d2:27:dc:0c:52:ed:34:3c:f5:07:f2:a2:1e:e3:d2:56:88: 5d:9e:06:2b:af:dc:15:c9:37:65:ec:13:d7:08:52:c3:a9:3c: 24:31:1f:8c:fc:59:42:83:de:2d:01:69:31:9d:8a:9d:45:df: 80:b0:2e:c2:05:4c:86:9b:05:c5:3b:f3:a4:90:0b:19:d7:f0: 03:3c:20:08:63:ae:d3:7d:09:3f:c9:f7:20:d8:e6:f8:e9:51: 57:ba:8f:ef:ef:86:e2:2b:2a:ce:d5:79:5e:4c:5f:2c:48:8f: 81:97:80:9c:34:54:71:7a:6b:cd:7e:12:a2:d2:f7:03:c7:50: 74:d0:8e:fb:b8:b2:e7:7e:5f:92:cb:f8:e7:64:ac:80:bf:bc: dd:19:21:f6:84:8f:60:34:d5:fe:a0:63:97:3a:ef:f6:01:4f: 0c:5a:fb:02:83:8a:43:0e:3e:08:4f:a7:da:8a:45:d1:28:6a: aa:2f:96:82:35:ff:e5:2c:cc:ad:28:3b:12:66:3d:65:1d:fb: 61:5b:96:64:09:dd:6e:c2:c9:71:37:43:28:4d:7a:d2:9f:2f: f1:62:c6:1f:80:9d:e7:2d:af:38:63:b8:6e:a2:cf:ed:96:ab: 49:b8:6d:a8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRGRTcxMTAvBgNVBAUTKENCRTNEMkExNjVCMTk0Qjk1OEVFQzNCNkE5NDQ1Nzc3 MkEzQTA5MkEwHhcNMjQxMDI0MjExMDQwWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFhYjdjZi0yMWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRyhwqZqh1g4kAp5behtQZrT/tw53WclAbtmTUaHebDInBkEPTA7dpGCGwGB CfEuvnUMaBPVj5+BKxZD0eg4ADbFGmdSFzttOc2R+LT4QtaSW3/N6c+sTJY9VNCx xbBQtAMrtfQz3leBpEVJskfP4UgcpTU88U6xMTfgXEzzxIk/v9QKHfiKtpsylQGl A5cYdYkSQ1rfa0y7xKD86GAEl9FbVN9PX0rtgaH1JpXFDd5IJyFIvPugFRLs5EXl WcsY/mPYGvXibPCZZ69ojobTpRT+gVqtq02Yqvn22LeuCGC7H/jfhKEXpmwxuP5h Q9muIKE4FXnoPjkn9Wl31Z/CTwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKac/NsL VW6nx03O31M5ChXy0Z02MB8GA1UdIwQYMBaAFMvj0qFlsZS5WO7DtqlEV3cqOgkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEZFNy81QTJEODlFQURC N0QxMUVBQkNGM0VDM0VDNEY5QUUwMi95LVBTb1dXeGxMbFk3c08ycVVSWGR5bzZD U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ktUFNvV1d4bExsWTdzTzJxVVJYZHlvNkNTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTRGRTcvNUEyRDg5RUFEQjdEMTFFQUJDRjNFQzNFQzRGOUFFMDIvNEIzQUM3REM1 RkM4MTFFRDg2OUE2OTU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJne6QwDQYJKoZIhvcNAQELBQADggEBAAu+ZmdMN2gf+Iqx IQz33TGxfC/SJ9wMUu00PPUH8qIe49JWiF2eBiuv3BXJN2XsE9cIUsOpPCQxH4z8 WUKD3i0BaTGdip1F34CwLsIFTIabBcU786SQCxnX8AM8IAhjrtN9CT/J9yDY5vjp UVe6j+/vhuIrKs7VeV5MXyxIj4GXgJw0VHF6a81+EqLS9wPHUHTQjvu4sud+X5LL +OdkrIC/vN0ZIfaEj2A01f6gY5c67/YBTwxa+wKDikMOPghPp9qKRdEoaqovloI1 /+UszK0oOxJmPWUd+2FblmQJ3W7CyXE3QyhNetKfL/Fixh+AnectrzhjuG6iz+2W q0m4bag= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:08 2024 by rpki-client on console-fra.rpki-client.org