$ rpki-client -vvf rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/E382826C4AF611EFB245AE59C4F9AE02.roa File: E382826C4AF611EFB245AE59C4F9AE02.roa (raw, json) Hash identifier: gHlBFVvPZXMJ6Q+hYaSkMK4+kMOfC8z9KiEMGQejTNE= Subject key identifier: 3E:A4:B6:F8:51:9E:9D:F8:53:A3:AF:6E:34:B7:CF:09:7C:58:DC:DE Certificate issuer: /CN=A9155DEB/serialNumber=0B53B80A6C9C8AEB74D6D7BB571A5200CE55D8F3 Certificate serial: 076C Authority key identifier: 0B:53:B8:0A:6C:9C:8A:EB:74:D6:D7:BB:57:1A:52:00:CE:55:D8:F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/E382826C4AF611EFB245AE59C4F9AE02.roa Signing time: Mon 12 Aug 2024 21:39:55 +0000 ROA not before: Mon 12 Aug 2024 21:39:55 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 135494 IP address blocks: 103.219.232.0/23 maxlen: 23 103.219.232.0/24 maxlen: 24 103.219.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.crl rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1900 (0x76c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155DEB/serialNumber=0B53B80A6C9C8AEB74D6D7BB571A5200CE55D8F3 Validity Not Before: Aug 12 21:39:55 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66ba812b-fe05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:92:c1:3b:0b:b3:8d:30:9c:be:07:3f:3b:75: 91:ae:15:ee:61:9e:11:4b:fa:24:2e:52:8a:33:e1: 95:d9:7b:2d:a6:46:b9:ee:8a:62:b2:e1:d4:ff:48: bf:0c:2a:a3:2e:1d:2a:72:54:31:5e:a9:18:bd:e6: ee:2d:c3:79:6f:18:30:e6:20:36:b3:16:8c:33:e7: e8:6b:50:56:e6:19:d4:ae:ab:8c:cd:85:2c:69:27: 03:39:25:ed:9a:0c:3a:3b:a4:88:66:77:e4:97:8b: 59:fd:a8:4b:0b:30:b2:6c:41:9d:7b:e8:48:79:7c: 84:6f:b0:99:eb:02:ff:68:b8:e5:14:e9:e7:a9:75: 8c:6a:49:47:d6:fb:c1:d1:a5:51:02:e3:b7:b1:69: 15:2a:59:27:b4:10:23:a3:b0:d3:dc:e7:4e:5e:ca: 11:ed:07:18:9c:4e:b1:4e:92:18:f7:22:79:4b:57: 43:80:07:a2:36:c7:d2:a9:c7:4f:d2:55:00:35:b8: 50:1f:60:d4:27:dc:97:ed:d1:99:24:55:09:3c:ec: 78:de:20:6f:31:51:a9:4d:21:e8:f4:88:a2:50:bf: 34:46:7f:bf:66:7a:b3:df:4b:6f:d5:dc:7b:12:2d: 6d:b2:38:e8:f0:d8:8c:61:83:b5:9b:2a:2f:6f:f2: 7a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A4:B6:F8:51:9E:9D:F8:53:A3:AF:6E:34:B7:CF:09:7C:58:DC:DE X509v3 Authority Key Identifier: keyid:0B:53:B8:0A:6C:9C:8A:EB:74:D6:D7:BB:57:1A:52:00:CE:55:D8:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/E382826C4AF611EFB245AE59C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.219.232.0/23 Signature Algorithm: sha256WithRSAEncryption c4:18:14:93:99:86:a4:07:81:8d:45:d2:8e:7a:19:35:78:e3: 97:fc:24:fd:45:13:f3:0b:f0:47:e6:98:1b:7d:7e:fe:5b:b5: 23:63:c1:0f:89:3c:93:20:e4:ee:11:74:57:27:a9:f3:42:dc: 03:93:34:58:e1:df:b5:29:a5:69:aa:8e:69:3d:4e:a1:3d:64: 9c:9d:3b:24:91:64:85:b4:a7:a7:ca:6b:b1:d8:00:bb:15:e6: 54:e4:81:b0:57:7b:d0:d1:69:2c:6d:70:64:e9:8f:ba:ef:b3: c4:ad:dc:82:ed:ea:06:3b:c6:0e:98:44:21:09:ae:0f:eb:81: 6d:53:f0:8e:73:3d:e4:ad:6f:a7:d4:0a:48:31:de:99:21:60: f9:a1:e0:23:84:17:be:e2:74:b3:48:a3:cb:86:a0:a8:c9:f2: 9a:8b:b0:1f:d5:96:38:db:50:52:a6:0f:c5:7c:b4:73:e4:87: 5e:dd:da:dd:a6:57:62:4c:30:05:4b:6b:f7:44:32:b6:d0:69: 9c:03:c5:e9:e2:18:80:c6:dd:21:59:7f:67:46:02:8b:83:a8: 09:8a:81:82:12:d1:67:39:dc:8b:13:3b:f9:47:ae:ee:41:d6: 88:ac:f6:bb:07:5f:14:c5:d7:8e:bc:d0:6e:64:c9:53:63:1b: 45:a3:12:89 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVERUIxMTAvBgNVBAUTKDBCNTNCODBBNkM5QzhBRUI3NEQ2RDdCQjU3MUE1MjAw Q0U1NUQ4RjMwHhcNMjQwODEyMjEzOTU1WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmJhODEyYi1mZTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ZLBOwuzjTCcvgc/O3WRrhXuYZ4RS/okLlKKM+GV2Xstpka57opisuHU/0i/ DCqjLh0qclQxXqkYvebuLcN5bxgw5iA2sxaMM+foa1BW5hnUrquMzYUsaScDOSXt mgw6O6SIZnfkl4tZ/ahLCzCybEGde+hIeXyEb7CZ6wL/aLjlFOnnqXWMaklH1vvB 0aVRAuO3sWkVKlkntBAjo7DT3OdOXsoR7QcYnE6xTpIY9yJ5S1dDgAeiNsfSqcdP 0lUANbhQH2DUJ9yX7dGZJFUJPOx43iBvMVGpTSHo9IiiUL80Rn+/Znqz30tv1dx7 Ei1tsjjo8NiMYYO1myovb/J6xwIDAQABo4IClTCCApEwHQYDVR0OBBYEFD6ktvhR np34U6OvbjS3zwl8WNzeMB8GA1UdIwQYMBaAFAtTuApsnIrrdNbXu1caUgDOVdjz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NURFQi8xNjJDQjI3NEVB NEMxMUVBQTI1N0I5MzlDNEY5QUUwMi9DMU80Q215Y2l1dDAxdGU3VnhwU0FNNVYy UE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MxTzRDbXljaXV0MDF0ZTdWeHBTQU01VjJQTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTVERUIvMTYyQ0IyNzRFQTRDMTFFQUEyNTdCOTM5QzRGOUFFMDIvRTM4MjgyNkM0 QUY2MTFFRkIyNDVBRTU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn2+gwDQYJKoZIhvcNAQELBQADggEBAMQYFJOZhqQHgY1F 0o56GTV445f8JP1FE/ML8EfmmBt9fv5btSNjwQ+JPJMg5O4RdFcnqfNC3AOTNFjh 37UppWmqjmk9TqE9ZJydOySRZIW0p6fKa7HYALsV5lTkgbBXe9DRaSxtcGTpj7rv s8St3ILt6gY7xg6YRCEJrg/rgW1T8I5zPeStb6fUCkgx3pkhYPmh4COEF77idLNI o8uGoKjJ8pqLsB/VljjbUFKmD8V8tHPkh17d2t2mV2JMMAVLa/dEMrbQaZwDxeni GIDG3SFZf2dGAouDqAmKgYIS0Wc53IsTO/lHru5B1ois9rsHXxTF14680G5kyVNj G0WjEok= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:27 2024 by rpki-client on console-ams.rpki-client.org