$ rpki-client -vvf rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/202D8382AD5311EBA93CEB69C4F9AE02.roa File: 202D8382AD5311EBA93CEB69C4F9AE02.roa (raw, json) Hash identifier: 9CVFCRxGd96rDHgxt1WsX71RS0A2IwtDONeOpXumo3o= Subject key identifier: 6F:C8:02:25:56:E0:38:56:B9:9E:92:AC:C1:FE:14:E5:F1:F9:8D:4D Certificate issuer: /CN=A9157BF7/serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629 Certificate serial: 0760 Authority key identifier: 9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/202D8382AD5311EBA93CEB69C4F9AE02.roa Signing time: Mon 30 Sep 2024 21:40:44 +0000 ROA not before: Mon 30 Sep 2024 21:40:44 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 138538 IP address blocks: 103.155.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1888 (0x760) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157BF7/serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629 Validity Not Before: Sep 30 21:40:44 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66fb1adc-c32a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d1:e6:45:88:f3:1f:50:31:4a:ac:b8:13:b2: 23:a3:8f:09:ed:50:eb:87:fd:68:6a:6e:07:1e:48: 41:87:8c:1e:dc:4c:72:55:83:42:35:c9:d4:25:0a: f2:e1:4b:7e:89:0a:21:ed:b8:28:d9:86:d2:5d:5b: 73:2f:55:3c:9d:7f:19:30:fd:69:c4:dc:c1:e1:c3: 15:a8:e0:2d:10:3f:10:53:87:9f:68:51:1d:50:c2: c8:67:ab:93:42:81:5a:5f:14:be:c2:c4:59:d7:80: 2a:c7:78:87:7f:f5:97:c1:03:56:75:a9:e0:79:1d: aa:40:69:28:b0:05:62:05:5a:12:13:b4:2f:be:e4: 45:66:65:5e:3a:da:3a:38:1b:31:81:da:78:cf:73: c5:d5:5f:10:9e:51:aa:fc:38:6b:17:f0:a3:82:ae: 45:9d:29:9f:bb:02:35:58:a0:f3:0f:76:4d:a2:84: 29:e3:76:b8:35:15:ff:c2:ad:89:22:dd:b6:93:c0: 67:65:3f:8d:a7:51:71:3a:97:8e:d6:2b:b5:51:14: d0:f2:f1:ce:18:dc:e4:f8:70:6e:30:06:8d:52:6f: 05:2f:db:21:a3:04:c8:21:de:00:6a:61:e3:fb:e7: 2d:cd:e8:12:77:a2:60:58:e2:a0:85:a5:20:54:a1: 59:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C8:02:25:56:E0:38:56:B9:9E:92:AC:C1:FE:14:E5:F1:F9:8D:4D X509v3 Authority Key Identifier: keyid:9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/202D8382AD5311EBA93CEB69C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.155.120.0/23 Signature Algorithm: sha256WithRSAEncryption 30:f2:e8:54:c0:6d:72:99:d1:64:c4:82:8a:3b:3d:cf:b9:ab: a1:27:50:f6:b5:26:9a:6b:60:d4:d7:fc:38:43:7b:e0:b9:2e: 12:a7:f4:00:f6:ea:bd:18:d9:be:3d:e5:07:25:e2:d2:a4:e5: 8d:3b:ad:72:1d:39:32:a8:00:3b:05:e7:90:10:7b:42:3e:03: 64:d6:49:be:2c:6f:6e:0c:6e:a9:7f:80:a8:3c:cd:da:bc:87: bb:25:5a:64:0f:cd:64:78:4d:ca:f1:4d:d1:3e:df:d5:01:f7: 3d:4e:50:8c:d0:2e:eb:2a:1e:3a:46:79:5a:a4:d4:62:88:76: 52:67:2b:da:1b:26:b3:4a:fb:21:ca:5f:a0:db:8b:4c:68:07: fb:f8:a1:4b:6a:82:25:85:61:e7:84:c9:7f:51:5f:d2:dd:8a: 57:0b:c9:16:7d:40:75:e0:06:e5:9d:e5:51:6b:de:cb:fe:30: d1:cf:a2:b3:77:e2:ee:79:1b:30:c3:83:51:60:62:7b:c8:5c: 51:d0:f1:b1:3d:c1:7e:48:b0:29:64:64:c5:d1:25:c8:9c:01: 04:06:40:37:9d:a7:30:37:42:c6:27:82:a7:b1:3c:a6:2c:c8: ee:e1:34:65:7e:92:50:9d:eb:b9:c4:52:8c:ee:01:80:24:87: a2:2b:2a:16 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCRjcxMTAvBgNVBAUTKDlCNDYwMUI2QjBCNzhGQjhGRTlFMzkzMzRBODFCNUE1 REQ1OTU2MjkwHhcNMjQwOTMwMjE0MDQ0WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZiMWFkYy1jMzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tHmRYjzH1AxSqy4E7Ijo48J7VDrh/1oam4HHkhBh4we3ExyVYNCNcnUJQry 4Ut+iQoh7bgo2YbSXVtzL1U8nX8ZMP1pxNzB4cMVqOAtED8QU4efaFEdUMLIZ6uT QoFaXxS+wsRZ14Aqx3iHf/WXwQNWdangeR2qQGkosAViBVoSE7QvvuRFZmVeOto6 OBsxgdp4z3PF1V8QnlGq/DhrF/Cjgq5FnSmfuwI1WKDzD3ZNooQp43a4NRX/wq2J It22k8BnZT+Np1FxOpeO1iu1URTQ8vHOGNzk+HBuMAaNUm8FL9showTIId4AamHj ++ctzegSd6JgWOKghaUgVKFZBwIDAQABo4IClTCCApEwHQYDVR0OBBYEFG/IAiVW 4DhWuZ6SrMH+FOXx+Y1NMB8GA1UdIwQYMBaAFJtGAbawt4+4/p45M0qBtaXdWVYp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0JGNy9BRDJBQzcyRUZC RUExMUVBQTBBQzMzMUFDNEY5QUUwMi9tMFlCdHJDM2o3ai1uamt6U29HMXBkMVpW aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20wWUJ0ckMzajdqLW5qa3pTb0cxcGQxWlZpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdCRjcvQUQyQUM3MkVGQkVBMTFFQUEwQUMzMzFBQzRGOUFFMDIvMjAyRDgzODJB RDUzMTFFQkE5M0NFQjY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnm3gwDQYJKoZIhvcNAQELBQADggEBADDy6FTAbXKZ0WTE goo7Pc+5q6EnUPa1JpprYNTX/DhDe+C5LhKn9AD26r0Y2b495Qcl4tKk5Y07rXId OTKoADsF55AQe0I+A2TWSb4sb24Mbql/gKg8zdq8h7slWmQPzWR4TcrxTdE+39UB 9z1OUIzQLusqHjpGeVqk1GKIdlJnK9obJrNK+yHKX6Dbi0xoB/v4oUtqgiWFYeeE yX9RX9LdilcLyRZ9QHXgBuWd5VFr3sv+MNHPorN34u55GzDDg1FgYnvIXFHQ8bE9 wX5IsClkZMXRJcicAQQGQDedpzA3QsYngqexPKYsyO7hNGV+klCd67nEUozuAYAk h6IrKhY= -----END CERTIFICATE-----Generated at Sun Nov 24 22:11:58 2024 by rpki-client on console-fra.rpki-client.org