$ rpki-client -vvf rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/C309F5BA017011ECB98B2F33C4F9AE02.roa File: C309F5BA017011ECB98B2F33C4F9AE02.roa (raw, json) Hash identifier: 1O85FlOv6K/BR4VQkIQz2NJTXgw1sgnDeAobu9ShuqI= Subject key identifier: 59:3C:30:16:A2:3D:A1:EA:AB:E2:FB:BE:D6:CD:61:D2:E6:E6:24:EA Certificate issuer: /CN=A9159ECD/serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F Certificate serial: 04B7 Authority key identifier: F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/C309F5BA017011ECB98B2F33C4F9AE02.roa Signing time: Sat 19 Oct 2024 00:14:41 +0000 ROA not before: Sat 19 Oct 2024 00:14:41 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 141196 IP address blocks: 103.156.36.0/24 maxlen: 24 103.206.158.0/24 maxlen: 24 2406:7d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1207 (0x4b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159ECD/serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F Validity Not Before: Oct 19 00:14:41 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6712f9f0-fc64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b3:7c:60:66:4c:01:87:0b:dd:e3:a4:76:94: dd:0b:41:bd:98:39:4b:ef:cb:17:4a:92:15:b5:7d: 0f:4c:93:77:f8:64:04:ed:6f:08:5e:47:b4:92:5c: 46:ef:a1:63:e2:a3:9b:65:f9:e2:a2:f1:64:d9:83: b4:4b:59:65:f3:81:77:e1:4c:d7:7d:c2:82:8c:10: 40:a7:49:88:90:4c:2f:4c:82:4e:59:55:a6:e6:2b: 44:d8:fa:c3:9a:c5:3d:86:7d:fd:9b:4b:95:1b:7a: 30:5c:e0:ba:ce:cb:6a:83:5b:e0:a9:4d:0c:17:07: 5a:68:10:49:11:70:4c:4f:a9:c8:bb:b7:72:1e:71: 69:44:ec:26:90:83:b4:0f:8d:ac:48:11:77:64:ec: 60:95:12:33:84:a6:d5:73:bf:ed:85:da:f1:6f:8d: 93:69:85:74:01:96:d3:8a:75:61:85:75:db:df:4d: cd:1f:ed:05:79:18:b4:4c:21:56:55:60:66:c8:05: 9a:dc:b6:43:69:c2:22:6e:cb:bf:ac:92:ca:16:ed: 87:e7:f2:39:c8:d9:4b:b0:6b:11:a7:09:28:9b:0e: ad:22:22:de:cc:92:e5:77:8c:e6:5a:e0:49:9f:34: c4:c7:6d:81:6b:84:5f:c1:dd:22:19:6c:24:e8:e2: 3d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3C:30:16:A2:3D:A1:EA:AB:E2:FB:BE:D6:CD:61:D2:E6:E6:24:EA X509v3 Authority Key Identifier: keyid:F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/C309F5BA017011ECB98B2F33C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.36.0/24 103.206.158.0/24 IPv6: 2406:7d40::/32 Signature Algorithm: sha256WithRSAEncryption 6b:fe:1a:93:62:6f:fa:d6:c7:36:f8:77:44:78:e8:8f:51:ab: 7d:00:85:76:82:93:a4:38:7b:87:bc:0f:88:ff:e7:c6:bb:66: 12:63:3d:bb:9d:5d:b4:e1:78:d6:ae:3e:78:8a:62:63:7f:bb: b7:63:c1:8d:ff:da:e8:22:1c:1b:e4:6a:68:81:07:73:94:f6: 79:35:39:f2:b5:18:d4:b3:6a:2a:21:d4:ea:9a:ea:90:28:ee: 9d:22:6a:da:8a:15:d3:87:78:ff:75:c5:d6:42:e5:47:b1:bb: 4a:6e:6d:c3:34:11:c6:22:81:6f:dc:04:56:33:05:5d:ed:11: 46:86:41:4c:3d:0a:d0:a8:50:2f:88:2f:08:c2:de:15:56:37: ee:97:3c:27:5e:de:a2:95:f3:7d:63:83:fa:1c:19:88:da:03: ab:24:2d:9d:29:79:74:29:f3:da:28:e9:d8:1a:f7:09:8c:d1: ad:93:e1:da:c3:94:c8:bb:96:77:f3:64:2b:52:92:a7:5d:82: df:90:6b:f8:49:8b:05:a8:e6:0b:63:9e:e6:fa:80:28:27:5a: 3a:42:11:fe:6e:dc:e1:5e:0a:e2:ab:22:87:5b:d1:97:9c:e3: 9c:92:cb:d2:f8:8f:4a:61:da:e0:da:95:2b:b1:e4:64:40:1c: d1:45:49:4a -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICBLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlFQ0QxMTAvBgNVBAUTKEYxQkE5NDNDMzAzNkM2OUI0NEE3NTk3MEE0NEQ5Mjkw NTY4OUE5MEYwHhcNMjQxMDE5MDAxNDQxWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzEyZjlmMC1mYzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rN8YGZMAYcL3eOkdpTdC0G9mDlL78sXSpIVtX0PTJN3+GQE7W8IXke0klxG 76Fj4qObZfniovFk2YO0S1ll84F34UzXfcKCjBBAp0mIkEwvTIJOWVWm5itE2PrD msU9hn39m0uVG3owXOC6zstqg1vgqU0MFwdaaBBJEXBMT6nIu7dyHnFpROwmkIO0 D42sSBF3ZOxglRIzhKbVc7/thdrxb42TaYV0AZbTinVhhXXb303NH+0FeRi0TCFW VWBmyAWa3LZDacIibsu/rJLKFu2H5/I5yNlLsGsRpwkomw6tIiLezJLld4zmWuBJ nzTEx22Ba4Rfwd0iGWwk6OI95QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFFk8MBai PaHqq+L7vtbNYdLm5iTqMB8GA1UdIwQYMBaAFPG6lDwwNsabRKdZcKRNkpBWiakP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUVDRC83QUM1MTU0QzAx NkExMUVDQjJCMDBDMzdDNEY5QUUwMi84YnFVUERBMnhwdEVwMWx3cEUyU2tGYUpx UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhicVVQREEyeHB0RXAxbHdwRTJTa0ZhSnFROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTlFQ0QvN0FDNTE1NEMwMTZBMTFFQ0IyQjAwQzM3QzRGOUFFMDIvQzMwOUY1QkEw MTcwMTFFQ0I5OEIyRjMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBABnnCQDBABnzp4wDQQCAAIwBwMFACQGfUAwDQYJKoZIhvcN AQELBQADggEBAGv+GpNib/rWxzb4d0R46I9Rq30AhXaCk6Q4e4e8D4j/58a7ZhJj PbudXbTheNauPniKYmN/u7djwY3/2ugiHBvkamiBB3OU9nk1OfK1GNSzaioh1Oqa 6pAo7p0iatqKFdOHeP91xdZC5Uexu0pubcM0EcYigW/cBFYzBV3tEUaGQUw9CtCo UC+ILwjC3hVWN+6XPCde3qKV831jg/ocGYjaA6skLZ0peXQp89oo6dga9wmM0a2T 4drDlMi7lnfzZCtSkqddgt+Qa/hJiwWo5gtjnub6gCgnWjpCEf5u3OFeCuKrIodb 0Zec45ySy9L4j0ph2uDalSux5GRAHNFFSUo= -----END CERTIFICATE-----Generated at Thu Nov 21 01:25:58 2024 by rpki-client on console-ams.rpki-client.org