$ rpki-client -vvf rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/E973A832656511EC85A7CA2CC4F9AE02.roa File: E973A832656511EC85A7CA2CC4F9AE02.roa (raw, json) Hash identifier: sn836Q2nMHQU64NdjOs0ZiA4VlzUNBBTB3I7t0SZgIw= Subject key identifier: 3D:28:8F:81:BE:34:B9:AF:EB:00:44:8A:DB:AA:36:C6:5A:C6:C5:F8 Certificate issuer: /CN=A9160856/serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76 Certificate serial: 0FBA Authority key identifier: 55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/E973A832656511EC85A7CA2CC4F9AE02.roa Signing time: Wed 18 Sep 2024 18:06:35 +0000 ROA not before: Wed 18 Sep 2024 18:06:35 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 59382 IP address blocks: 103.73.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4026 (0xfba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160856/serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76 Validity Not Before: Sep 18 18:06:35 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66eb16ab-85ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:52:cd:d5:8c:6b:9d:cf:fa:49:36:98:73:96: e0:2d:e4:d0:64:1c:ef:71:21:67:84:63:71:1f:b9: b3:38:6c:d7:0b:ee:e7:08:53:fe:87:3e:58:8c:c1: e4:ff:c8:bb:b8:3f:d3:dd:65:14:b0:ff:f9:de:7e: 6d:52:94:3c:92:da:70:c5:c6:72:93:92:c3:e7:8c: 3b:2a:68:f3:6f:2e:2f:87:f1:97:4e:ff:d9:e2:34: 26:bf:a4:26:ae:5c:23:09:eb:d5:65:80:0f:49:fe: 03:83:3e:b4:d7:89:8d:41:7a:12:12:e6:22:32:78: 65:80:01:a1:70:65:8c:5e:ca:98:bc:59:4c:d1:5f: 54:8f:59:d3:c8:72:d8:49:0c:65:ec:43:ce:75:bc: e5:c1:2e:e6:ee:17:aa:78:ce:41:5f:e3:47:53:ab: 62:a7:a3:fd:7a:ce:3e:bb:4f:c0:0d:13:68:8e:ce: e2:35:19:7a:c6:a7:91:ae:89:31:b1:2b:d4:86:56: 5d:d2:f8:c7:bf:bd:cb:a5:a2:8e:0e:b1:be:e7:7f: 29:29:5a:3d:4e:6b:e3:83:a9:22:0a:9f:2a:10:35: 41:3c:f2:56:6e:d6:99:27:25:e7:4a:25:2d:1f:08: 09:7a:f7:c9:b3:20:3a:fa:f4:b8:33:50:fe:6b:a7: 8c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:28:8F:81:BE:34:B9:AF:EB:00:44:8A:DB:AA:36:C6:5A:C6:C5:F8 X509v3 Authority Key Identifier: keyid:55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/E973A832656511EC85A7CA2CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.73.104.0/22 Signature Algorithm: sha256WithRSAEncryption 00:a6:29:43:e3:d0:fd:3b:bf:7d:5f:f9:e8:a2:25:5b:59:08: d0:a3:5d:2d:cf:f0:d6:8e:77:e9:df:7f:8d:82:f0:ae:75:96: 0c:5a:44:96:78:31:9e:ca:6a:55:0f:b3:ef:5c:d6:5f:6d:f0: f6:8e:86:67:85:86:15:72:14:d1:a3:60:d5:c5:1b:29:55:01: c2:5e:21:5b:74:57:a0:fd:d3:f6:b4:4f:a0:eb:e4:eb:61:46: ad:ff:6d:85:7e:92:7c:d2:db:83:0f:8f:a3:88:45:2e:6a:97: 48:10:3f:6b:47:f6:42:fd:c9:9b:f0:6a:13:44:f6:66:c1:c4: 25:04:2a:f3:77:97:a3:1f:12:62:1c:bc:5a:71:08:92:4c:3e: a4:c1:7e:2e:30:d1:da:06:f2:c4:16:90:f9:08:89:12:43:bc: 43:79:11:8d:75:e6:6b:9a:bb:7c:fe:25:4e:73:d6:e1:55:ee: 78:48:b4:17:3d:a8:c7:e4:de:c4:d0:78:db:3c:69:d7:c2:d6: e5:2f:a7:ae:c4:a4:8d:02:36:60:e4:c3:11:58:26:9c:6e:2c: b0:3f:92:d1:b4:c7:f0:1d:e3:b7:a6:0d:bc:9b:e7:42:d4:23: 40:43:7f:83:c4:1f:59:71:c9:cf:9a:37:c0:7c:bb:e2:31:3f: 79:e0:44:54 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICD7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA4NTYxMTAvBgNVBAUTKDU1MUY1OEE2OEM4RkU2OTIwQjJFRjBBQzZFOTBBMkQz RjM1ODhBNzYwHhcNMjQwOTE4MTgwNjM1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmViMTZhYi04NWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0FLN1Yxrnc/6STaYc5bgLeTQZBzvcSFnhGNxH7mzOGzXC+7nCFP+hz5YjMHk /8i7uD/T3WUUsP/53n5tUpQ8ktpwxcZyk5LD54w7Kmjzby4vh/GXTv/Z4jQmv6Qm rlwjCevVZYAPSf4Dgz6014mNQXoSEuYiMnhlgAGhcGWMXsqYvFlM0V9Uj1nTyHLY SQxl7EPOdbzlwS7m7heqeM5BX+NHU6tip6P9es4+u0/ADRNojs7iNRl6xqeRrokx sSvUhlZd0vjHv73LpaKODrG+538pKVo9Tmvjg6kiCp8qEDVBPPJWbtaZJyXnSiUt HwgJevfJsyA6+vS4M1D+a6eMmQIDAQABo4IClTCCApEwHQYDVR0OBBYEFD0oj4G+ NLmv6wBEituqNsZaxsX4MB8GA1UdIwQYMBaAFFUfWKaMj+aSCy7wrG6QotPzWIp2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDg1Ni9FRDU3Nzk1RTRD NzQxMUU5OUUxQjk5NTZDNEY5QUUwMi9WUjlZcG95UDVwSUxMdkNzYnBDaTBfTllp blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSOVlwb3lQNXBJTEx2Q3NicENpMF9OWWluWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjA4NTYvRUQ1Nzc5NUU0Qzc0MTFFOTlFMUI5OTU2QzRGOUFFMDIvRTk3M0E4MzI2 NTY1MTFFQzg1QTdDQTJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnSWgwDQYJKoZIhvcNAQELBQADggEBAACmKUPj0P07v31f +eiiJVtZCNCjXS3P8NaOd+nff42C8K51lgxaRJZ4MZ7KalUPs+9c1l9t8PaOhmeF hhVyFNGjYNXFGylVAcJeIVt0V6D90/a0T6Dr5OthRq3/bYV+knzS24MPj6OIRS5q l0gQP2tH9kL9yZvwahNE9mbBxCUEKvN3l6MfEmIcvFpxCJJMPqTBfi4w0doG8sQW kPkIiRJDvEN5EY115muau3z+JU5z1uFV7nhItBc9qMfk3sTQeNs8adfC1uUvp67E pI0CNmDkwxFYJpxuLLA/ktG0x/Ad47emDbyb50LUI0BDf4PEH1lxyc+aN8B8u+Ix P3ngRFQ= -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:58 2024 by rpki-client on console-fra.rpki-client.org