$ rpki-client -vvf rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/D1EAA18CD2BC11ED9E7A9A1BC4F9AE02.roa File: D1EAA18CD2BC11ED9E7A9A1BC4F9AE02.roa (raw, json) Hash identifier: i03lBnfDNHY/sYmQfX16IPVZCxFCGwznGSQxDY92raY= Subject key identifier: A9:F2:9A:32:00:B7:F4:7A:DE:16:1A:CC:F2:D7:03:97:46:67:EA:DC Certificate issuer: /CN=A9160D0A/serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Certificate serial: AF Authority key identifier: AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/D1EAA18CD2BC11ED9E7A9A1BC4F9AE02.roa Signing time: Fri 29 Dec 2023 05:26:19 +0000 ROA not before: Fri 29 Dec 2023 05:26:19 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 6453 IP address blocks: 103.120.104.0/24 maxlen: 24 103.120.105.0/24 maxlen: 24 103.120.106.0/24 maxlen: 24 103.120.107.0/24 maxlen: 24 175.100.160.0/24 maxlen: 24 175.100.161.0/24 maxlen: 24 175.100.162.0/24 maxlen: 24 175.100.163.0/24 maxlen: 24 2405:a100:10::/44 maxlen: 44 2405:a100:20::/44 maxlen: 44 2405:a100:30::/44 maxlen: 44 2405:a100:40::/44 maxlen: 44 2405:a100:50::/44 maxlen: 44 2405:a100:60::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 May 2024 04:40:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160D0A/serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Validity Not Before: Dec 29 05:26:19 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=658e587a-3e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c0:36:83:7d:f7:5b:7a:0a:3b:fc:d6:60:1a: 88:9c:9c:f4:4a:d7:65:4b:79:6f:d4:f8:0b:94:55: cb:85:0b:4a:a5:d9:e2:fa:8e:56:8b:fa:f3:65:6a: bc:46:c4:83:eb:d9:e6:17:e7:f6:e4:28:a4:5f:c2: 80:a7:e9:fd:0c:aa:a3:b9:8f:f6:68:36:8c:aa:b6: 11:6e:40:82:11:71:3f:12:9d:9c:1b:64:5d:17:34: 39:de:78:ec:9c:91:f9:bc:b8:73:82:a5:45:91:4b: 69:51:98:5d:06:0e:a8:8c:a0:14:a6:cc:85:7a:15: a7:b9:88:0a:20:2a:e7:74:9e:ba:9f:42:65:53:25: 77:fd:65:df:40:4c:71:57:b4:29:c7:11:25:ae:ff: b4:9d:f8:8c:b5:d6:9c:b1:3c:29:82:d0:0b:49:0b: aa:cb:64:6b:db:e5:86:b2:0a:c7:72:5d:9b:17:7e: a8:dd:33:a5:45:4a:d4:17:d3:d6:c1:2c:4c:23:44: 05:f0:3c:1a:62:e6:18:7a:71:ec:02:54:59:a5:27: 5f:6f:16:07:61:fb:ad:84:5d:c5:1c:8f:78:b2:90: dc:e3:e8:92:ca:24:0e:f1:92:49:2e:a2:e9:f4:c2: 4e:aa:f3:f5:b5:ec:21:9e:87:35:25:e3:ff:31:1d: 49:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F2:9A:32:00:B7:F4:7A:DE:16:1A:CC:F2:D7:03:97:46:67:EA:DC X509v3 Authority Key Identifier: keyid:AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/D1EAA18CD2BC11ED9E7A9A1BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.120.104.0/22 175.100.160.0/22 IPv6: 2405:a100:10::-2405:a100:6f:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption b9:18:55:f8:05:89:2d:cf:a8:e4:8a:83:7c:f7:be:1c:e1:fa: 5c:02:dc:ea:32:b9:0a:cd:58:92:31:6a:a6:16:d5:ef:70:c4: 06:b1:8e:f5:81:35:d7:6c:f1:1d:92:ed:ae:0d:42:85:df:e2: b9:dd:91:cc:9a:1d:b2:30:2a:27:04:7b:7b:09:bb:84:d0:b3: a2:d7:b5:76:f3:49:29:85:4f:5d:43:7e:22:4f:d1:d4:0e:be: eb:33:11:bd:e6:54:de:70:b8:d0:61:08:47:4f:90:24:db:c2: 6f:6c:18:7b:3e:d6:8c:b5:ea:53:36:09:a0:82:08:a3:74:05: d5:44:45:47:67:1f:3c:a4:80:a4:12:f6:30:9c:f0:9e:4a:c1: dc:ea:b2:16:8b:08:53:f1:cc:d2:d1:e3:e3:b5:68:bb:14:f9: 48:58:e4:f9:13:ff:36:c8:22:f6:bb:66:8a:f0:ac:47:41:a6: dd:dc:ba:17:bc:17:eb:f5:f1:26:b4:87:78:c4:08:2e:d0:02: df:79:bb:eb:cd:66:7a:84:32:7e:1e:e4:49:1d:b3:c6:b6:4e: db:a2:31:8c:ef:28:8f:c9:bd:4c:d7:86:52:18:ce:2b:f5:42: 18:44:ed:f3:72:7c:f1:18:8e:3c:d1:c2:4c:aa:02:82:92:6c: 5b:18:fc:b1 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBEMEExMTAvBgNVBAUTKEFDNjM4NUVENTYzRTFGRDZBNjZCM0U0QjUxMERDQzY5 MzBDRDRCMEMwHhcNMjMxMjI5MDUyNjE5WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NThlNTg3YS0zZTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8A2g333W3oKO/zWYBqInJz0StdlS3lv1PgLlFXLhQtKpdni+o5Wi/rzZWq8 RsSD69nmF+f25CikX8KAp+n9DKqjuY/2aDaMqrYRbkCCEXE/Ep2cG2RdFzQ53njs nJH5vLhzgqVFkUtpUZhdBg6ojKAUpsyFehWnuYgKICrndJ66n0JlUyV3/WXfQExx V7QpxxElrv+0nfiMtdacsTwpgtALSQuqy2Rr2+WGsgrHcl2bF36o3TOlRUrUF9PW wSxMI0QF8DwaYuYYenHsAlRZpSdfbxYHYfuthF3FHI94spDc4+iSyiQO8ZJJLqLp 9MJOqvP1tewhnoc1JeP/MR1JMQIDAQABo4ICtzCCArMwHQYDVR0OBBYEFKnymjIA t/R63hYazPLXA5dGZ+rcMB8GA1UdIwQYMBaAFKxjhe1WPh/Wpms+S1ENzGkwzUsM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEQwQS81NjRBMTM1RUQy MjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5YW1hejVMVVEzTWFURE5T d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JHT0Y3VlktSDlhbWF6NUxVUTNNYVRETlN3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjBEMEEvNTY0QTEzNUVEMjIyMTFFRDlBMjA2QzQ2QzRGOUFFMDIvRDFFQUExOENE MkJDMTFFRDlFN0E5QTFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQQYIKwYBBQUHAQcBAf8E MjAwMBIEAgABMAwDBAJneGgDBAKvZKAwGgQCAAIwFDASAwcEJAWhAAAQAwcEJAWh AABgMA0GCSqGSIb3DQEBCwUAA4IBAQC5GFX4BYktz6jkioN8974c4fpcAtzqMrkK zViSMWqmFtXvcMQGsY71gTXXbPEdku2uDUKF3+K53ZHMmh2yMConBHt7CbuE0LOi 17V280kphU9dQ34iT9HUDr7rMxG95lTecLjQYQhHT5Ak28JvbBh7PtaMtepTNgmg ggijdAXVREVHZx88pICkEvYwnPCeSsHc6rIWiwhT8czS0ePjtWi7FPlIWOT5E/82 yCL2u2aK8KxHQabd3LoXvBfr9fEmtId4xAgu0ALfebvrzWZ6hDJ+HuRJHbPGtk7b ojGM7yiPyb1M14ZSGM4r9UIYRO3zcnzxGI480cJMqgKCkmxbGPyx -----END CERTIFICATE-----Generated at Thu May 23 06:54:43 2024 by rpki-client on console-fra.rpki-client.org