$ rpki-client -vvf rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/9917A4D6285311ED9DD8324EC4F9AE02.roa File: 9917A4D6285311ED9DD8324EC4F9AE02.roa (raw, json) Hash identifier: l2W7FJxUViOnExRcyTKGhj9MZSuDCp14Nj5oTAGxPHw= Subject key identifier: 99:95:48:26:8F:F3:A6:6C:A4:90:ED:A6:95:E7:D0:E1:E7:5C:70:5D Certificate issuer: /CN=A91618E1/serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Certificate serial: 01BF Authority key identifier: 2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/9917A4D6285311ED9DD8324EC4F9AE02.roa Signing time: Thu 03 Oct 2024 02:36:17 +0000 ROA not before: Thu 03 Oct 2024 02:36:17 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 150176 IP address blocks: 103.204.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91618E1/serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Validity Not Before: Oct 3 02:36:17 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66fe0320-92c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a4:09:cd:48:7d:6f:23:0d:a7:37:c3:2f:b1: 3c:e5:f9:99:87:02:8b:59:bc:e1:9e:6c:be:28:71: 05:9d:aa:80:6c:12:b9:67:b7:61:31:50:bd:7c:13: bc:de:0d:5d:f5:47:00:2b:8e:88:e1:63:5f:d1:8b: 39:97:a5:20:0b:3c:3e:be:df:48:bb:48:42:1d:18: 06:d7:ae:02:d2:9c:d6:87:4e:19:1f:6c:85:7d:4e: 05:49:4b:fd:58:42:d1:87:aa:dd:a7:65:30:b6:96: 61:4b:56:1a:1b:4b:78:48:d6:00:e1:1f:9e:c4:ba: cd:a3:0b:dd:f0:5a:0b:df:7d:83:c9:bb:f8:db:6a: 75:01:29:c1:f7:0e:05:33:f3:0a:68:42:d1:84:c4: 8a:a1:9a:d9:03:b8:bd:77:11:65:87:0a:92:3b:e4: 9b:b6:45:ce:25:42:b6:09:ea:f7:33:8c:4c:88:c9: c8:f1:37:a4:a7:cd:dd:bc:99:ba:1a:a6:ac:55:95: ff:97:1a:7a:a9:94:17:0b:b4:31:c9:dc:2d:63:f5: 34:2d:39:bd:bb:7b:dd:e4:34:e4:7d:55:54:95:54: 4a:b1:73:c2:38:62:8c:6e:38:a9:41:f3:e8:98:41: 56:06:ab:da:3d:59:da:88:9b:d4:9d:4a:18:d8:f2: 68:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:95:48:26:8F:F3:A6:6C:A4:90:ED:A6:95:E7:D0:E1:E7:5C:70:5D X509v3 Authority Key Identifier: keyid:2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/9917A4D6285311ED9DD8324EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.204.68.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:77:be:1a:fc:7e:08:8e:7d:76:5b:d3:cd:02:90:44:6a:97: 7f:55:9d:93:93:2c:fa:f4:4c:71:c4:c5:63:93:94:dc:83:90: 8c:32:25:03:cc:eb:6c:73:fb:0c:75:3f:cc:2f:86:40:05:f3: 90:d9:82:a7:fc:57:4b:6c:bd:58:d4:64:0c:f4:69:20:84:30: 3f:e0:a4:90:97:c2:c9:98:a2:a0:1d:7b:75:4f:ae:a9:e2:4d: 23:74:56:26:48:21:77:fc:4c:c1:15:3d:01:7c:1a:89:0b:09: 51:e1:ec:fb:e0:86:46:e6:a5:89:b4:8e:d8:4e:1e:cd:02:03: c1:8f:aa:5c:21:2e:0d:6a:6c:08:59:91:76:61:6c:95:0c:db: 25:99:5d:a5:67:69:ea:26:02:11:1c:ae:41:00:fb:85:fd:d4: 3b:4e:4e:62:80:ff:ee:f2:a7:ab:50:39:33:78:ca:69:64:1d: ba:c1:4f:c2:1f:56:f9:ee:6c:fb:5d:62:7a:7e:d0:bd:08:75: 89:c0:9e:08:fd:56:eb:15:8b:7e:33:e8:d8:63:8c:18:56:53: d6:0d:bf:51:90:c7:71:4f:0b:45:7b:9f:b9:a0:86:1e:c1:a5: 82:4f:1f:54:76:9d:06:00:2b:50:b2:60:4c:50:eb:82:d7:03: 22:e2:9e:72 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4RTExMTAvBgNVBAUTKDJEMENCMEU5OEY1NjJFOTM2NkQ1QTk5NUZCMjZGNjY2 QThDMEE5NUEwHhcNMjQxMDAzMDIzNjE3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZlMDMyMC05MmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKQJzUh9byMNpzfDL7E85fmZhwKLWbzhnmy+KHEFnaqAbBK5Z7dhMVC9fBO8 3g1d9UcAK46I4WNf0Ys5l6UgCzw+vt9Iu0hCHRgG164C0pzWh04ZH2yFfU4FSUv9 WELRh6rdp2UwtpZhS1YaG0t4SNYA4R+exLrNowvd8FoL332Dybv422p1ASnB9w4F M/MKaELRhMSKoZrZA7i9dxFlhwqSO+SbtkXOJUK2Cer3M4xMiMnI8Tekp83dvJm6 GqasVZX/lxp6qZQXC7QxydwtY/U0LTm9u3vd5DTkfVVUlVRKsXPCOGKMbjipQfPo mEFWBqvaPVnaiJvUnUoY2PJoiQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJmVSCaP 86ZspJDtppXn0OHnXHBdMB8GA1UdIwQYMBaAFC0MsOmPVi6TZtWplfsm9maowKla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThFMS8xMTMxNjYyQzI4 NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xwTm0xYW1WLXliMlpxakFx Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xReXc2WTlXTHBObTFhbVYteWIyWnFqQXFWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjE4RTEvMTEzMTY2MkMyODUwMTFFRDhDODk3OTRBQzRGOUFFMDIvOTkxN0E0RDYy ODUzMTFFRDlERDgzMjRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnzEQwDQYJKoZIhvcNAQELBQADggEBAAt3vhr8fgiOfXZb 080CkERql39VnZOTLPr0THHExWOTlNyDkIwyJQPM62xz+wx1P8wvhkAF85DZgqf8 V0tsvVjUZAz0aSCEMD/gpJCXwsmYoqAde3VPrqniTSN0ViZIIXf8TMEVPQF8GokL CVHh7PvghkbmpYm0jthOHs0CA8GPqlwhLg1qbAhZkXZhbJUM2yWZXaVnaeomAhEc rkEA+4X91DtOTmKA/+7yp6tQOTN4ymlkHbrBT8IfVvnubPtdYnp+0L0IdYnAngj9 VusVi34z6NhjjBhWU9YNv1GQx3FPC0V7n7mghh7BpYJPH1R2nQYAK1CyYExQ64LX AyLinnI= -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:37 2024 by rpki-client on console-fra.rpki-client.org