$ rpki-client -vvf rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/95CAE87C6BF311EDA6D4C167C4F9AE02.roa File: 95CAE87C6BF311EDA6D4C167C4F9AE02.roa (raw, json) Hash identifier: 3EzXcKLqkf+yvu5XSnwelAKqEi6m9pFTGpMryRUvc1c= Subject key identifier: DD:BB:A4:E0:52:16:7A:80:63:E5:2A:5E:34:70:58:35:71:8B:35:DE Certificate issuer: /CN=A9162439/serialNumber=4AF40F4378A2E98BEE6C784D8BDB9E82EDB66C9F Certificate serial: 074A Authority key identifier: 4A:F4:0F:43:78:A2:E9:8B:EE:6C:78:4D:8B:DB:9E:82:ED:B6:6C:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SvQPQ3ii6YvubHhNi9uegu22bJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/95CAE87C6BF311EDA6D4C167C4F9AE02.roa Signing time: Sat 26 Oct 2024 21:32:31 +0000 ROA not before: Sat 26 Oct 2024 21:32:31 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 141225 IP address blocks: 103.156.196.0/23 maxlen: 24 2001:df4:f480::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/SvQPQ3ii6YvubHhNi9uegu22bJ8.crl rsync://rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/SvQPQ3ii6YvubHhNi9uegu22bJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SvQPQ3ii6YvubHhNi9uegu22bJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1866 (0x74a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162439/serialNumber=4AF40F4378A2E98BEE6C784D8BDB9E82EDB66C9F Validity Not Before: Oct 26 21:32:31 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=671d5fee-fe26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3e:27:9e:bc:b0:5f:4d:00:f5:1b:6c:c6:1f: fc:d8:c6:6f:8b:2b:70:fd:15:d7:49:c9:94:27:92: c5:1f:3d:1f:95:5e:df:4c:15:7e:4d:5f:aa:ab:4b: a9:8f:88:19:9c:7d:d7:5f:90:ea:92:a8:4a:15:0d: 6d:06:bd:df:5b:b5:18:36:c0:b1:d3:eb:94:6b:b8: ee:e2:a0:81:42:23:f6:d4:cc:13:d3:96:b7:47:41: 3c:5f:aa:1e:29:aa:bc:80:11:6e:aa:d1:af:5b:a8: 7f:5d:86:4e:f7:bc:d3:c3:d7:60:7e:bf:f8:0c:7f: 70:60:dc:63:cd:0d:19:f9:1d:e0:34:47:99:5f:c3: 87:8f:72:89:6b:b8:72:b8:9e:ed:08:50:80:90:74: d5:2d:4b:40:98:bb:d0:76:0b:84:57:a2:29:83:29: e5:c0:b4:5c:f3:b6:b7:fb:17:7c:e7:a9:03:39:0c: a3:0e:ab:10:9f:5f:e6:35:2e:c9:e3:61:26:c0:fe: 2d:ad:b6:5e:54:94:3c:f1:60:dd:0c:ec:2b:72:15: b6:db:d2:3b:a0:30:bc:bb:d1:2d:02:ca:4b:d0:aa: bf:90:92:15:88:2b:1e:71:f4:38:fd:4f:71:0d:ed: 79:5b:99:19:ec:4d:d6:7d:25:90:ea:10:74:a0:27: 20:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:BB:A4:E0:52:16:7A:80:63:E5:2A:5E:34:70:58:35:71:8B:35:DE X509v3 Authority Key Identifier: keyid:4A:F4:0F:43:78:A2:E9:8B:EE:6C:78:4D:8B:DB:9E:82:ED:B6:6C:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/SvQPQ3ii6YvubHhNi9uegu22bJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SvQPQ3ii6YvubHhNi9uegu22bJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/95CAE87C6BF311EDA6D4C167C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.196.0/23 IPv6: 2001:df4:f480::/47 Signature Algorithm: sha256WithRSAEncryption 18:25:7b:45:52:f2:08:4d:f7:4d:b9:23:7e:d3:cd:ff:69:17: d6:d0:6e:9e:96:ff:b4:11:74:e2:6c:1a:25:1b:b9:eb:e3:ce: 0f:d8:4a:90:6d:4e:83:c2:05:67:fd:16:12:4f:7a:7c:83:4f: fd:ff:84:58:79:12:27:0f:91:a9:3f:e4:6e:40:3c:a8:c9:14: d2:12:d6:13:aa:2c:da:1d:c9:aa:98:77:7a:36:aa:f4:62:d0: 63:1c:c3:be:64:e6:3d:7f:2b:18:9c:3c:f4:c6:84:94:ab:35: ed:96:31:ea:cd:c6:52:9b:fd:ea:60:ef:d1:0d:1c:7b:c3:c4: 33:08:f2:ac:fb:45:c0:be:7f:97:04:ab:fc:0d:0f:53:47:53: 58:93:61:8b:5f:49:9e:df:4e:39:fa:aa:c8:0e:59:e5:72:26: 23:a8:eb:b0:46:23:e6:37:ee:c3:30:cd:82:bf:4c:58:99:c4: e4:ea:1a:7d:d6:3b:9e:0a:1f:49:30:58:e2:50:0c:39:94:8f: 9d:12:cb:04:27:bb:f1:8b:eb:e8:65:c3:d6:7c:74:59:59:2b: 64:c7:f7:c1:9c:69:c4:04:c0:cb:e2:d9:21:64:8f:b2:7e:70: 23:be:f8:97:5d:12:66:da:1d:d4:03:52:ea:6d:46:69:fe:ed: 07:38:d8:ce -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICB0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI0MzkxMTAvBgNVBAUTKDRBRjQwRjQzNzhBMkU5OEJFRTZDNzg0RDhCREI5RTgy RURCNjZDOUYwHhcNMjQxMDI2MjEzMjMxWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFkNWZlZS1mZTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwz4nnrywX00A9Rtsxh/82MZviytw/RXXScmUJ5LFHz0flV7fTBV+TV+qq0up j4gZnH3XX5DqkqhKFQ1tBr3fW7UYNsCx0+uUa7ju4qCBQiP21MwT05a3R0E8X6oe Kaq8gBFuqtGvW6h/XYZO97zTw9dgfr/4DH9wYNxjzQ0Z+R3gNEeZX8OHj3KJa7hy uJ7tCFCAkHTVLUtAmLvQdguEV6IpgynlwLRc87a3+xd856kDOQyjDqsQn1/mNS7J 42EmwP4trbZeVJQ88WDdDOwrchW229I7oDC8u9EtAspL0Kq/kJIViCsecfQ4/U9x De15W5kZ7E3WfSWQ6hB0oCcgkQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFN27pOBS FnqAY+UqXjRwWDVxizXeMB8GA1UdIwQYMBaAFEr0D0N4oumL7mx4TYvbnoLttmyf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjQzOS8zMEQ5Qjc3QTAy RTMxMUVCODZEMjg3MzZDNEY5QUUwMi9TdlFQUTNpaTZZdnViSGhOaTl1ZWd1MjJi SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N2UVBRM2lpNll2dWJIaE5pOXVlZ3UyMmJKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjI0MzkvMzBEOUI3N0EwMkUzMTFFQjg2RDI4NzM2QzRGOUFFMDIvOTVDQUU4N0M2 QkYzMTFFREE2RDRDMTY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnnMQwDwQCAAIwCQMHASABDfT0gDANBgkqhkiG9w0BAQsF AAOCAQEAGCV7RVLyCE33TbkjftPN/2kX1tBunpb/tBF04mwaJRu56+POD9hKkG1O g8IFZ/0WEk96fINP/f+EWHkSJw+RqT/kbkA8qMkU0hLWE6os2h3Jqph3ejaq9GLQ YxzDvmTmPX8rGJw89MaElKs17ZYx6s3GUpv96mDv0Q0ce8PEMwjyrPtFwL5/lwSr /A0PU0dTWJNhi19Jnt9OOfqqyA5Z5XImI6jrsEYj5jfuwzDNgr9MWJnE5OoafdY7 ngofSTBY4lAMOZSPnRLLBCe78Yvr6GXD1nx0WVkrZMf3wZxpxATAy+LZIWSPsn5w I774l10SZtod1ANS6m1Gaf7tBzjYzg== -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:29 2024 by rpki-client on console-ams.rpki-client.org