$ rpki-client -vvf rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/B9003CC84EE811EA8C045D52C4F9AE02.roa File: B9003CC84EE811EA8C045D52C4F9AE02.roa (raw, json) Hash identifier: kbjVSRJWVNsKP886UTdCXje46K3vQ/OgBysCSuexrdk= Subject key identifier: 7E:4A:A7:D9:60:C2:BD:19:AC:28:5F:8C:EA:19:72:A3:92:91:13:0E Certificate issuer: /CN=A916320B/serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0 Certificate serial: 0B43 Authority key identifier: 70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/B9003CC84EE811EA8C045D52C4F9AE02.roa Signing time: Sat 16 Nov 2024 18:57:31 +0000 ROA not before: Sat 16 Nov 2024 18:57:31 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 132468 IP address blocks: 103.9.50.0/24 maxlen: 24 103.21.230.0/24 maxlen: 24 103.21.231.0/24 maxlen: 24 103.115.80.0/24 maxlen: 24 103.115.81.0/24 maxlen: 24 2405:c0c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Dec 2024 18:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2883 (0xb43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916320B/serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0 Validity Not Before: Nov 16 18:57:31 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6738eb1b-23f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9f:2f:88:f4:96:cb:1a:94:1b:43:bf:f2:1a: be:95:a8:1d:74:f7:b7:90:87:ab:6c:f9:d9:87:cf: e2:22:1d:49:71:ab:7d:32:36:f2:7c:16:9b:b2:9e: 83:31:14:ba:e1:6f:f2:d9:e1:fe:b7:2b:35:b4:13: ca:14:97:8f:14:ed:2c:11:ed:08:bd:0f:3e:ba:dd: bb:d1:02:9e:1a:3b:3d:a1:bd:7d:c3:12:0c:bb:49: f3:2e:d4:fc:55:49:f7:f3:42:91:b7:36:c8:e6:b2: 12:d8:57:16:d6:46:b0:78:18:ef:36:5b:fb:8f:81: e7:5d:20:86:19:be:a4:db:93:a5:1f:bd:4f:44:59: 6b:df:5a:bf:e7:3e:41:94:ea:96:52:a9:ed:81:c5: 5b:a6:a8:e7:ab:d2:69:06:ef:80:8c:1f:ed:e2:70: d8:36:d4:84:0f:46:0f:24:cb:d4:90:c3:1e:2f:3e: 18:bb:80:21:e2:eb:ad:af:18:f8:88:44:fb:f6:23: ce:55:5f:86:7d:c7:1d:d0:7a:52:76:77:76:20:30: b3:79:4b:d3:ae:3d:15:6a:3b:00:a9:9a:a5:fa:9e: f6:ec:cf:f7:c5:dc:45:f5:7d:7d:07:d6:5e:bc:d3: c7:1d:b5:80:ab:a7:08:2e:a6:54:0c:6b:3b:4f:43: f4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4A:A7:D9:60:C2:BD:19:AC:28:5F:8C:EA:19:72:A3:92:91:13:0E X509v3 Authority Key Identifier: keyid:70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/B9003CC84EE811EA8C045D52C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.9.50.0/24 103.21.230.0/23 103.115.80.0/23 IPv6: 2405:c0c0::/32 Signature Algorithm: sha256WithRSAEncryption 62:75:72:69:91:92:d5:1e:62:83:60:9d:c0:11:ba:a5:c1:21: 26:b9:a7:e3:9c:77:c6:d8:98:18:a0:6d:6a:81:6c:28:ec:bc: 70:b5:42:48:a8:6d:9a:0d:36:e5:81:c9:84:8d:02:61:43:a7: f9:18:ad:47:49:d8:5a:f1:b2:e2:51:4a:ba:a4:7a:8d:4a:30: 35:60:a3:54:ce:0a:76:42:6e:c9:cc:be:74:94:1a:2c:48:2d: d3:6b:d8:14:63:a7:52:bc:8b:83:02:90:2e:a1:1d:88:64:37: 19:be:79:b9:62:ca:e1:d1:f3:8a:c4:b5:03:53:85:b9:d5:50: eb:15:07:84:cc:1b:40:64:50:e0:e2:58:53:de:38:64:8c:1a: f1:32:2e:b8:7e:64:04:d2:b1:a3:0b:41:fd:5f:7b:4a:4e:2d: 46:15:d3:36:fd:a9:5a:e4:2c:f3:b5:e9:e2:33:45:28:07:cb: bc:18:c9:9b:6f:0f:22:10:67:65:d8:65:da:95:02:68:b7:17: 12:6e:89:6a:fb:f1:c3:b5:62:a1:16:90:47:76:71:a0:54:6f: f1:71:89:01:d9:50:69:af:00:99:58:1d:c1:77:af:8a:ca:ae: af:00:cd:b4:f1:1a:cd:96:72:93:41:16:25:45:a9:f6:7f:6a: 8e:05:0b:c1 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICC0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMyMEIxMTAvBgNVBAUTKDcwNDZGODk4M0RGQzM3MDRCNkU1Q0Q3RUExMjgwRkQw RjUyOTc5QTAwHhcNMjQxMTE2MTg1NzMxWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzM4ZWIxYi0yM2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr58viPSWyxqUG0O/8hq+lagddPe3kIerbPnZh8/iIh1Jcat9MjbyfBabsp6D MRS64W/y2eH+tys1tBPKFJePFO0sEe0IvQ8+ut270QKeGjs9ob19wxIMu0nzLtT8 VUn380KRtzbI5rIS2FcW1kaweBjvNlv7j4HnXSCGGb6k25OlH71PRFlr31q/5z5B lOqWUqntgcVbpqjnq9JpBu+AjB/t4nDYNtSED0YPJMvUkMMeLz4Yu4Ah4uutrxj4 iET79iPOVV+Gfccd0HpSdnd2IDCzeUvTrj0VajsAqZql+p727M/3xdxF9X19B9Ze vNPHHbWAq6cILqZUDGs7T0P04QIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFH5Kp9lg wr0ZrChfjOoZcqOSkRMOMB8GA1UdIwQYMBaAFHBG+Jg9/DcEtuXNfqEoD9D1KXmg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzIwQi8wRkZGN0FBQTI3 QUUxMUVBODU5NTZFNzhDNEY5QUUwMi9jRWI0bUQzOE53UzI1YzEtb1NnUDBQVXBl YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NFYjRtRDM4TndTMjVjMS1vU2dQMFBVcGVhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjMyMEIvMEZGRjdBQUEyN0FFMTFFQTg1OTU2RTc4QzRGOUFFMDIvQjkwMDNDQzg0 RUU4MTFFQThDMDQ1RDUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBABnCTIDBAFnFeYDBAFnc1AwDQQCAAIwBwMFACQFwMAwDQYJ KoZIhvcNAQELBQADggEBAGJ1cmmRktUeYoNgncARuqXBISa5p+Ocd8bYmBigbWqB bCjsvHC1QkiobZoNNuWByYSNAmFDp/kYrUdJ2FrxsuJRSrqkeo1KMDVgo1TOCnZC bsnMvnSUGixILdNr2BRjp1K8i4MCkC6hHYhkNxm+ebliyuHR84rEtQNThbnVUOsV B4TMG0BkUODiWFPeOGSMGvEyLrh+ZATSsaMLQf1fe0pOLUYV0zb9qVrkLPO16eIz RSgHy7wYyZtvDyIQZ2XYZdqVAmi3FxJuiWr78cO1YqEWkEd2caBUb/FxiQHZUGmv AJlYHcF3r4rKrq8AzbTxGs2WcpNBFiVFqfZ/ao4FC8E= -----END CERTIFICATE-----Generated at Tue Nov 26 21:52:50 2024 by rpki-client on console-ams.rpki-client.org