$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/933D446C0BCA11ED888E5616C4F9AE02.roa File: 933D446C0BCA11ED888E5616C4F9AE02.roa (raw, json) Hash identifier: 7CKylBpxKWewvw1jHj+wa1g1s5Juhm7MXUJtNktQtY4= Subject key identifier: 27:BB:0A:3F:69:7C:CE:6C:03:54:28:3E:09:3D:A1:D5:C3:EC:85:95 Certificate issuer: /CN=A9163998/serialNumber=4A993FF84F602903A317E288BD19B9DA2093558A Certificate serial: 0201 Authority key identifier: 4A:99:3F:F8:4F:60:29:03:A3:17:E2:88:BD:19:B9:DA:20:93:55:8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/933D446C0BCA11ED888E5616C4F9AE02.roa Signing time: Thu 11 Jul 2024 03:35:11 +0000 ROA not before: Thu 11 Jul 2024 03:35:11 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 137831 IP address blocks: 103.115.76.0/22 maxlen: 22 103.115.79.0/24 maxlen: 24 202.181.92.0/22 maxlen: 22 202.181.93.0/24 maxlen: 24 202.181.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.crl rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 513 (0x201) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163998/serialNumber=4A993FF84F602903A317E288BD19B9DA2093558A Validity Not Before: Jul 11 03:35:11 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=668f52ef-11b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b9:74:c0:9f:26:b5:fa:c7:6f:b3:0b:5a:37: 20:6c:4e:30:80:98:a4:da:94:08:ed:ac:a3:ab:07: ca:bd:6c:31:ca:11:4d:b9:09:a1:29:af:9a:19:ba: 78:56:15:b4:1e:9a:38:b3:84:72:35:01:f6:ca:b4: a6:8d:6f:bd:42:c6:77:6e:23:50:07:97:aa:a0:29: 98:54:4b:81:f3:58:92:67:5d:58:35:a2:0b:51:46: ed:5a:44:bd:a4:85:86:aa:e1:ce:46:e2:1c:ce:bb: 4f:b7:bd:c2:1e:aa:a2:31:bf:04:67:6f:91:d6:91: fe:12:69:bb:21:63:db:84:f3:02:19:9b:2a:dc:fd: 48:e5:94:f4:9b:8d:74:21:31:36:34:25:aa:e5:53: 72:40:9b:bd:ae:db:64:a9:d6:39:a9:f2:6c:37:8b: f8:89:04:bf:8a:44:b6:48:63:2f:21:c9:bd:bb:6d: 01:b2:15:43:e9:f5:fd:98:d0:52:78:1d:9e:41:8d: 42:5b:10:b2:9c:4c:ef:5e:51:c4:28:06:f8:bc:94: 79:d8:47:a2:b8:cf:46:7e:8b:62:9f:65:bf:8b:e8: ec:99:eb:f5:55:a8:03:79:cf:05:d5:fb:da:33:27: 55:d3:08:ab:c3:b7:06:d4:a2:0e:77:ec:65:df:a5: ad:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BB:0A:3F:69:7C:CE:6C:03:54:28:3E:09:3D:A1:D5:C3:EC:85:95 X509v3 Authority Key Identifier: keyid:4A:99:3F:F8:4F:60:29:03:A3:17:E2:88:BD:19:B9:DA:20:93:55:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/933D446C0BCA11ED888E5616C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.115.76.0/22 202.181.92.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:9e:85:5c:a2:fb:48:c6:25:af:32:3d:35:83:76:e6:ad:75: fa:d4:b5:ad:2a:01:bd:80:40:1e:26:80:03:f9:4e:32:b1:35: f3:26:ff:82:e9:c4:0e:81:a6:32:b3:f8:06:05:a1:fa:69:01: 13:67:63:99:09:c8:84:90:b1:86:ad:65:3b:a0:eb:7e:8d:f4: c7:48:26:ad:cf:23:2b:5c:73:bf:36:d1:a5:62:5f:79:37:e1: f0:e0:ec:33:f1:d7:f9:9e:44:b6:ad:50:a6:19:3f:e3:d6:d3: 56:7b:b7:56:06:75:2c:0b:9f:e2:3f:8c:62:e7:33:a4:14:6a: 1f:6c:d7:5b:d9:87:14:2a:37:f0:7d:dd:81:04:ba:76:db:11: 9e:cc:c1:27:9c:fb:0b:04:42:82:91:69:e0:d8:aa:66:82:52: 88:41:5b:bd:77:57:04:46:02:40:91:f1:54:2f:67:df:12:9f: 4b:9a:13:6d:78:3f:3a:88:59:44:14:c9:24:2f:67:91:2f:13: ce:c1:af:b2:2b:c1:5a:70:4f:09:72:88:de:27:04:64:02:8f: c4:00:e3:ef:37:32:24:49:07:40:9a:a4:0e:7f:f9:ff:e8:7a: 33:46:ec:5f:10:b8:9d:52:94:0d:e0:b4:3e:f4:ba:9e:d8:62: 2c:65:e3:4a -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM5OTgxMTAvBgNVBAUTKDRBOTkzRkY4NEY2MDI5MDNBMzE3RTI4OEJEMTlCOURB MjA5MzU1OEEwHhcNMjQwNzExMDMzNTExWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjhmNTJlZi0xMWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA27l0wJ8mtfrHb7MLWjcgbE4wgJik2pQI7ayjqwfKvWwxyhFNuQmhKa+aGbp4 VhW0Hpo4s4RyNQH2yrSmjW+9QsZ3biNQB5eqoCmYVEuB81iSZ11YNaILUUbtWkS9 pIWGquHORuIczrtPt73CHqqiMb8EZ2+R1pH+Emm7IWPbhPMCGZsq3P1I5ZT0m410 ITE2NCWq5VNyQJu9rttkqdY5qfJsN4v4iQS/ikS2SGMvIcm9u20BshVD6fX9mNBS eB2eQY1CWxCynEzvXlHEKAb4vJR52EeiuM9Gfotin2W/i+jsmev1VagDec8F1fva MydV0wirw7cG1KIOd+xl36WtTQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCe7Cj9p fM5sA1QoPgk9odXD7IWVMB8GA1UdIwQYMBaAFEqZP/hPYCkDoxfiiL0Zudogk1WK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzk5OC8zQTQxN0Q3NDA4 REMxMUVEQkVERTYxMkJDNEY5QUUwMi9TcGtfLUU5Z0tRT2pGLUtJdlJtNTJpQ1RW WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nwa18tRTlnS1FPakYtS0l2Um01MmlDVFZZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjM5OTgvM0E0MTdENzQwOERDMTFFREJFREU2MTJCQzRGOUFFMDIvOTMzRDQ0NkMw QkNBMTFFRDg4OEU1NjE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnc0wDBALKtVwwDQYJKoZIhvcNAQELBQADggEBAG2ehVyi +0jGJa8yPTWDduatdfrUta0qAb2AQB4mgAP5TjKxNfMm/4LpxA6BpjKz+AYFofpp ARNnY5kJyISQsYatZTug636N9MdIJq3PIytcc7820aViX3k34fDg7DPx1/meRLat UKYZP+PW01Z7t1YGdSwLn+I/jGLnM6QUah9s11vZhxQqN/B93YEEunbbEZ7MwSec +wsEQoKRaeDYqmaCUohBW713VwRGAkCR8VQvZ98Sn0uaE214PzqIWUQUySQvZ5Ev E87Br7IrwVpwTwlyiN4nBGQCj8QA4+83MiRJB0CapA5/+f/oejNG7F8QuJ1SlA3g tD70up7YYixl40o= -----END CERTIFICATE-----Generated at Thu Nov 21 03:11:57 2024 by rpki-client on console-fra.rpki-client.org