$ rpki-client -vvf rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/686A55E2EB4811EC85B4E60EC4F9AE02.roa File: 686A55E2EB4811EC85B4E60EC4F9AE02.roa (raw, json) Hash identifier: DBuDl77P/pL9wYiNriRl+mRJ7TJ0bOfQxLP7wzjEQtQ= Subject key identifier: C0:09:AC:EB:1E:5A:AE:9B:AA:52:CC:54:F2:AB:49:8B:CC:48:EB:9F Certificate issuer: /CN=A9168973/serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6 Certificate serial: 0244 Authority key identifier: 7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/686A55E2EB4811EC85B4E60EC4F9AE02.roa Signing time: Wed 21 Aug 2024 02:46:30 +0000 ROA not before: Wed 21 Aug 2024 02:46:30 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 149863 IP address blocks: 103.189.106.0/24 maxlen: 24 103.189.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:12:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168973/serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6 Validity Not Before: Aug 21 02:46:30 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66c55505-a87c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:af:6b:4d:db:2c:8d:a4:b4:54:4a:9a:e2:62: a5:00:69:12:aa:60:6e:da:de:89:b2:ee:8d:75:ca: 7b:22:97:ee:23:59:89:af:47:f6:b0:d2:03:67:86: 64:ad:98:1e:ba:51:de:48:55:f4:75:82:24:3e:44: 69:e2:43:62:72:b3:24:ff:fb:13:ea:71:28:79:ba: 0b:8d:08:11:a9:55:88:e8:1d:f0:43:8a:c7:1a:f7: 5a:04:0b:6a:b6:8d:5c:0d:80:26:fb:55:db:31:72: 1c:05:1f:01:69:35:2b:1b:83:b7:a5:16:7a:65:06: cb:99:8b:3d:d1:74:c1:ff:b7:3c:3d:47:d6:95:d3: 19:4e:63:8e:7f:98:4a:56:61:56:c1:15:d8:1e:42: 08:27:15:28:0f:3f:65:42:da:02:d8:47:da:77:e4: 47:a3:63:b1:57:63:d8:68:3d:28:98:ad:75:93:bf: f6:5d:ef:8b:df:7d:a2:6d:fc:48:58:ce:c9:f7:c2: 8c:99:6f:45:e0:4e:55:cb:ff:1f:9d:35:2b:aa:c0: 2e:4a:fb:b9:ff:a3:af:e0:14:19:a5:0e:f9:97:26: 86:4e:1f:77:84:63:a9:c1:77:96:0d:cf:30:03:4b: 16:bf:26:ed:30:96:ac:cc:03:2d:2c:47:72:98:60: c5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:09:AC:EB:1E:5A:AE:9B:AA:52:CC:54:F2:AB:49:8B:CC:48:EB:9F X509v3 Authority Key Identifier: keyid:7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/686A55E2EB4811EC85B4E60EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.189.106.0/23 Signature Algorithm: sha256WithRSAEncryption b1:65:1a:f3:7d:d0:9b:45:60:46:e1:ea:11:41:1e:df:71:c2: 42:54:d8:d7:2f:4b:4e:9f:a9:eb:f2:97:dc:87:5f:02:f8:36: 64:05:f4:24:79:d2:e0:0e:db:4e:ae:e3:7f:31:9a:89:f7:2b: c1:c8:2d:75:64:52:e6:a2:f1:9e:5c:c5:c2:72:be:cb:1a:27: 7f:15:f2:c1:49:f5:e8:00:b7:bc:0d:97:d7:05:14:70:dd:6c: 20:1b:42:b5:36:68:4d:58:06:eb:5b:e7:bf:8e:c2:15:80:82: 24:fd:35:e6:c1:4a:74:d9:76:26:ec:cd:1c:7e:07:d2:7a:03: 97:bd:16:af:0f:f3:1c:42:2a:dc:74:ac:5e:4d:b2:51:39:d2: 8d:e8:72:ee:01:17:18:69:52:ef:94:db:f9:25:a2:67:fc:34: 78:13:60:f4:92:a5:67:ba:80:c7:be:f9:5a:9c:5c:83:bd:a1: 95:de:2f:1a:84:0e:c7:ea:45:82:70:2b:b1:5f:2a:c3:c6:af: 5c:7e:2c:81:74:30:f1:f4:e7:38:0b:72:f9:fd:49:7d:1c:5d: 62:f9:e0:ab:89:3f:ab:09:e3:00:74:3d:56:01:16:74:be:19: f3:b4:08:e9:7b:94:1e:d3:03:01:e5:95:95:f9:6a:35:ab:38: de:13:df:50 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5NzMxMTAvBgNVBAUTKDdDOEM5RjdCMTZDQzlFQ0I0NEYwMzIwREM3OENCODE0 Q0Q0MkE3QTYwHhcNMjQwODIxMDI0NjMwWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmM1NTUwNS1hODdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyK9rTdssjaS0VEqa4mKlAGkSqmBu2t6Jsu6Ndcp7IpfuI1mJr0f2sNIDZ4Zk rZgeulHeSFX0dYIkPkRp4kNicrMk//sT6nEoeboLjQgRqVWI6B3wQ4rHGvdaBAtq to1cDYAm+1XbMXIcBR8BaTUrG4O3pRZ6ZQbLmYs90XTB/7c8PUfWldMZTmOOf5hK VmFWwRXYHkIIJxUoDz9lQtoC2Efad+RHo2OxV2PYaD0omK11k7/2Xe+L332ibfxI WM7J98KMmW9F4E5Vy/8fnTUrqsAuSvu5/6Ov4BQZpQ75lyaGTh93hGOpwXeWDc8w A0sWvybtMJaszAMtLEdymGDFYQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMAJrOse Wq6bqlLMVPKrSYvMSOufMB8GA1UdIwQYMBaAFHyMn3sWzJ7LRPAyDceMuBTNQqem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk3My81NjA2QUUyMkVC NDQxMUVDQURFMUVENjJDNEY5QUUwMi9mSXlmZXhiTW5zdEU4RElOeDR5NEZNMUNw NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZJeWZleGJNbnN0RThESU54NHk0Rk0xQ3A2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njg5NzMvNTYwNkFFMjJFQjQ0MTFFQ0FERTFFRDYyQzRGOUFFMDIvNjg2QTU1RTJF QjQ4MTFFQzg1QjRFNjBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnvWowDQYJKoZIhvcNAQELBQADggEBALFlGvN90JtFYEbh 6hFBHt9xwkJU2NcvS06fqevyl9yHXwL4NmQF9CR50uAO206u438xmon3K8HILXVk Uuai8Z5cxcJyvssaJ38V8sFJ9egAt7wNl9cFFHDdbCAbQrU2aE1YButb57+OwhWA giT9NebBSnTZdibszRx+B9J6A5e9Fq8P8xxCKtx0rF5NslE50o3ocu4BFxhpUu+U 2/klomf8NHgTYPSSpWe6gMe++VqcXIO9oZXeLxqEDsfqRYJwK7FfKsPGr1x+LIF0 MPH05zgLcvn9SX0cXWL54KuJP6sJ4wB0PVYBFnS+GfO0COl7lB7TAwHllZX5ajWr ON4T31A= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:40 2024 by rpki-client on console-ams.rpki-client.org