$ rpki-client -vvf rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/BA7B024C04D811EDBE98F982C4F9AE02.roa File: BA7B024C04D811EDBE98F982C4F9AE02.roa (raw, json) Hash identifier: GniYTYc+rkB55fqBkTbtJuPpFjVN9/DglrpXWuCGSdc= Subject key identifier: AA:57:71:11:82:0D:A0:1E:6F:AE:3B:FB:76:5A:8D:23:A9:EE:3F:22 Certificate issuer: /CN=A9168BA2/serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E Certificate serial: 0A76 Authority key identifier: CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/BA7B024C04D811EDBE98F982C4F9AE02.roa Signing time: Sat 02 Nov 2024 19:58:04 +0000 ROA not before: Sat 02 Nov 2024 19:58:04 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 139648 IP address blocks: 103.143.32.0/23 maxlen: 23 103.143.32.0/24 maxlen: 24 103.143.33.0/24 maxlen: 24 2001:df1:6c80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2678 (0xa76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168BA2/serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E Validity Not Before: Nov 2 19:58:04 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6726844c-12a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:88:46:7d:37:ee:a6:4c:23:a8:9d:e8:c5:9b: e3:04:63:a2:1c:21:b6:a0:70:b4:7f:9c:c5:ae:ae: 3f:6b:34:a7:a9:7c:5b:a1:e5:b6:5c:66:90:8d:f4: 2e:cc:40:3c:c2:5b:b0:ba:97:a4:92:ea:49:41:62: 33:18:c1:f6:b5:39:d9:e5:bc:1a:a4:3c:87:d4:22: 84:48:6e:0a:ea:3d:a7:b3:a3:2c:a6:c7:64:b6:f8: f9:d0:38:eb:ea:87:d3:c5:26:72:78:ac:37:cd:fc: f5:d1:77:c3:dc:9e:ad:2e:cb:0d:7f:f6:b9:63:6b: 7e:5e:28:4d:18:97:2a:a1:fa:02:0c:7d:01:0f:1a: 4b:bc:0a:a3:a5:60:c3:88:0b:f0:03:a8:ef:1d:6f: 3f:31:8c:ca:75:a6:e2:39:c4:b6:f2:92:cb:37:d2: 32:a8:29:cf:db:55:0c:46:98:15:44:97:8e:6a:ab: 77:d3:9a:1a:07:ac:4c:ea:73:f0:f8:b2:b1:a6:3a: a7:6a:6b:c6:5c:a7:68:f1:72:7a:bb:44:7b:75:80: a6:07:75:0d:1f:ee:a8:c6:ad:12:9d:1d:94:fd:d7: b4:f1:55:34:70:85:8c:f4:31:2e:51:5b:89:02:b7: 85:21:e3:19:33:61:36:e4:f1:a2:e2:9e:81:67:ee: f9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:57:71:11:82:0D:A0:1E:6F:AE:3B:FB:76:5A:8D:23:A9:EE:3F:22 X509v3 Authority Key Identifier: keyid:CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/BA7B024C04D811EDBE98F982C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.143.32.0/23 IPv6: 2001:df1:6c80::/48 Signature Algorithm: sha256WithRSAEncryption 77:55:aa:67:95:26:14:94:8a:07:0e:e2:19:44:6c:81:5a:0c: 5e:be:9a:f2:41:03:73:cd:ff:01:96:1b:4f:79:44:67:cf:67: 72:63:dc:14:18:f0:37:cc:5f:3f:ac:19:9c:e5:9a:a4:13:53: 13:9a:1a:10:0f:0b:57:c4:0c:35:79:cc:d9:d3:c4:83:ca:d4: dc:0d:01:01:6b:21:b2:0e:62:96:a6:12:45:77:05:bb:fd:64: f5:38:f8:de:24:2f:5b:f2:a0:a9:5f:f5:f9:b2:0c:e0:e1:8e: e4:01:52:c9:f1:67:19:79:bb:59:d3:d9:c2:2c:4f:49:9a:7e: cf:41:20:71:ab:3d:2b:c3:c5:0d:8b:5a:13:f6:dd:74:1a:f8: 34:86:6b:20:14:0a:99:22:e1:74:2e:79:e7:87:25:14:64:01: 02:8e:96:dc:4f:ef:d3:4e:cb:2d:5e:fb:b7:bf:93:c6:c9:7e: 64:d2:e4:ee:00:62:0d:92:b7:ba:11:c5:fc:2d:7e:c8:43:97: 19:74:c9:18:79:4c:f1:2a:3e:56:a3:ec:31:a0:67:c7:85:6b: 15:de:61:92:a2:bd:94:34:7b:25:6f:6c:ab:e3:87:b5:34:71: 06:91:64:86:76:c4:1d:48:ca:82:01:1d:85:62:16:04:20:46: 8c:a0:85:e9 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCQTIxMTAvBgNVBAUTKENBNjJFNDM4Rjk4RDg1MThEMkYyQTVEOUY2NzY1NjUx RTVBREE2MEUwHhcNMjQxMTAyMTk1ODA0WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzI2ODQ0Yy0xMmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1IhGfTfupkwjqJ3oxZvjBGOiHCG2oHC0f5zFrq4/azSnqXxboeW2XGaQjfQu zEA8wluwupekkupJQWIzGMH2tTnZ5bwapDyH1CKESG4K6j2ns6Mspsdktvj50Djr 6ofTxSZyeKw3zfz10XfD3J6tLssNf/a5Y2t+XihNGJcqofoCDH0BDxpLvAqjpWDD iAvwA6jvHW8/MYzKdabiOcS28pLLN9IyqCnP21UMRpgVRJeOaqt305oaB6xM6nPw +LKxpjqnamvGXKdo8XJ6u0R7dYCmB3UNH+6oxq0SnR2U/de08VU0cIWM9DEuUVuJ AreFIeMZM2E25PGi4p6BZ+75TQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKpXcRGC DaAeb647+3ZajSOp7j8iMB8GA1UdIwQYMBaAFMpi5Dj5jYUY0vKl2fZ2VlHlraYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEJBMi85OURGMzg2MjU0 QzQxMUVBODRGNEU3MkRDNEY5QUUwMi95bUxrT1BtTmhSalM4cVhaOW5aV1VlV3Rw ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltTGtPUG1OaFJqUzhxWFo5blpXVWVXdHBnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjhCQTIvOTlERjM4NjI1NEM0MTFFQTg0RjRFNzJEQzRGOUFFMDIvQkE3QjAyNEMw NEQ4MTFFREJFOThGOTgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnjyAwDwQCAAIwCQMHACABDfFsgDANBgkqhkiG9w0BAQsF AAOCAQEAd1WqZ5UmFJSKBw7iGURsgVoMXr6a8kEDc83/AZYbT3lEZ89ncmPcFBjw N8xfP6wZnOWapBNTE5oaEA8LV8QMNXnM2dPEg8rU3A0BAWshsg5ilqYSRXcFu/1k 9Tj43iQvW/KgqV/1+bIM4OGO5AFSyfFnGXm7WdPZwixPSZp+z0Egcas9K8PFDYta E/bddBr4NIZrIBQKmSLhdC5554clFGQBAo6W3E/v007LLV77t7+Txsl+ZNLk7gBi DZK3uhHF/C1+yEOXGXTJGHlM8So+VqPsMaBnx4VrFd5hkqK9lDR7JW9sq+OHtTRx BpFkhnbEHUjKggEdhWIWBCBGjKCF6Q== -----END CERTIFICATE-----Generated at Sun Nov 24 21:45:03 2024 by rpki-client on console-ams.rpki-client.org