$ rpki-client -vvf rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/732F4132D85E11EDB34ED618C4F9AE02.roa File: 732F4132D85E11EDB34ED618C4F9AE02.roa (raw, json) Hash identifier: lrJXxDbusDQNnxZVLvp/KiXpw4drpdRHgf2/ruvhTVc= Subject key identifier: DA:39:C1:3D:62:DB:B6:29:AD:41:23:43:E1:8B:D4:AB:DF:09:64:22 Certificate issuer: /CN=A9169FA9/serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2 Certificate serial: DC Authority key identifier: D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/732F4132D85E11EDB34ED618C4F9AE02.roa Signing time: Mon 03 Jun 2024 06:55:45 +0000 ROA not before: Mon 03 Jun 2024 06:55:45 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 139245 IP address blocks: 103.140.86.0/23 maxlen: 23 103.140.86.0/24 maxlen: 24 103.140.87.0/24 maxlen: 24 2001:df0:b480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169FA9/serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2 Validity Not Before: Jun 3 06:55:45 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=665d68f1-670f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:91:18:f5:cb:53:40:4d:26:02:9f:be:eb:bf: 05:5a:9c:90:5b:51:7d:bd:e6:4b:8c:0f:19:a1:f4: f9:09:7e:2e:c1:2b:3d:9d:8d:61:ff:51:c4:98:72: 1d:6a:4a:76:da:60:d5:d6:4b:87:d7:ff:64:d9:2e: 39:4f:a0:7c:c1:83:fa:38:6b:96:7a:8b:a6:c7:21: 99:e6:37:6f:bf:d3:b5:f1:3b:cf:d7:6a:5f:e9:3c: 08:d8:98:17:d0:f8:0d:db:9d:b5:9e:f3:21:52:6b: b3:6a:ee:5c:c3:13:e7:6b:86:fd:1b:52:63:0c:38: de:70:59:5d:36:da:22:0d:93:bc:1a:75:8f:28:68: be:7b:8d:ce:ae:dd:3f:94:d3:e4:11:d8:45:22:3a: cb:b9:e8:44:f6:6f:c4:13:2d:13:60:aa:39:43:1c: c6:a3:f3:d9:ba:9f:77:04:65:a5:79:47:e1:11:24: 41:ca:85:71:10:14:e7:c2:8c:d1:0f:08:3f:c9:e6: ee:73:1c:f3:ba:6c:0a:31:72:33:6b:b4:e3:71:d8: 3a:76:50:b2:3c:25:65:95:76:dc:b8:90:67:46:bd: 36:8a:92:6f:f8:2a:ad:a9:b8:ab:17:38:46:01:bd: 31:9b:df:9a:36:71:44:1e:27:1f:9b:a9:f4:65:f8: bf:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:39:C1:3D:62:DB:B6:29:AD:41:23:43:E1:8B:D4:AB:DF:09:64:22 X509v3 Authority Key Identifier: keyid:D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/732F4132D85E11EDB34ED618C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.86.0/23 IPv6: 2001:df0:b480::/48 Signature Algorithm: sha256WithRSAEncryption 88:65:da:61:53:4f:f9:f2:dd:3e:28:2b:d3:ec:ed:ce:2b:d9: 2f:36:f0:58:64:68:55:3c:58:ef:bd:a2:00:d6:03:12:b3:83: f2:1d:22:20:c5:d8:90:44:08:98:0c:ba:cd:f7:72:0a:8d:58: a9:b9:c5:e1:46:8e:ba:bd:74:ce:da:7b:0b:02:43:e8:a3:27: 89:61:09:24:fe:e2:04:a3:dd:04:a3:37:00:3e:96:bc:27:88: dc:35:98:f6:64:01:1c:ae:e4:92:aa:87:3c:65:4b:5b:da:fb: 31:6c:8d:15:6a:81:f6:b8:53:3a:92:5d:f7:85:c6:99:6e:23: 0f:bd:c8:bb:b0:2b:17:83:f0:e0:59:b3:84:29:16:3a:73:df: 9e:df:65:a2:38:fa:22:bd:d4:b7:cb:a1:37:88:b2:56:d0:b5: 69:cc:99:50:8a:b7:60:54:03:5a:6f:21:cb:ce:bd:e8:06:48: 76:dd:c7:7b:30:5f:8a:96:0e:00:46:40:0d:d6:8c:5d:84:0b: e3:de:28:a4:a5:cc:b7:22:13:38:e0:fa:70:92:85:5c:0d:c9: 97:4c:ee:e3:63:25:ea:d4:a6:94:0f:95:af:c3:66:38:1f:1e: 72:a6:56:bc:92:94:c5:1d:7e:00:27:ed:49:d3:22:d6:30:04: ed:2b:32:3f -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlGQTkxMTAvBgNVBAUTKEQ4MDU3N0ZFMzUxQ0VDMTMyRkMwRkZBMTg4ODdBQjBD NzQ2QjE0RjIwHhcNMjQwNjAzMDY1NTQ1WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjVkNjhmMS02NzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmJEY9ctTQE0mAp++678FWpyQW1F9veZLjA8ZofT5CX4uwSs9nY1h/1HEmHId akp22mDV1kuH1/9k2S45T6B8wYP6OGuWeoumxyGZ5jdvv9O18TvP12pf6TwI2JgX 0PgN2521nvMhUmuzau5cwxPna4b9G1JjDDjecFldNtoiDZO8GnWPKGi+e43Ort0/ lNPkEdhFIjrLuehE9m/EEy0TYKo5QxzGo/PZup93BGWleUfhESRByoVxEBTnwozR Dwg/yebucxzzumwKMXIza7Tjcdg6dlCyPCVllXbcuJBnRr02ipJv+CqtqbirFzhG Ab0xm9+aNnFEHicfm6n0Zfi/VwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNo5wT1i 27YprUEjQ+GL1KvfCWQiMB8GA1UdIwQYMBaAFNgFd/41HOwTL8D/oYiHqwx0axTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUZBOS83QzBGNEQ4MkQ4 NUExMUVEODgxQUM4MTJDNEY5QUUwMi8yQVYzX2pVYzdCTXZ3UC1oaUllckRIUnJG UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJBVjNfalVjN0JNdndQLWhpSWVyREhSckZQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjlGQTkvN0MwRjREODJEODVBMTFFRDg4MUFDODEyQzRGOUFFMDIvNzMyRjQxMzJE ODVFMTFFREIzNEVENjE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnjFYwDwQCAAIwCQMHACABDfC0gDANBgkqhkiG9w0BAQsF AAOCAQEAiGXaYVNP+fLdPigr0+ztzivZLzbwWGRoVTxY772iANYDErOD8h0iIMXY kEQImAy6zfdyCo1YqbnF4UaOur10ztp7CwJD6KMniWEJJP7iBKPdBKM3AD6WvCeI 3DWY9mQBHK7kkqqHPGVLW9r7MWyNFWqB9rhTOpJd94XGmW4jD73Iu7ArF4Pw4Fmz hCkWOnPfnt9lojj6Ir3Ut8uhN4iyVtC1acyZUIq3YFQDWm8hy8696AZIdt3HezBf ipYOAEZADdaMXYQL494opKXMtyITOOD6cJKFXA3Jl0zu42Ml6tSmlA+Vr8NmOB8e cqZWvJKUxR1+ACftSdMi1jAE7SsyPw== -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:50 2024 by rpki-client on console-fra.rpki-client.org