$ rpki-client -vvf rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/838DF1B0572011EC905C770CC4F9AE02.roa File: 838DF1B0572011EC905C770CC4F9AE02.roa (raw, json) Hash identifier: jLktry4iXdQWD0/47QB08nrgPUPRx2Qy+Cc/teSX0cc= Subject key identifier: 6D:A6:34:13:41:71:3E:F3:85:D9:D4:E0:0F:FC:99:EF:2E:6E:7E:6E Certificate issuer: /CN=A9170187/serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414 Certificate serial: 03E0 Authority key identifier: B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/838DF1B0572011EC905C770CC4F9AE02.roa Signing time: Fri 25 Oct 2024 00:44:24 +0000 ROA not before: Fri 25 Oct 2024 00:44:24 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 140096 IP address blocks: 103.169.216.0/24 maxlen: 24 103.169.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 23:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 992 (0x3e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170187/serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414 Validity Not Before: Oct 25 00:44:24 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=671ae9e8-c632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8f:44:d3:80:76:00:6e:14:27:46:b9:97:d7: 79:ab:5a:3d:0a:25:6a:ae:14:fd:ae:93:1c:cb:22: 28:26:2b:ae:68:32:68:19:ce:67:f4:77:c1:4d:d8: 99:7d:15:43:ab:a4:aa:30:40:a8:bd:82:1b:c3:5a: dc:4d:99:81:ee:eb:8a:b5:40:7d:c4:c4:41:2f:7a: f9:94:25:8c:85:0c:08:d1:0f:1e:e8:52:af:08:2f: ec:d5:92:23:da:81:02:a7:b0:45:4a:a5:c8:37:f2: e2:c5:08:4b:21:5e:23:47:96:b8:89:20:68:f1:8e: 07:74:8f:cb:57:5a:de:18:dd:a7:62:31:4f:2a:57: 28:f0:a6:61:eb:d6:39:6b:e6:d7:77:41:a8:8a:e8: bb:a1:5b:fa:06:94:2e:5b:e6:23:c7:22:1f:98:f3: 3c:07:c3:db:55:a8:1f:84:54:eb:da:90:ae:19:02: 9d:aa:35:06:e2:9c:9f:b4:5f:87:63:e9:37:93:eb: 7d:fa:ef:7e:5f:44:df:3d:7e:e5:f3:ae:82:58:9e: 26:e0:3d:65:91:89:2a:0b:fc:5b:78:a6:ce:b7:27: f8:3b:8b:b4:b6:dc:b9:e4:7e:bf:59:34:60:ad:de: 70:d8:b8:e3:14:5b:35:1a:f1:c9:23:e1:6f:0d:32: 23:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A6:34:13:41:71:3E:F3:85:D9:D4:E0:0F:FC:99:EF:2E:6E:7E:6E X509v3 Authority Key Identifier: keyid:B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/838DF1B0572011EC905C770CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.169.216.0/23 Signature Algorithm: sha256WithRSAEncryption b6:2c:df:7e:33:99:cf:07:eb:9f:9e:67:b7:16:80:7d:4b:9c: 85:f8:6a:e9:59:78:29:a6:18:66:f2:36:00:b4:91:0f:7f:25: e6:1c:51:94:92:62:e8:c6:63:2f:12:ce:45:7e:ba:0b:d0:e3: cd:ab:d8:35:ff:8e:12:00:8d:3c:1a:8d:07:0e:07:3e:2f:6b: 3e:ca:a1:21:54:df:a8:3b:68:f6:c0:4e:6f:bb:66:5f:6b:d3: e6:8b:c9:bc:f3:dd:77:df:f4:3a:c0:30:ac:6e:ee:a3:1a:47: 7f:7a:e4:89:c4:91:e3:e7:a1:6a:9a:6a:4a:2a:23:82:4e:01: d6:eb:f1:3c:a5:eb:61:a5:d4:c8:88:a2:e8:c3:6c:b7:3c:c0: 83:a3:7e:63:be:e1:93:ce:8b:75:a0:95:3d:c4:8d:8a:9b:93: fc:5c:d0:65:9b:4c:ca:47:b9:7a:cb:3c:3a:16:5a:ae:8d:b4: 36:ec:3a:47:7b:3b:65:db:42:e6:fe:b9:a2:de:39:01:34:79: 20:0b:40:e7:28:b0:50:06:d6:8f:15:3e:ea:92:7a:d0:46:64: 4c:62:9b:28:35:bb:08:ad:8e:92:2e:4b:94:0e:f6:8a:b9:9e: 8e:d5:97:16:ea:c2:2e:b0:37:e7:aa:72:da:63:f7:04:56:e8: 55:6d:3a:f9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAxODcxMTAvBgNVBAUTKEI2NDU1NjVDOTMxQjI4NDREMkY3NjBFQUFBQjBFMkFF NEJFMzE0MTQwHhcNMjQxMDI1MDA0NDI0WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFhZTllOC1jNjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0o9E04B2AG4UJ0a5l9d5q1o9CiVqrhT9rpMcyyIoJiuuaDJoGc5n9HfBTdiZ fRVDq6SqMECovYIbw1rcTZmB7uuKtUB9xMRBL3r5lCWMhQwI0Q8e6FKvCC/s1ZIj 2oECp7BFSqXIN/LixQhLIV4jR5a4iSBo8Y4HdI/LV1reGN2nYjFPKlco8KZh69Y5 a+bXd0Goiui7oVv6BpQuW+YjxyIfmPM8B8PbVagfhFTr2pCuGQKdqjUG4pyftF+H Y+k3k+t9+u9+X0TfPX7l866CWJ4m4D1lkYkqC/xbeKbOtyf4O4u0tty55H6/WTRg rd5w2LjjFFs1GvHJI+FvDTIjKQIDAQABo4IClTCCApEwHQYDVR0OBBYEFG2mNBNB cT7zhdnU4A/8me8ubn5uMB8GA1UdIwQYMBaAFLZFVlyTGyhE0vdg6qqw4q5L4xQU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDE4Ny9GMUUyQTNGODU3 MUMxMUVDQkI2M0ZFODNDNEY5QUUwMi90a1ZXWEpNYktFVFM5MkRxcXJEaXJrdmpG QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RrVldYSk1iS0VUUzkyRHFxckRpcmt2akZCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzAxODcvRjFFMkEzRjg1NzFDMTFFQ0JCNjNGRTgzQzRGOUFFMDIvODM4REYxQjA1 NzIwMTFFQzkwNUM3NzBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnqdgwDQYJKoZIhvcNAQELBQADggEBALYs334zmc8H65+e Z7cWgH1LnIX4aulZeCmmGGbyNgC0kQ9/JeYcUZSSYujGYy8SzkV+ugvQ482r2DX/ jhIAjTwajQcOBz4vaz7KoSFU36g7aPbATm+7Zl9r0+aLybzz3Xff9DrAMKxu7qMa R3965InEkePnoWqaakoqI4JOAdbr8Tyl62Gl1MiIoujDbLc8wIOjfmO+4ZPOi3Wg lT3EjYqbk/xc0GWbTMpHuXrLPDoWWq6NtDbsOkd7O2XbQub+uaLeOQE0eSALQOco sFAG1o8VPuqSetBGZEximyg1uwitjpIuS5QO9oq5no7Vlxbqwi6wN+eqctpj9wRW 6FVtOvk= -----END CERTIFICATE-----Generated at Mon Nov 25 01:15:28 2024 by rpki-client on console-fra.rpki-client.org