$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/5C9BC9D045C311EA9DE6F237C4F9AE02.roa File: 5C9BC9D045C311EA9DE6F237C4F9AE02.roa (raw, json) Hash identifier: ZtnYKrh+yDnEIQelTNQoTzDHev59ss72beEWQRcR3+8= Subject key identifier: 1E:61:4A:53:83:F5:E4:C9:C8:7C:03:2E:52:5A:9B:36:75:FB:0C:55 Certificate issuer: /CN=A9171A26/serialNumber=D40C1B39FE05366ED8B23E0880B69EB75F7C90E2 Certificate serial: 0A90 Authority key identifier: D4:0C:1B:39:FE:05:36:6E:D8:B2:3E:08:80:B6:9E:B7:5F:7C:90:E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AwbOf4FNm7Ysj4IgLaet198kOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/5C9BC9D045C311EA9DE6F237C4F9AE02.roa Signing time: Mon 28 Oct 2024 19:49:57 +0000 ROA not before: Mon 28 Oct 2024 19:49:57 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 138198 IP address blocks: 103.122.28.0/22 maxlen: 22 103.122.28.0/23 maxlen: 23 103.122.28.0/24 maxlen: 24 103.122.29.0/24 maxlen: 24 103.122.30.0/23 maxlen: 23 103.122.30.0/24 maxlen: 24 103.122.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/1AwbOf4FNm7Ysj4IgLaet198kOI.crl rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/1AwbOf4FNm7Ysj4IgLaet198kOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AwbOf4FNm7Ysj4IgLaet198kOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:19:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2704 (0xa90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A26/serialNumber=D40C1B39FE05366ED8B23E0880B69EB75F7C90E2 Validity Not Before: Oct 28 19:49:57 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=671feae5-1da0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ca:2f:06:ca:8f:05:5d:9b:52:5d:f1:cd:bf: d7:05:6e:94:61:d8:e4:2b:ef:75:4e:72:a6:ce:0c: 04:0d:1d:c6:4d:5a:bc:1f:7f:56:dd:08:f5:d8:b9: 86:dd:b8:1f:1f:d3:24:74:cb:08:a2:46:fb:4e:3d: e8:0a:49:0b:80:28:7a:38:96:09:d8:dc:60:87:87: 75:74:10:10:97:b9:ed:bc:1c:49:d2:33:13:b9:75: 5e:a2:94:be:e7:26:c6:7f:c4:56:18:7a:f7:96:d7: 2b:2e:e5:08:d7:8d:d2:0c:d1:c1:ec:55:09:34:4c: a8:3e:54:ba:14:08:43:41:89:e3:46:0a:64:de:02: 47:2b:42:b0:71:36:76:11:b4:9a:ce:82:6e:61:73: 0b:04:83:09:d0:c3:9d:96:8e:c2:b7:05:5e:5b:ea: ad:71:13:ce:fb:f6:2e:7b:8d:49:ca:43:9b:24:b8: 80:60:2d:e2:ea:b6:76:97:31:b9:02:98:a5:7b:52: e2:c8:58:10:a1:6e:06:3e:54:c2:1a:f5:36:e1:be: 06:5e:a2:c0:5b:24:6c:3a:40:d3:70:7a:03:03:c2: eb:99:da:43:1b:ac:7d:f7:c2:24:4c:e6:c6:4a:ae: 5f:28:ff:59:dd:06:74:97:ea:41:5a:5f:20:e5:3a: 38:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:61:4A:53:83:F5:E4:C9:C8:7C:03:2E:52:5A:9B:36:75:FB:0C:55 X509v3 Authority Key Identifier: keyid:D4:0C:1B:39:FE:05:36:6E:D8:B2:3E:08:80:B6:9E:B7:5F:7C:90:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/1AwbOf4FNm7Ysj4IgLaet198kOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AwbOf4FNm7Ysj4IgLaet198kOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/5C9BC9D045C311EA9DE6F237C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.122.28.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:6c:c4:7e:d5:4c:56:17:eb:fd:b8:39:fb:ae:7b:fb:c4:79: 61:38:07:ba:47:ff:e3:92:ba:ac:51:99:b3:0d:b4:ec:46:d1: ab:3a:5c:20:6d:1c:73:33:8d:63:6f:5e:5d:0e:fa:f9:70:4f: cb:1d:5d:16:41:d9:69:16:2c:87:0a:54:05:af:43:1f:74:2b: 9b:0b:48:11:81:58:1f:db:cb:db:7f:db:12:7f:c8:38:b4:81: 80:58:ab:87:e5:a9:2c:12:53:aa:03:34:34:d8:d5:48:48:0f: 22:d6:b8:48:cd:01:72:0a:49:fe:dc:b8:be:c9:12:ba:4a:94: ce:a1:d8:00:9c:aa:5e:10:25:cd:88:33:16:aa:3c:2b:d8:e8: 6e:cf:32:bf:b2:e7:e3:e3:41:19:6e:46:bc:ae:84:24:e0:3f: 63:9f:92:e1:df:56:af:2b:b9:03:73:cc:96:ad:a0:34:40:a2: ce:2e:78:c0:d9:a1:87:51:d9:8a:9e:cd:e9:bd:0a:7d:30:01: b6:b9:68:85:1b:cd:0f:b0:ac:15:8d:f1:6f:21:06:19:3d:3f: b7:1d:ae:83:7e:d7:5c:23:8f:5e:44:3f:5b:92:53:46:b2:ec: ba:bf:8c:a3:1b:97:ca:4a:ed:e5:c4:42:d5:95:9b:db:ad:55: 1d:90:c9:c9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBMjYxMTAvBgNVBAUTKEQ0MEMxQjM5RkUwNTM2NkVEOEIyM0UwODgwQjY5RUI3 NUY3QzkwRTIwHhcNMjQxMDI4MTk0OTU3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFmZWFlNS0xZGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5sovBsqPBV2bUl3xzb/XBW6UYdjkK+91TnKmzgwEDR3GTVq8H39W3Qj12LmG 3bgfH9MkdMsIokb7Tj3oCkkLgCh6OJYJ2Nxgh4d1dBAQl7ntvBxJ0jMTuXVeopS+ 5ybGf8RWGHr3ltcrLuUI143SDNHB7FUJNEyoPlS6FAhDQYnjRgpk3gJHK0KwcTZ2 EbSazoJuYXMLBIMJ0MOdlo7CtwVeW+qtcRPO+/Yue41JykObJLiAYC3i6rZ2lzG5 Apile1LiyFgQoW4GPlTCGvU24b4GXqLAWyRsOkDTcHoDA8LrmdpDG6x998IkTObG Sq5fKP9Z3QZ0l+pBWl8g5To4QQIDAQABo4IClTCCApEwHQYDVR0OBBYEFB5hSlOD 9eTJyHwDLlJamzZ1+wxVMB8GA1UdIwQYMBaAFNQMGzn+BTZu2LI+CIC2nrdffJDi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUEyNi9CRTUzMTJBMjQ1 QzExMUVBOEQwQkREMzRDNEY5QUUwMi8xQXdiT2Y0Rk5tN1lzajRJZ0xhZXQxOThr T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFBd2JPZjRGTm03WXNqNElnTGFldDE5OGtPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzFBMjYvQkU1MzEyQTI0NUMxMTFFQThEMEJERDM0QzRGOUFFMDIvNUM5QkM5RDA0 NUMzMTFFQTlERTZGMjM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnehwwDQYJKoZIhvcNAQELBQADggEBADxsxH7VTFYX6/24 Ofuue/vEeWE4B7pH/+OSuqxRmbMNtOxG0as6XCBtHHMzjWNvXl0O+vlwT8sdXRZB 2WkWLIcKVAWvQx90K5sLSBGBWB/by9t/2xJ/yDi0gYBYq4flqSwSU6oDNDTY1UhI DyLWuEjNAXIKSf7cuL7JErpKlM6h2ACcql4QJc2IMxaqPCvY6G7PMr+y5+PjQRlu RryuhCTgP2OfkuHfVq8ruQNzzJatoDRAos4ueMDZoYdR2Yqezem9Cn0wAba5aIUb zQ+wrBWN8W8hBhk9P7cdroN+11wjj15EP1uSU0ay7Lq/jKMbl8pK7eXEQtWVm9ut VR2Qyck= -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:29 2024 by rpki-client on console-fra.rpki-client.org