$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/1F3C6E3C6E6811EF93F0A64EC4F9AE02.roa File: 1F3C6E3C6E6811EF93F0A64EC4F9AE02.roa (raw, json) Hash identifier: /tzJtiKlrc3v7323AOuAnl0ze6HPA5F6z5bM+LQYDFU= Subject key identifier: 73:A1:00:A2:EA:FA:CB:5B:D6:23:23:14:CC:87:E4:85:A4:79:31:50 Certificate issuer: /CN=A9173F03/serialNumber=C99D6007CD477D89B359C33C93CAA9B5BB10601A Certificate serial: 0B98 Authority key identifier: C9:9D:60:07:CD:47:7D:89:B3:59:C3:3C:93:CA:A9:B5:BB:10:60:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/1F3C6E3C6E6811EF93F0A64EC4F9AE02.roa Signing time: Mon 09 Sep 2024 04:59:43 +0000 ROA not before: Mon 09 Sep 2024 04:59:43 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 138659 IP address blocks: 103.135.232.0/24 maxlen: 24 103.135.233.0/24 maxlen: 24 2404:86c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.crl rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2968 (0xb98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173F03/serialNumber=C99D6007CD477D89B359C33C93CAA9B5BB10601A Validity Not Before: Sep 9 04:59:43 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=66de80bf-86b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:90:02:e4:a2:d6:f4:e0:c0:ca:ac:97:c4:b8: e0:04:8f:4a:bc:1c:2f:3c:c1:cd:93:20:36:3f:a2: a1:04:df:63:c7:c9:19:55:c9:26:cd:03:e0:4f:07: 06:8e:59:dd:24:93:3f:99:23:59:41:03:a9:68:61: d5:25:6b:d7:34:ef:2b:3b:3e:b2:33:f3:b3:35:76: 7b:84:30:c1:21:bc:8b:73:54:67:b1:09:10:48:45: 04:6d:6f:d7:7b:50:83:e4:cd:94:23:43:83:48:6c: 81:f5:25:f6:1a:7d:74:43:7f:e5:e4:29:6d:7d:0f: 82:69:b9:04:4f:36:6e:28:65:58:51:d5:70:1a:37: 43:60:e6:7f:3b:86:ab:98:c6:4e:85:9b:3f:84:c1: 63:1e:1e:7d:0d:c8:52:b6:0a:3c:52:12:dd:11:4c: 1d:bd:af:8c:3d:b1:2e:25:d6:24:35:c9:1b:64:e9: c2:7d:c7:0c:4c:56:44:df:6f:ce:c1:14:3d:4e:4a: 10:15:dd:c5:50:2c:fd:28:c0:99:cd:a5:2e:03:6f: 50:8d:2d:6a:31:d5:a5:b4:e0:c4:b7:fa:c0:8b:d0: c8:df:08:e6:87:1b:63:1c:d8:c5:e3:d6:60:cd:d9: 16:3b:ff:f8:17:ff:70:a5:9b:31:7d:e5:64:ca:dc: 96:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A1:00:A2:EA:FA:CB:5B:D6:23:23:14:CC:87:E4:85:A4:79:31:50 X509v3 Authority Key Identifier: keyid:C9:9D:60:07:CD:47:7D:89:B3:59:C3:3C:93:CA:A9:B5:BB:10:60:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/1F3C6E3C6E6811EF93F0A64EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.135.232.0/23 IPv6: 2404:86c0::/32 Signature Algorithm: sha256WithRSAEncryption 33:d2:fb:d6:b5:84:8b:c3:12:4c:a2:9d:87:fe:b1:ea:38:cb: 7a:c9:64:d7:ce:66:6f:f3:18:35:a9:06:4e:f3:ac:d0:3b:01: 0a:e9:ec:94:e9:2e:d5:eb:e6:59:35:cf:ce:74:1a:63:51:d0: cf:09:ff:97:cb:52:ea:db:ad:ce:a7:b2:26:1e:d4:1a:7c:96: df:71:84:a7:d6:93:14:90:bf:8f:12:49:d6:6f:c7:26:b9:65: bd:5e:0a:c3:d2:f5:5d:6a:a4:df:c9:68:48:0a:67:f1:71:58: 5f:fe:ac:79:1e:8d:2c:c2:f8:1b:40:a9:61:c9:52:22:0b:26: 56:63:6c:b7:33:0c:1b:73:15:58:1c:ff:c6:97:90:95:06:60: e6:2d:52:63:ec:ad:c2:f4:b2:d7:b8:0f:95:81:56:7a:e1:c7: 15:6e:37:51:3a:fe:cd:12:5a:7c:18:f0:9c:14:b0:5d:f2:05: 4e:d5:41:5d:b1:b6:f7:99:26:db:e4:53:91:71:6e:8c:00:55: b1:f5:e6:4f:e4:f9:0c:b2:d7:11:d7:64:9a:98:f7:74:6b:30: ac:e9:29:ef:23:d7:c8:89:1c:78:cc:30:27:45:bb:da:1b:b8: e5:86:0a:55:0f:c2:1b:c5:75:06:35:91:73:d9:76:ee:bb:86: 7f:d6:91:6f -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICC5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNGMDMxMTAvBgNVBAUTKEM5OUQ2MDA3Q0Q0NzdEODlCMzU5QzMzQzkzQ0FBOUI1 QkIxMDYwMUEwHhcNMjQwOTA5MDQ1OTQzWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NmRlODBiZi04NmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZAC5KLW9ODAyqyXxLjgBI9KvBwvPMHNkyA2P6KhBN9jx8kZVckmzQPgTwcG jlndJJM/mSNZQQOpaGHVJWvXNO8rOz6yM/OzNXZ7hDDBIbyLc1RnsQkQSEUEbW/X e1CD5M2UI0ODSGyB9SX2Gn10Q3/l5CltfQ+CabkETzZuKGVYUdVwGjdDYOZ/O4ar mMZOhZs/hMFjHh59DchStgo8UhLdEUwdva+MPbEuJdYkNckbZOnCfccMTFZE32/O wRQ9TkoQFd3FUCz9KMCZzaUuA29QjS1qMdWltODEt/rAi9DI3wjmhxtjHNjF49Zg zdkWO//4F/9wpZsxfeVkytyWCQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFHOhAKLq +stb1iMjFMyH5IWkeTFQMB8GA1UdIwQYMBaAFMmdYAfNR32Js1nDPJPKqbW7EGAa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0YwMy82NEY2QzI4RTBE RTExMUVBOTk2Njk4ODVDNEY5QUUwMi95WjFnQjgxSGZZbXpXY004azhxcHRic1FZ Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laMWdCODFIZllteldjTThrOHFwdGJzUVlCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzNGMDMvNjRGNkMyOEUwREUxMTFFQTk5NjY5ODg1QzRGOUFFMDIvMUYzQzZFM0M2 RTY4MTFFRjkzRjBBNjRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnh+gwDQQCAAIwBwMFACQEhsAwDQYJKoZIhvcNAQELBQAD ggEBADPS+9a1hIvDEkyinYf+seo4y3rJZNfOZm/zGDWpBk7zrNA7AQrp7JTpLtXr 5lk1z850GmNR0M8J/5fLUurbrc6nsiYe1Bp8lt9xhKfWkxSQv48SSdZvxya5Zb1e CsPS9V1qpN/JaEgKZ/FxWF/+rHkejSzC+BtAqWHJUiILJlZjbLczDBtzFVgc/8aX kJUGYOYtUmPsrcL0ste4D5WBVnrhxxVuN1E6/s0SWnwY8JwUsF3yBU7VQV2xtveZ JtvkU5FxbowAVbH15k/k+Qyy1xHXZJqY93RrMKzpKe8j18iJHHjMMCdFu9obuOWG ClUPwhvFdQY1kXPZdu67hn/WkW8= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:05 2024 by rpki-client on console-ams.rpki-client.org