$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/CD665F4E0AA611EE84B0053DC4F9AE02.roa File: CD665F4E0AA611EE84B0053DC4F9AE02.roa (raw, json) Hash identifier: ZFVD/gWXM15jrbAvaaadW934NyuKqXgp7C1n9VDgd6M= Subject key identifier: 25:17:49:95:CD:6D:A4:5D:55:B5:CC:87:56:36:4F:4D:EC:1C:EC:4E Certificate issuer: /CN=A9174C15/serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Certificate serial: 049A Authority key identifier: C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/CD665F4E0AA611EE84B0053DC4F9AE02.roa Signing time: Thu 19 Sep 2024 00:03:39 +0000 ROA not before: Thu 19 Sep 2024 00:03:39 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 16509 IP address blocks: 103.172.141.0/24 maxlen: 24 2407:d4c0:1000::/40 maxlen: 40 2407:d4c0:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1178 (0x49a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C15 Validity Not Before: Sep 19 00:03:39 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66eb6a5b-3525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4a:04:6c:a7:b7:6f:2c:5a:9b:9e:ca:39:cd: 8e:85:8e:2b:94:e7:c9:ac:98:04:0e:2b:ed:90:ad: 5c:46:5d:c3:b9:7d:9c:45:53:85:1d:20:2d:70:23: ea:bd:f1:fe:31:be:39:2f:9a:cd:12:f9:e7:57:e7: 67:6a:b9:30:20:99:af:09:84:ce:69:eb:52:d6:ca: 74:a5:04:d9:e9:7c:7b:9b:74:9a:66:e6:60:c3:d3: 06:18:4b:6d:85:7e:eb:eb:65:a2:77:83:58:0f:2f: 65:d8:35:68:6f:f1:8a:79:9b:d2:9b:49:87:af:6b: 99:18:91:20:fe:92:4d:ac:f4:fd:e7:55:ac:c7:cd: b5:3e:38:08:98:99:5c:c1:d1:12:9f:0f:b8:1a:15: 06:7d:21:67:37:91:31:57:ac:0a:fc:0f:aa:d1:96: 94:6f:99:a7:cf:e7:2f:ce:26:b8:e7:d1:aa:6a:97: cb:73:60:2a:1a:ac:7e:fb:bb:45:37:d3:82:37:bb: d6:11:73:52:20:fb:b8:c1:69:79:03:ab:9e:70:05: c0:8d:7d:8b:ec:ea:d8:52:b4:f1:be:68:4d:cf:6f: 32:5c:8b:70:1f:4a:6d:2a:5f:38:ac:ab:ff:ea:f4: f7:c7:6e:58:33:78:b9:80:ea:46:91:3f:22:ec:64: a0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:17:49:95:CD:6D:A4:5D:55:B5:CC:87:56:36:4F:4D:EC:1C:EC:4E X509v3 Authority Key Identifier: keyid:C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/CD665F4E0AA611EE84B0053DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.172.141.0/24 IPv6: 2407:d4c0:1000::/40 Signature Algorithm: sha256WithRSAEncryption 1b:2d:93:2f:94:07:73:30:9c:66:42:e3:97:f7:a9:da:11:cf: 00:d4:fd:9d:56:75:b0:62:d2:5f:f5:37:ef:c8:dd:20:48:f0: f0:25:f6:7e:18:51:05:35:df:d0:73:bc:d3:a1:e1:27:2f:c4: 37:f0:ec:62:c6:2d:a1:bb:2c:1c:7e:3d:61:ca:59:b4:a8:ab: e2:93:b9:91:97:54:34:be:51:2e:d6:fc:bd:68:a3:4d:39:3a: 5e:7c:a5:4a:7d:09:a4:06:60:93:4f:f3:96:8c:1d:93:e1:b9: 12:74:0a:6c:f4:8f:eb:0d:dc:5e:68:ea:01:27:53:71:a5:34: 6e:6c:37:92:3f:30:cb:e9:c8:76:7c:7d:7e:19:b7:c8:ad:3d: 4e:28:47:1e:33:a9:f5:8c:9c:21:8a:c1:21:3b:54:25:2b:5c: 1a:f9:96:e6:06:14:66:42:7e:ce:18:d0:f1:5a:61:45:c0:d9: e0:55:29:b9:7d:55:b3:c1:bb:17:96:e3:15:26:bd:f3:8c:97: 0d:b1:0b:2f:0d:99:1b:a5:76:c9:f6:24:a0:1c:43:1b:0f:9f: 18:68:a3:90:ca:b1:58:38:c9:9f:db:39:e3:7c:3f:29:8d:00: 35:d8:8f:48:70:a6:92:13:11:fd:77:12:3f:2e:1b:9a:1b:09: d2:07:ff:26 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICBJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDMTUxMTAvBgNVBAUTKEM3QjAwMDRGRjZCMTg2ODhDMTk3QkM0QjM5RkFDMTI1 RDQ5RkJDRjkwHhcNMjQwOTE5MDAwMzM5WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmViNmE1Yi0zNTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkoEbKe3byxam57KOc2OhY4rlOfJrJgEDivtkK1cRl3DuX2cRVOFHSAtcCPq vfH+Mb45L5rNEvnnV+dnarkwIJmvCYTOaetS1sp0pQTZ6Xx7m3SaZuZgw9MGGEtt hX7r62Wid4NYDy9l2DVob/GKeZvSm0mHr2uZGJEg/pJNrPT951Wsx821PjgImJlc wdESnw+4GhUGfSFnN5ExV6wK/A+q0ZaUb5mnz+cvzia459GqapfLc2AqGqx++7tF N9OCN7vWEXNSIPu4wWl5A6uecAXAjX2L7OrYUrTxvmhNz28yXItwH0ptKl84rKv/ 6vT3x25YM3i5gOpGkT8i7GSgkQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCUXSZXN baRdVbXMh1Y2T03sHOxOMB8GA1UdIwQYMBaAFMewAE/2sYaIwZe8Szn6wSXUn7z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEMxNS9BQzlDNkI1MDBB NDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhvakJsN3hMT2ZyQkpkU2Z2 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3QUFUX2F4aG9qQmw3eExPZnJCSmRTZnZQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzRDMTUvQUM5QzZCNTAwQTQ0MTFFQzk0Nzk3RTUzQzRGOUFFMDIvQ0Q2NjVGNEUw QUE2MTFFRTg0QjAwNTNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E IDAeMAwEAgABMAYDBABnrI0wDgQCAAIwCAMGACQH1MAQMA0GCSqGSIb3DQEBCwUA A4IBAQAbLZMvlAdzMJxmQuOX96naEc8A1P2dVnWwYtJf9TfvyN0gSPDwJfZ+GFEF Nd/Qc7zToeEnL8Q38Oxixi2huywcfj1hylm0qKvik7mRl1Q0vlEu1vy9aKNNOTpe fKVKfQmkBmCTT/OWjB2T4bkSdAps9I/rDdxeaOoBJ1NxpTRubDeSPzDL6ch2fH1+ GbfIrT1OKEceM6n1jJwhisEhO1QlK1wa+ZbmBhRmQn7OGNDxWmFFwNngVSm5fVWz wbsXluMVJr3zjJcNsQsvDZkbpXbJ9iSgHEMbD58YaKOQyrFYOMmf2znjfD8pjQA1 2I9IcKaSExH9dxI/LhuaGwnSB/8m -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:52 2025 by rpki-client