$ rpki-client -vvf rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/A987B8BEDB0B11ECB433A842C4F9AE02.roa File: A987B8BEDB0B11ECB433A842C4F9AE02.roa (raw, json) Hash identifier: 5XhmwjgG2fg0OurZJyTDw4ayeN3jOAUvOPnSAPOcLso= Subject key identifier: E5:01:F0:83:B3:5C:8F:5E:09:98:BF:06:FC:24:E6:C0:15:04:80:6F Certificate issuer: /CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Certificate serial: 06D6 Authority key identifier: E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/A987B8BEDB0B11ECB433A842C4F9AE02.roa Signing time: Thu 04 Jul 2024 23:00:46 +0000 ROA not before: Thu 04 Jul 2024 23:00:46 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 45654 IP address blocks: 103.1.188.0/22 maxlen: 24 103.19.172.0/22 maxlen: 24 103.232.160.0/22 maxlen: 24 113.212.168.0/21 maxlen: 24 163.47.120.0/22 maxlen: 24 163.47.136.0/22 maxlen: 24 163.47.168.0/22 maxlen: 24 182.237.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1750 (0x6d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Validity Not Before: Jul 4 23:00:46 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6687299e-59e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:92:78:84:6b:40:a3:c4:d5:fc:21:77:59:b0: a7:58:d0:66:c1:5f:6a:13:8c:f0:f8:92:b2:22:a4: bd:d0:eb:2f:95:e3:7e:d9:71:83:b4:80:71:45:02: 7b:31:1a:3b:3a:a9:e3:07:ad:6a:25:38:1f:90:4c: 73:ad:3c:b5:33:dc:29:0f:57:bf:4e:30:56:5d:a8: da:57:82:97:cd:d0:b8:e6:0c:90:1b:07:45:e4:bc: 99:25:cb:46:a1:a1:3f:b8:23:3a:df:2b:10:df:e9: 49:1d:ad:ab:c0:6d:6e:b4:22:52:12:b5:30:00:ea: e2:0a:e1:a1:30:34:cc:9e:2d:70:e4:ac:05:46:26: 88:14:e0:8e:c7:d2:3e:e9:49:a5:c9:bc:ea:ad:2e: 5f:a1:6b:f8:ea:65:18:20:0a:8d:e5:72:65:ff:b0: 9e:87:4b:27:b4:e1:07:5d:96:9a:ab:0a:b2:ed:5b: f7:98:4b:c5:88:89:56:18:37:b5:70:8c:98:b6:66: d0:00:8c:d4:2d:d8:ea:c9:c6:ab:ee:80:9b:a3:9a: 01:8b:30:f7:10:7f:f1:aa:5a:e9:ad:88:c6:b0:d7: 7e:3e:41:2c:a2:4d:15:be:74:b9:21:ed:08:b6:a5: fe:f3:c2:86:54:19:ab:95:08:b6:35:a7:7a:d6:04: 8b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:01:F0:83:B3:5C:8F:5E:09:98:BF:06:FC:24:E6:C0:15:04:80:6F X509v3 Authority Key Identifier: keyid:E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/A987B8BEDB0B11ECB433A842C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.1.188.0/22 103.19.172.0/22 103.232.160.0/22 113.212.168.0/21 163.47.120.0/22 163.47.136.0/22 163.47.168.0/22 182.237.4.0/22 Signature Algorithm: sha256WithRSAEncryption e2:e4:59:21:a5:87:d7:d4:40:93:79:2a:dc:98:cc:0b:bb:3e: ec:0f:a5:fa:a8:3b:db:ba:dd:18:47:26:3b:da:df:b1:b7:a4: 39:fc:db:cf:4f:b5:fd:50:35:35:49:1b:f9:52:45:10:9c:0b: e1:84:38:61:fc:6d:e6:61:0a:f1:66:59:db:9f:f2:43:4b:4b: 5b:3d:82:f9:d0:f3:5f:19:c3:f0:61:33:60:59:fa:0f:f3:40: 8c:a8:a2:60:5d:15:b4:d2:81:7a:43:08:47:be:8f:36:61:ea: 06:4d:48:56:fd:1a:11:6d:c0:6d:8c:72:45:69:9e:a6:30:b0: 07:e9:fd:d4:57:d9:9d:30:82:7e:01:58:a6:f7:88:9c:d7:24: b6:71:a4:0e:45:eb:34:a2:cf:30:dc:77:4d:b4:fe:8c:42:81: e0:e8:97:3b:70:b4:e3:ae:59:2e:57:39:e8:6f:89:73:4e:fc: 43:d5:c7:eb:4e:f8:bd:46:34:86:40:b5:39:d6:b2:a6:ee:a5: 92:c7:b6:0a:a4:2b:51:82:09:78:d2:a1:93:e2:d8:b2:ed:17: 9e:90:d2:b1:4b:2c:bd:80:a7:39:c6:de:4e:c5:63:e6:bc:0f: eb:0e:eb:34:9e:e7:30:c6:f5:15:6c:97:b2:7e:cc:41:65:7f: ae:cb:91:67 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgICBtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUwMjcxMTAvBgNVBAUTKEUxNzcyQ0I1RDM5NjUyNzZDRjRFOThEMzc2NkI2MzBE N0UzRjgxNzgwHhcNMjQwNzA0MjMwMDQ2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njg3Mjk5ZS01OWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZJ4hGtAo8TV/CF3WbCnWNBmwV9qE4zw+JKyIqS90OsvleN+2XGDtIBxRQJ7 MRo7OqnjB61qJTgfkExzrTy1M9wpD1e/TjBWXajaV4KXzdC45gyQGwdF5LyZJctG oaE/uCM63ysQ3+lJHa2rwG1utCJSErUwAOriCuGhMDTMni1w5KwFRiaIFOCOx9I+ 6UmlybzqrS5foWv46mUYIAqN5XJl/7Ceh0sntOEHXZaaqwqy7Vv3mEvFiIlWGDe1 cIyYtmbQAIzULdjqycar7oCbo5oBizD3EH/xqlrprYjGsNd+PkEsok0VvnS5Ie0I tqX+88KGVBmrlQi2Nad61gSLFQIDAQABo4ICvzCCArswHQYDVR0OBBYEFOUB8IOz XI9eCZi/Bvwk5sAVBIBvMB8GA1UdIwQYMBaAFOF3LLXTllJ2z06Y03ZrYw1+P4F4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTAyNy8yNTA1Q0VEQzI1 NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1VuYlBUcGpUZG10akRYNF9n WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYY3N0ZE9XVW5iUFRwalRkbXRqRFg0X2dYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzUwMjcvMjUwNUNFREMyNTY4MTFFQkFDMkNBQzVBQzRGOUFFMDIvQTk4N0I4QkVE QjBCMTFFQ0I0MzNBODQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSQYIKwYBBQUHAQcBAf8E OjA4MDYEAgABMDADBAJnAbwDBAJnE6wDBAJn6KADBANx1KgDBAKjL3gDBAKjL4gD BAKjL6gDBAK27QQwDQYJKoZIhvcNAQELBQADggEBAOLkWSGlh9fUQJN5KtyYzAu7 PuwPpfqoO9u63RhHJjva37G3pDn8289Ptf1QNTVJG/lSRRCcC+GEOGH8beZhCvFm Wduf8kNLS1s9gvnQ818Zw/BhM2BZ+g/zQIyoomBdFbTSgXpDCEe+jzZh6gZNSFb9 GhFtwG2MckVpnqYwsAfp/dRX2Z0wgn4BWKb3iJzXJLZxpA5F6zSizzDcd020/oxC geDolztwtOOuWS5XOehviXNO/EPVx+tO+L1GNIZAtTnWsqbupZLHtgqkK1GCCXjS oZPi2LLtF56Q0rFLLL2ApznG3k7FY+a8D+sO6zSe5zDG9RVsl7J+zEFlf67LkWc= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:09 2024 by rpki-client on console-fra.rpki-client.org