$ rpki-client -vvf rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/9BB410F021B011EFA6C95F83C4F9AE02.roa File: 9BB410F021B011EFA6C95F83C4F9AE02.roa (raw, json) Hash identifier: DQp5W/vsl6Br/ogSstkorS/8VooztvuTJ4JXbRwCOMw= Subject key identifier: FD:01:28:D3:F7:38:72:E3:86:12:4B:A2:3D:F6:9E:04:59:51:3F:DC Certificate issuer: /CN=A9176190/serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D Certificate serial: 08A3 Authority key identifier: 3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/9BB410F021B011EFA6C95F83C4F9AE02.roa Signing time: Thu 22 Aug 2024 20:58:57 +0000 ROA not before: Thu 22 Aug 2024 20:58:57 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 137990 IP address blocks: 103.119.128.0/22 maxlen: 22 103.119.128.0/24 maxlen: 24 103.119.129.0/24 maxlen: 24 103.119.130.0/24 maxlen: 24 103.119.131.0/24 maxlen: 24 202.43.225.0/24 maxlen: 24 202.43.226.0/24 maxlen: 24 2403:43c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.crl rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2211 (0x8a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176190/serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D Validity Not Before: Aug 22 20:58:57 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66c7a691-1186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:97:15:2d:fb:61:97:48:83:15:62:38:0f:5b: eb:5c:e2:6a:67:91:5b:4f:68:f5:9e:e7:43:e4:8c: c3:2e:76:17:68:da:6c:f7:68:11:bc:a7:93:89:c6: d6:32:9b:5a:bf:d3:ec:46:16:6c:80:18:e4:af:eb: 55:85:06:28:ae:83:f0:af:d5:9f:aa:0c:0b:7d:71: 78:4a:71:79:5c:52:34:50:17:b6:a2:78:34:a1:8d: 0a:b0:37:64:58:7d:f7:5d:3b:2f:20:9a:87:2c:be: 49:42:3e:24:a6:e3:c4:a7:b9:f8:18:1d:0f:ad:5b: f3:25:74:9f:e5:63:81:f5:75:52:57:bd:8a:42:a2: 05:0f:d3:f1:5c:05:38:c8:d8:97:90:c3:24:07:87: 57:96:aa:41:05:74:d9:ca:0d:08:90:04:02:6a:75: b0:5c:c6:4b:d8:32:43:0b:ac:07:ca:29:40:69:4d: f0:d1:47:60:e8:e7:88:e7:0c:dc:5e:8f:7d:bd:da: 82:fb:aa:9a:c0:4e:83:68:25:98:91:55:05:1e:49: 65:e6:2f:e7:88:b5:62:5a:1e:ca:f5:22:0b:fb:00: d7:2a:ce:94:01:ba:12:c2:e6:9a:b5:d8:8b:35:89: 34:b3:ed:dd:8f:bd:9d:80:19:20:46:94:cb:1e:fd: bb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:01:28:D3:F7:38:72:E3:86:12:4B:A2:3D:F6:9E:04:59:51:3F:DC X509v3 Authority Key Identifier: keyid:3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/9BB410F021B011EFA6C95F83C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.119.128.0/22 202.43.225.0-202.43.226.255 IPv6: 2403:43c0::/32 Signature Algorithm: sha256WithRSAEncryption 80:fe:d5:92:0f:79:40:2f:eb:21:16:e6:fa:3f:8f:dd:35:19: 89:21:4c:a7:7a:01:17:ca:d4:0a:45:79:3c:a4:bd:8d:fa:a7: 54:b4:95:2a:65:1d:02:38:ed:f9:dd:ea:c8:5c:8f:51:e7:86: a7:9b:b2:79:17:52:b5:fe:c0:5d:de:03:12:f9:dc:16:ce:e5: bc:a0:48:c8:34:d4:80:aa:db:2e:c9:87:c3:93:d0:12:ae:d5: a1:e7:5f:8b:81:58:f0:44:cf:b2:8c:43:84:bc:9a:c7:76:dc: 2d:3d:45:ad:05:12:70:47:7e:7f:06:81:41:fa:21:26:e8:dc: 3b:af:b3:10:ab:3e:63:6b:07:62:90:48:ca:91:40:44:d9:98: 4c:56:a3:50:d0:66:bc:a9:ea:71:c3:cf:95:49:84:6f:8b:5a: 09:7a:3a:0f:03:f8:4e:1b:75:91:dd:b3:77:9a:0d:4e:bc:60: c9:16:ca:84:cd:24:e3:78:02:21:09:a1:fa:cc:f7:b7:b7:10: 2e:d3:91:3c:66:81:8e:19:33:48:86:31:bd:a7:56:95:89:37: 9e:ec:16:cf:df:e4:bb:9e:2a:10:57:da:64:ba:ae:e9:72:66: ad:55:d8:80:da:ea:5e:e0:11:61:45:5b:2c:fc:6b:02:dd:ac: da:1b:13:7c -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICCKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYxOTAxMTAvBgNVBAUTKDNERTdFRkMwNDZBNjdCOTkyNUJCQkJEQzYxMzJCMTI5 NzVEQjRBNkQwHhcNMjQwODIyMjA1ODU3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmM3YTY5MS0xMTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZcVLfthl0iDFWI4D1vrXOJqZ5FbT2j1nudD5IzDLnYXaNps92gRvKeTicbW Mptav9PsRhZsgBjkr+tVhQYoroPwr9WfqgwLfXF4SnF5XFI0UBe2ong0oY0KsDdk WH33XTsvIJqHLL5JQj4kpuPEp7n4GB0PrVvzJXSf5WOB9XVSV72KQqIFD9PxXAU4 yNiXkMMkB4dXlqpBBXTZyg0IkAQCanWwXMZL2DJDC6wHyilAaU3w0Udg6OeI5wzc Xo99vdqC+6qawE6DaCWYkVUFHkll5i/niLViWh7K9SIL+wDXKs6UAboSwuaatdiL NYk0s+3dj72dgBkgRpTLHv27RwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFP0BKNP3 OHLjhhJLoj32ngRZUT/cMB8GA1UdIwQYMBaAFD3n78BGpnuZJbu73GEysSl120pt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjE5MC9DMzczMDBFOEFF MTgxMUVBQTUwOTAwNzJDNEY5QUUwMi9QZWZ2d0VhbWU1a2x1N3ZjWVRLeEtYWGJT bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BlZnZ3RWFtZTVrbHU3dmNZVEt4S1hYYlNtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzYxOTAvQzM3MzAwRThBRTE4MTFFQUE1MDkwMDcyQzRGOUFFMDIvOUJCNDEwRjAy MUIwMTFFRkE2Qzk1RjgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBoEAgABMBQDBAJnd4AwDAMEAMor4QMEAMor4jANBAIAAjAHAwUAJANDwDAN BgkqhkiG9w0BAQsFAAOCAQEAgP7Vkg95QC/rIRbm+j+P3TUZiSFMp3oBF8rUCkV5 PKS9jfqnVLSVKmUdAjjt+d3qyFyPUeeGp5uyeRdStf7AXd4DEvncFs7lvKBIyDTU gKrbLsmHw5PQEq7Voedfi4FY8ETPsoxDhLyax3bcLT1FrQUScEd+fwaBQfohJujc O6+zEKs+Y2sHYpBIypFARNmYTFajUNBmvKnqccPPlUmEb4taCXo6DwP4Tht1kd2z d5oNTrxgyRbKhM0k43gCIQmh+sz3t7cQLtORPGaBjhkzSIYxvadWlYk3nuwWz9/k u54qEFfaZLqu6XJmrVXYgNrqXuARYUVbLPxrAt2s2hsTfA== -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:31 2024 by rpki-client on console-ams.rpki-client.org