$ rpki-client -vvf rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/BB296D2A8A9011EEA6EFA851C4F9AE02.roa File: BB296D2A8A9011EEA6EFA851C4F9AE02.roa (raw, json) Hash identifier: k1L+ANf3yP8/8sxZ+47s6Le30/Xw4KxVi1ih5u9sy+g= Subject key identifier: 87:EF:84:10:B0:D6:54:8D:35:60:ED:2B:CC:80:1E:CB:18:22:28:4B Certificate issuer: /CN=A9176190/serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D Certificate serial: 085D Authority key identifier: 3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/BB296D2A8A9011EEA6EFA851C4F9AE02.roa Signing time: Mon 29 Apr 2024 07:07:56 +0000 ROA not before: Mon 29 Apr 2024 07:07:56 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 137990 IP address blocks: 103.119.128.0/22 maxlen: 22 103.119.128.0/24 maxlen: 24 103.119.129.0/24 maxlen: 24 103.119.130.0/24 maxlen: 24 103.119.131.0/24 maxlen: 24 202.43.225.0/24 maxlen: 24 202.43.226.0/24 maxlen: 24 2403:43c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.crl rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 22:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2141 (0x85d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176190/serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D Validity Not Before: Apr 29 07:07:56 2024 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=662f474c-c57c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cc:5d:9a:b4:9e:db:49:a8:0e:1d:80:a7:57: 90:d1:32:9c:bd:7f:2f:8b:10:ab:72:58:06:f5:ab: c0:8a:cc:35:b0:8c:5c:e3:23:28:13:76:16:55:cd: 8f:51:c7:dc:ae:1b:5d:bd:64:d2:6f:6a:2a:ff:a4: e0:08:8c:81:cf:8e:49:0d:4a:19:5a:50:41:6c:b5: 4d:c8:63:77:eb:29:73:51:c0:54:e1:ff:04:5c:4c: 42:c4:37:af:71:60:7e:c2:b6:14:ab:3c:89:7b:1a: be:a6:b0:24:52:ee:7a:a2:d2:d4:a1:b5:4d:2a:d7: 55:e4:56:f9:1c:d8:a7:8b:61:b6:7f:8f:d0:2d:a2: 83:e4:c9:eb:c0:e6:74:19:8d:19:e8:9a:f7:b1:bc: 8c:5d:5c:5c:bd:c4:7d:b1:d3:b8:6e:ca:e2:9c:82: d7:f8:73:1d:1f:ac:66:87:bf:2d:c3:37:2a:ce:17: b7:c0:08:3d:ea:38:42:43:1b:5b:09:2e:45:b4:0e: e7:7a:25:e0:7d:ce:38:61:af:be:07:ca:6d:18:04: 1c:5c:07:e3:85:a6:1b:0d:2b:76:e8:55:18:db:b3: 39:dc:d6:93:b2:14:c4:bb:7a:d4:80:78:55:97:7d: 62:ea:76:74:f9:5d:ca:f2:1a:47:96:92:3a:14:bd: 11:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:EF:84:10:B0:D6:54:8D:35:60:ED:2B:CC:80:1E:CB:18:22:28:4B X509v3 Authority Key Identifier: keyid:3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/BB296D2A8A9011EEA6EFA851C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.119.128.0/22 202.43.225.0-202.43.226.255 IPv6: 2403:43c0::/32 Signature Algorithm: sha256WithRSAEncryption 92:40:82:95:04:31:42:9d:6a:16:28:8b:e2:8d:1f:21:3e:3c: a8:66:aa:f1:58:bf:02:98:4b:0a:99:3d:d7:ba:ca:65:bf:f1: bd:b1:79:42:20:52:40:ad:2c:0d:6b:47:e3:e1:f4:f7:de:83: ab:4b:f2:6b:0f:6d:3b:7c:c9:15:45:87:d0:89:29:4f:3c:15: 72:1b:2e:88:bf:21:da:b5:b2:86:22:73:0d:84:80:fd:f7:f3: 19:21:92:ed:a9:3b:dd:29:6a:a3:f6:2e:d8:ff:fe:a6:68:be: 2e:02:45:7c:2b:ed:7f:e6:0d:a9:61:b4:7a:68:04:dc:0a:94: 6e:6e:07:5f:d7:c1:34:c6:ae:43:57:0a:fb:7c:58:45:ec:b9: 77:55:44:83:80:6a:ef:0b:82:f2:1d:b4:65:90:82:46:9a:55: 80:62:2d:02:78:3f:c7:70:cf:ba:f5:4c:f8:4e:c6:f3:e3:b3: fb:78:3a:b7:16:ef:07:df:a9:8f:8e:05:0a:87:e8:59:5e:83: 53:f8:ce:ee:ef:8b:85:97:de:f6:74:03:36:79:d5:ed:b3:b9: ac:a9:38:c7:db:9d:d3:f4:51:53:83:ee:1f:05:63:25:a7:6a: 00:4e:b4:49:03:d1:94:d3:7f:17:bd:89:bb:01:15:4f:cb:73: 6c:6b:eb:37 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICCF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYxOTAxMTAvBgNVBAUTKDNERTdFRkMwNDZBNjdCOTkyNUJCQkJEQzYxMzJCMTI5 NzVEQjRBNkQwHhcNMjQwNDI5MDcwNzU2WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjJmNDc0Yy1jNTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusxdmrSe20moDh2Ap1eQ0TKcvX8vixCrclgG9avAisw1sIxc4yMoE3YWVc2P UcfcrhtdvWTSb2oq/6TgCIyBz45JDUoZWlBBbLVNyGN36ylzUcBU4f8EXExCxDev cWB+wrYUqzyJexq+prAkUu56otLUobVNKtdV5Fb5HNini2G2f4/QLaKD5MnrwOZ0 GY0Z6Jr3sbyMXVxcvcR9sdO4bsrinILX+HMdH6xmh78twzcqzhe3wAg96jhCQxtb CS5FtA7neiXgfc44Ya++B8ptGAQcXAfjhaYbDSt26FUY27M53NaTshTEu3rUgHhV l31i6nZ0+V3K8hpHlpI6FL0RTwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFIfvhBCw 1lSNNWDtK8yAHssYIihLMB8GA1UdIwQYMBaAFD3n78BGpnuZJbu73GEysSl120pt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjE5MC9DMzczMDBFOEFF MTgxMUVBQTUwOTAwNzJDNEY5QUUwMi9QZWZ2d0VhbWU1a2x1N3ZjWVRLeEtYWGJT bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BlZnZ3RWFtZTVrbHU3dmNZVEt4S1hYYlNtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzYxOTAvQzM3MzAwRThBRTE4MTFFQUE1MDkwMDcyQzRGOUFFMDIvQkIyOTZEMkE4 QTkwMTFFRUE2RUZBODUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBoEAgABMBQDBAJnd4AwDAMEAMor4QMEAMor4jANBAIAAjAHAwUAJANDwDAN BgkqhkiG9w0BAQsFAAOCAQEAkkCClQQxQp1qFiiL4o0fIT48qGaq8Vi/AphLCpk9 17rKZb/xvbF5QiBSQK0sDWtH4+H0996Dq0vyaw9tO3zJFUWH0IkpTzwVchsuiL8h 2rWyhiJzDYSA/ffzGSGS7ak73Slqo/Yu2P/+pmi+LgJFfCvtf+YNqWG0emgE3AqU bm4HX9fBNMauQ1cK+3xYRey5d1VEg4Bq7wuC8h20ZZCCRppVgGItAng/x3DPuvVM +E7G8+Oz+3g6txbvB9+pj44FCofoWV6DU/jO7u+LhZfe9nQDNnnV7bO5rKk4x9ud 0/RRU4PuHwVjJadqAE60SQPRlNN/F72JuwEVT8tzbGvrNw== -----END CERTIFICATE-----Generated at Tue Apr 30 22:56:15 2024 by rpki-client on console-fra.rpki-client.org