$ rpki-client -vvf rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/9C749C7C140811EABB746522C4F9AE02.roa File: 9C749C7C140811EABB746522C4F9AE02.roa (raw, json) Hash identifier: t3eros23i5jos6SsnfnITnVUwueCJZ09uU5hK4xc9ak= Subject key identifier: 26:E8:3F:1B:B3:49:75:74:E5:BE:BF:53:72:95:7D:47:44:48:4A:E0 Certificate issuer: /CN=A9177285/serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492 Certificate serial: 0B78 Authority key identifier: 0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/9C749C7C140811EABB746522C4F9AE02.roa Signing time: Wed 04 Sep 2024 19:37:40 +0000 ROA not before: Wed 04 Sep 2024 19:37:40 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 139590 IP address blocks: 103.142.34.0/23 maxlen: 23 103.142.34.0/24 maxlen: 24 103.142.35.0/24 maxlen: 24 2400:63a0::/32 maxlen: 32 2400:63a0::/48 maxlen: 48 2400:63a0:1::/48 maxlen: 48 2400:63a0:2::/48 maxlen: 48 2400:63a0:3::/48 maxlen: 48 2400:63a0:4::/48 maxlen: 48 2400:63a0:5::/48 maxlen: 48 2400:63a0:6::/48 maxlen: 48 2400:63a0:7::/48 maxlen: 48 2400:63a0:8::/48 maxlen: 48 2400:63a0:9::/48 maxlen: 48 2400:63a0:a::/48 maxlen: 48 2400:63a0:b::/48 maxlen: 48 2400:63a0:c::/48 maxlen: 48 2400:63a0:d::/48 maxlen: 48 2400:63a0:11::/48 maxlen: 48 2400:63a0:12::/48 maxlen: 48 2400:63a0:40::/42 maxlen: 42 2400:63a0:80::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2936 (0xb78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177285/serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492 Validity Not Before: Sep 4 19:37:40 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66d8b703-1ca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5f:45:48:99:1b:69:5f:6f:56:ab:13:d2:25: 58:dc:01:04:ee:72:be:c2:68:de:ca:26:01:3f:22: 3d:98:7d:bf:46:03:15:6a:93:91:b1:d1:f3:4c:7e: ca:3f:cc:d8:44:a3:49:83:fb:e8:02:bd:d2:49:a3: 49:48:02:59:ee:31:7d:4e:30:4d:8c:e6:2b:c0:f2: b9:a3:09:f9:8d:e1:80:ed:f4:67:c2:b1:a3:eb:ad: da:f7:72:3c:27:04:92:63:1d:b3:ff:6e:75:77:47: 81:ef:62:66:a3:76:e1:65:11:ca:fb:91:57:cc:bb: a2:13:77:1b:53:89:6d:45:e7:e9:b0:e3:d8:9d:d9: 84:af:c3:09:b7:77:40:ae:91:fa:59:cd:7e:a4:7e: 9b:bb:56:8e:f6:70:41:90:95:e6:f8:d7:21:ce:5b: 6a:95:7a:1a:16:70:3b:d8:ce:98:db:81:2b:ec:8e: fa:74:0a:5f:68:aa:7b:19:2b:7c:40:60:76:78:6c: ec:a4:2e:08:73:4c:fa:4c:5d:b3:9a:1a:30:4c:2b: 04:55:02:da:b9:6b:08:5e:a8:ec:99:c5:0b:76:d0: 76:1b:ad:59:53:23:86:1a:1a:f7:23:3a:af:fe:99: 62:f0:06:e5:f0:c1:5d:48:79:23:a2:e0:83:38:72: f1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E8:3F:1B:B3:49:75:74:E5:BE:BF:53:72:95:7D:47:44:48:4A:E0 X509v3 Authority Key Identifier: keyid:0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/9C749C7C140811EABB746522C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.142.34.0/23 IPv6: 2400:63a0::/32 Signature Algorithm: sha256WithRSAEncryption 83:e7:52:41:09:96:e9:05:54:9a:4c:5c:99:50:0e:fa:31:5b: 79:c8:f1:95:a9:90:66:64:18:3d:f7:d4:c5:cf:b2:ab:4f:ac: 3d:0a:40:5e:d5:03:af:a3:5a:8a:08:a2:34:45:92:82:76:74: 9e:03:a3:ef:aa:51:69:ac:80:f3:e5:fd:66:bc:be:9a:50:c1: 3a:0d:71:bb:39:58:16:5f:fa:79:0f:a1:db:dc:c5:0e:5c:a7: be:62:c4:69:29:e8:6b:19:d0:07:db:d7:88:f6:22:21:78:50: 9f:5b:59:55:8b:9e:5f:cc:e5:33:c5:f2:a0:93:d8:1f:a1:37: bb:36:34:a9:6c:cf:b4:c6:d9:a6:d3:75:07:d5:44:43:52:52: ba:54:c4:77:c9:58:b6:5c:5a:1d:12:cd:4a:b5:50:37:13:09: c4:0b:4c:ae:73:0e:cb:31:76:5d:f9:8a:83:9e:43:80:64:50: e3:05:7f:d3:2d:d7:23:58:23:53:ad:c8:37:0f:e0:2d:b7:26: 28:68:75:e3:4a:98:96:7f:97:6e:21:40:bd:04:af:f9:51:bf: c7:21:b8:df:55:8e:64:38:b1:9a:25:6b:3c:e4:6d:16:28:2c: f8:46:d6:86:f9:fd:8d:fa:0b:67:ea:85:03:5b:e1:0a:72:ae: 86:b2:25:c2 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICC3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzcyODUxMTAvBgNVBAUTKDBFRUUwRkJGNzg2QTc3N0Y0QzI3NDE1M0Y3NTM2RjNE Rjg5Rjk0OTIwHhcNMjQwOTA0MTkzNzQwWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ4YjcwMy0xY2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx19FSJkbaV9vVqsT0iVY3AEE7nK+wmjeyiYBPyI9mH2/RgMVapORsdHzTH7K P8zYRKNJg/voAr3SSaNJSAJZ7jF9TjBNjOYrwPK5own5jeGA7fRnwrGj663a93I8 JwSSYx2z/251d0eB72Jmo3bhZRHK+5FXzLuiE3cbU4ltRefpsOPYndmEr8MJt3dA rpH6Wc1+pH6bu1aO9nBBkJXm+NchzltqlXoaFnA72M6Y24Er7I76dApfaKp7GSt8 QGB2eGzspC4Ic0z6TF2zmhowTCsEVQLauWsIXqjsmcULdtB2G61ZUyOGGhr3Izqv /pli8Abl8MFdSHkjouCDOHLxHQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFCboPxuz SXV05b6/U3KVfUdESErgMB8GA1UdIwQYMBaAFA7uD794and/TCdBU/dTbz34n5SS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzI4NS9GRTdGNjM3QzE0 MDYxMUVBQTcyODEzMUZDNEY5QUUwMi9EdTRQdjNocWQzOU1KMEZUOTFOdlBmaWZs SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R1NFB2M2hxZDM5TUowRlQ5MU52UGZpZmxKSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzcyODUvRkU3RjYzN0MxNDA2MTFFQUE3MjgxMzFGQzRGOUFFMDIvOUM3NDlDN0Mx NDA4MTFFQUJCNzQ2NTIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnjiIwDQQCAAIwBwMFACQAY6AwDQYJKoZIhvcNAQELBQAD ggEBAIPnUkEJlukFVJpMXJlQDvoxW3nI8ZWpkGZkGD331MXPsqtPrD0KQF7VA6+j WooIojRFkoJ2dJ4Do++qUWmsgPPl/Wa8vppQwToNcbs5WBZf+nkPodvcxQ5cp75i xGkp6GsZ0Afb14j2IiF4UJ9bWVWLnl/M5TPF8qCT2B+hN7s2NKlsz7TG2abTdQfV RENSUrpUxHfJWLZcWh0SzUq1UDcTCcQLTK5zDssxdl35ioOeQ4BkUOMFf9Mt1yNY I1OtyDcP4C23JihodeNKmJZ/l24hQL0Er/lRv8chuN9VjmQ4sZolazzkbRYoLPhG 1ob5/Y36C2fqhQNb4QpyroayJcI= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:05 2024 by rpki-client on console-ams.rpki-client.org