$ rpki-client -vvf rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/C6DFC60A5B9B11EFA48FE643C4F9AE02.roa File: C6DFC60A5B9B11EFA48FE643C4F9AE02.roa (raw, json) Hash identifier: 07izI0BAWGv8aXzT4YAtv1Abw3XsO2GrHU61WuCgbfg= Subject key identifier: BE:D6:16:E5:9C:D7:5A:16:DB:BF:25:EE:D1:80:D6:C8:33:E2:9A:83 Certificate issuer: /CN=A9177772/serialNumber=98E1E9B043E68D3769E9A68DB1C26D715108F787 Certificate serial: 02 Authority key identifier: 98:E1:E9:B0:43:E6:8D:37:69:E9:A6:8D:B1:C2:6D:71:51:08:F7:87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/C6DFC60A5B9B11EFA48FE643C4F9AE02.roa Signing time: Fri 16 Aug 2024 06:50:09 +0000 ROA not before: Fri 16 Aug 2024 06:50:09 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 26658 IP address blocks: 103.204.108.0/22 maxlen: 22 202.160.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.crl rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177772/serialNumber=98E1E9B043E68D3769E9A68DB1C26D715108F787 Validity Not Before: Aug 16 06:50:09 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=66bef6a0-b04a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:dd:73:22:01:49:98:80:e3:e0:bf:c7:94:d7: 70:5f:c3:41:1d:d7:bb:b4:56:f9:31:99:17:6a:73: c2:e0:db:f6:57:02:32:12:cb:ae:fd:cc:6d:5f:32: c4:75:05:dd:76:d5:75:cd:7d:22:57:34:6f:12:96: 49:1a:e6:7b:32:84:e4:12:88:a7:84:4a:dc:39:e7: 25:7e:c6:42:e6:f4:dc:b8:66:96:5d:da:0a:06:ed: cf:2f:90:a9:47:16:d5:27:b0:82:b2:73:20:3b:43: c1:0e:56:0e:2e:45:56:ce:12:14:82:35:f8:95:43: 84:fb:19:f1:69:a1:01:16:43:f9:05:86:61:a8:b5: a6:11:08:ee:bc:93:21:02:c7:4b:5d:5a:08:f6:3d: 39:57:0e:1b:f9:9a:04:ed:25:93:49:b3:51:0b:ea: ca:a8:af:2f:04:86:91:20:e2:c8:5b:79:1d:50:55: 72:6f:00:03:3b:05:81:e0:5a:ba:fc:7f:ea:34:83: e8:63:b4:ef:d0:c3:03:e5:3b:32:4b:b7:2e:8a:4c: a1:4c:7d:88:2d:f0:64:a3:f3:7e:24:53:cb:ce:7f: 5c:c3:3a:8f:e9:a4:54:12:6b:36:aa:6b:e6:2e:16: 29:52:ea:82:c7:ec:48:0d:2d:8f:17:c5:46:29:9f: 2c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D6:16:E5:9C:D7:5A:16:DB:BF:25:EE:D1:80:D6:C8:33:E2:9A:83 X509v3 Authority Key Identifier: keyid:98:E1:E9:B0:43:E6:8D:37:69:E9:A6:8D:B1:C2:6D:71:51:08:F7:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/C6DFC60A5B9B11EFA48FE643C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.204.108.0/22 202.160.152.0/22 Signature Algorithm: sha256WithRSAEncryption 80:c6:e4:2f:c6:d5:1a:6b:85:c1:17:87:05:b2:b9:80:8e:a7: f9:16:fa:d1:6b:37:87:03:a1:72:94:a3:e8:06:4f:7c:c1:24: 0f:38:b9:e4:16:0f:08:9f:5a:d0:38:31:cb:62:2d:17:75:7b: f7:ca:52:1a:0e:99:14:ab:c7:4c:89:9d:54:d6:24:9d:4f:98: 94:b1:f0:8f:d7:e1:53:3f:b1:d7:d6:76:91:59:c9:90:b6:91: 33:6c:05:92:07:e6:6f:07:1d:42:37:0f:8a:82:21:69:67:56: b3:dd:04:ef:82:ae:80:63:c7:7d:a8:de:88:09:44:e6:69:4f: de:f5:ef:06:79:9b:c4:8a:2c:9c:95:0c:17:85:90:9a:cd:fb: 8a:2f:70:1b:79:4a:7f:88:95:b1:05:3f:0e:68:28:8b:c8:18: c8:a7:19:04:5d:74:9d:90:bc:6b:6c:84:35:2b:a7:2d:f2:75: ad:71:d9:e8:ad:49:ca:49:9f:ce:30:fc:6e:80:2a:be:19:aa: 81:07:91:f9:49:69:fd:f9:a2:7f:ea:a4:af:34:6f:be:f3:75: fb:16:89:1c:24:47:21:7a:bd:07:9c:26:ea:22:89:fd:43:15: 6d:e6:98:b5:1a:d7:6a:5d:e7:4a:4f:4f:1e:9e:12:91:73:c4: 71:28:f4:f2 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 Nzc3MjExMC8GA1UEBRMoOThFMUU5QjA0M0U2OEQzNzY5RTlBNjhEQjFDMjZENzE1 MTA4Rjc4NzAeFw0yNDA4MTYwNjUwMDlaFw0yNTAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YmVmNmEwLWIwNGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCY3XMiAUmYgOPgv8eU13Bfw0Ed17u0VvkxmRdqc8Lg2/ZXAjISy679zG1fMsR1 Bd121XXNfSJXNG8Slkka5nsyhOQSiKeEStw55yV+xkLm9Ny4ZpZd2goG7c8vkKlH FtUnsIKycyA7Q8EOVg4uRVbOEhSCNfiVQ4T7GfFpoQEWQ/kFhmGotaYRCO68kyEC x0tdWgj2PTlXDhv5mgTtJZNJs1EL6sqory8EhpEg4shbeR1QVXJvAAM7BYHgWrr8 f+o0g+hjtO/QwwPlOzJLty6KTKFMfYgt8GSj834kU8vOf1zDOo/ppFQSazaqa+Yu FilS6oLH7EgNLY8XxUYpnyxjAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUvtYW5ZzX WhbbvyXu0YDWyDPimoMwHwYDVR0jBBgwFoAUmOHpsEPmjTdp6aaNscJtcVEI94cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3NzcyLzkxRkYwRDkyNUI5 QjExRUY5Q0M0NTc0M0M0RjlBRTAyL21PSHBzRVBtalRkcDZhYU5zY0p0Y1ZFSTk0 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbU9IcHNFUG1qVGRwNmFhTnNjSnRjVkVJOTRjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Nzc3Mi85MUZGMEQ5MjVCOUIxMUVGOUNDNDU3NDNDNEY5QUUwMi9DNkRGQzYwQTVC OUIxMUVGQTQ4RkU2NDNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAmfMbAMEAsqgmDANBgkqhkiG9w0BAQsFAAOCAQEAgMbkL8bV GmuFwReHBbK5gI6n+Rb60Ws3hwOhcpSj6AZPfMEkDzi55BYPCJ9a0Dgxy2ItF3V7 98pSGg6ZFKvHTImdVNYknU+YlLHwj9fhUz+x19Z2kVnJkLaRM2wFkgfmbwcdQjcP ioIhaWdWs90E74KugGPHfajeiAlE5mlP3vXvBnmbxIosnJUMF4WQms37ii9wG3lK f4iVsQU/Dmgoi8gYyKcZBF10nZC8a2yENSunLfJ1rXHZ6K1JykmfzjD8boAqvhmq gQeR+Ulp/fmif+qkrzRvvvN1+xaJHCRHIXq9B5wm6iKJ/UMVbeaYtRrXal3nSk9P Hp4SkXPEcSj08g== -----END CERTIFICATE-----Generated at Thu Sep 19 07:13:52 2024 by rpki-client on console-fra.rpki-client.org