$ rpki-client -vvf rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/7136F65A37A811EE94E32169C4F9AE02.roa File: 7136F65A37A811EE94E32169C4F9AE02.roa (raw, json) Hash identifier: k8QKeKvOcm3atVDcEJg6MmKWLZSx6mGrjHPmscLBCDI= Subject key identifier: F4:D2:B3:07:A4:D7:C7:08:16:9F:A1:9C:95:94:3B:E7:CD:CF:01:11 Certificate issuer: /CN=A917BBF1/serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2 Certificate serial: 0B9A Authority key identifier: 65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/7136F65A37A811EE94E32169C4F9AE02.roa Signing time: Tue 04 Jun 2024 20:04:20 +0000 ROA not before: Tue 04 Jun 2024 20:04:20 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 138640 IP address blocks: 103.114.96.0/24 maxlen: 24 103.114.97.0/24 maxlen: 24 103.114.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:35:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2970 (0xb9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BBF1/serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2 Validity Not Before: Jun 4 20:04:20 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=665f7344-151b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bc:83:5a:8d:67:0d:45:bf:9e:13:bd:dc:16: 42:9d:b4:45:f4:20:66:3b:b8:8d:c9:81:c0:55:49: d0:e3:95:b7:7a:11:2a:21:bd:6c:27:50:8b:5e:ca: 00:54:51:e1:d4:27:32:3a:a5:39:8e:99:a3:f6:1f: 3e:e7:d5:76:70:8b:0b:a2:e9:25:3e:75:08:89:df: bf:e5:50:e5:b3:09:bd:ea:a2:6a:a0:f7:1c:5c:cd: 1c:6f:85:16:5a:e3:d7:c8:82:24:2e:29:fe:66:ab: af:7b:c4:ac:9d:50:fc:f0:31:44:b6:57:d6:9f:62: 47:32:4f:df:58:73:ad:be:5c:8f:e4:06:af:d0:f6: a5:e2:84:f8:b4:df:87:ba:01:84:4d:1d:94:d0:71: c7:77:da:e0:80:3a:6a:59:12:f8:a7:d2:a8:28:a2: a5:2d:0d:8c:38:81:f3:78:81:3a:9a:d4:10:06:45: 22:47:af:02:7e:13:8a:42:40:28:91:bc:cf:aa:4c: 8d:95:df:12:74:01:22:60:bb:74:38:9c:65:d0:1e: d7:72:a2:41:eb:94:c0:f7:2f:b1:c3:5b:d8:d8:34: c3:df:37:b7:2d:67:23:6c:86:f5:5e:e2:5b:ca:dc: 2b:50:a3:3a:aa:ef:ba:c1:b4:3a:72:39:9c:48:f6: 29:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D2:B3:07:A4:D7:C7:08:16:9F:A1:9C:95:94:3B:E7:CD:CF:01:11 X509v3 Authority Key Identifier: keyid:65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/7136F65A37A811EE94E32169C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.114.96.0-103.114.98.255 Signature Algorithm: sha256WithRSAEncryption 0e:90:79:7f:66:9d:73:a4:30:8a:49:16:c6:b2:88:6d:65:b7: f1:3a:60:43:93:57:97:7b:65:80:6d:c9:c9:31:58:a1:21:f0: bb:f4:e4:ac:09:3c:8c:c7:8e:be:4c:c4:c3:0a:8d:d9:cb:69: f0:8c:97:ce:b3:71:ed:60:3b:92:1b:1b:c5:74:3f:c8:75:3c: 58:cd:fc:1a:85:11:22:5d:fd:d2:3e:3b:4b:98:96:6f:0e:51: 95:60:e8:5b:9a:c2:ed:15:bb:99:b8:1f:31:46:e6:6c:aa:ce: 22:43:c4:3d:6f:73:6a:ee:0b:11:88:be:c3:60:88:05:b4:1f: ba:5a:b0:7a:91:75:82:65:6a:22:f0:fe:ac:58:80:4f:73:0e: 2d:d7:c7:bb:69:86:5f:61:62:a0:42:c9:a8:9f:83:01:9b:25: d9:ca:41:cd:fe:2b:f9:95:8c:f2:c2:6d:16:04:87:49:69:f9: 6d:37:7a:cc:88:85:88:49:f1:10:1a:cd:2d:81:5c:61:11:43: 5c:ec:a6:4d:6e:ad:30:c0:f4:fc:4b:70:55:60:b1:e7:28:15: d5:72:64:f9:99:fe:4c:1c:1b:71:2a:ca:81:fd:f3:6f:18:34: 05:00:65:11:d1:15:c3:af:88:07:92:dc:d8:90:16:94:9b:d7: 06:fa:f8:8e -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICC5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCRjExMTAvBgNVBAUTKDY1NDA5MTg2MDI4RUM1NENENDVCNTgzNEZGQkVDQUY0 Qjc4RjE5QzIwHhcNMjQwNjA0MjAwNDIwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjVmNzM0NC0xNTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7yDWo1nDUW/nhO93BZCnbRF9CBmO7iNyYHAVUnQ45W3ehEqIb1sJ1CLXsoA VFHh1CcyOqU5jpmj9h8+59V2cIsLouklPnUIid+/5VDlswm96qJqoPccXM0cb4UW WuPXyIIkLin+Zquve8SsnVD88DFEtlfWn2JHMk/fWHOtvlyP5Aav0Pal4oT4tN+H ugGETR2U0HHHd9rggDpqWRL4p9KoKKKlLQ2MOIHzeIE6mtQQBkUiR68CfhOKQkAo kbzPqkyNld8SdAEiYLt0OJxl0B7XcqJB65TA9y+xw1vY2DTD3ze3LWcjbIb1XuJb ytwrUKM6qu+6wbQ6cjmcSPYpswIDAQABo4ICnTCCApkwHQYDVR0OBBYEFPTSswek 18cIFp+hnJWUO+fNzwERMB8GA1UdIwQYMBaAFGVAkYYCjsVM1FtYNP++yvS3jxnC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkJGMS8yNDVEQzVDQTBB RjcxMUVBQTg1QTVEMUFDNEY5QUUwMi9aVUNSaGdLT3hVelVXMWcwXzc3SzlMZVBH Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pVQ1JoZ0tPeFV6VVcxZzBfNzdLOUxlUEdjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0JCRjEvMjQ1REM1Q0EwQUY3MTFFQUE4NUE1RDFBQzRGOUFFMDIvNzEzNkY2NUEz N0E4MTFFRTk0RTMyMTY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEBWdyYAMEAGdyYjANBgkqhkiG9w0BAQsFAAOCAQEADpB5 f2adc6QwikkWxrKIbWW38TpgQ5NXl3tlgG3JyTFYoSHwu/TkrAk8jMeOvkzEwwqN 2ctp8IyXzrNx7WA7khsbxXQ/yHU8WM38GoURIl390j47S5iWbw5RlWDoW5rC7RW7 mbgfMUbmbKrOIkPEPW9zau4LEYi+w2CIBbQfulqwepF1gmVqIvD+rFiAT3MOLdfH u2mGX2FioELJqJ+DAZsl2cpBzf4r+ZWM8sJtFgSHSWn5bTd6zIiFiEnxEBrNLYFc YRFDXOymTW6tMMD0/EtwVWCx5ygV1XJk+Zn+TBwbcSrKgf3zbxg0BQBlEdEVw6+I B5Lc2JAWlJvXBvr4jg== -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:59 2024 by rpki-client on console-fra.rpki-client.org