$ rpki-client -vvf rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/9CB879ECC7B511ED9411183FC4F9AE02.roa File: 9CB879ECC7B511ED9411183FC4F9AE02.roa (raw, json) Hash identifier: YSCK3SyvL0QhIHXS6YXGQBk1/DrCgOSt2WKrCd8HBC8= Subject key identifier: FB:3C:44:31:1A:27:D7:32:14:3C:5C:F8:CF:A9:31:44:7B:63:AF:A4 Certificate issuer: /CN=A917C36A/serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69 Certificate serial: F7 Authority key identifier: 47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/9CB879ECC7B511ED9411183FC4F9AE02.roa Signing time: Tue 25 Jun 2024 04:56:41 +0000 ROA not before: Tue 25 Jun 2024 04:56:41 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 134346 IP address blocks: 103.60.252.0/24 maxlen: 24 103.60.253.0/24 maxlen: 24 103.60.254.0/24 maxlen: 24 103.60.255.0/24 maxlen: 24 203.57.34.0/24 maxlen: 24 203.57.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:41:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C36A/serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69 Validity Not Before: Jun 25 04:56:41 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=667a4e09-475b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:61:80:98:bf:3e:ae:7c:bd:92:0f:02:83:86: 55:02:de:38:c2:f4:dd:22:87:a3:69:6e:d5:22:31: fa:24:eb:1f:07:ee:9c:3f:b6:29:6d:3a:4c:a8:f8: fd:f4:e6:89:b3:40:b7:33:ac:13:32:c4:9b:3e:a4: b2:d2:a3:0b:ba:a9:d1:90:d9:a5:36:79:4c:1b:fc: 26:f9:0d:d9:73:2f:15:9b:1b:fe:d6:d7:45:b7:77: 61:d0:c5:fa:85:97:46:50:37:62:b5:1b:41:77:f1: 96:74:c5:cf:84:39:d8:44:c0:b2:eb:2a:2d:bf:21: ef:15:55:d1:15:0b:74:0b:c2:04:e7:df:4d:fd:fb: 00:dd:1e:96:a3:ba:70:ce:1f:10:4c:5d:11:82:a0: f2:84:aa:5e:66:31:79:aa:1e:1b:cb:66:4d:4e:03: 52:24:f0:87:ce:93:f9:41:6c:6a:32:3b:ca:a7:7b: 59:82:2e:4c:c8:e7:2f:ac:69:df:5b:77:0b:44:d7: ac:e4:51:6f:38:82:b3:3d:13:6b:b4:26:21:85:95: 8d:5e:5f:ed:dd:03:7b:87:57:11:e9:6f:dd:76:1d: 20:a5:ad:b0:85:b5:bb:47:74:ef:df:1c:92:21:05: 26:61:90:15:c3:65:9c:75:99:f4:dd:f4:8b:13:03: f0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3C:44:31:1A:27:D7:32:14:3C:5C:F8:CF:A9:31:44:7B:63:AF:A4 X509v3 Authority Key Identifier: keyid:47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/9CB879ECC7B511ED9411183FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.60.252.0/22 203.57.34.0/23 Signature Algorithm: sha256WithRSAEncryption 01:5a:6a:0f:3f:b1:25:2d:47:9f:ff:1b:57:32:5e:09:59:d5: 81:84:d4:45:90:0a:39:bd:05:36:dd:cb:90:de:f3:4d:55:1c: 6a:ba:06:3e:c7:fc:00:04:64:c5:41:84:d2:92:27:28:e0:52: 29:a7:11:b9:a1:d6:d6:07:f3:9e:fb:74:9c:88:4a:db:c4:15: e5:e2:3a:24:8d:38:f1:ef:b2:ec:ea:02:6e:d1:eb:a7:55:02: 11:dc:b6:f5:6d:f9:6f:26:c9:47:07:e0:30:da:ab:f9:eb:69: b7:fe:8e:c1:38:f1:0e:b2:a6:66:a8:9f:7d:96:3d:5a:1c:7a: b0:05:27:db:d0:43:f8:ab:f6:9e:8b:99:65:d8:3f:f9:36:9d: 51:d9:a2:91:09:21:14:c9:1c:04:b3:2d:0d:3f:13:30:14:cb: 61:d8:39:1e:e7:4b:d3:be:9e:f3:8e:5e:22:21:b3:b7:12:14: cf:23:af:f5:a7:8c:5f:63:60:ef:de:ce:99:1a:65:b4:47:ad: cd:b0:ab:31:0f:0b:89:a6:16:f3:ce:a8:74:fe:51:ee:23:99: 3b:2f:b2:52:f2:40:b2:02:b3:67:1d:15:ef:25:40:cf:52:d4: 3e:2b:e3:52:14:68:61:ce:18:1b:f7:97:ac:bc:29:31:37:77: 47:d5:c5:43 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzNkExMTAvBgNVBAUTKDQ3NTMwMEM5NkVCOUEyNEUzMzFEMEIzOTAwNzBDNDVB MjlDOTVFNjkwHhcNMjQwNjI1MDQ1NjQxWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjdhNGUwOS00NzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2GAmL8+rny9kg8Cg4ZVAt44wvTdIoejaW7VIjH6JOsfB+6cP7YpbTpMqPj9 9OaJs0C3M6wTMsSbPqSy0qMLuqnRkNmlNnlMG/wm+Q3Zcy8Vmxv+1tdFt3dh0MX6 hZdGUDditRtBd/GWdMXPhDnYRMCy6yotvyHvFVXRFQt0C8IE599N/fsA3R6Wo7pw zh8QTF0RgqDyhKpeZjF5qh4by2ZNTgNSJPCHzpP5QWxqMjvKp3tZgi5MyOcvrGnf W3cLRNes5FFvOIKzPRNrtCYhhZWNXl/t3QN7h1cR6W/ddh0gpa2whbW7R3Tv3xyS IQUmYZAVw2WcdZn03fSLEwPwJQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPs8RDEa J9cyFDxc+M+pMUR7Y6+kMB8GA1UdIwQYMBaAFEdTAMluuaJOMx0LOQBwxFopyV5p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM2QS80MDkzNDI4MEM3 QjIxMUVEOTM1N0EyM0NDNEY5QUUwMi9SMU1BeVc2NW9rNHpIUXM1QUhERVdpbkpY bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IxTUF5VzY1b2s0ekhRczVBSERFV2luSlhtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0MzNkEvNDA5MzQyODBDN0IyMTFFRDkzNTdBMjNDQzRGOUFFMDIvOUNCODc5RUND N0I1MTFFRDk0MTExODNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnPPwDBAHLOSIwDQYJKoZIhvcNAQELBQADggEBAAFaag8/ sSUtR5//G1cyXglZ1YGE1EWQCjm9BTbdy5De801VHGq6Bj7H/AAEZMVBhNKSJyjg UimnEbmh1tYH8577dJyIStvEFeXiOiSNOPHvsuzqAm7R66dVAhHctvVt+W8myUcH 4DDaq/nrabf+jsE48Q6ypmaon32WPVocerAFJ9vQQ/ir9p6LmWXYP/k2nVHZopEJ IRTJHASzLQ0/EzAUy2HYOR7nS9O+nvOOXiIhs7cSFM8jr/WnjF9jYO/ezpkaZbRH rc2wqzEPC4mmFvPOqHT+Ue4jmTsvslLyQLICs2cdFe8lQM9S1D4r41IUaGHOGBv3 l6y8KTE3d0fVxUM= -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:51 2024 by rpki-client on console-fra.rpki-client.org