$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/4A0A2DC8958011EE91C9DF80C4F9AE02.roa File: 4A0A2DC8958011EE91C9DF80C4F9AE02.roa (raw, json) Hash identifier: 8E473KkpiKjZKNroBEhCbINIeIwzAWwWEuJqRVf36nY= Subject key identifier: 39:6A:21:65:CC:C2:B5:D2:5A:70:9A:B1:26:59:E3:91:7B:32:F4:C3 Certificate issuer: /CN=A9182FD0/serialNumber=7A5C4DD0A3BB9CD814B2174AF693E3F7414B995B Certificate serial: 77 Authority key identifier: 7A:5C:4D:D0:A3:BB:9C:D8:14:B2:17:4A:F6:93:E3:F7:41:4B:99:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/4A0A2DC8958011EE91C9DF80C4F9AE02.roa Signing time: Mon 01 Jul 2024 07:28:36 +0000 ROA not before: Mon 01 Jul 2024 07:28:36 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 45177 IP address blocks: 103.68.58.0/24 maxlen: 24 103.68.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.crl rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182FD0/serialNumber=7A5C4DD0A3BB9CD814B2174AF693E3F7414B995B Validity Not Before: Jul 1 07:28:36 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66825aa4-5f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3e:24:57:79:2d:e8:0a:44:10:05:c8:6e:73: cb:c3:cb:5f:ac:88:0f:a4:0d:ed:c8:54:f1:dc:20: a8:d0:57:6c:28:98:97:da:98:d0:ba:a2:ec:31:d7: 3f:03:ea:60:98:59:99:82:49:74:ad:7b:66:c2:79: 4d:5a:ff:c4:50:1f:30:12:67:1e:13:1e:bb:fc:8f: 2e:10:7d:9f:9f:3f:01:35:5d:86:30:52:c0:e0:5f: e9:0f:06:c2:fa:77:5f:5f:a1:2e:15:72:04:2a:7a: 1d:9e:3e:54:d5:93:79:8a:0d:d9:87:4f:46:97:85: 27:77:43:12:28:32:76:d3:1f:a9:1d:aa:ab:1c:80: e0:61:31:cb:ec:cc:71:78:15:10:cc:00:e7:df:f4: b7:db:d4:0f:87:67:81:85:a4:ee:9c:c1:00:58:a1: 70:08:65:f2:da:f7:97:84:61:a2:88:25:d8:89:f1: 35:08:dd:65:cb:cc:83:1d:aa:65:dd:24:e9:7c:b8: ae:0b:24:cd:cd:61:2e:93:ae:8c:43:43:46:db:a9: 6b:1e:4f:1d:89:86:f7:00:53:34:0e:c1:8a:1f:da: 07:fe:22:a4:cb:0b:06:41:39:88:78:ae:90:7c:cb: b1:47:95:c4:1b:40:7c:8e:d2:e8:50:35:30:ac:22: 39:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6A:21:65:CC:C2:B5:D2:5A:70:9A:B1:26:59:E3:91:7B:32:F4:C3 X509v3 Authority Key Identifier: keyid:7A:5C:4D:D0:A3:BB:9C:D8:14:B2:17:4A:F6:93:E3:F7:41:4B:99:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/4A0A2DC8958011EE91C9DF80C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.68.58.0/23 Signature Algorithm: sha256WithRSAEncryption 80:2f:e3:0c:7e:f3:58:a8:66:52:56:4b:e2:37:bf:38:79:6b: fc:2c:b9:05:b6:85:1e:14:5a:d5:06:8e:e7:85:7d:af:29:35: c2:e7:e4:af:74:ac:71:c0:b0:c3:02:a2:fb:aa:7c:4b:bd:76: 51:5a:8e:81:47:07:88:32:41:36:65:c2:ee:ec:c5:8c:7c:8f: 3a:db:2e:89:22:00:c3:1f:27:e0:b2:d0:b8:a6:00:08:22:72: 5b:ac:5a:6e:c9:01:be:a6:2f:6d:25:b7:40:a2:4e:43:87:4a: 91:78:e7:09:26:40:f8:5b:60:f1:1d:8a:2c:15:a1:d6:de:02: 68:8e:c4:4f:84:0c:eb:d4:0b:90:e5:ec:c5:f5:c1:e1:0a:a3: 44:75:cc:24:31:fc:9e:f1:82:e2:0a:18:86:8c:27:e0:28:5e: a0:d2:04:50:da:a7:80:89:91:6f:3d:f9:ca:66:1d:48:52:cd: 93:75:1f:92:1e:55:2e:3b:fe:85:60:df:62:cf:1d:4a:96:be: a3:7e:66:7b:44:85:01:01:e2:e6:32:e6:9e:8b:4a:ce:9b:d0: 05:28:f1:12:76:42:15:3d:2a:59:c2:09:fb:c9:2c:cf:37:ac: a6:35:7d:f6:3e:78:f4:1a:62:40:c3:2b:3c:ab:08:45:fb:de: a9:8a:aa:b2 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MkZEMDExMC8GA1UEBRMoN0E1QzRERDBBM0JCOUNEODE0QjIxNzRBRjY5M0UzRjc0 MTRCOTk1QjAeFw0yNDA3MDEwNzI4MzZaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ODI1YWE0LTVmNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzPiRXeS3oCkQQBchuc8vDy1+siA+kDe3IVPHcIKjQV2womJfamNC6ouwx1z8D 6mCYWZmCSXSte2bCeU1a/8RQHzASZx4THrv8jy4QfZ+fPwE1XYYwUsDgX+kPBsL6 d19foS4VcgQqeh2ePlTVk3mKDdmHT0aXhSd3QxIoMnbTH6kdqqscgOBhMcvszHF4 FRDMAOff9Lfb1A+HZ4GFpO6cwQBYoXAIZfLa95eEYaKIJdiJ8TUI3WXLzIMdqmXd JOl8uK4LJM3NYS6TroxDQ0bbqWseTx2JhvcAUzQOwYof2gf+IqTLCwZBOYh4rpB8 y7FHlcQbQHyO0uhQNTCsIjl/AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUOWohZczC tdJacJqxJlnjkXsy9MMwHwYDVR0jBBgwFoAUelxN0KO7nNgUshdK9pPj90FLmVsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyRkQwLzJDOUFBMzFDOTU3 NjExRUU4MkVGQ0IxQ0M0RjlBRTAyL2VseE4wS083bk5nVXNoZEs5cFBqOTBGTG1W cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZWx4TjBLTzduTmdVc2hkSzlwUGo5MEZMbVZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkZEMC8yQzlBQTMxQzk1NzYxMUVFODJFRkNCMUNDNEY5QUUwMi80QTBBMkRDODk1 ODAxMUVFOTFDOURGODBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWdEOjANBgkqhkiG9w0BAQsFAAOCAQEAgC/jDH7zWKhmUlZL 4je/OHlr/Cy5BbaFHhRa1QaO54V9ryk1wufkr3SsccCwwwKi+6p8S712UVqOgUcH iDJBNmXC7uzFjHyPOtsuiSIAwx8n4LLQuKYACCJyW6xabskBvqYvbSW3QKJOQ4dK kXjnCSZA+Ftg8R2KLBWh1t4CaI7ET4QM69QLkOXsxfXB4QqjRHXMJDH8nvGC4goY hown4CheoNIEUNqngImRbz35ymYdSFLNk3Ufkh5VLjv+hWDfYs8dSpa+o35me0SF AQHi5jLmnotKzpvQBSjxEnZCFT0qWcIJ+8kszzespjV99j549BpiQMMrPKsIRfve qYqqsg== -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:59 2024 by rpki-client on console-fra.rpki-client.org