$ rpki-client -vvf rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/9F14D15E70DB11ECACCABD21C4F9AE02.roa File: 9F14D15E70DB11ECACCABD21C4F9AE02.roa (raw, json) Hash identifier: +n1zXMDCEU4YWE/0cXk32wV8ITOzuCJeFwK/MfgKlSw= Subject key identifier: A5:18:D4:9C:E9:95:13:80:BD:86:5D:85:98:F9:09:89:10:0B:30:08 Certificate issuer: /CN=A9183DB7/serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836 Certificate serial: 0D72 Authority key identifier: E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/9F14D15E70DB11ECACCABD21C4F9AE02.roa Signing time: Wed 02 Oct 2024 18:26:32 +0000 ROA not before: Wed 02 Oct 2024 18:26:32 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 396982 IP address blocks: 103.141.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3442 (0xd72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183DB7 Validity Not Before: Oct 2 18:26:32 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66fd9058-4ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:92:51:92:03:a9:fc:c9:6d:be:49:d0:c2:c1: 7c:0e:93:03:98:b6:b2:ea:47:02:79:42:42:07:06: 95:c6:f6:f6:f7:80:36:3c:fe:6a:44:c6:69:68:8e: 84:8a:c4:d0:21:2f:19:ed:2d:c1:41:10:14:d2:6c: d8:1e:a2:80:25:7e:ac:9b:b5:ea:64:77:82:81:29: 64:57:17:83:7c:ba:cd:43:c8:fc:f1:e6:12:2e:eb: a8:6b:85:2e:db:e1:fa:d0:fa:0a:92:6d:fb:5a:f4: c7:ed:b3:ea:5b:74:e7:76:78:f0:b5:82:f5:7d:ec: f2:e8:72:0f:ea:3b:61:07:e9:c4:d8:04:ed:7e:83: 0b:64:91:40:74:d6:40:07:72:32:67:a3:f5:fd:bc: 2e:99:04:bd:3c:2a:86:11:63:16:3c:82:7a:a5:75: 97:15:cd:d9:ae:ce:1a:23:ac:78:bc:c4:5d:6c:20: 74:31:2c:9c:9f:7b:08:a7:ef:bb:d6:73:ea:ca:f1: 07:c6:fc:70:e5:93:ef:5d:bc:66:d6:a1:b8:20:d9: f8:18:94:bf:21:e4:0d:ef:60:0c:73:80:79:9f:19: 42:ef:dd:1d:d1:fe:1b:19:b2:a2:b8:3b:e5:92:64: 70:67:f1:d2:f1:31:fc:0e:14:74:de:f8:30:81:ca: f1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:18:D4:9C:E9:95:13:80:BD:86:5D:85:98:F9:09:89:10:0B:30:08 X509v3 Authority Key Identifier: keyid:E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/9F14D15E70DB11ECACCABD21C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.141.214.0/24 Signature Algorithm: sha256WithRSAEncryption 97:74:d2:9b:a5:37:8c:2e:a6:98:ac:1f:79:6a:bf:36:ef:95: 6b:85:b2:e8:4b:99:02:90:fe:5a:61:44:c6:08:5e:8a:eb:5d: 75:4b:c4:13:91:a1:cd:90:7c:02:de:5a:61:7d:09:ef:ff:c8: 50:ef:ac:31:b2:f6:27:8a:9f:c6:f4:df:b2:fd:f0:79:a0:09: 1c:3c:e6:d1:f9:08:71:5c:e2:72:19:78:0d:78:fe:ca:17:65: af:41:69:1b:69:7b:0e:53:71:1c:91:bc:36:d5:97:86:f8:fa: 9f:b8:4a:7d:bb:89:c2:d0:7d:ac:c8:16:9e:b0:9b:cd:68:1b: ff:c5:be:d5:0a:1e:ef:64:29:cc:03:96:98:07:51:b4:cb:c5: df:9b:e5:37:02:e9:88:7b:7c:da:54:b2:c2:76:4f:4c:cc:d4: 04:ca:0e:14:af:b3:ac:39:90:d6:ff:97:61:6f:28:b7:5c:7c: 52:d4:fc:01:74:4d:40:2e:7d:91:58:bc:4f:13:23:8d:7b:e7: 58:64:10:ff:00:7e:62:f9:a8:dd:f3:0f:06:7a:9f:7a:32:16: d1:49:93:b4:9c:9e:ae:6e:0a:5c:44:c6:3e:4c:60:5b:fe:8a: f9:5a:91:6d:7f:4b:37:7e:2a:dc:e9:ee:52:83:c9:c2:5e:e8: 18:12:47:67 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNEQjcxMTAvBgNVBAUTKEU1MThFOTQ4MTVDNDZEN0Q4RTZGRUY0RUJDM0QxOERG MEUyMUY4MzYwHhcNMjQxMDAyMTgyNjMyWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZkOTA1OC00Y2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05JRkgOp/MltvknQwsF8DpMDmLay6kcCeUJCBwaVxvb294A2PP5qRMZpaI6E isTQIS8Z7S3BQRAU0mzYHqKAJX6sm7XqZHeCgSlkVxeDfLrNQ8j88eYSLuuoa4Uu 2+H60PoKkm37WvTH7bPqW3TndnjwtYL1fezy6HIP6jthB+nE2ATtfoMLZJFAdNZA B3IyZ6P1/bwumQS9PCqGEWMWPIJ6pXWXFc3Zrs4aI6x4vMRdbCB0MSycn3sIp++7 1nPqyvEHxvxw5ZPvXbxm1qG4INn4GJS/IeQN72AMc4B5nxlC790d0f4bGbKiuDvl kmRwZ/HS8TH8DhR03vgwgcrxNQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKUY1Jzp lROAvYZdhZj5CYkQCzAIMB8GA1UdIwQYMBaAFOUY6UgVxG19jm/vTrw9GN8OIfg2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0RCNy8wRjM3NTk5RUI1 MjExMUU5OEQ4QkFDNTJDNEY5QUUwMi81UmpwU0JYRWJYMk9iLTlPdkQwWTN3NGgt RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVSanBTQlhFYlgyT2ItOU92RDBZM3c0aC1EWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODNEQjcvMEYzNzU5OUVCNTIxMTFFOThEOEJBQzUyQzRGOUFFMDIvOUYxNEQxNUU3 MERCMTFFQ0FDQ0FCRDIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnjdYwDQYJKoZIhvcNAQELBQADggEBAJd00pulN4wuppis H3lqvzbvlWuFsuhLmQKQ/lphRMYIXorrXXVLxBORoc2QfALeWmF9Ce//yFDvrDGy 9ieKn8b037L98HmgCRw85tH5CHFc4nIZeA14/soXZa9BaRtpew5TcRyRvDbVl4b4 +p+4Sn27icLQfazIFp6wm81oG//FvtUKHu9kKcwDlpgHUbTLxd+b5TcC6Yh7fNpU ssJ2T0zM1ATKDhSvs6w5kNb/l2FvKLdcfFLU/AF0TUAufZFYvE8TI41751hkEP8A fmL5qN3zDwZ6n3oyFtFJk7Scnq5uClxExj5MYFv+ivlakW1/Szd+Ktzp7lKDycJe 6BgSR2c= -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:37 2025 by rpki-client