$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/10C1C1C810AC11EFB9D89D46C4F9AE02.roa File: 10C1C1C810AC11EFB9D89D46C4F9AE02.roa (raw, json) Hash identifier: fUsXXWScrmbAfu7bJ+mV8P270AK7hMwqCZVEX3OSdLA= Subject key identifier: C2:B6:75:1D:5B:38:B3:D3:74:B2:88:EF:D4:39:D4:E3:DB:94:D2:A4 Certificate issuer: /CN=A9187E45/serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E Certificate serial: 03E8 Authority key identifier: B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/10C1C1C810AC11EFB9D89D46C4F9AE02.roa Signing time: Wed 03 Jul 2024 02:04:09 +0000 ROA not before: Wed 03 Jul 2024 02:04:09 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 149794 IP address blocks: 103.174.210.0/24 maxlen: 24 103.176.189.0/24 maxlen: 24 2400:7060::/32 maxlen: 32 2400:7060::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1000 (0x3e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E45/serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E Validity Not Before: Jul 3 02:04:09 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6684b198-d56f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:58:cb:21:6c:a5:49:0d:92:86:41:b2:a8:d0: 89:ba:79:35:80:f3:c7:b1:b3:06:d5:c3:cf:89:b7: 15:7e:af:14:dd:3e:f4:c0:c4:15:bb:d4:ac:d8:53: 09:f0:3f:f9:bd:95:ca:1a:2d:6a:45:eb:8b:dc:b4: 17:cd:5c:c0:3b:93:8a:61:17:78:c2:dd:ae:6f:c5: a9:3a:51:16:0c:e5:28:62:02:47:32:d0:98:f2:8d: f0:62:1b:cf:b4:ea:bb:8d:c2:1a:ad:a8:34:92:ae: 3e:ee:e1:12:b9:d6:12:27:c6:24:d3:67:e0:ad:23: 00:bd:cd:87:09:ac:3f:63:d2:1a:3d:14:23:c0:59: ba:87:ae:fa:29:43:39:91:21:a3:99:c4:a1:ea:48: 49:e3:11:59:5f:23:fa:98:ee:b7:33:36:30:30:5e: 00:86:de:84:59:bb:96:5d:08:b3:e5:d6:da:bc:bb: 00:bf:1e:b8:41:04:76:f8:66:39:54:75:13:16:72: fe:19:6b:ec:e8:33:3a:ad:c2:a0:ea:8c:4b:da:a1: da:52:2b:5c:86:94:32:0b:61:6f:77:68:c5:d6:c2: e0:9b:43:a8:0c:4a:54:ec:9e:72:73:7b:23:61:f4: 2c:13:b0:d8:24:75:ae:18:90:bc:29:f8:27:1e:bd: d3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B6:75:1D:5B:38:B3:D3:74:B2:88:EF:D4:39:D4:E3:DB:94:D2:A4 X509v3 Authority Key Identifier: keyid:B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/10C1C1C810AC11EFB9D89D46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.174.210.0/24 103.176.189.0/24 IPv6: 2400:7060::/32 Signature Algorithm: sha256WithRSAEncryption 27:68:a4:dd:69:15:0d:15:cb:bd:c1:c9:32:bc:8d:b3:dc:4f: e5:6d:5b:eb:e0:fb:69:a6:c8:5e:da:1a:9d:61:dc:7f:e8:d6: df:1f:29:e3:11:23:b1:03:5d:9e:d9:13:f2:19:30:fc:f4:1f: 41:6e:82:ab:7a:85:ba:59:78:dc:30:cc:dd:5b:e9:60:36:7e: 28:88:56:3c:91:3d:40:f9:9f:93:6c:93:c0:34:27:8b:ee:7f: d2:ef:a4:da:1f:70:0d:70:b6:b8:2a:ff:3b:fe:7b:37:2a:1a: c4:57:b8:63:db:75:5a:c0:f0:c3:69:63:4a:2e:69:f3:4a:f2: bc:4b:5d:33:11:25:c8:fe:4e:6d:55:b1:b3:b1:74:c2:f7:59: ce:6a:08:a7:27:3a:07:4a:68:f3:1b:eb:d1:fc:4f:7f:c3:8d: eb:11:ba:91:63:0e:fd:6d:24:b4:d9:b3:b8:6c:f9:da:cc:c0: 27:63:31:ea:6f:94:5f:5e:4c:00:4a:fa:43:b5:4b:88:a8:96: 9e:82:d8:65:0f:28:d9:e2:c4:68:ab:0b:07:00:be:ca:59:bb: 90:5f:c3:12:11:b5:45:bb:46:df:e3:7a:ff:67:a8:c2:fb:1a: e7:18:a2:3e:26:04:33:49:66:67:ea:bb:8e:1b:23:4d:5f:36: c9:d6:3b:75 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICA+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdFNDUxMTAvBgNVBAUTKEI3QzJCRUNDOTdCNDIzNzlDNDRBRDFBRUI1RTA3M0Uy QTNEQTUxMUUwHhcNMjQwNzAzMDIwNDA5WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njg0YjE5OC1kNTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvljLIWylSQ2ShkGyqNCJunk1gPPHsbMG1cPPibcVfq8U3T70wMQVu9Ss2FMJ 8D/5vZXKGi1qReuL3LQXzVzAO5OKYRd4wt2ub8WpOlEWDOUoYgJHMtCY8o3wYhvP tOq7jcIarag0kq4+7uESudYSJ8Yk02fgrSMAvc2HCaw/Y9IaPRQjwFm6h676KUM5 kSGjmcSh6khJ4xFZXyP6mO63MzYwMF4Aht6EWbuWXQiz5dbavLsAvx64QQR2+GY5 VHUTFnL+GWvs6DM6rcKg6oxL2qHaUitchpQyC2Fvd2jF1sLgm0OoDEpU7J5yc3sj YfQsE7DYJHWuGJC8KfgnHr3TAwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFMK2dR1b OLPTdLKI79Q51OPblNKkMB8GA1UdIwQYMBaAFLfCvsyXtCN5xErRrrXgc+Kj2lEe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0U0NS81RjZBQjEwQzUy OTcxMUVDQTM3N0U2NzBDNEY5QUUwMi90OEstekplMEkzbkVTdEd1dGVCejRxUGFV UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q4Sy16SmUwSTNuRVN0R3V0ZUJ6NHFQYVVSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODdFNDUvNUY2QUIxMEM1Mjk3MTFFQ0EzNzdFNjcwQzRGOUFFMDIvMTBDMUMxQzgx MEFDMTFFRkI5RDg5RDQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBABnrtIDBABnsL0wDQQCAAIwBwMFACQAcGAwDQYJKoZIhvcN AQELBQADggEBACdopN1pFQ0Vy73ByTK8jbPcT+VtW+vg+2mmyF7aGp1h3H/o1t8f KeMRI7EDXZ7ZE/IZMPz0H0Fugqt6hbpZeNwwzN1b6WA2fiiIVjyRPUD5n5Nsk8A0 J4vuf9LvpNofcA1wtrgq/zv+ezcqGsRXuGPbdVrA8MNpY0ouafNK8rxLXTMRJcj+ Tm1VsbOxdML3Wc5qCKcnOgdKaPMb69H8T3/DjesRupFjDv1tJLTZs7hs+drMwCdj MepvlF9eTABK+kO1S4iolp6C2GUPKNnixGirCwcAvspZu5BfwxIRtUW7Rt/jev9n qML7GucYoj4mBDNJZmfqu44bI01fNsnWO3U= -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:24 2024 by rpki-client on console-ams.rpki-client.org