$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/4AD97410632C11EE96048122C4F9AE02.roa File: 4AD97410632C11EE96048122C4F9AE02.roa (raw, json) Hash identifier: aWVyhl403G+qwJ6jO2cb4Y7Az8v/lQUgKxECmfe73fI= Subject key identifier: 11:99:1F:85:B6:0F:B3:6B:78:5A:AE:59:0C:03:7B:4A:E1:36:8A:EC Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Certificate serial: 0BDE Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/4AD97410632C11EE96048122C4F9AE02.roa Signing time: Sun 14 Apr 2024 19:27:41 +0000 ROA not before: Sun 14 Apr 2024 19:27:41 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 150774 IP address blocks: 103.135.138.0/24 maxlen: 24 103.135.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3038 (0xbde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Validity Not Before: Apr 14 19:27:41 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=661c2e2d-0fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a4:64:69:28:3e:6f:c8:74:5a:96:18:cb:a3: 4b:13:99:f4:01:ab:a7:06:90:92:a4:0d:03:4d:71: 1b:60:52:55:49:ab:71:c6:71:0d:3b:b2:91:97:2a: fa:b7:05:47:e5:f8:ef:77:fe:c0:b4:dc:74:7b:d4: e0:4b:3b:9b:99:c9:63:07:76:27:26:df:22:dd:7f: 40:8f:10:74:d9:8c:ab:35:4e:e4:5d:63:ab:13:a6: ac:e9:c2:df:b9:80:7f:c6:6f:10:8e:01:6a:2e:77: 24:06:a7:ea:a2:fb:96:e1:db:54:e5:8b:8a:b0:bd: 59:dc:92:60:cf:e5:83:6a:df:dc:75:23:7a:0e:9d: 2a:df:6c:8a:ea:08:e5:19:96:5b:0c:53:61:03:1d: 23:40:2f:65:f8:8b:37:6f:f7:72:88:d7:6b:f5:1e: 0f:04:16:90:95:04:79:7c:47:9b:f6:e8:9c:c0:14: f7:52:07:64:07:b3:96:0a:b2:3d:f6:4d:c4:12:fe: a2:78:b7:4b:3f:b0:99:96:26:09:b9:d1:dc:1e:d1: 52:be:7a:dd:90:92:03:f2:13:bc:c6:d0:d8:1a:3d: 34:55:5a:8b:d8:0d:58:63:ae:98:86:87:e0:d9:67: 5c:b0:06:7d:b5:ce:0e:53:3d:36:6f:3e:82:95:c4: 91:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:99:1F:85:B6:0F:B3:6B:78:5A:AE:59:0C:03:7B:4A:E1:36:8A:EC X509v3 Authority Key Identifier: keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/4AD97410632C11EE96048122C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.135.138.0/23 Signature Algorithm: sha256WithRSAEncryption 95:49:1a:bf:9f:02:c4:26:5e:df:e1:c4:f3:4d:1b:4b:c9:ed: 9b:f5:17:07:59:74:4b:23:ee:5d:91:82:c7:7f:4e:d2:c5:a6: 15:83:33:e6:b6:34:4a:bb:f6:41:e2:74:f2:9d:b1:f2:0a:43: c9:99:22:63:30:f2:72:2d:2f:95:47:e6:0c:e8:29:8c:d9:ef: b0:fb:27:80:5a:6d:c0:1c:54:3f:c2:4d:f1:fc:04:2e:46:1c: 14:0e:bb:d3:2d:b9:cd:e2:00:6b:01:ba:5e:c9:5c:31:89:87: e8:f4:8f:4d:b7:c9:85:90:17:c9:78:d0:87:30:65:94:90:f3: 40:26:0d:97:5d:1d:6c:c5:47:b7:bd:15:6b:cc:96:98:fb:99: 83:5d:22:88:ee:6b:2b:47:94:6c:b9:43:0a:1f:77:0a:bd:ea: d0:6b:9d:88:32:73:d7:06:e8:24:20:46:d7:d6:ae:80:54:ac: 76:71:e8:de:3f:a2:0b:3f:52:9b:11:f6:7a:81:15:79:73:db: 07:b9:ac:99:1a:d7:ab:ad:74:0f:06:eb:7f:0e:78:40:44:a8: 5f:e4:83:7b:dd:ee:f8:c3:72:d5:8f:b6:9e:22:7c:26:d8:af: 39:04:b3:a3:a8:11:61:3a:ea:24:36:13:3c:2c:fb:28:b9:ed: 39:ab:d1:38 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE QjFBNTBEQTQwHhcNMjQwNDE0MTkyNzQxWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjFjMmUyZC0wZmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0qRkaSg+b8h0WpYYy6NLE5n0AaunBpCSpA0DTXEbYFJVSatxxnENO7KRlyr6 twVH5fjvd/7AtNx0e9TgSzubmcljB3YnJt8i3X9AjxB02YyrNU7kXWOrE6as6cLf uYB/xm8QjgFqLnckBqfqovuW4dtU5YuKsL1Z3JJgz+WDat/cdSN6Dp0q32yK6gjl GZZbDFNhAx0jQC9l+Is3b/dyiNdr9R4PBBaQlQR5fEeb9uicwBT3UgdkB7OWCrI9 9k3EEv6ieLdLP7CZliYJudHcHtFSvnrdkJID8hO8xtDYGj00VVqL2A1YY66Yhofg 2WdcsAZ9tc4OUz02bz6ClcSRrwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBGZH4W2 D7NreFquWQwDe0rhNorsMB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2 N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODhBMDYvODAxQ0E1ODRGNjdGMTFFOUFBM0U3MDNEQzRGOUFFMDIvNEFEOTc0MTA2 MzJDMTFFRTk2MDQ4MTIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnh4owDQYJKoZIhvcNAQELBQADggEBAJVJGr+fAsQmXt/h xPNNG0vJ7Zv1FwdZdEsj7l2Rgsd/TtLFphWDM+a2NEq79kHidPKdsfIKQ8mZImMw 8nItL5VH5gzoKYzZ77D7J4BabcAcVD/CTfH8BC5GHBQOu9Mtuc3iAGsBul7JXDGJ h+j0j023yYWQF8l40IcwZZSQ80AmDZddHWzFR7e9FWvMlpj7mYNdIojuaytHlGy5 Qwofdwq96tBrnYgyc9cG6CQgRtfWroBUrHZx6N4/ogs/UpsR9nqBFXlz2we5rJka 16utdA8G638OeEBEqF/kg3vd7vjDctWPtp4ifCbYrzkEs6OoEWE66iQ2Ezws+yi5 7Tmr0Tg= -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:00 2024 by rpki-client on console-fra.rpki-client.org