$ rpki-client -vvf rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/7CC8FF74562511E78A45783FC4F9AE02.roa File: 7CC8FF74562511E78A45783FC4F9AE02.roa (raw, json) Hash identifier: zWt/6fE6SX2xRvfbAuWY0a4gZTexQvkwEqOhId6j9Eg= Subject key identifier: DE:E0:91:9D:6C:85:72:97:EA:6E:B1:06:FD:30:05:13:97:D7:CC:47 Certificate issuer: /CN=A9189F23/serialNumber=D03386109510CFDC26F7557AFF99A131ECB59424 Certificate serial: 33B1 Authority key identifier: D0:33:86:10:95:10:CF:DC:26:F7:55:7A:FF:99:A1:31:EC:B5:94:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DOGEJUQz9wm91V6_5mhMey1lCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/7CC8FF74562511E78A45783FC4F9AE02.roa Signing time: Sat 06 Jan 2024 15:10:52 +0000 ROA not before: Sat 06 Jan 2024 15:10:52 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 45561 IP address blocks: 103.11.72.0/23 maxlen: 24 103.251.198.0/23 maxlen: 24 202.94.87.0/24 maxlen: 24 203.170.49.0/24 maxlen: 24 2001:df4:7000::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/0DOGEJUQz9wm91V6_5mhMey1lCQ.crl rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/0DOGEJUQz9wm91V6_5mhMey1lCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DOGEJUQz9wm91V6_5mhMey1lCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:58:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13233 (0x33b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189F23/serialNumber=D03386109510CFDC26F7557AFF99A131ECB59424 Validity Not Before: Jan 6 15:10:52 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65996d7c-c68f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fa:b5:f4:db:04:db:d9:79:ee:4a:f7:fb:68: 05:e3:eb:2b:50:04:5a:25:e1:0a:d4:f0:d5:c9:5e: 1f:cf:0b:87:bf:65:a9:cf:fb:4f:ba:77:36:dd:07: 08:f8:ff:c8:82:00:29:70:96:b5:a3:70:89:a2:a3: 3b:df:5f:97:f7:85:15:fb:92:4c:a4:9a:0e:13:30: 2e:54:41:6f:c0:1e:fc:79:6e:f1:ba:fa:de:cf:e5: 19:08:94:b5:a7:1d:71:0b:2b:59:99:7e:1f:1f:17: 6b:34:ec:f4:a0:91:e9:3d:cd:71:45:4b:88:9e:2a: ea:b2:6f:1c:1c:f3:f3:96:5d:f4:47:87:26:92:2c: 2e:59:58:6a:72:45:dd:6f:4b:c1:bf:c6:4b:62:b2: fc:d6:1f:56:4a:3c:00:ba:9a:1f:8a:cc:d6:73:3e: 0e:cb:73:ad:2c:70:bb:93:a5:81:1a:3b:5f:02:af: f9:8c:a4:95:52:04:42:64:9c:71:42:88:ce:2e:fd: 1d:55:3a:15:06:89:82:60:e3:5c:98:86:83:44:fd: ef:39:61:4c:bb:1d:a4:44:1a:72:0a:b0:ce:d2:d0: a2:6f:51:76:5b:c1:05:70:1a:55:dd:a5:35:c8:f1: 48:59:d8:9b:40:e4:b2:21:65:c5:1b:39:3f:28:54: 3d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E0:91:9D:6C:85:72:97:EA:6E:B1:06:FD:30:05:13:97:D7:CC:47 X509v3 Authority Key Identifier: keyid:D0:33:86:10:95:10:CF:DC:26:F7:55:7A:FF:99:A1:31:EC:B5:94:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/0DOGEJUQz9wm91V6_5mhMey1lCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DOGEJUQz9wm91V6_5mhMey1lCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/7CC8FF74562511E78A45783FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.11.72.0/23 103.251.198.0/23 202.94.87.0/24 203.170.49.0/24 IPv6: 2001:df4:7000::/48 Signature Algorithm: sha256WithRSAEncryption a9:1c:b2:71:b3:b5:9f:24:42:cf:cd:3d:25:7f:a0:9f:6f:18: b8:df:0f:07:20:fc:0c:f7:d2:f9:95:04:28:2f:4e:4b:59:49: 86:71:d6:ea:a9:72:f8:d5:69:ab:06:69:d1:98:61:ef:a7:44: 0f:0e:3a:2a:4a:73:f2:ec:5a:33:b4:f9:fe:14:ac:30:7d:fb: 76:a0:7f:e5:73:85:9d:f8:61:be:ad:11:6c:7b:39:da:d3:b8: 53:a3:1c:de:2e:0a:f4:fb:7c:02:be:6e:95:ef:82:21:da:25: 61:2f:44:11:0f:8f:5d:1e:16:5c:0e:87:2c:ed:8d:3a:23:37: f2:c7:ef:3d:e6:53:48:d5:b4:87:07:f5:e1:a0:c9:79:45:30: 43:fb:12:99:6d:e9:23:c4:c4:c5:40:37:36:66:dd:9c:22:6d: e5:9b:65:20:26:5f:f0:5d:68:4d:c1:49:ce:93:c8:74:d7:53: de:4d:fb:e6:c0:fd:1a:61:c9:f4:36:09:1d:9e:d6:fc:91:95: 7b:9f:1d:80:05:b2:87:05:9a:fa:18:0d:3b:a4:c8:03:74:f9: 99:da:4f:9c:f7:00:72:a9:09:2e:06:5b:70:0a:c6:4f:b2:84: 3a:80:6d:5a:b4:0f:8f:d6:f0:7a:a8:69:c4:56:78:84:a2:5c: e1:c1:48:53 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICM7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlGMjMxMTAvBgNVBAUTKEQwMzM4NjEwOTUxMENGREMyNkY3NTU3QUZGOTlBMTMx RUNCNTk0MjQwHhcNMjQwMTA2MTUxMDUyWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTk5NmQ3Yy1jNjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1fq19NsE29l57kr3+2gF4+srUARaJeEK1PDVyV4fzwuHv2Wpz/tPunc23QcI +P/IggApcJa1o3CJoqM731+X94UV+5JMpJoOEzAuVEFvwB78eW7xuvrez+UZCJS1 px1xCytZmX4fHxdrNOz0oJHpPc1xRUuInirqsm8cHPPzll30R4cmkiwuWVhqckXd b0vBv8ZLYrL81h9WSjwAupofiszWcz4Oy3OtLHC7k6WBGjtfAq/5jKSVUgRCZJxx QojOLv0dVToVBomCYONcmIaDRP3vOWFMux2kRBpyCrDO0tCib1F2W8EFcBpV3aU1 yPFIWdibQOSyIWXFGzk/KFQ9UQIDAQABo4ICuDCCArQwHQYDVR0OBBYEFN7gkZ1s hXKX6m6xBv0wBROX18xHMB8GA1UdIwQYMBaAFNAzhhCVEM/cJvdVev+ZoTHstZQk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUYyMy9BNUQ1OThENjFE OUIxMUUyOTMwNTkxODkwOEIwMkNEMi8wRE9HRUpVUXo5d205MVY2XzVtaE1leTFs Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBET0dFSlVRejl3bTkxVjZfNW1oTWV5MWxDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODlGMjMvQTVENTk4RDYxRDlCMTFFMjkzMDU5MTg5MDhCMDJDRDIvN0NDOEZGNzQ1 NjI1MTFFNzhBNDU3ODNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMB4EAgABMBgDBAFnC0gDBAFn+8YDBADKXlcDBADLqjEwDwQCAAIwCQMHACAB DfRwADANBgkqhkiG9w0BAQsFAAOCAQEAqRyycbO1nyRCz809JX+gn28YuN8PByD8 DPfS+ZUEKC9OS1lJhnHW6qly+NVpqwZp0Zhh76dEDw46Kkpz8uxaM7T5/hSsMH37 dqB/5XOFnfhhvq0RbHs52tO4U6Mc3i4K9Pt8Ar5ule+CIdolYS9EEQ+PXR4WXA6H LO2NOiM38sfvPeZTSNW0hwf14aDJeUUwQ/sSmW3pI8TExUA3NmbdnCJt5ZtlICZf 8F1oTcFJzpPIdNdT3k375sD9GmHJ9DYJHZ7W/JGVe58dgAWyhwWa+hgNO6TIA3T5 mdpPnPcAcqkJLgZbcArGT7KEOoBtWrQPj9bweqhpxFZ4hKJc4cFIUw== -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:51 2024 by rpki-client on console-fra.rpki-client.org