$ rpki-client -vvf rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/20DAF9FA384011EBA5FE7359C4F9AE02.roa File: 20DAF9FA384011EBA5FE7359C4F9AE02.roa (raw, json) Hash identifier: MX4yOu1oCqUSOCDHmBztUTuNn37/SxpV/qX8mmPxh2M= Subject key identifier: 12:4E:AD:07:C9:58:A2:78:44:9B:A3:8C:E2:E5:C9:CE:F4:97:27:A5 Certificate issuer: /CN=A9196492/serialNumber=9B399BFBD169356748F815F2CA8048E9D5FA4FE4 Certificate serial: 06AA Authority key identifier: 9B:39:9B:FB:D1:69:35:67:48:F8:15:F2:CA:80:48:E9:D5:FA:4F:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/20DAF9FA384011EBA5FE7359C4F9AE02.roa Signing time: Tue 08 Oct 2024 22:31:25 +0000 ROA not before: Tue 08 Oct 2024 22:31:25 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 141240 IP address blocks: 103.157.34.0/24 maxlen: 24 2001:df5:e80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.crl rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1706 (0x6aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196492/serialNumber=9B399BFBD169356748F815F2CA8048E9D5FA4FE4 Validity Not Before: Oct 8 22:31:25 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6705b2bd-a129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:1e:51:ea:51:35:07:ea:e7:03:8c:6a:80:c2: a5:3a:f9:4d:f1:70:65:69:9d:03:61:c0:1a:49:7d: 6a:8f:7a:f1:ea:62:78:19:3a:4c:1f:34:73:84:dc: 1a:e1:2f:7a:8b:f7:ba:7e:a6:d5:fc:05:fc:a3:24: c3:bc:fd:95:e6:51:e1:f1:42:c0:e2:3d:cf:af:b7: 2e:da:41:0b:34:2c:16:04:23:5d:9a:da:40:91:d1: ec:84:0d:eb:25:7a:77:8d:7c:9f:bd:41:15:a5:bb: 54:94:07:ec:6e:9a:fd:0c:5a:54:0e:2f:61:44:bc: fc:54:57:3b:d8:c4:62:84:cb:bd:2e:e0:86:be:27: 7d:8c:b6:50:c2:53:54:38:62:7b:d2:67:31:58:95: d8:f5:8f:d1:31:e4:bf:18:87:79:a6:49:48:d4:32: cf:bf:bf:32:a7:98:44:f3:7f:06:4b:35:d5:a3:ed: 40:55:5f:f6:bb:7d:2f:40:66:db:2d:9d:0e:44:9f: f7:3a:5f:ff:8d:eb:a5:48:31:53:c1:ae:c2:67:fd: 17:00:a8:13:76:81:eb:f6:b6:2d:37:b9:15:19:2c: 3e:b7:df:c9:1c:25:fc:7c:e1:17:b5:8a:81:2d:d4: f8:fe:b4:eb:10:8f:29:2b:69:09:bd:6e:61:a2:74: a5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:4E:AD:07:C9:58:A2:78:44:9B:A3:8C:E2:E5:C9:CE:F4:97:27:A5 X509v3 Authority Key Identifier: keyid:9B:39:9B:FB:D1:69:35:67:48:F8:15:F2:CA:80:48:E9:D5:FA:4F:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/20DAF9FA384011EBA5FE7359C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.157.34.0/24 IPv6: 2001:df5:e80::/48 Signature Algorithm: sha256WithRSAEncryption 22:58:97:10:3b:fc:66:69:2b:93:95:cf:ff:6a:97:16:ab:fd: df:5e:f9:ca:e5:ed:09:36:2d:76:48:42:d1:5b:3b:91:7b:5e: ca:1c:f3:df:d6:a8:58:a0:eb:53:60:f4:c9:d0:66:10:30:06: 0d:76:9e:cb:42:89:e1:99:db:94:6a:64:ee:f6:07:8e:09:49: 99:47:1a:86:05:08:d3:a8:34:c9:4d:7b:9b:70:5b:a8:12:bd: 4b:60:07:d9:ed:10:51:89:27:b8:b2:66:48:27:e7:55:0b:a0: 5e:62:e5:f9:1f:60:be:13:89:d6:cd:5b:18:b2:d5:dc:b4:5a: 22:ad:7c:5d:d1:ed:f1:9e:cf:dd:e5:84:53:52:b0:2b:33:59: 9a:8a:e0:17:8d:a9:9b:13:a6:ca:9d:9e:5f:9c:b9:36:8f:37: b4:ae:7e:a7:50:f5:0c:08:d1:59:bc:99:78:7a:11:6e:e4:f0: 5f:44:6e:4f:ba:31:c1:d2:da:e5:c8:c3:b6:92:8c:76:24:9a: b6:d8:97:97:cb:1f:53:b4:86:a5:d8:21:57:1b:74:04:c0:d8: be:45:9f:dc:eb:1f:30:76:43:04:df:39:89:aa:90:2d:64:dc: 00:a8:2d:31:2a:99:05:8c:db:6e:eb:2e:8c:7d:19:c7:db:70: 24:23:20:3c -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0OTIxMTAvBgNVBAUTKDlCMzk5QkZCRDE2OTM1Njc0OEY4MTVGMkNBODA0OEU5 RDVGQTRGRTQwHhcNMjQxMDA4MjIzMTI1WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzA1YjJiZC1hMTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6R5R6lE1B+rnA4xqgMKlOvlN8XBlaZ0DYcAaSX1qj3rx6mJ4GTpMHzRzhNwa 4S96i/e6fqbV/AX8oyTDvP2V5lHh8ULA4j3Pr7cu2kELNCwWBCNdmtpAkdHshA3r JXp3jXyfvUEVpbtUlAfsbpr9DFpUDi9hRLz8VFc72MRihMu9LuCGvid9jLZQwlNU OGJ70mcxWJXY9Y/RMeS/GId5pklI1DLPv78yp5hE838GSzXVo+1AVV/2u30vQGbb LZ0ORJ/3Ol//jeulSDFTwa7CZ/0XAKgTdoHr9rYtN7kVGSw+t9/JHCX8fOEXtYqB LdT4/rTrEI8pK2kJvW5honSlZwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBJOrQfJ WKJ4RJujjOLlyc70lyelMB8GA1UdIwQYMBaAFJs5m/vRaTVnSPgV8sqASOnV+k/k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjQ5Mi84MDJFQjFCRTM4 M0UxMUVCOTgxQkI3NTdDNEY5QUUwMi9tem1iLTlGcE5XZEktQlh5eW9CSTZkWDZU LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL216bWItOUZwTldkSS1CWHl5b0JJNmRYNlQtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTY0OTIvODAyRUIxQkUzODNFMTFFQjk4MUJCNzU3QzRGOUFFMDIvMjBEQUY5RkEz ODQwMTFFQkE1RkU3MzU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnnSIwDwQCAAIwCQMHACABDfUOgDANBgkqhkiG9w0BAQsF AAOCAQEAIliXEDv8Zmkrk5XP/2qXFqv93175yuXtCTYtdkhC0Vs7kXteyhzz39ao WKDrU2D0ydBmEDAGDXaey0KJ4ZnblGpk7vYHjglJmUcahgUI06g0yU17m3BbqBK9 S2AH2e0QUYknuLJmSCfnVQugXmLl+R9gvhOJ1s1bGLLV3LRaIq18XdHt8Z7P3eWE U1KwKzNZmorgF42pmxOmyp2eX5y5No83tK5+p1D1DAjRWbyZeHoRbuTwX0RuT7ox wdLa5cjDtpKMdiSattiXl8sfU7SGpdghVxt0BMDYvkWf3OsfMHZDBN85iaqQLWTc AKgtMSqZBYzbbusujH0Zx9twJCMgPA== -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:45 2024 by rpki-client on console-ams.rpki-client.org