$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/9738F1BAD46611ECA1A27035C4F9AE02.roa File: 9738F1BAD46611ECA1A27035C4F9AE02.roa (raw, json) Hash identifier: WTrtE83EIPIFAQBP1Rd+6bCGyCXh3/D0h/wvCesMWrU= Subject key identifier: 2F:E5:71:4E:5F:DF:4B:EB:02:B2:29:43:16:89:1E:C7:1C:61:31:FE Certificate issuer: /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Certificate serial: 08F8 Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/9738F1BAD46611ECA1A27035C4F9AE02.roa Signing time: Sat 14 Sep 2024 22:09:40 +0000 ROA not before: Sat 14 Sep 2024 22:09:40 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 132325 IP address blocks: 103.142.8.0/23 maxlen: 23 103.142.8.0/24 maxlen: 24 103.142.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2296 (0x8f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Validity Not Before: Sep 14 22:09:40 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66e609a3-042e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f6:7f:75:c5:ef:58:31:0f:60:ab:89:93:1d: dc:59:35:be:82:36:67:a6:a0:6b:76:cb:32:61:a8: e0:3f:bd:c7:c2:a7:dc:a7:7c:48:90:e3:0f:f7:e2: cb:54:12:73:c4:cc:ae:1a:ba:8e:9f:80:c5:c6:41: 14:5b:c9:70:15:f7:4c:9d:11:ed:41:82:40:10:68: 10:aa:d9:b9:4d:a1:30:8e:b2:bb:2a:2d:e7:9c:a2: 6e:64:76:0b:0b:b7:4a:c6:6a:5c:43:2d:ff:00:3a: be:f8:87:12:99:e8:a7:e1:d8:15:13:0b:22:f6:a1: 4f:17:ca:d2:de:4a:2f:71:23:d7:42:31:65:c4:75: 87:32:9e:fc:b6:c9:df:20:7d:93:45:db:63:d5:d8: fe:9c:bf:aa:b2:71:a9:66:11:64:b9:68:e2:f3:e5: 10:52:7f:4f:d9:f3:5c:b9:45:ed:3f:30:32:66:27: d8:a2:74:91:70:91:fb:89:c4:cb:6e:41:06:19:8d: c2:81:1c:d3:9a:d0:bf:97:80:4b:e6:50:af:c8:26: 6c:2a:de:35:8a:e9:3f:97:27:3f:0f:ac:7f:cd:9e: d7:a7:b8:2b:d6:d7:ef:0a:aa:b5:39:71:06:3b:9e: 6d:19:48:16:24:96:c0:5a:61:82:bb:12:bf:0b:a8: 3c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E5:71:4E:5F:DF:4B:EB:02:B2:29:43:16:89:1E:C7:1C:61:31:FE X509v3 Authority Key Identifier: keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/9738F1BAD46611ECA1A27035C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.142.8.0/23 Signature Algorithm: sha256WithRSAEncryption 36:99:3d:58:ac:e2:65:b0:66:33:67:a6:b3:c5:22:fb:c3:db: 58:e9:af:4b:1a:12:b3:ea:d9:b2:64:e2:8e:65:d9:06:ce:bd: b6:51:3f:3b:16:a4:b8:da:ab:6d:a1:d2:0c:04:98:bf:4b:43: cd:10:36:4d:b0:a5:0c:e6:47:e2:ba:42:75:88:76:cc:c1:a4: 79:35:0f:8c:8a:6c:eb:75:98:01:00:70:8d:4f:d8:8c:6d:7b: c6:c0:3d:29:c1:d9:c5:ff:b4:55:e9:3d:68:19:cc:cc:ec:db: ba:a4:8e:6a:b2:e8:59:f6:3c:8e:24:2c:ba:9e:cb:b1:ab:25: 0e:19:02:64:85:87:b6:6d:e6:61:47:bb:33:7c:1a:45:74:36: 55:46:60:9c:b4:2c:88:2e:1d:a7:82:f4:86:cd:8a:46:85:45: 2c:e1:a9:c0:8f:f2:a8:65:40:85:85:bd:1e:ca:f0:f3:ad:88: a8:e5:07:9b:7f:41:44:9b:81:4a:e1:e4:19:9c:60:4f:0a:4f: d7:dd:45:48:41:00:15:8f:00:3c:d9:da:8c:3f:86:2f:5d:98: 13:91:07:02:62:66:c9:f6:c0:86:c1:81:0f:07:9d:89:c2:7b: 1f:64:a2:64:23:0a:7d:8a:09:86:63:3f:11:97:16:50:ce:32: f3:74:78:64 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZERTUxMTAvBgNVBAUTKEQ4MzkyQjBEOTE1QjlBQzFGNEQyM0JGOTg0MTk3MTQw NkZCNjFBQzYwHhcNMjQwOTE0MjIwOTQwWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmU2MDlhMy0wNDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvZ/dcXvWDEPYKuJkx3cWTW+gjZnpqBrdssyYajgP73Hwqfcp3xIkOMP9+LL VBJzxMyuGrqOn4DFxkEUW8lwFfdMnRHtQYJAEGgQqtm5TaEwjrK7Ki3nnKJuZHYL C7dKxmpcQy3/ADq++IcSmein4dgVEwsi9qFPF8rS3kovcSPXQjFlxHWHMp78tsnf IH2TRdtj1dj+nL+qsnGpZhFkuWji8+UQUn9P2fNcuUXtPzAyZifYonSRcJH7icTL bkEGGY3CgRzTmtC/l4BL5lCvyCZsKt41iuk/lyc/D6x/zZ7Xp7gr1tfvCqq1OXEG O55tGUgWJJbAWmGCuxK/C6g8lQIDAQABo4IClTCCApEwHQYDVR0OBBYEFC/lcU5f 30vrArIpQxaJHsccYTH+MB8GA1UdIwQYMBaAFNg5Kw2RW5rB9NI7+YQZcUBvthrG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRFNS83MkM1QTlDQzk0 MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1zSDAwanY1aEJseFFHLTJH c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJEa3JEWkZibXNIMDBqdjVoQmx4UUctMkdzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTZERTUvNzJDNUE5Q0M5NDMwMTFFQUJENzVGOTgzQzRGOUFFMDIvOTczOEYxQkFE NDY2MTFFQ0ExQTI3MDM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnjggwDQYJKoZIhvcNAQELBQADggEBADaZPVis4mWwZjNn prPFIvvD21jpr0saErPq2bJk4o5l2QbOvbZRPzsWpLjaq22h0gwEmL9LQ80QNk2w pQzmR+K6QnWIdszBpHk1D4yKbOt1mAEAcI1P2Ixte8bAPSnB2cX/tFXpPWgZzMzs 27qkjmqy6Fn2PI4kLLqey7GrJQ4ZAmSFh7Zt5mFHuzN8GkV0NlVGYJy0LIguHaeC 9IbNikaFRSzhqcCP8qhlQIWFvR7K8POtiKjlB5t/QUSbgUrh5BmcYE8KT9fdRUhB ABWPADzZ2ow/hi9dmBORBwJiZsn2wIbBgQ8HnYnCex9komQjCn2KCYZjPxGXFlDO MvN0eGQ= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:35 2024 by rpki-client on console-ams.rpki-client.org