$ rpki-client -vvf rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/A968BCA24C8511ED94579477C4F9AE02.roa File: A968BCA24C8511ED94579477C4F9AE02.roa (raw, json) Hash identifier: QhihCyN5bbG8v0q4aS9nZCy8ZGeOjrQ8K/ICbkjXPrw= Subject key identifier: 77:29:F2:DD:81:72:36:00:3F:98:DE:C2:80:8F:2E:80:6E:9F:D2:72 Certificate issuer: /CN=A9198166/serialNumber=7254DE8CB9B339945543D87E8EB056F153D51F50 Certificate serial: 017A Authority key identifier: 72:54:DE:8C:B9:B3:39:94:55:43:D8:7E:8E:B0:56:F1:53:D5:1F:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/A968BCA24C8511ED94579477C4F9AE02.roa Signing time: Tue 15 Oct 2024 02:56:22 +0000 ROA not before: Tue 15 Oct 2024 02:56:22 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 150348 IP address blocks: 103.16.250.0/23 maxlen: 23 103.16.250.0/24 maxlen: 24 103.16.251.0/24 maxlen: 24 2400:b360::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.crl rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:55:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 378 (0x17a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198166/serialNumber=7254DE8CB9B339945543D87E8EB056F153D51F50 Validity Not Before: Oct 15 02:56:22 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=670dd9d6-d4c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d5:c6:a1:0f:f6:c9:23:eb:6a:75:48:30:fa: c8:83:e0:73:05:8f:a5:d8:f7:9e:25:0d:38:21:6e: ca:e8:d6:bb:05:13:2d:25:ba:70:e8:d5:ad:a9:53: df:b9:8a:9a:6c:cf:f4:36:c7:2f:27:70:98:c7:dc: ab:c2:95:eb:b1:63:bf:18:ba:24:67:55:1d:5e:76: 34:f5:c8:17:cc:da:66:81:9c:84:1a:e5:3a:84:61: 09:e2:d7:e8:ce:31:f9:4a:3e:9e:0d:cc:e3:af:20: 9d:13:71:44:ec:1c:1f:45:96:b4:83:55:1e:e0:2f: 67:07:16:4c:2d:2b:ce:c2:62:14:28:38:da:a3:3a: 74:54:9a:b9:aa:7c:18:97:c0:b0:94:b6:25:7b:14: 52:2f:6e:bf:92:96:40:44:37:e7:1e:2a:26:32:dc: 94:dc:fa:00:9f:8c:8a:b2:90:da:61:3e:c2:f3:4f: 3c:c3:76:9e:e4:c3:a9:12:bf:5d:11:92:56:fc:25: 9d:66:8e:1c:a3:95:27:8a:8b:98:48:34:b9:4b:41: 78:83:37:e4:48:4d:b7:26:a4:0e:81:21:f0:89:90: 4f:97:9a:90:30:fb:60:9f:f3:ec:1e:4d:a2:01:10: 03:ac:69:c0:a4:38:6e:81:05:3f:43:7c:8b:96:45: 88:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:29:F2:DD:81:72:36:00:3F:98:DE:C2:80:8F:2E:80:6E:9F:D2:72 X509v3 Authority Key Identifier: keyid:72:54:DE:8C:B9:B3:39:94:55:43:D8:7E:8E:B0:56:F1:53:D5:1F:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/A968BCA24C8511ED94579477C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.16.250.0/23 IPv6: 2400:b360::/32 Signature Algorithm: sha256WithRSAEncryption 3e:ca:13:42:63:a4:3e:50:57:d4:46:68:d9:11:72:44:e7:6a: 79:5c:9a:c9:1a:cd:d5:4a:59:0b:47:e2:cb:54:69:41:7b:e0: 17:c5:ad:7b:1e:b5:d5:0d:cd:fe:6a:00:af:7d:76:64:ec:e8: d7:38:44:3f:f6:82:11:b5:f7:96:31:ea:60:7d:6e:26:f2:4b: c6:5f:04:e0:5e:17:5a:23:35:6d:22:3f:2b:ca:9c:5a:5d:d6: a3:a2:91:df:df:10:a1:df:5a:5e:6b:da:8a:c6:6f:f0:8e:61: 9d:ed:1f:1c:10:81:b4:b6:ae:a3:bb:36:d6:8f:3b:56:d6:a4: 48:47:d2:f2:0b:2f:6d:3f:5a:e0:5f:04:08:03:07:61:34:c1: b0:aa:31:94:af:21:10:2f:e8:9e:64:78:de:f5:ee:94:5d:4c: 4a:5b:61:29:ef:fb:c4:f4:ef:27:72:bb:53:96:62:1f:3a:77: b3:7f:a9:71:2e:0c:14:53:f0:a1:1f:fd:5f:35:59:44:7a:23: d9:26:87:87:c2:a9:4a:dd:d3:75:e1:51:08:78:d1:9a:ad:bb: cb:a6:73:a4:8a:27:32:b2:e0:11:76:61:4b:7a:6c:19:1c:60: 18:b0:07:53:53:f9:55:9b:d0:19:a6:e5:ae:b9:ae:e1:b9:38: fe:f1:98:2d -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgxNjYxMTAvBgNVBAUTKDcyNTRERThDQjlCMzM5OTQ1NTQzRDg3RThFQjA1NkYx NTNENTFGNTAwHhcNMjQxMDE1MDI1NjIyWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzBkZDlkNi1kNGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdXGoQ/2ySPranVIMPrIg+BzBY+l2PeeJQ04IW7K6Na7BRMtJbpw6NWtqVPf uYqabM/0NscvJ3CYx9yrwpXrsWO/GLokZ1UdXnY09cgXzNpmgZyEGuU6hGEJ4tfo zjH5Sj6eDczjryCdE3FE7BwfRZa0g1Ue4C9nBxZMLSvOwmIUKDjaozp0VJq5qnwY l8CwlLYlexRSL26/kpZARDfnHiomMtyU3PoAn4yKspDaYT7C8088w3ae5MOpEr9d EZJW/CWdZo4co5UniouYSDS5S0F4gzfkSE23JqQOgSHwiZBPl5qQMPtgn/PsHk2i ARADrGnApDhugQU/Q3yLlkWIAQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFHcp8t2B cjYAP5jewoCPLoBun9JyMB8GA1UdIwQYMBaAFHJU3oy5szmUVUPYfo6wVvFT1R9Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODE2Ni8zRTYxMjI5NDRD ODIxMUVEOUIwM0Q0NDlDNEY5QUUwMi9jbFRlakxtek9aUlZROWgtanJCVzhWUFZI MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NsVGVqTG16T1pSVlE5aC1qckJXOFZQVkgxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTgxNjYvM0U2MTIyOTQ0QzgyMTFFRDlCMDNENDQ5QzRGOUFFMDIvQTk2OEJDQTI0 Qzg1MTFFRDk0NTc5NDc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnEPowDQQCAAIwBwMFACQAs2AwDQYJKoZIhvcNAQELBQAD ggEBAD7KE0JjpD5QV9RGaNkRckTnanlcmskazdVKWQtH4stUaUF74BfFrXsetdUN zf5qAK99dmTs6Nc4RD/2ghG195Yx6mB9bibyS8ZfBOBeF1ojNW0iPyvKnFpd1qOi kd/fEKHfWl5r2orGb/COYZ3tHxwQgbS2rqO7NtaPO1bWpEhH0vILL20/WuBfBAgD B2E0wbCqMZSvIRAv6J5keN717pRdTEpbYSnv+8T07ydyu1OWYh86d7N/qXEuDBRT 8KEf/V81WUR6I9kmh4fCqUrd03XhUQh40Zqtu8umc6SKJzKy4BF2YUt6bBkcYBiw B1NT+VWb0Bmm5a65ruG5OP7xmC0= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:45 2024 by rpki-client on console-ams.rpki-client.org