$ rpki-client -vvf rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/C59B1D6E0C1811EDA9B32927C4F9AE02.roa File: C59B1D6E0C1811EDA9B32927C4F9AE02.roa (raw, json) Hash identifier: tjanCdEnU91WZWuNneW5uPLOhcdnMX5ORciFEmcFL7c= Subject key identifier: 09:56:C9:4C:03:04:21:11:4A:0F:B7:54:6F:0C:EE:C8:3C:23:83:2C Certificate issuer: /CN=A919F213/serialNumber=ACCE82B5EDF4A21C3201B8E2B4000C832451350B Certificate serial: 01F3 Authority key identifier: AC:CE:82:B5:ED:F4:A2:1C:32:01:B8:E2:B4:00:0C:83:24:51:35:0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/C59B1D6E0C1811EDA9B32927C4F9AE02.roa Signing time: Wed 21 Aug 2024 03:16:42 +0000 ROA not before: Wed 21 Aug 2024 03:16:42 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 150000 IP address blocks: 103.190.138.0/23 maxlen: 23 103.190.138.0/24 maxlen: 24 103.190.139.0/24 maxlen: 24 2001:df0:ee40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.crl rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F213/serialNumber=ACCE82B5EDF4A21C3201B8E2B4000C832451350B Validity Not Before: Aug 21 03:16:42 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66c55c19-7fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:96:a9:66:f0:af:b8:a7:37:e1:fc:eb:c2:ce: d3:7b:df:de:5c:f7:1b:d8:29:5e:9f:fb:5b:ae:10: be:42:36:96:80:be:93:75:fe:9b:cf:2f:86:74:ec: fb:64:25:b6:ac:4f:3b:2e:a2:bf:75:fb:ef:50:4a: ce:cb:5f:66:5d:85:7e:5a:f9:f3:a1:f9:77:77:a9: a0:47:f4:d5:2c:1a:14:d4:7e:a3:b9:17:17:2c:80: 91:b8:7e:9e:31:17:c4:f4:4e:6e:11:41:2b:1c:ad: 93:b4:ef:61:c1:50:f8:79:13:30:6c:ba:df:33:4f: 58:bf:7c:4a:b8:94:7f:95:56:78:de:10:5d:67:94: 00:ce:f6:a6:74:b3:c9:57:0b:d4:9a:73:13:16:ee: e1:d7:79:ae:98:ab:ce:61:b7:49:02:0b:36:f1:52: e3:e7:8d:bc:c1:10:89:9b:ba:a4:ce:64:d6:82:29: 14:dc:28:d2:7b:2c:73:62:cf:5b:d7:06:4b:84:ee: 35:bd:c2:b2:26:ae:c7:e1:83:e8:ae:50:02:7e:08: 91:c8:fd:f6:6b:61:a4:bc:5e:e0:f2:7e:36:10:12: 9f:52:98:18:44:2e:65:35:83:9f:7e:ff:26:b5:08: ec:68:bb:6d:68:06:be:b3:fe:61:db:6d:59:3b:f7: 3c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:56:C9:4C:03:04:21:11:4A:0F:B7:54:6F:0C:EE:C8:3C:23:83:2C X509v3 Authority Key Identifier: keyid:AC:CE:82:B5:ED:F4:A2:1C:32:01:B8:E2:B4:00:0C:83:24:51:35:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/C59B1D6E0C1811EDA9B32927C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.190.138.0/23 IPv6: 2001:df0:ee40::/48 Signature Algorithm: sha256WithRSAEncryption 79:0a:b3:a4:37:50:1f:38:43:b1:32:8f:47:b3:08:d2:41:34: f2:44:5d:3d:d8:b9:c9:1e:57:a5:2b:7c:63:e8:30:5e:f7:97: 56:9c:5b:e7:3e:52:65:a3:13:5e:74:10:b8:38:de:82:cc:60: da:24:72:e9:54:e6:66:e3:37:58:a5:16:30:bb:c7:1a:ff:3a: 03:ee:13:99:fc:39:6b:89:3a:25:6e:ba:4c:ae:52:69:aa:ec: 4a:89:2c:23:6c:20:46:3d:a6:c1:96:5c:12:6b:e1:1c:4c:04: d3:87:3b:72:a8:f8:0f:1d:f6:05:7f:ad:b9:59:bb:11:21:78: c4:24:02:93:a3:c8:af:0c:30:38:30:4a:b6:f5:17:0c:c7:ee: c5:06:64:a5:4e:c9:60:4d:a8:7c:cb:6a:54:30:1c:f3:fb:ba: 66:f8:fb:c2:16:dd:8f:2e:19:4f:c1:6a:a7:37:c9:64:b4:51: b7:b2:3e:54:7f:21:82:03:59:d3:9f:2e:54:17:07:8e:18:cf: a0:5b:04:6c:a8:35:99:89:cb:49:19:ce:39:5a:ff:87:b3:ba: dc:31:05:71:ac:a5:ae:2e:77:d4:7e:58:fc:f7:97:7f:48:ce: fa:1e:42:f4:23:01:a6:e3:83:0d:82:76:4e:b6:ef:ca:89:bf: 42:47:a1:70 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYyMTMxMTAvBgNVBAUTKEFDQ0U4MkI1RURGNEEyMUMzMjAxQjhFMkI0MDAwQzgz MjQ1MTM1MEIwHhcNMjQwODIxMDMxNjQyWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmM1NWMxOS03ZmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5apZvCvuKc34fzrws7Te9/eXPcb2Clen/tbrhC+QjaWgL6Tdf6bzy+GdOz7 ZCW2rE87LqK/dfvvUErOy19mXYV+Wvnzofl3d6mgR/TVLBoU1H6juRcXLICRuH6e MRfE9E5uEUErHK2TtO9hwVD4eRMwbLrfM09Yv3xKuJR/lVZ43hBdZ5QAzvamdLPJ VwvUmnMTFu7h13mumKvOYbdJAgs28VLj5428wRCJm7qkzmTWgikU3CjSeyxzYs9b 1wZLhO41vcKyJq7H4YPorlACfgiRyP32a2GkvF7g8n42EBKfUpgYRC5lNYOffv8m tQjsaLttaAa+s/5h221ZO/c8wQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFAlWyUwD BCERSg+3VG8M7sg8I4MsMB8GA1UdIwQYMBaAFKzOgrXt9KIcMgG44rQADIMkUTUL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjIxMy83MjM0RERDNDBD MTYxMUVEQjQwMUY0MjVDNEY5QUUwMi9yTTZDdGUzMG9od3lBYmppdEFBTWd5UlJO UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JNNkN0ZTMwb2h3eUFiaml0QUFNZ3lSUk5Rcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUYyMTMvNzIzNEREQzQwQzE2MTFFREI0MDFGNDI1QzRGOUFFMDIvQzU5QjFENkUw QzE4MTFFREE5QjMyOTI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnvoowDwQCAAIwCQMHACABDfDuQDANBgkqhkiG9w0BAQsF AAOCAQEAeQqzpDdQHzhDsTKPR7MI0kE08kRdPdi5yR5XpSt8Y+gwXveXVpxb5z5S ZaMTXnQQuDjegsxg2iRy6VTmZuM3WKUWMLvHGv86A+4Tmfw5a4k6JW66TK5Saars SoksI2wgRj2mwZZcEmvhHEwE04c7cqj4Dx32BX+tuVm7ESF4xCQCk6PIrwwwODBK tvUXDMfuxQZkpU7JYE2ofMtqVDAc8/u6Zvj7whbdjy4ZT8FqpzfJZLRRt7I+VH8h ggNZ058uVBcHjhjPoFsEbKg1mYnLSRnOOVr/h7O63DEFcaylri531H5Y/PeXf0jO +h5C9CMBpuODDYJ2Trbvyom/QkehcA== -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:46 2024 by rpki-client on console-ams.rpki-client.org