$ rpki-client -vvf rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/97D6B88618D511EFAC43EE73C4F9AE02.roa File: 97D6B88618D511EFAC43EE73C4F9AE02.roa (raw, json) Hash identifier: u8zPnTnR8vdMXMZM3gfu234Z3NZHwyNarOREwLy/WOU= Subject key identifier: 31:8A:4F:88:7A:24:74:29:5E:A6:0A:B9:FC:AE:C4:63:D0:D1:4E:94 Certificate issuer: /CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Certificate serial: 50 Authority key identifier: 87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/97D6B88618D511EFAC43EE73C4F9AE02.roa Signing time: Mon 01 Jul 2024 08:08:42 +0000 ROA not before: Mon 01 Jul 2024 08:08:42 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 48266 IP address blocks: 103.190.232.0/24 maxlen: 24 103.190.233.0/24 maxlen: 24 2400:9320::/48 maxlen: 48 2400:9320:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:49:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Validity Not Before: Jul 1 08:08:42 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66826409-5a9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:96:b5:e4:38:45:78:51:7e:ea:48:75:f2:ad: 2e:a3:02:3f:64:d8:3b:ce:14:60:27:3a:4e:98:87: 1c:a1:97:60:99:f5:4b:a2:e4:3f:56:f9:5a:9f:4e: 0b:d2:3d:b3:b5:5b:d9:ce:47:ed:b9:a3:92:38:cf: f7:f9:ea:97:3e:58:3d:0e:91:70:2f:09:cb:ab:d8: 1e:ca:a2:d2:d6:24:e5:1a:ea:5e:ad:22:fb:24:94: a1:30:e9:cd:a7:c0:80:94:0a:ef:a8:1d:7f:c5:39: 5e:24:4f:db:b4:85:82:18:2e:ed:9f:db:73:85:8d: d2:bf:9d:d0:33:da:b7:0d:37:20:81:94:79:87:3d: 2d:05:26:41:96:59:08:14:c4:90:06:2f:13:93:39: 09:fb:bc:ac:c3:96:cb:2c:f2:b3:22:94:79:42:d0: 51:43:01:19:fb:23:0f:a8:b6:91:78:a1:34:1b:35: 3d:66:35:47:ed:62:36:23:a1:2e:00:f9:9f:56:eb: 07:36:46:c4:7e:3e:ad:66:f0:30:38:ae:05:5b:5c: 75:89:39:f3:aa:59:36:76:97:71:1e:e7:16:b6:8c: 68:cb:50:90:88:06:ee:97:28:ca:b6:ad:dc:b1:2c: d0:4f:b7:01:07:70:00:4b:8e:e6:a6:77:25:d5:06: ba:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:8A:4F:88:7A:24:74:29:5E:A6:0A:B9:FC:AE:C4:63:D0:D1:4E:94 X509v3 Authority Key Identifier: keyid:87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/97D6B88618D511EFAC43EE73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.190.232.0/23 IPv6: 2400:9320::/48 2400:9320:2::/48 Signature Algorithm: sha256WithRSAEncryption 47:25:f6:cb:53:3d:ee:41:4a:9a:d2:fa:a1:03:c5:c2:d5:81: 0f:6f:30:e8:d3:69:01:ed:6f:e8:54:9f:06:9b:f3:55:84:87: a4:e6:3f:28:fd:e4:0d:7e:90:ce:dd:52:b7:bb:7c:f6:e8:f0: 11:34:f3:f0:7f:e1:73:0f:75:3b:81:1e:c3:c7:c9:28:60:06: dc:20:4b:44:62:aa:5e:6e:f5:57:a5:5b:06:f2:95:66:44:5d: d6:38:7c:02:a0:dc:e9:9d:f6:86:17:fb:82:9d:3e:21:1f:b2: fd:77:8c:20:ff:86:f7:ee:20:55:57:a6:96:25:59:3a:55:e4: bf:ce:07:f8:78:4b:b5:d7:bb:be:0f:1e:94:80:02:b8:5a:2f: fd:85:ad:61:be:38:f1:d1:5c:61:36:fa:8d:d9:41:cc:8f:f0: c2:d2:ba:3b:36:5f:0a:ff:44:c7:21:74:3a:15:4b:c1:9c:a0: 08:be:cb:3b:ac:05:c2:8f:19:4c:87:11:f5:73:90:d5:37:67: de:50:c9:c4:f4:8b:27:40:35:e0:90:93:46:13:ee:7e:c9:aa: bc:ed:c6:21:9c:fc:21:5c:6e:88:36:38:4c:46:8f:ff:4e:6c: 25:4c:98:cf:38:16:d3:49:b5:8d:38:0f:7f:39:6f:3f:88:11: d2:d5:e2:09 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RjlBODExMC8GA1UEBRMoODdCNjJDMzRFOERDNUQ0MDIzOEMwRjZCREU5MTE1NkU1 RDA2QTQ0QjAeFw0yNDA3MDEwODA4NDJaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ODI2NDA5LTVhOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIlrXkOEV4UX7qSHXyrS6jAj9k2DvOFGAnOk6Yhxyhl2CZ9Uui5D9W+VqfTgvS PbO1W9nOR+25o5I4z/f56pc+WD0OkXAvCcur2B7KotLWJOUa6l6tIvsklKEw6c2n wICUCu+oHX/FOV4kT9u0hYIYLu2f23OFjdK/ndAz2rcNNyCBlHmHPS0FJkGWWQgU xJAGLxOTOQn7vKzDlsss8rMilHlC0FFDARn7Iw+otpF4oTQbNT1mNUftYjYjoS4A +Z9W6wc2RsR+Pq1m8DA4rgVbXHWJOfOqWTZ2l3Ee5xa2jGjLUJCIBu6XKMq2rdyx LNBPtwEHcABLjuamdyXVBrq5AgMBAAGjggKvMIICqzAdBgNVHQ4EFgQUMYpPiHok dClepgq5/K7EY9DRTpQwHwYDVR0jBBgwFoAUh7YsNOjcXUAjjA9r3pEVbl0GpEsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGOUE4L0I5MjMwNkZFRUI2 QTExRUU5QzAzQjcxMUM0RjlBRTAyL2g3WXNOT2pjWFVBampBOXIzcEVWYmwwR3BF cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaDdZc05PamNYVUFqakE5cjNwRVZibDBHcEVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjlBOC9COTIzMDZGRUVCNkExMUVFOUMwM0I3MTFDNEY5QUUwMi85N0Q2Qjg4NjE4 RDUxMUVGQUM0M0VFNzNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA5BggrBgEFBQcBBwEB/wQq MCgwDAQCAAEwBgMEAWe+6DAYBAIAAjASAwcAJACTIAAAAwcAJACTIAACMA0GCSqG SIb3DQEBCwUAA4IBAQBHJfbLUz3uQUqa0vqhA8XC1YEPbzDo02kB7W/oVJ8Gm/NV hIek5j8o/eQNfpDO3VK3u3z26PARNPPwf+FzD3U7gR7Dx8koYAbcIEtEYqpebvVX pVsG8pVmRF3WOHwCoNzpnfaGF/uCnT4hH7L9d4wg/4b37iBVV6aWJVk6VeS/zgf4 eEu117u+Dx6UgAK4Wi/9ha1hvjjx0VxhNvqN2UHMj/DC0ro7Nl8K/0THIXQ6FUvB nKAIvss7rAXCjxlMhxH1c5DVN2feUMnE9IsnQDXgkJNGE+5+yaq87cYhnPwhXG6I NjhMRo//TmwlTJjPOBbTSbWNOA9/OW8/iBHS1eIJ -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:47 2024 by rpki-client on console-fra.rpki-client.org