$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/DA33C49E08E211ED8B10721AC4F9AE02.roa File: DA33C49E08E211ED8B10721AC4F9AE02.roa (raw, json) Hash identifier: Rk/+lADA6gcgkQ0X84YplZfwCDuN0k5YWfT7OkmFseI= Subject key identifier: 0C:15:D0:96:4C:39:8D:A6:50:4A:93:65:7A:4A:B9:07:38:72:CD:13 Certificate issuer: /CN=A91D73FD/serialNumber=B04BBA1F18C0E70831F354F7455EE15D322941B3 Certificate serial: 0606 Authority key identifier: B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/DA33C49E08E211ED8B10721AC4F9AE02.roa Signing time: Mon 30 Sep 2024 22:42:09 +0000 ROA not before: Mon 30 Sep 2024 22:42:09 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 141772 IP address blocks: 103.120.176.0/24 maxlen: 24 103.120.177.0/24 maxlen: 24 103.120.178.0/24 maxlen: 24 103.120.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.crl rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1542 (0x606) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D73FD/serialNumber=B04BBA1F18C0E70831F354F7455EE15D322941B3 Validity Not Before: Sep 30 22:42:09 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66fb2941-600a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:03:0b:dc:ac:85:ed:55:86:77:9e:72:2a:8c: d8:61:a9:12:d7:2c:a2:c8:db:2a:22:a2:b6:eb:6e: 71:a5:bc:87:e1:1f:93:5a:d6:89:d3:88:b7:d1:bc: 97:17:51:13:71:45:e6:5b:a7:8d:02:4a:7a:83:99: 67:25:3f:3e:68:81:31:ec:6a:b4:26:98:8d:44:0a: ad:61:0b:2a:3d:e1:49:df:c7:a0:ad:84:50:ef:dc: 2e:72:47:44:fa:32:f8:87:30:b9:25:96:a2:81:5b: 91:ae:b9:ab:58:96:66:d2:31:e6:4b:39:f0:3c:e9: e7:cc:d4:e0:85:4d:c4:65:8e:64:19:7e:13:17:b6: a7:18:a9:ec:a7:9b:96:52:ca:01:9b:0e:41:6b:88: 82:25:59:f2:63:f1:95:a1:20:ab:9f:c6:48:11:a4: 2b:8d:bc:4f:ee:0e:29:05:b6:6f:f4:a9:78:0a:e3: a3:33:f0:57:f7:80:91:f4:79:a5:fb:99:eb:0e:13: a7:7c:71:be:4e:3e:cd:48:74:a1:c8:e0:d1:c1:14: f1:a9:67:91:b3:88:81:10:cd:e7:36:d8:cf:e2:75: 6d:60:a4:4a:29:15:d1:18:cf:38:7c:98:13:1e:fa: f7:ac:06:ea:89:1d:07:48:c5:66:98:5c:8d:3d:cb: 67:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:15:D0:96:4C:39:8D:A6:50:4A:93:65:7A:4A:B9:07:38:72:CD:13 X509v3 Authority Key Identifier: keyid:B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/DA33C49E08E211ED8B10721AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.120.176.0/22 Signature Algorithm: sha256WithRSAEncryption a6:ff:5b:06:72:b7:56:9e:19:2b:85:04:9b:d7:83:a3:52:e4: b4:f6:18:13:49:ec:8d:70:5c:ee:bb:de:5e:08:21:a6:3c:8d: 87:56:16:82:0d:91:1b:bc:e9:76:af:4f:fd:ec:e0:55:d1:11: 4c:6e:e5:97:3d:4c:63:28:dc:1a:66:28:d7:5b:19:af:e5:5b: f1:1d:a2:f5:3e:92:ce:bd:95:c8:0e:96:a0:4c:84:86:6f:8f: 58:72:9b:5c:40:92:c6:d3:96:fa:b1:3f:cf:01:fe:4a:59:d7: 1f:59:a1:e1:39:6d:91:6a:23:11:96:e0:23:bb:08:3c:97:49: 65:74:67:f9:37:90:8d:f0:96:53:c0:13:7b:90:eb:23:0c:ad: 6c:c5:50:3c:a0:c0:cf:35:92:1a:1e:3a:72:ba:f7:05:3f:75: e9:9c:00:d0:24:31:03:6d:4f:ae:b4:72:13:a8:29:fb:c6:76: 13:cc:e0:60:2e:d9:bc:ea:7d:22:4a:5f:10:20:fd:bf:3e:3b: ed:46:f9:84:94:71:4b:43:b8:e4:f2:3c:6b:76:d6:ff:e0:fd: 31:73:3d:98:c6:e1:37:0c:ae:95:4d:eb:80:fc:11:a2:34:0b: 08:51:3a:77:39:3d:7c:d6:e1:65:fc:d4:cb:7a:f1:51:53:14: e3:42:7f:d9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDczRkQxMTAvBgNVBAUTKEIwNEJCQTFGMThDMEU3MDgzMUYzNTRGNzQ1NUVFMTVE MzIyOTQxQjMwHhcNMjQwOTMwMjI0MjA5WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZiMjk0MS02MDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1gML3KyF7VWGd55yKozYYakS1yyiyNsqIqK2625xpbyH4R+TWtaJ04i30byX F1ETcUXmW6eNAkp6g5lnJT8+aIEx7Gq0JpiNRAqtYQsqPeFJ38egrYRQ79wuckdE +jL4hzC5JZaigVuRrrmrWJZm0jHmSznwPOnnzNTghU3EZY5kGX4TF7anGKnsp5uW UsoBmw5Ba4iCJVnyY/GVoSCrn8ZIEaQrjbxP7g4pBbZv9Kl4CuOjM/BX94CR9Hml +5nrDhOnfHG+Tj7NSHShyODRwRTxqWeRs4iBEM3nNtjP4nVtYKRKKRXRGM84fJgT Hvr3rAbqiR0HSMVmmFyNPctnRQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAwV0JZM OY2mUEqTZXpKuQc4cs0TMB8GA1UdIwQYMBaAFLBLuh8YwOcIMfNU90Ve4V0yKUGz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzNGRC9EQ0IyNUI5NjdC NDMxMUVCODM1MzM2NjZDNEY5QUUwMi9zRXU2SHhqQTV3Z3g4MVQzUlY3aFhUSXBR Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NFdTZIeGpBNXdneDgxVDNSVjdoWFRJcFFiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDczRkQvRENCMjVCOTY3QjQzMTFFQjgzNTMzNjY2QzRGOUFFMDIvREEzM0M0OUUw OEUyMTFFRDhCMTA3MjFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJneLAwDQYJKoZIhvcNAQELBQADggEBAKb/WwZyt1aeGSuF BJvXg6NS5LT2GBNJ7I1wXO673l4IIaY8jYdWFoINkRu86XavT/3s4FXREUxu5Zc9 TGMo3BpmKNdbGa/lW/EdovU+ks69lcgOlqBMhIZvj1hym1xAksbTlvqxP88B/kpZ 1x9ZoeE5bZFqIxGW4CO7CDyXSWV0Z/k3kI3wllPAE3uQ6yMMrWzFUDygwM81khoe OnK69wU/demcANAkMQNtT660chOoKfvGdhPM4GAu2bzqfSJKXxAg/b8+O+1G+YSU cUtDuOTyPGt21v/g/TFzPZjG4TcMrpVN64D8EaI0CwhROnc5PXzW4WX81Mt68VFT FONCf9k= -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:35 2024 by rpki-client on console-fra.rpki-client.org