$ rpki-client -vvf rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/D4A7497E6E6B11EF9FC61C6AC4F9AE02.roa File: D4A7497E6E6B11EF9FC61C6AC4F9AE02.roa (raw, json) Hash identifier: 1uhD7+JbuBl90uKrTPBRfoJO19VNOC0xi6lVI/rkLgc= Subject key identifier: 56:A1:C5:AB:36:49:35:87:EA:81:7A:A4:C0:7D:18:2D:E8:80:8A:81 Certificate issuer: /CN=A911862D/serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA Certificate serial: 16AE Authority key identifier: D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/D4A7497E6E6B11EF9FC61C6AC4F9AE02.roa Signing time: Mon 09 Sep 2024 05:24:48 +0000 ROA not before: Mon 09 Sep 2024 05:24:48 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 137255 IP address blocks: 103.106.56.0/23 maxlen: 23 103.106.56.0/24 maxlen: 24 103.106.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5806 (0x16ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911862D/serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA Validity Not Before: Sep 9 05:24:48 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=66de86a0-08e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b8:d4:e9:37:b7:62:18:37:6d:05:b2:f8:e9: 07:ba:06:ab:10:01:c7:90:86:f7:2a:49:51:8b:4c: 32:18:7b:29:9a:8e:50:65:07:52:c0:33:82:5d:0f: 22:6e:a9:ec:35:bc:16:86:20:37:33:cd:18:71:2e: ac:e4:ff:7a:82:3f:61:04:af:68:4e:f0:7d:64:70: f3:bf:ee:79:60:0e:82:61:d6:5e:fd:ee:6c:c7:e3: 43:d1:4e:b1:de:35:2a:8e:05:53:3c:fc:3b:a2:54: f6:9a:cb:27:ad:18:27:3d:b9:dc:e3:8d:82:da:8c: fd:8f:09:77:43:14:b8:4c:cd:d7:f9:86:ea:d0:bd: 5b:92:8e:25:31:37:2c:a9:ca:dc:ea:f8:9f:00:7c: 5e:18:71:cb:fb:cd:35:7a:e1:59:16:9d:21:81:c0: 58:44:fc:a4:0c:1c:d1:cc:84:34:57:89:6b:28:54: 29:3b:f7:49:5a:51:6d:18:da:93:6f:9c:76:0e:5d: 1b:44:9d:8d:87:d1:10:e3:f7:aa:8c:6a:d8:c3:7c: 7c:77:31:37:4c:79:c3:a6:bd:46:8c:e8:ce:ce:f3: 4b:cd:53:7a:e1:3b:ff:c3:6c:76:82:f9:e3:60:46: a1:a0:ea:7d:45:81:22:24:26:7e:47:6d:18:49:7e: f0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A1:C5:AB:36:49:35:87:EA:81:7A:A4:C0:7D:18:2D:E8:80:8A:81 X509v3 Authority Key Identifier: keyid:D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/D4A7497E6E6B11EF9FC61C6AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.106.56.0/23 Signature Algorithm: sha256WithRSAEncryption 43:9f:2a:ad:78:cb:62:81:ea:f5:20:05:be:6e:d7:af:ba:77: f0:fc:b2:5a:43:22:1c:9d:24:69:29:99:f7:c1:9a:7f:26:1d: 40:04:45:a3:82:b3:51:19:27:08:78:a6:5e:f8:af:81:b2:46: a3:2f:51:2a:53:d4:fb:46:77:ab:bf:95:10:55:56:6d:95:46: 44:d6:d4:62:90:9b:bd:6f:ac:30:cc:cb:7a:85:8b:4a:ea:15: fe:51:ed:9f:89:97:11:49:b4:50:5f:be:2a:7f:16:00:0c:08: 8c:93:72:dd:2f:04:e4:6d:a3:88:bd:29:b8:c1:72:2d:50:bb: 6e:5f:ff:12:a0:30:5d:8d:7f:df:7a:92:de:29:04:6e:61:bd: 22:d6:df:52:e4:14:dc:72:9e:55:74:f4:24:8d:f8:07:90:8b: 65:94:ff:bd:32:87:25:dd:c2:d3:1c:80:83:4c:2d:9d:45:93: ba:45:dd:01:88:08:d4:07:a9:e6:d7:1c:0c:bf:ff:d2:76:90: d4:56:75:eb:d2:89:b5:4e:ea:1f:e0:b7:29:b0:50:f5:ad:95: 76:2d:e5:e0:0f:3a:af:74:d8:97:0b:39:b3:4b:ad:0f:29:19: 08:6a:54:14:f6:53:28:50:c5:18:65:8b:f9:67:62:32:70:2c: 03:d1:09:16 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICFq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg2MkQxMTAvBgNVBAUTKEQ4QzY3MzA5NUU4MkE5QjdFN0RGQ0Q0NjU4MEY3ODMx QThEMThBQ0EwHhcNMjQwOTA5MDUyNDQ4WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmRlODZhMC0wOGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07jU6Te3Yhg3bQWy+OkHugarEAHHkIb3KklRi0wyGHspmo5QZQdSwDOCXQ8i bqnsNbwWhiA3M80YcS6s5P96gj9hBK9oTvB9ZHDzv+55YA6CYdZe/e5sx+ND0U6x 3jUqjgVTPPw7olT2mssnrRgnPbnc442C2oz9jwl3QxS4TM3X+Ybq0L1bko4lMTcs qcrc6vifAHxeGHHL+801euFZFp0hgcBYRPykDBzRzIQ0V4lrKFQpO/dJWlFtGNqT b5x2Dl0bRJ2Nh9EQ4/eqjGrYw3x8dzE3THnDpr1GjOjOzvNLzVN64Tv/w2x2gvnj YEahoOp9RYEiJCZ+R20YSX7w0QIDAQABo4IClTCCApEwHQYDVR0OBBYEFFahxas2 STWH6oF6pMB9GC3ogIqBMB8GA1UdIwQYMBaAFNjGcwlegqm359/NRlgPeDGo0YrK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODYyRC8zMjg3OUQzQUU4 QkExMUU3OEE2QTcwNDJDNEY5QUUwMi8yTVp6Q1Y2Q3FiZm4zODFHV0E5NE1halJp c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJNWnpDVjZDcWJmbjM4MUdXQTk0TWFqUmlzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTg2MkQvMzI4NzlEM0FFOEJBMTFFNzhBNkE3MDQyQzRGOUFFMDIvRDRBNzQ5N0U2 RTZCMTFFRjlGQzYxQzZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnajgwDQYJKoZIhvcNAQELBQADggEBAEOfKq14y2KB6vUg Bb5u16+6d/D8slpDIhydJGkpmffBmn8mHUAERaOCs1EZJwh4pl74r4GyRqMvUSpT 1PtGd6u/lRBVVm2VRkTW1GKQm71vrDDMy3qFi0rqFf5R7Z+JlxFJtFBfvip/FgAM CIyTct0vBORto4i9KbjBci1Qu25f/xKgMF2Nf996kt4pBG5hvSLW31LkFNxynlV0 9CSN+AeQi2WU/70yhyXdwtMcgINMLZ1Fk7pF3QGICNQHqebXHAy//9J2kNRWdevS ibVO6h/gtymwUPWtlXYt5eAPOq902JcLObNLrQ8pGQhqVBT2UyhQxRhli/lnYjJw LAPRCRY= -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:37 2024 by rpki-client on console-fra.rpki-client.org