$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/47E67066B82A11E9843DEE0AC4F9AE02.roa File: 47E67066B82A11E9843DEE0AC4F9AE02.roa (raw, json) Hash identifier: YggXfy20kvjf1iFOsIwuuVFkMi74/bpO/23VT4jrnTE= Subject key identifier: 8E:46:BA:B2:45:E9:74:05:17:34:CE:52:D0:FB:FE:4F:2C:31:DB:56 Certificate issuer: /CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Certificate serial: 0D61 Authority key identifier: 9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/47E67066B82A11E9843DEE0AC4F9AE02.roa Signing time: Fri 16 Aug 2024 18:46:21 +0000 ROA not before: Fri 16 Aug 2024 18:46:21 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 23864 IP address blocks: 103.5.240.0/24 maxlen: 24 2401:c7c0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3425 (0xd61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Validity Not Before: Aug 16 18:46:21 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66bf9e7c-cc1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f4:1f:6d:7d:2b:38:22:62:f9:42:2d:97:f2: 2a:d8:56:b5:4e:98:be:c8:8f:70:1a:2e:16:2a:0c: f6:26:38:c1:49:00:68:56:c5:3d:79:31:6d:da:d1: 84:e7:33:20:dc:fc:e4:9b:b6:e2:2b:a8:36:2d:4f: 2c:a5:6e:d3:0a:e0:0c:ea:03:56:2a:45:c0:4b:b8: 51:13:de:51:99:b6:3e:fe:3b:46:06:f5:12:3b:84: 32:a9:65:4b:a9:65:1a:a5:b9:31:89:a4:3b:70:25: 84:dc:30:89:23:c2:30:7a:1b:93:f9:62:c2:eb:e0: 29:84:3a:bb:96:8f:6a:25:17:a6:39:1a:ac:64:57: f3:7b:75:6f:9f:ba:10:4d:23:64:31:19:11:d7:77: 68:d0:b6:55:1f:db:58:3d:77:40:cc:b9:83:56:28: ca:57:3e:ba:de:35:b9:79:17:c2:f1:e7:9a:51:a5: 6b:b0:f1:89:80:27:1d:ab:5a:75:a9:f5:57:b1:54: d8:e5:0f:6a:ed:0b:f8:d2:87:ca:3b:36:17:c3:93: cd:d9:86:f3:36:4e:10:0f:0e:56:33:e2:a0:5e:65: 07:44:35:4e:5a:7d:87:a4:6a:06:2d:17:9d:a5:0d: 2a:9e:e2:95:be:64:ff:70:91:4a:f2:80:6a:6c:76: d9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:46:BA:B2:45:E9:74:05:17:34:CE:52:D0:FB:FE:4F:2C:31:DB:56 X509v3 Authority Key Identifier: keyid:9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/47E67066B82A11E9843DEE0AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.5.240.0/24 IPv6: 2401:c7c0:2::/48 Signature Algorithm: sha256WithRSAEncryption 9c:90:06:f2:7b:3a:01:a1:40:79:6f:1b:c2:84:2e:dc:3f:83: c0:46:65:90:14:8c:08:f9:11:16:2a:18:23:22:ab:be:75:fd: 40:7f:b8:51:9b:c8:b1:9f:1a:06:a8:f7:1f:4e:cb:0f:ba:94: 58:49:c4:41:8a:6f:69:aa:59:73:9c:77:ec:c7:c8:5a:42:d3: 1c:91:a1:b1:b1:52:66:dc:a7:f6:76:a8:d8:81:8f:fa:98:4f: 16:28:14:b5:ce:3a:dc:f3:75:86:a6:5a:2e:3d:bf:a1:74:91: 9a:74:73:3b:b5:91:65:0b:52:64:b2:68:8e:01:3b:60:ba:8a: ed:eb:b4:f6:e2:f4:cf:0c:8b:6b:02:64:be:f8:52:55:a0:9d: 4a:a9:b9:5d:1e:a0:a3:5d:87:96:f0:5e:e4:62:50:f9:26:21: 44:b5:41:bf:4f:4e:cd:b7:42:99:c4:39:77:31:2f:8c:a3:3d: e5:86:b3:96:c3:24:5b:45:0f:5c:30:ff:4a:5c:01:d0:04:23: 59:79:6f:31:d4:8f:f2:70:f6:e4:eb:e7:47:c2:61:ca:d3:8d: e8:20:3e:e4:dc:88:f6:a3:41:74:ca:e9:3c:dd:75:07:9d:72: dd:dd:28:0e:cc:08:0c:53:9d:d8:22:fb:2a:c4:44:bb:36:6c: cf:8b:ee:cb -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QjQxMTAvBgNVBAUTKDlERjk0QzMzRDNGNjQ3QUUzRDkxMzYxRTFGMTcyQzIw Njg2RjU5ODkwHhcNMjQwODE2MTg0NjIxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmJmOWU3Yy1jYzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvQfbX0rOCJi+UItl/Iq2Fa1Tpi+yI9wGi4WKgz2JjjBSQBoVsU9eTFt2tGE 5zMg3Pzkm7biK6g2LU8spW7TCuAM6gNWKkXAS7hRE95RmbY+/jtGBvUSO4QyqWVL qWUapbkxiaQ7cCWE3DCJI8IwehuT+WLC6+AphDq7lo9qJRemORqsZFfze3Vvn7oQ TSNkMRkR13do0LZVH9tYPXdAzLmDVijKVz663jW5eRfC8eeaUaVrsPGJgCcdq1p1 qfVXsVTY5Q9q7Qv40ofKOzYXw5PN2YbzNk4QDw5WM+KgXmUHRDVOWn2HpGoGLRed pQ0qnuKVvmT/cJFK8oBqbHbZ6QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFI5GurJF 6XQFFzTOUtD7/k8sMdtWMB8GA1UdIwQYMBaAFJ35TDPT9keuPZE2Hh8XLCBob1mJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVCNC83MDlGN0EyNkI4 MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2NDlrVFllSHhjc0lHaHZX WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25mbE1NOVAyUjY0OWtUWWVIeGNzSUdodldZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI1QjQvNzA5RjdBMjZCODI5MTFFOTkzNzM4QTA5QzRGOUFFMDIvNDdFNjcwNjZC ODJBMTFFOTg0M0RFRTBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnBfAwDwQCAAIwCQMHACQBx8AAAjANBgkqhkiG9w0BAQsF AAOCAQEAnJAG8ns6AaFAeW8bwoQu3D+DwEZlkBSMCPkRFioYIyKrvnX9QH+4UZvI sZ8aBqj3H07LD7qUWEnEQYpvaapZc5x37MfIWkLTHJGhsbFSZtyn9nao2IGP+phP FigUtc463PN1hqZaLj2/oXSRmnRzO7WRZQtSZLJojgE7YLqK7eu09uL0zwyLawJk vvhSVaCdSqm5XR6go12HlvBe5GJQ+SYhRLVBv09OzbdCmcQ5dzEvjKM95YazlsMk W0UPXDD/SlwB0AQjWXlvMdSP8nD25OvnR8JhytON6CA+5NyI9qNBdMrpPN11B51y 3d0oDswIDFOd2CL7KsREuzZsz4vuyw== -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:56 2024 by rpki-client on console-fra.rpki-client.org