$ rpki-client -vvf rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/BFB35A9831E011EA91E99C3CC4F9AE02.roa File: BFB35A9831E011EA91E99C3CC4F9AE02.roa (raw, json) Hash identifier: 0GHCZ6nEXf3be8gydYVqGJhj2BigeoKuyRGIxasVxbo= Subject key identifier: 1E:D4:2D:57:68:70:26:E4:BD:D0:13:9E:52:97:84:77:F0:2D:39:1E Certificate issuer: /CN=A911FCC1/serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240 Certificate serial: 0AF6 Authority key identifier: 82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/BFB35A9831E011EA91E99C3CC4F9AE02.roa Signing time: Sat 02 Nov 2024 19:27:55 +0000 ROA not before: Sat 02 Nov 2024 19:27:55 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 138566 IP address blocks: 103.133.32.0/22 maxlen: 24 2404:46c0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2806 (0xaf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FCC1/serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240 Validity Not Before: Nov 2 19:27:55 2024 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67267d3b-4cbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:51:93:56:87:f9:a0:d3:a3:0f:0a:f0:b5:6d: 49:7f:bc:5f:15:0c:b3:9b:48:c5:bc:33:f2:2c:95: 44:a2:32:99:ff:f7:c5:68:0f:b5:a5:e8:99:bb:b4: 45:49:55:17:8b:7e:1b:dc:f6:2a:38:f1:2a:11:a9: 2b:d2:76:00:a8:c1:1c:52:89:df:f3:d2:95:c1:0d: 35:3d:2a:4e:da:96:02:97:95:c4:4e:6a:55:a2:73: f9:49:d2:03:ab:f9:26:42:77:b8:73:4d:08:72:96: 29:76:b5:07:74:a7:71:41:6d:af:23:5c:6b:6d:a2: 04:de:ec:ed:1f:cc:cc:04:83:d9:eb:5c:57:dc:fb: 9e:07:97:67:08:57:2f:2b:91:95:9a:30:60:56:83: 17:5e:95:31:12:6f:c9:6e:2a:1d:e8:b2:8a:db:7d: 1a:7a:bc:15:12:17:34:2f:09:cc:ff:7e:d6:4d:28: 39:dc:f0:84:40:91:24:24:29:fe:04:5d:46:69:ef: 5e:ee:e6:d7:37:91:02:0c:82:a0:d4:18:eb:45:39: aa:4c:2e:05:96:64:ec:06:90:51:0f:54:95:06:59: d6:32:20:80:f7:96:cc:14:43:65:94:71:c8:ac:c1: 85:2a:91:83:93:67:45:f8:52:84:44:80:e6:8f:77: d4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D4:2D:57:68:70:26:E4:BD:D0:13:9E:52:97:84:77:F0:2D:39:1E X509v3 Authority Key Identifier: keyid:82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/BFB35A9831E011EA91E99C3CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.133.32.0/22 IPv6: 2404:46c0::/32 Signature Algorithm: sha256WithRSAEncryption 34:82:21:46:1a:93:b9:86:bf:1a:60:e2:ce:15:20:6c:d7:44: 24:36:24:4a:36:14:40:69:e7:df:23:f4:a6:09:de:ec:d0:34: 2a:76:e2:f2:7d:47:a5:eb:47:f6:0c:c9:82:f8:b3:73:a9:f9: 5f:64:99:7e:14:71:27:ac:25:f7:aa:fb:0a:53:79:a1:81:61: 53:29:3b:d8:21:04:53:1b:14:37:d8:dc:dc:3c:01:94:ea:1f: e4:0b:ee:56:cf:86:3d:47:fa:fe:5c:b8:cf:aa:e0:00:08:e9: cb:c7:c2:8a:c4:9c:6f:3e:ce:fa:b1:85:86:fb:d2:0f:49:07: 15:da:25:78:b4:a1:79:3f:39:89:cc:41:69:4c:52:96:de:03: 72:cc:ba:fe:ef:c5:95:eb:d5:cd:62:15:6d:ab:34:13:f7:af: d6:49:55:d0:fc:e2:96:5a:30:9f:63:7c:c1:1a:12:36:48:7c: 4c:49:c6:6c:4e:b1:be:1d:2b:f4:97:d5:91:b3:5f:00:53:a2: 36:75:a5:d1:c3:11:eb:3d:b1:47:fd:68:c5:ca:13:74:25:ac: 19:2f:50:db:5f:34:14:56:47:88:82:72:4a:b6:b8:ca:73:77: fa:86:a7:dd:6b:8c:08:42:04:94:58:ec:1d:41:3b:f7:ca:cf: c7:4a:e9:0a -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZDQzExMTAvBgNVBAUTKDgyMkFCQ0UwNDQxN0JFMTU3QjI4MzNCQTNCMDIzMERF MjM4NEMyNDAwHhcNMjQxMTAyMTkyNzU1WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzI2N2QzYi00Y2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1FGTVof5oNOjDwrwtW1Jf7xfFQyzm0jFvDPyLJVEojKZ//fFaA+1peiZu7RF SVUXi34b3PYqOPEqEakr0nYAqMEcUonf89KVwQ01PSpO2pYCl5XETmpVonP5SdID q/kmQne4c00IcpYpdrUHdKdxQW2vI1xrbaIE3uztH8zMBIPZ61xX3PueB5dnCFcv K5GVmjBgVoMXXpUxEm/Jbiod6LKK230aerwVEhc0LwnM/37WTSg53PCEQJEkJCn+ BF1Gae9e7ubXN5ECDIKg1BjrRTmqTC4FlmTsBpBRD1SVBlnWMiCA95bMFENllHHI rMGFKpGDk2dF+FKERIDmj3fUnwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFB7ULVdo cCbkvdATnlKXhHfwLTkeMB8GA1UdIwQYMBaAFIIqvOBEF74VeygzujsCMN4jhMJA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkNDMS8xNDk4RkM5RTMx RTAxMUVBODM3QkRFM0JDNEY5QUUwMi9naXE4NEVRWHZoVjdLRE82T3dJdzNpT0V3 a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dpcTg0RVFYdmhWN0tETzZPd0l3M2lPRXdrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUZDQzEvMTQ5OEZDOUUzMUUwMTFFQTgzN0JERTNCQzRGOUFFMDIvQkZCMzVBOTgz MUUwMTFFQTkxRTk5QzNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnhSAwDQQCAAIwBwMFACQERsAwDQYJKoZIhvcNAQELBQAD ggEBADSCIUYak7mGvxpg4s4VIGzXRCQ2JEo2FEBp598j9KYJ3uzQNCp24vJ9R6Xr R/YMyYL4s3Op+V9kmX4UcSesJfeq+wpTeaGBYVMpO9ghBFMbFDfY3Nw8AZTqH+QL 7lbPhj1H+v5cuM+q4AAI6cvHworEnG8+zvqxhYb70g9JBxXaJXi0oXk/OYnMQWlM UpbeA3LMuv7vxZXr1c1iFW2rNBP3r9ZJVdD84pZaMJ9jfMEaEjZIfExJxmxOsb4d K/SX1ZGzXwBTojZ1pdHDEes9sUf9aMXKE3QlrBkvUNtfNBRWR4iCckq2uMpzd/qG p91rjAhCBJRY7B1BO/fKz8dK6Qo= -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:26 2024 by rpki-client on console-fra.rpki-client.org