$ rpki-client -vvf rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/07E789A228F011ED94BE9345C4F9AE02.roa File: 07E789A228F011ED94BE9345C4F9AE02.roa (raw, json) Hash identifier: jWdCBukfmwdIx7AmCNNn8IWevCXBAGWSyySXEJZ9MpI= Subject key identifier: F9:C7:CF:6E:A4:38:75:3F:4D:F2:2A:36:FA:63:BE:A0:72:B7:1C:A5 Certificate issuer: /CN=A912087D/serialNumber=42A84D8C0889ADC55860663993BCCA8361271BFE Certificate serial: 01B5 Authority key identifier: 42:A8:4D:8C:08:89:AD:C5:58:60:66:39:93:BC:CA:83:61:27:1B:FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/07E789A228F011ED94BE9345C4F9AE02.roa Signing time: Wed 25 Sep 2024 02:36:00 +0000 ROA not before: Wed 25 Sep 2024 02:36:00 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 150291 IP address blocks: 103.156.148.0/23 maxlen: 23 103.156.148.0/24 maxlen: 24 103.156.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912087D/serialNumber=42A84D8C0889ADC55860663993BCCA8361271BFE Validity Not Before: Sep 25 02:36:00 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66f37710-bb91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ce:3e:4c:7c:0a:4a:11:1f:74:ca:c7:e5:fe: eb:57:2b:44:6b:78:e0:8c:0f:35:47:96:e6:dd:94: 4c:ba:81:42:05:4c:54:03:a6:58:7f:94:f3:29:b3: b4:b2:c0:9c:bd:a5:3f:12:04:d4:0e:d6:62:ed:d6: 5d:11:a2:50:8a:ed:4e:33:0e:05:ac:70:d7:47:77: 80:bd:ee:b9:fa:c9:f0:ae:70:92:7f:e4:18:ad:94: 2e:cd:c3:a7:6b:7c:3d:46:19:f2:9c:1c:17:08:88: a9:74:94:38:a3:f5:89:7c:e4:20:cb:7b:df:3b:23: 4e:87:27:65:aa:53:bd:57:e3:2c:5f:e6:49:1b:71: ac:6b:92:5e:03:ec:53:a2:34:a2:fd:17:d8:0b:81: 4b:12:5e:d2:7f:d8:5e:26:9d:59:e9:b8:7b:72:ca: a1:ec:07:8e:20:5d:d2:a4:65:4a:c5:21:92:e4:31: 74:79:c8:af:a2:ff:c1:f3:7c:3a:bf:3c:1f:c3:84: ac:97:2b:57:ca:dc:a4:e1:ad:08:66:ed:24:68:04: c0:1c:25:d4:07:0a:c9:10:c8:b5:bd:eb:36:31:a5: 5a:a5:89:1f:8a:2e:0a:f5:c1:32:d5:73:ba:45:52: 41:6a:9e:71:9a:5c:1c:98:e7:18:e3:ee:15:09:44: 0c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C7:CF:6E:A4:38:75:3F:4D:F2:2A:36:FA:63:BE:A0:72:B7:1C:A5 X509v3 Authority Key Identifier: keyid:42:A8:4D:8C:08:89:AD:C5:58:60:66:39:93:BC:CA:83:61:27:1B:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/07E789A228F011ED94BE9345C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.148.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:76:58:3c:a0:ad:08:8e:d2:84:5c:0e:e0:fb:9f:52:8b:d3: 06:52:ac:07:19:cf:26:33:c2:06:98:62:3b:b2:44:5e:9d:e1: 6f:fd:03:17:e9:03:4d:fb:7a:42:60:f7:ba:07:3f:45:3b:f4: 42:19:ef:1b:ba:63:7b:df:92:3b:a0:63:99:7c:8a:69:68:8c: 10:8e:ce:52:27:b2:da:2f:af:1f:8f:69:24:06:9e:9e:16:25: 3b:95:47:ce:27:65:4d:61:a4:f5:9f:83:87:9b:35:b0:f9:4b: 24:bf:c7:8d:fd:02:9d:9f:2a:19:fd:37:a4:25:90:18:dd:a8: 98:47:53:5b:10:7c:72:56:ce:72:59:18:d2:5a:56:6f:b2:9b: e9:a7:14:33:88:98:b5:92:6f:5c:c9:2d:2d:5f:dd:42:b1:e7: 36:bf:b4:53:14:63:cd:62:1e:c0:00:e7:ca:9d:65:63:84:05: 05:32:78:3c:0e:ad:a5:ab:65:f3:d8:9d:18:9a:4c:ee:42:8b: 28:5b:32:41:63:bc:8a:49:18:3d:a2:d0:d6:51:7f:cd:de:a5: 89:c6:6d:0c:6b:4d:62:fc:ca:6b:65:98:34:11:70:73:a2:7a: 67:91:4c:6a:52:12:86:3e:f6:f5:69:46:e4:ed:81:7d:5d:88: 72:af:e7:b3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA4N0QxMTAvBgNVBAUTKDQyQTg0RDhDMDg4OUFEQzU1ODYwNjYzOTkzQkNDQTgz NjEyNzFCRkUwHhcNMjQwOTI1MDIzNjAwWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmYzNzcxMC1iYjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5M4+THwKShEfdMrH5f7rVytEa3jgjA81R5bm3ZRMuoFCBUxUA6ZYf5TzKbO0 ssCcvaU/EgTUDtZi7dZdEaJQiu1OMw4FrHDXR3eAve65+snwrnCSf+QYrZQuzcOn a3w9RhnynBwXCIipdJQ4o/WJfOQgy3vfOyNOhydlqlO9V+MsX+ZJG3Gsa5JeA+xT ojSi/RfYC4FLEl7Sf9heJp1Z6bh7csqh7AeOIF3SpGVKxSGS5DF0ecivov/B83w6 vzwfw4SslytXytyk4a0IZu0kaATAHCXUBwrJEMi1ves2MaVapYkfii4K9cEy1XO6 RVJBap5xmlwcmOcY4+4VCUQMdwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPnHz26k OHU/TfIqNvpjvqBytxylMB8GA1UdIwQYMBaAFEKoTYwIia3FWGBmOZO8yoNhJxv+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDg3RC80QzE1ODU4QzI4 RUQxMUVEOEI1OTdCNDBDNEY5QUUwMi9RcWhOakFpSnJjVllZR1k1azd6S2cyRW5H XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FxaE5qQWlKcmNWWVlHWTVrN3pLZzJFbkdfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjA4N0QvNEMxNTg1OEMyOEVEMTFFRDhCNTk3QjQwQzRGOUFFMDIvMDdFNzg5QTIy OEYwMTFFRDk0QkU5MzQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnnJQwDQYJKoZIhvcNAQELBQADggEBABp2WDygrQiO0oRc DuD7n1KL0wZSrAcZzyYzwgaYYjuyRF6d4W/9AxfpA037ekJg97oHP0U79EIZ7xu6 Y3vfkjugY5l8imlojBCOzlInstovrx+PaSQGnp4WJTuVR84nZU1hpPWfg4ebNbD5 SyS/x439Ap2fKhn9N6QlkBjdqJhHU1sQfHJWznJZGNJaVm+ym+mnFDOImLWSb1zJ LS1f3UKx5za/tFMUY81iHsAA58qdZWOEBQUyeDwOraWrZfPYnRiaTO5CiyhbMkFj vIpJGD2i0NZRf83epYnGbQxrTWL8ymtlmDQRcHOiemeRTGpSEoY+9vVpRuTtgX1d iHKv57M= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:35 2024 by rpki-client on console-ams.rpki-client.org