$ rpki-client -vvf rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/AC21E1E8924411EE96AA9544C4F9AE02.roa File: AC21E1E8924411EE96AA9544C4F9AE02.roa (raw, json) Hash identifier: xTZDs1cESf1SGEobV9O/GqTj36xfVMlMR7VudfYRv7o= Subject key identifier: D7:E3:B2:E8:83:09:76:86:F6:B2:03:E8:7C:B0:E4:F6:B4:8C:1F:47 Certificate issuer: /CN=A912A471/serialNumber=A56AE72C66A64E6279C8CC9C0EFE4F3636902780 Certificate serial: A0 Authority key identifier: A5:6A:E7:2C:66:A6:4E:62:79:C8:CC:9C:0E:FE:4F:36:36:90:27:80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/AC21E1E8924411EE96AA9544C4F9AE02.roa Signing time: Thu 03 Oct 2024 05:09:15 +0000 ROA not before: Thu 03 Oct 2024 05:09:15 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 151649 IP address blocks: 103.249.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A471/serialNumber=A56AE72C66A64E6279C8CC9C0EFE4F3636902780 Validity Not Before: Oct 3 05:09:15 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66fe26fa-127e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c9:10:ae:fc:71:cf:96:33:ee:33:0d:e7:43: 1a:25:19:48:4e:c2:0e:47:4a:c1:6b:c1:72:95:28: fd:c3:42:1f:64:4e:e8:35:52:b9:f3:8d:5b:f8:9d: fb:ef:7d:c5:6a:63:82:7e:ad:8c:a5:bf:ac:a1:84: b1:61:aa:8c:7d:2c:cc:4a:07:e2:59:c5:7f:7d:1d: ca:38:4a:76:31:be:81:33:85:66:bc:1f:4d:1d:5e: 40:8f:28:a3:a3:3a:13:0e:00:24:39:a2:aa:40:10: 2f:c6:7d:eb:a4:69:dd:b5:ea:21:56:52:80:c1:61: 54:45:9b:cc:df:7b:3b:65:3a:ba:f4:26:64:fd:99: ab:8c:dc:98:ba:a1:2a:e6:96:46:6a:40:8c:f7:4e: 36:53:d5:4b:82:fe:2b:91:33:7a:f8:60:88:a6:6b: b9:9d:75:9b:8b:94:16:46:e5:05:80:3e:95:ec:fa: f2:ba:0c:7c:1a:8d:d4:0a:44:2a:1f:1e:92:72:4d: ba:ee:cc:35:00:27:1f:ae:8a:15:72:96:11:f5:ff: 8f:c8:27:30:33:27:00:c4:48:3a:79:8e:49:3b:a7: 0a:55:7a:4b:bc:76:cb:7b:7b:76:ac:09:07:ef:43: e2:94:12:67:66:c4:98:06:90:b9:c2:8e:97:e1:17: 6f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E3:B2:E8:83:09:76:86:F6:B2:03:E8:7C:B0:E4:F6:B4:8C:1F:47 X509v3 Authority Key Identifier: keyid:A5:6A:E7:2C:66:A6:4E:62:79:C8:CC:9C:0E:FE:4F:36:36:90:27:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/AC21E1E8924411EE96AA9544C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.249.202.0/24 Signature Algorithm: sha256WithRSAEncryption 67:fc:a2:9c:50:48:08:b5:c3:22:a9:a2:d6:41:87:17:88:47: 44:a1:a8:65:b3:8a:34:3e:c0:1b:4e:32:d8:12:c3:04:dc:62: 96:2b:8e:0f:42:61:80:cd:c6:25:9a:d2:f5:31:3b:9f:fa:d9: 3e:67:81:16:91:f4:5d:b0:da:24:5d:6b:4c:5a:ed:c8:10:2d: 0f:be:68:21:4f:e5:70:4c:1b:da:2a:27:5b:c0:52:02:1c:c2: 8a:44:6c:09:dc:9c:36:9d:f4:54:15:d0:0e:48:ee:5c:2c:48: 9e:79:70:ff:1b:bf:77:ed:b0:0e:e1:23:3d:ec:6c:0f:9a:e3: 12:32:55:16:be:4c:dd:b4:c5:bb:ba:18:24:84:e0:7e:5a:33: 70:e6:4a:16:dd:9a:da:82:51:8f:b1:cb:09:cd:57:75:d5:e2: 9d:d1:59:09:57:f5:84:b9:e5:8e:1a:3c:7d:a1:52:d4:2b:94: 15:01:72:61:2c:d1:1b:62:cd:4f:03:96:02:3b:14:c6:a7:ca: 83:88:e1:42:11:87:ec:21:fe:3a:2a:25:b1:8a:1a:61:60:be: c1:66:57:94:d7:91:cb:21:e4:9a:bf:2e:89:ec:2b:2d:3d:36: 41:24:41:ea:5f:d3:67:c2:90:4a:a1:9c:19:11:64:0d:83:42: 8c:95:5d:e5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE0NzExMTAvBgNVBAUTKEE1NkFFNzJDNjZBNjRFNjI3OUM4Q0M5QzBFRkU0RjM2 MzY5MDI3ODAwHhcNMjQxMDAzMDUwOTE1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZlMjZmYS0xMjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4MkQrvxxz5Yz7jMN50MaJRlITsIOR0rBa8FylSj9w0IfZE7oNVK5841b+J37 733FamOCfq2Mpb+soYSxYaqMfSzMSgfiWcV/fR3KOEp2Mb6BM4VmvB9NHV5Ajyij ozoTDgAkOaKqQBAvxn3rpGndteohVlKAwWFURZvM33s7ZTq69CZk/ZmrjNyYuqEq 5pZGakCM9042U9VLgv4rkTN6+GCIpmu5nXWbi5QWRuUFgD6V7Pryugx8Go3UCkQq Hx6Sck267sw1ACcfrooVcpYR9f+PyCcwMycAxEg6eY5JO6cKVXpLvHbLe3t2rAkH 70PilBJnZsSYBpC5wo6X4RdvTwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNfjsuiD CXaG9rID6Hyw5Pa0jB9HMB8GA1UdIwQYMBaAFKVq5yxmpk5iecjMnA7+TzY2kCeA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTQ3MS82RkU4QTJFRTky M0UxMUVFQjg0RjU2MkZDNEY5QUUwMi9wV3JuTEdhbVRtSjV5TXljRHY1UE5qYVFK NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXcm5MR2FtVG1KNXlNeWNEdjVQTmphUUo0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkE0NzEvNkZFOEEyRUU5MjNFMTFFRUI4NEY1NjJGQzRGOUFFMDIvQUMyMUUxRTg5 MjQ0MTFFRTk2QUE5NTQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn+cowDQYJKoZIhvcNAQELBQADggEBAGf8opxQSAi1wyKp otZBhxeIR0ShqGWzijQ+wBtOMtgSwwTcYpYrjg9CYYDNxiWa0vUxO5/62T5ngRaR 9F2w2iRda0xa7cgQLQ++aCFP5XBMG9oqJ1vAUgIcwopEbAncnDad9FQV0A5I7lws SJ55cP8bv3ftsA7hIz3sbA+a4xIyVRa+TN20xbu6GCSE4H5aM3DmShbdmtqCUY+x ywnNV3XV4p3RWQlX9YS55Y4aPH2hUtQrlBUBcmEs0RtizU8DlgI7FManyoOI4UIR h+wh/joqJbGKGmFgvsFmV5TXkcsh5Jq/LonsKy09NkEkQepf02fCkEqhnBkRZA2D QoyVXeU= -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:45 2024 by rpki-client on console-fra.rpki-client.org