$ rpki-client -vvf rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/3C24D492BF6911EAA877B317C4F9AE02.roa File: 3C24D492BF6911EAA877B317C4F9AE02.roa (raw, json) Hash identifier: HZcGG22h/HtJGmyJDeOn4oUgEJpbcKg45t8DnTIstz4= Subject key identifier: 0E:F2:39:E3:32:24:F9:CD:0D:07:C5:8E:33:15:BE:AF:07:1C:A2:8B Certificate issuer: /CN=A912A4D7/serialNumber=556CA8B09747D07B6F6A27A405528D39FA5B824C Certificate serial: 07E3 Authority key identifier: 55:6C:A8:B0:97:47:D0:7B:6F:6A:27:A4:05:52:8D:39:FA:5B:82:4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VWyosJdH0HtvaiekBVKNOfpbgkw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/3C24D492BF6911EAA877B317C4F9AE02.roa Signing time: Tue 02 Jul 2024 21:49:05 +0000 ROA not before: Tue 02 Jul 2024 21:49:05 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 140878 IP address blocks: 103.152.214.0/23 maxlen: 24 2001:df4:1d80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.crl rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VWyosJdH0HtvaiekBVKNOfpbgkw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2019 (0x7e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A4D7/serialNumber=556CA8B09747D07B6F6A27A405528D39FA5B824C Validity Not Before: Jul 2 21:49:05 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=668475d1-f257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:76:f2:da:7c:da:1f:3e:b5:ee:95:e0:dc:d9: 09:c9:79:c7:95:ca:4d:c9:bb:66:7d:32:0c:4c:2f: 81:e9:9c:0b:3b:2c:47:21:85:96:80:3f:53:68:ef: 6e:53:03:5f:05:cf:6b:b8:25:bc:17:c5:e1:01:78: 76:d7:a2:bc:35:53:75:a7:d7:e3:f6:57:a2:48:93: 35:a5:8e:30:2d:99:8a:3c:a7:64:8c:40:32:48:ab: e2:60:73:26:c5:09:9b:28:1b:52:7c:3c:2d:03:b9: 1e:a0:2d:38:cd:8d:d6:8c:84:49:e5:45:e0:9e:ce: 0a:77:e6:30:75:a7:bf:d2:ec:bb:d6:e6:4c:33:d0: 56:a7:84:42:6e:86:5e:c9:b1:a5:01:ec:78:4a:2e: be:10:82:db:16:62:57:4e:30:65:e6:24:d2:34:94: 90:92:2d:fb:c6:74:b9:2b:83:82:1f:f7:97:29:0a: 3e:3f:7e:a0:1a:76:e0:72:ac:a1:5b:c2:a7:41:25: 41:9f:dc:05:3b:72:2d:02:85:cd:51:2a:45:f2:34: 3d:d5:22:38:5d:7d:ae:33:57:84:bc:6f:f7:fa:99: e6:48:1a:aa:28:c3:a3:11:b4:12:0f:3c:de:67:7c: b6:20:85:c6:82:60:71:f3:7a:25:32:15:9b:34:38: 64:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F2:39:E3:32:24:F9:CD:0D:07:C5:8E:33:15:BE:AF:07:1C:A2:8B X509v3 Authority Key Identifier: keyid:55:6C:A8:B0:97:47:D0:7B:6F:6A:27:A4:05:52:8D:39:FA:5B:82:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VWyosJdH0HtvaiekBVKNOfpbgkw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/3C24D492BF6911EAA877B317C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.214.0/23 IPv6: 2001:df4:1d80::/48 Signature Algorithm: sha256WithRSAEncryption 34:6f:3a:78:4c:e1:6e:78:8b:c2:01:2b:23:0d:00:98:a6:48: a7:3e:28:6d:c1:d1:c1:0a:4f:e6:f0:36:97:1d:92:9d:31:0a: a3:7a:27:97:15:a2:6a:69:a7:03:48:5d:73:79:cd:a9:e9:e0: aa:28:5b:6c:46:c9:a0:cb:64:f7:3a:0d:1c:d6:70:bd:12:db: d3:c8:d9:22:8a:ad:15:c7:12:7d:bf:3c:4d:36:c2:0b:b0:61: 70:60:5a:bf:67:41:44:67:29:4c:07:d4:b5:d4:cc:4d:71:cb: 86:07:8c:46:4c:40:a7:bd:8b:a0:ad:40:f6:a6:60:5c:13:9c: 98:18:9c:e2:95:43:1e:43:91:c3:7a:9d:b6:66:d1:a4:9a:c5: 58:36:fa:77:98:fa:92:b4:ba:2c:ca:7b:53:10:87:14:37:88: 23:9e:21:75:d3:d9:8c:1d:31:3d:45:27:aa:97:6d:56:7b:10: b9:66:c5:28:80:48:d6:06:a5:d1:9f:24:f6:c0:2f:4e:85:a2: ff:30:51:09:f9:59:37:60:00:91:04:7f:49:a0:2f:3f:65:ff: 01:bf:9f:57:0c:42:c2:a1:f8:12:90:fc:72:22:05:90:94:26: 56:ba:72:01:fa:db:ab:87:1f:55:6d:31:36:12:12:9f:2c:56: 69:e8:6b:c2 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICB+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE0RDcxMTAvBgNVBAUTKDU1NkNBOEIwOTc0N0QwN0I2RjZBMjdBNDA1NTI4RDM5 RkE1QjgyNEMwHhcNMjQwNzAyMjE0OTA1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njg0NzVkMS1mMjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoXby2nzaHz617pXg3NkJyXnHlcpNybtmfTIMTC+B6ZwLOyxHIYWWgD9TaO9u UwNfBc9ruCW8F8XhAXh216K8NVN1p9fj9leiSJM1pY4wLZmKPKdkjEAySKviYHMm xQmbKBtSfDwtA7keoC04zY3WjIRJ5UXgns4Kd+Ywdae/0uy71uZMM9BWp4RCboZe ybGlAex4Si6+EILbFmJXTjBl5iTSNJSQki37xnS5K4OCH/eXKQo+P36gGnbgcqyh W8KnQSVBn9wFO3ItAoXNUSpF8jQ91SI4XX2uM1eEvG/3+pnmSBqqKMOjEbQSDzze Z3y2IIXGgmBx83olMhWbNDhkEwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFA7yOeMy JPnNDQfFjjMVvq8HHKKLMB8GA1UdIwQYMBaAFFVsqLCXR9B7b2onpAVSjTn6W4JM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTRENy9CRDBDMDNGMkJG NjcxMUVBQjNCQjE4MTVDNEY5QUUwMi9WV3lvc0pkSDBIdHZhaWVrQlZLTk9mcGJn a3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZXeW9zSmRIMEh0dmFpZWtCVktOT2ZwYmdrdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkE0RDcvQkQwQzAzRjJCRjY3MTFFQUIzQkIxODE1QzRGOUFFMDIvM0MyNEQ0OTJC RjY5MTFFQUE4NzdCMzE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnmNYwDwQCAAIwCQMHACABDfQdgDANBgkqhkiG9w0BAQsF AAOCAQEANG86eEzhbniLwgErIw0AmKZIpz4obcHRwQpP5vA2lx2SnTEKo3onlxWi ammnA0hdc3nNqengqihbbEbJoMtk9zoNHNZwvRLb08jZIoqtFccSfb88TTbCC7Bh cGBav2dBRGcpTAfUtdTMTXHLhgeMRkxAp72LoK1A9qZgXBOcmBic4pVDHkORw3qd tmbRpJrFWDb6d5j6krS6LMp7UxCHFDeII54hddPZjB0xPUUnqpdtVnsQuWbFKIBI 1gal0Z8k9sAvToWi/zBRCflZN2AAkQR/SaAvP2X/Ab+fVwxCwqH4EpD8ciIFkJQm VrpyAfrbq4cfVW0xNhISnyxWaehrwg== -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:06 2024 by rpki-client on console-fra.rpki-client.org