$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/476C306204A711EEA68A0D2FC4F9AE02.roa File: 476C306204A711EEA68A0D2FC4F9AE02.roa (raw, json) Hash identifier: 5chjhG+4S2xwB6V67WC6HZP171qygBdUyTwykp33M5Q= Subject key identifier: 16:17:3F:89:2B:E4:1E:B8:56:14:3B:31:AA:70:C7:8D:C1:D8:DE:7A Certificate issuer: /CN=A912AF79/serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7 Certificate serial: CF Authority key identifier: 6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/476C306204A711EEA68A0D2FC4F9AE02.roa Signing time: Sat 29 Jun 2024 06:07:39 +0000 ROA not before: Sat 29 Jun 2024 06:07:39 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 151329 IP address blocks: 103.170.98.0/24 maxlen: 24 103.170.99.0/24 maxlen: 24 2001:df2:7440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AF79/serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7 Validity Not Before: Jun 29 06:07:39 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=667fa4ab-7483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:53:ca:8b:dc:3b:53:a4:49:2f:59:8c:f0:7b: f2:5a:af:7a:ce:2f:92:ca:e8:7f:b7:56:16:ea:ea: 62:a0:fe:6f:03:25:05:b8:5b:3f:b3:84:6a:f5:7f: 40:14:82:dd:3c:c1:1a:a5:af:48:ad:05:82:14:46: d9:b8:9f:e6:74:00:9c:86:b0:fc:32:21:37:6f:2d: 9b:5d:b1:ec:28:a2:ba:30:e9:26:b0:2f:9a:08:1f: 54:3e:f5:b9:90:b4:e0:f2:1e:16:f1:fa:a7:87:77: 40:82:06:9e:a0:34:cf:cb:70:c7:86:83:02:52:b4: 27:34:3f:24:47:7f:9f:8b:a7:80:30:b3:03:39:83: 45:78:3d:10:e2:a1:57:05:4a:5a:58:38:10:36:d6: db:a2:b2:13:d7:a0:e2:ce:4a:7e:03:7a:c6:1c:66: 5a:21:12:9e:11:07:87:3a:f8:ba:aa:04:54:9e:14: ec:93:09:d1:2d:2a:0f:a7:7e:b0:49:64:30:8d:f2: 27:2b:98:ca:ea:ad:dc:fc:c8:5b:20:2e:b5:d7:de: b5:e1:7e:23:bc:2f:cb:3c:7b:b3:79:ad:4e:35:f2: d8:8d:79:60:e0:73:17:9c:08:3b:39:99:2b:90:ff: 1a:a8:4a:44:ff:13:bd:2e:42:7b:59:e5:dc:18:cd: b0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:17:3F:89:2B:E4:1E:B8:56:14:3B:31:AA:70:C7:8D:C1:D8:DE:7A X509v3 Authority Key Identifier: keyid:6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/476C306204A711EEA68A0D2FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.170.98.0/23 IPv6: 2001:df2:7440::/48 Signature Algorithm: sha256WithRSAEncryption 43:fb:ba:d2:a1:4d:32:6d:61:e8:72:dc:69:90:99:00:8e:98: 04:68:3e:46:b6:a1:e3:90:79:2f:de:48:24:54:31:a5:a8:f0: 53:30:14:9e:11:aa:7b:5f:b1:b0:bd:3f:da:54:c2:de:2d:c4: f8:26:ca:e8:d2:b6:f9:f3:11:ed:49:62:21:37:30:4e:91:f8: 15:7e:1b:78:cc:5d:33:01:95:e9:91:b8:37:1c:35:12:b0:d0: 53:df:d6:36:04:bd:77:70:97:2c:97:14:a8:a3:37:19:79:ac: c0:e7:38:e3:5c:3a:b6:23:84:54:82:97:f4:fa:6a:7e:c7:e0: a1:3c:5f:b1:6d:c0:b6:2f:52:57:44:34:78:8b:c8:d5:7d:2a: f1:62:35:73:27:2b:ff:79:86:ae:3c:6f:26:b0:a8:c5:b3:13: 30:cc:7c:c7:6f:be:22:43:73:98:b9:12:de:2d:24:82:0e:e6: 9b:2f:8e:ec:86:03:38:c0:2e:e0:18:6c:2c:38:cf:a1:69:eb: 19:72:d7:66:72:93:fe:29:fd:d5:e5:10:f3:ad:1b:b4:6a:cd: 8f:9d:ec:73:40:61:12:fc:17:d2:ad:7b:04:e0:6d:0f:f6:99: a2:9a:22:14:b9:14:b9:1d:ef:02:36:7c:c2:5e:46:30:90:34: e5:27:fa:3f -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFGNzkxMTAvBgNVBAUTKDZCRDhDMEExMTUwMEIzQ0EwRkVDNEE5RkQzNDBDMzEy MDU5NUIwQzcwHhcNMjQwNjI5MDYwNzM5WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjdmYTRhYi03NDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4FPKi9w7U6RJL1mM8HvyWq96zi+Syuh/t1YW6upioP5vAyUFuFs/s4Rq9X9A FILdPMEapa9IrQWCFEbZuJ/mdACchrD8MiE3by2bXbHsKKK6MOkmsC+aCB9UPvW5 kLTg8h4W8fqnh3dAggaeoDTPy3DHhoMCUrQnND8kR3+fi6eAMLMDOYNFeD0Q4qFX BUpaWDgQNtbborIT16Dizkp+A3rGHGZaIRKeEQeHOvi6qgRUnhTskwnRLSoPp36w SWQwjfInK5jK6q3c/MhbIC6119614X4jvC/LPHuzea1ONfLYjXlg4HMXnAg7OZkr kP8aqEpE/xO9LkJ7WeXcGM2wJwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBYXP4kr 5B64VhQ7Mapwx43B2N56MB8GA1UdIwQYMBaAFGvYwKEVALPKD+xKn9NAwxIFlbDH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUY3OS9EMEY4NkQ3MkZF MDQxMUVEOTA1RTIxNkJDNEY5QUUwMi9hOWpBb1JVQXM4b1A3RXFmMDBEREVnV1Zz TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E5akFvUlVBczhvUDdFcWYwMERERWdXVnNNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkFGNzkvRDBGODZENzJGRTA0MTFFRDkwNUUyMTZCQzRGOUFFMDIvNDc2QzMwNjIw NEE3MTFFRUE2OEEwRDJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnqmIwDwQCAAIwCQMHACABDfJ0QDANBgkqhkiG9w0BAQsF AAOCAQEAQ/u60qFNMm1h6HLcaZCZAI6YBGg+Rrah45B5L95IJFQxpajwUzAUnhGq e1+xsL0/2lTC3i3E+CbK6NK2+fMR7UliITcwTpH4FX4beMxdMwGV6ZG4Nxw1ErDQ U9/WNgS9d3CXLJcUqKM3GXmswOc441w6tiOEVIKX9PpqfsfgoTxfsW3Ati9SV0Q0 eIvI1X0q8WI1cycr/3mGrjxvJrCoxbMTMMx8x2++IkNzmLkS3i0kgg7mmy+O7IYD OMAu4BhsLDjPoWnrGXLXZnKT/in91eUQ860btGrNj53sc0BhEvwX0q17BOBtD/aZ opoiFLkUuR3vAjZ8wl5GMJA05Sf6Pw== -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:36 2024 by rpki-client on console-ams.rpki-client.org