$ rpki-client -vvf rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/42B13940C3C011EE86C2C317C4F9AE02.roa File: 42B13940C3C011EE86C2C317C4F9AE02.roa (raw, json) Hash identifier: LGFMxkvmdVELBOkg0tqQjRMiBrTGNLnJnZeQEwD+enQ= Subject key identifier: A8:70:83:5E:B0:91:DF:61:1A:32:51:28:91:7C:E6:1A:DA:AA:86:F9 Certificate issuer: /CN=A912BBC9/serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28 Certificate serial: 08BB Authority key identifier: D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/42B13940C3C011EE86C2C317C4F9AE02.roa Signing time: Tue 08 Oct 2024 20:59:17 +0000 ROA not before: Tue 08 Oct 2024 20:59:17 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 139351 IP address blocks: 103.141.158.0/24 maxlen: 24 103.141.159.0/24 maxlen: 24 2400:17a0::/48 maxlen: 48 2400:17a0:1::/48 maxlen: 48 2400:17a0:2::/48 maxlen: 48 2400:17a0:3::/48 maxlen: 48 2400:17a0:4::/48 maxlen: 48 2400:17a0:5::/48 maxlen: 48 2400:17a0:6::/48 maxlen: 48 2400:17a0:7::/48 maxlen: 48 2400:17a0:8::/48 maxlen: 48 2400:17a0:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2235 (0x8bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BBC9/serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28 Validity Not Before: Oct 8 20:59:17 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67059d24-c7c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:33:d1:c7:45:d8:d2:ab:88:25:57:4a:bd:45: fb:64:8f:d0:84:0d:b9:cc:5f:ab:1a:44:92:28:6b: 3a:dd:b1:62:43:c9:76:06:01:ab:05:a4:95:e7:91: b1:cc:ba:42:c4:93:de:9d:64:62:06:71:3d:be:48: 40:16:e1:89:e6:7f:d8:fa:8a:48:5e:43:b8:67:85: 97:85:61:e3:a4:6f:3d:c5:20:b8:df:2a:33:33:e9: 41:cd:51:ad:71:fd:a2:c2:0e:6e:21:4e:05:3d:d2: 44:aa:e3:40:22:9c:1d:cd:a9:88:6c:b7:bb:fc:8b: 85:71:e2:21:22:44:63:15:ab:aa:d5:57:63:da:ce: f9:6d:20:52:07:a0:e4:c5:7f:bc:2e:bb:aa:9b:7f: 0c:cc:e3:a0:71:3b:19:59:58:14:31:97:e5:2f:a8: ef:e2:a8:d2:f7:22:98:97:49:86:c2:24:0f:10:7a: 21:d4:d1:e6:db:55:64:41:cc:78:a7:70:70:b2:9a: d5:0a:9e:6d:f3:9e:d4:c4:52:46:19:06:17:e0:2a: a7:48:05:c9:12:e2:db:f8:00:81:05:fe:10:6d:3d: 99:04:ed:b1:a3:c1:f0:64:9c:3e:73:78:0b:60:a6: 0c:b8:e5:c1:73:ed:99:89:50:11:93:65:75:32:78: 66:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:70:83:5E:B0:91:DF:61:1A:32:51:28:91:7C:E6:1A:DA:AA:86:F9 X509v3 Authority Key Identifier: keyid:D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/42B13940C3C011EE86C2C317C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.141.158.0/23 IPv6: 2400:17a0::-2400:17a0:9:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 94:3f:58:1e:8f:e4:9e:a4:24:a2:73:53:f0:9b:7f:b7:9e:c0: 97:70:6f:41:03:47:20:24:bb:c9:01:32:15:25:e0:82:33:5e: 90:4c:4f:82:e9:d6:53:d1:c9:ec:58:25:5c:5a:1b:2f:2b:3c: 74:15:2d:88:14:5a:aa:af:6b:40:5d:76:0f:b6:c0:a8:6b:02: 21:51:c2:45:65:f4:9f:e8:00:d2:d6:30:2d:4b:fb:8d:15:8e: 1d:72:04:f8:b7:08:2f:c7:da:a1:6d:a7:5b:a8:65:88:f6:82: c9:b3:36:83:a5:60:74:d1:a3:78:ca:fe:28:4b:0c:11:39:ad: 8b:fe:e1:73:c1:02:c4:06:db:4f:87:e3:76:af:9e:76:8d:0a: c9:9c:3a:6b:4f:bb:d5:1b:b2:0f:ed:a6:f6:c8:fb:08:6f:ac: 95:b7:c3:79:d5:e5:c6:9b:3c:f2:2b:3a:1b:08:ae:c2:e9:19: ab:8a:f8:05:87:b9:9f:82:4a:78:66:13:be:a8:a2:48:c6:9b: d7:a3:66:bf:06:8c:38:bc:26:8a:75:ce:e3:22:7d:cc:f5:27: 41:d8:56:c1:f2:bd:df:39:43:d4:c4:b9:74:73:2f:5b:a8:8a: 21:0b:7a:21:f7:bf:9f:ae:2f:9b:27:c8:c3:bd:90:74:fc:c3: bd:2f:f5:77 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICCLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJCQzkxMTAvBgNVBAUTKEQzQjcyMTVFMTY2MEExOUVGRDJFNzcyRjlCQTdBN0JE QzZFRTBEMjgwHhcNMjQxMDA4MjA1OTE3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzA1OWQyNC1jN2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDPRx0XY0quIJVdKvUX7ZI/QhA25zF+rGkSSKGs63bFiQ8l2BgGrBaSV55Gx zLpCxJPenWRiBnE9vkhAFuGJ5n/Y+opIXkO4Z4WXhWHjpG89xSC43yozM+lBzVGt cf2iwg5uIU4FPdJEquNAIpwdzamIbLe7/IuFceIhIkRjFauq1Vdj2s75bSBSB6Dk xX+8Lruqm38MzOOgcTsZWVgUMZflL6jv4qjS9yKYl0mGwiQPEHoh1NHm21VkQcx4 p3BwsprVCp5t857UxFJGGQYX4CqnSAXJEuLb+ACBBf4QbT2ZBO2xo8HwZJw+c3gL YKYMuOXBc+2ZiVARk2V1MnhmfQIDAQABo4ICrzCCAqswHQYDVR0OBBYEFKhwg16w kd9hGjJRKJF85hraqob5MB8GA1UdIwQYMBaAFNO3IV4WYKGe/S53L5unp73G7g0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkJDOS84M0ZGOUZFQ0FB ODExMUVBQjQyQTA0MzNDNEY5QUUwMi8wN2NoWGhaZ29aNzlMbmN2bTZlbnZjYnVE U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3Y2hYaFpnb1o3OUxuY3ZtNmVudmNidURTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkJCQzkvODNGRjlGRUNBQTgxMTFFQUI0MkEwNDMzQzRGOUFFMDIvNDJCMTM5NDBD M0MwMTFFRTg2QzJDMzE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMAwEAgABMAYDBAFnjZ4wGAQCAAIwEjAQAwUFJAAXoAMHASQAF6AACDANBgkq hkiG9w0BAQsFAAOCAQEAlD9YHo/knqQkonNT8Jt/t57Al3BvQQNHICS7yQEyFSXg gjNekExPgunWU9HJ7FglXFobLys8dBUtiBRaqq9rQF12D7bAqGsCIVHCRWX0n+gA 0tYwLUv7jRWOHXIE+LcIL8faoW2nW6hliPaCybM2g6VgdNGjeMr+KEsMETmti/7h c8ECxAbbT4fjdq+edo0KyZw6a0+71RuyD+2m9sj7CG+slbfDedXlxps88is6Gwiu wukZq4r4BYe5n4JKeGYTvqiiSMab16NmvwaMOLwminXO4yJ9zPUnQdhWwfK93zlD 1MS5dHMvW6iKIQt6Ife/n64vmyfIw72QdPzDvS/1dw== -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:27 2024 by rpki-client on console-fra.rpki-client.org