$ rpki-client -vvf rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/92C0558C1A3B11EC91C03279C4F9AE02.roa File: 92C0558C1A3B11EC91C03279C4F9AE02.roa (raw, json) Hash identifier: Po8XNqivSX/apsQ6A8498+GiwjVmcu8yptq2jnYeJQY= Subject key identifier: 18:5D:EF:F1:99:8E:39:8F:18:8F:AA:4E:45:0E:53:AF:D0:B8:1E:BA Certificate issuer: /CN=A912C1EC/serialNumber=74D303553E605C31511E9864C566599D4DB8A393 Certificate serial: 047F Authority key identifier: 74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/92C0558C1A3B11EC91C03279C4F9AE02.roa Signing time: Tue 29 Oct 2024 00:25:39 +0000 ROA not before: Tue 29 Oct 2024 00:25:39 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 147039 IP address blocks: 103.173.79.0/24 maxlen: 24 2001:df7:9980::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1151 (0x47f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C1EC/serialNumber=74D303553E605C31511E9864C566599D4DB8A393 Validity Not Before: Oct 29 00:25:39 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67202b83-f4d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a6:3a:2c:6d:85:2d:27:df:dc:21:e0:05:06: 84:07:75:20:90:8c:cd:a8:54:53:f6:50:5d:98:9e: b4:dd:d9:75:97:c7:c7:e7:e5:d6:c9:90:cd:5f:fa: eb:51:75:7d:4d:d1:66:44:7e:21:2f:c5:6a:8e:02: dd:4b:97:4c:b6:7b:b1:66:0f:1b:e1:f4:ae:cb:92: e2:28:ff:4e:1e:e1:39:65:10:50:03:58:b2:3e:b6: 11:e0:d8:3c:4f:c6:0a:1a:72:d7:03:dc:dd:4d:ea: c0:26:bc:9f:35:50:22:a1:af:d7:f0:dd:fc:41:d5: 6c:a1:0e:b9:29:14:28:09:93:4a:72:53:fb:6d:82: 5e:d4:ca:b7:32:1a:95:a7:37:5c:58:76:d3:75:06: 8b:49:1a:b6:00:b0:d5:81:1d:0b:bf:9d:39:df:2b: f5:81:7c:27:9b:c0:1f:b9:9d:d1:fd:d7:38:3e:de: 14:4d:89:61:8c:39:87:b5:e9:35:16:a0:dc:0f:85: bd:12:cc:c3:b4:77:e1:25:3a:c3:a5:6d:9e:22:22: d5:41:35:e2:13:1b:1a:34:85:f7:72:11:76:3a:b2: 4d:5e:4c:bd:49:4e:c2:51:d3:8f:51:45:42:c7:d4: 79:18:e3:63:ee:0e:c7:78:bf:0f:58:57:dc:18:f8: 7d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:5D:EF:F1:99:8E:39:8F:18:8F:AA:4E:45:0E:53:AF:D0:B8:1E:BA X509v3 Authority Key Identifier: keyid:74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/92C0558C1A3B11EC91C03279C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.173.79.0/24 IPv6: 2001:df7:9980::/48 Signature Algorithm: sha256WithRSAEncryption 55:1a:35:2e:37:4f:59:a8:e5:43:86:d7:f1:5a:52:ee:11:34: 52:b9:43:ce:b9:bf:21:82:a0:49:ed:0e:75:17:7d:3e:ba:e2: ec:9e:c8:3e:fb:2d:ca:01:5f:c9:6e:b7:43:54:5c:a7:b3:6e: 8f:2e:11:b1:b6:d4:74:a7:53:b1:f1:3e:56:3b:3b:13:59:68: f7:83:a4:2b:c2:07:a9:ad:9c:19:a2:b1:dc:b7:6c:42:21:8e: 14:80:ff:e5:0e:b9:c1:24:1d:95:0a:f2:0a:3e:19:95:8a:f7: 5a:50:8f:79:98:3d:db:09:55:09:fb:14:7f:96:23:d2:18:69: 63:58:c7:e8:73:d1:3f:bc:e9:a8:ee:cd:d5:d5:23:f1:b0:37: ef:c3:67:5d:11:a5:d6:71:4a:96:ea:98:e5:2c:75:cd:13:34: 81:61:d1:3c:b1:81:dd:e1:c6:a3:e1:02:03:07:02:0c:62:48: d1:c0:20:f3:d2:2c:81:96:28:d2:cf:ab:d4:0f:9e:f7:61:37: 2a:bf:f6:a6:22:38:ff:c5:c7:b1:80:86:1f:94:78:1e:c6:db: f1:00:3b:31:6c:23:b2:93:4c:9a:38:af:09:7f:02:8e:cb:27: 3b:e9:67:16:59:4e:fc:75:61:bb:46:73:b4:e3:a1:1f:fe:4e: 8e:01:af:63 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMxRUMxMTAvBgNVBAUTKDc0RDMwMzU1M0U2MDVDMzE1MTFFOTg2NEM1NjY1OTlE NERCOEEzOTMwHhcNMjQxMDI5MDAyNTM5WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzIwMmI4My1mNGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6Y6LG2FLSff3CHgBQaEB3UgkIzNqFRT9lBdmJ603dl1l8fH5+XWyZDNX/rr UXV9TdFmRH4hL8VqjgLdS5dMtnuxZg8b4fSuy5LiKP9OHuE5ZRBQA1iyPrYR4Ng8 T8YKGnLXA9zdTerAJryfNVAioa/X8N38QdVsoQ65KRQoCZNKclP7bYJe1Mq3MhqV pzdcWHbTdQaLSRq2ALDVgR0Lv5053yv1gXwnm8AfuZ3R/dc4Pt4UTYlhjDmHtek1 FqDcD4W9EszDtHfhJTrDpW2eIiLVQTXiExsaNIX3chF2OrJNXky9SU7CUdOPUUVC x9R5GONj7g7HeL8PWFfcGPh96wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBhd7/GZ jjmPGI+qTkUOU6/QuB66MB8GA1UdIwQYMBaAFHTTA1U+YFwxUR6YZMVmWZ1NuKOT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzFFQy9DMjUzMThDNDFB MjgxMUVDQkNDRjUwMTBDNEY5QUUwMi9kTk1EVlQ1Z1hERlJIcGhreFdaWm5VMjRv NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ROTURWVDVnWERGUkhwaGt4V1pablUyNG81TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkMxRUMvQzI1MzE4QzQxQTI4MTFFQ0JDQ0Y1MDEwQzRGOUFFMDIvOTJDMDU1OEMx QTNCMTFFQzkxQzAzMjc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnrU8wDwQCAAIwCQMHACABDfeZgDANBgkqhkiG9w0BAQsF AAOCAQEAVRo1LjdPWajlQ4bX8VpS7hE0UrlDzrm/IYKgSe0OdRd9Prri7J7IPvst ygFfyW63Q1Rcp7Nujy4RsbbUdKdTsfE+Vjs7E1lo94OkK8IHqa2cGaKx3LdsQiGO FID/5Q65wSQdlQryCj4ZlYr3WlCPeZg92wlVCfsUf5Yj0hhpY1jH6HPRP7zpqO7N 1dUj8bA378NnXRGl1nFKluqY5Sx1zRM0gWHRPLGB3eHGo+ECAwcCDGJI0cAg89Is gZYo0s+r1A+e92E3Kr/2piI4/8XHsYCGH5R4Hsbb8QA7MWwjspNMmjivCX8Cjssn O+lnFllO/HVhu0ZztOOhH/5OjgGvYw== -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:32 2024 by rpki-client on console-fra.rpki-client.org