$ rpki-client -vvf rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/BF195C829CD211EBA0E3CB58C4F9AE02.roa File: BF195C829CD211EBA0E3CB58C4F9AE02.roa (raw, json) Hash identifier: mfyk2fX8qp7Cd9NT+aeakKLsbIUS87BsuyFLFMAwavc= Subject key identifier: E4:C8:CD:D1:9F:26:44:DB:E9:04:40:8F:9C:B8:CD:33:A3:8F:8F:0B Certificate issuer: /CN=A913C437/serialNumber=79DF10253535F0D67FA11DB68A4C7634AA6A447C Certificate serial: 056C Authority key identifier: 79:DF:10:25:35:35:F0:D6:7F:A1:1D:B6:8A:4C:76:34:AA:6A:44:7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed8QJTU18NZ_oR22ikx2NKpqRHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/BF195C829CD211EBA0E3CB58C4F9AE02.roa Signing time: Fri 31 May 2024 01:45:33 +0000 ROA not before: Fri 31 May 2024 01:45:32 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 142054 IP address blocks: 103.166.24.0/23 maxlen: 24 2001:df6:7a80::/48 maxlen: 48 2001:df6:7a80::/50 maxlen: 50 2001:df6:7a80:4000::/50 maxlen: 50 2001:df6:7a80:8000::/50 maxlen: 50 2001:df6:7a80:c000::/50 maxlen: 50 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.crl rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed8QJTU18NZ_oR22ikx2NKpqRHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1388 (0x56c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C437/serialNumber=79DF10253535F0D67FA11DB68A4C7634AA6A447C Validity Not Before: May 31 01:45:32 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66592bbc-ecd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f2:4d:13:80:3c:e8:83:31:f3:2e:8c:3f:d8: eb:d7:19:27:37:67:7f:38:fe:9a:80:d8:01:b4:94: 5f:4f:10:5b:01:63:53:a7:dc:93:82:2f:66:13:86: a4:de:e2:2d:1b:b8:d8:e9:ff:2e:18:d9:7f:dc:6d: 96:c0:97:4a:ed:ff:83:a1:97:9c:8d:e9:66:df:7a: 19:c1:fe:da:6e:0e:04:87:1e:c8:10:c2:26:f7:3e: 62:8b:9d:76:25:ee:dc:cb:13:ad:b4:76:36:8f:9d: aa:80:30:63:8b:18:42:d8:03:b0:2a:9e:7f:9a:0c: 46:84:3f:3a:d8:2f:7a:a8:d9:71:82:a8:8b:25:d2: ff:ef:82:85:76:52:0a:87:fa:3e:e9:cf:49:ed:ea: 25:e6:73:15:2e:dc:2a:7d:7a:8b:23:8c:41:f5:17: 0f:d9:d6:ac:c1:79:1f:6a:5b:28:d2:ba:9d:30:d1: 01:b5:bb:61:e1:a3:50:fa:31:8b:c9:78:46:78:fd: d7:6f:d7:50:f9:17:c6:be:71:57:3f:25:d0:02:3d: 05:81:7d:54:6a:6e:a2:ca:01:29:15:61:fd:b0:d5: 58:5d:fb:ab:c7:95:10:44:3e:a5:2d:c8:0d:2d:b4: bf:c5:8d:c4:d6:a6:a1:50:39:27:a9:9b:09:1e:8d: 78:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C8:CD:D1:9F:26:44:DB:E9:04:40:8F:9C:B8:CD:33:A3:8F:8F:0B X509v3 Authority Key Identifier: keyid:79:DF:10:25:35:35:F0:D6:7F:A1:1D:B6:8A:4C:76:34:AA:6A:44:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed8QJTU18NZ_oR22ikx2NKpqRHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/BF195C829CD211EBA0E3CB58C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.166.24.0/23 IPv6: 2001:df6:7a80::/48 Signature Algorithm: sha256WithRSAEncryption 5d:66:3a:e6:4a:c5:96:df:ac:b2:4c:d8:6b:1d:72:c4:67:49: 36:96:6c:1d:60:8a:39:ce:8a:d3:43:fd:d2:96:94:a3:80:2f: 6d:a9:54:2f:5e:23:b5:4b:8e:dd:a8:57:8b:5d:79:c6:3d:32: 06:ac:a4:be:66:1d:ee:cc:ae:af:c9:9e:28:73:73:bf:5e:6d: fe:49:55:5d:ff:20:b4:6f:4e:ac:fb:f0:db:c9:ae:24:90:0c: 73:33:a9:16:03:8e:7d:80:74:67:30:9e:b5:49:b9:05:6d:0e: 13:94:67:d8:a6:76:8c:55:eb:23:bc:07:2d:ec:ff:65:5b:32: c6:c7:72:ed:9f:cb:7c:42:0e:1e:54:5c:00:3e:d9:3a:02:87: da:ad:52:27:ef:a3:80:c8:bb:29:cd:d9:9f:08:52:d1:7e:e1: 94:6f:bf:2d:34:d7:37:2f:f5:9b:fe:df:02:58:3f:6a:12:c9: 7d:b5:8d:4e:70:a2:3a:e4:e6:db:29:ce:1c:f6:4a:e2:d6:82: 6a:a8:1c:2d:3a:03:3d:79:d4:89:e4:b6:34:98:c3:c4:64:6d: db:5d:8d:64:be:13:7e:63:8f:1a:40:6d:f9:e7:62:62:5c:38: 4a:33:8d:79:a8:fe:3e:d1:2b:29:34:0a:1c:36:11:aa:2d:87: 04:aa:4f:b4 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M0MzcxMTAvBgNVBAUTKDc5REYxMDI1MzUzNUYwRDY3RkExMURCNjhBNEM3NjM0 QUE2QTQ0N0MwHhcNMjQwNTMxMDE0NTMyWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU5MmJiYy1lY2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn/JNE4A86IMx8y6MP9jr1xknN2d/OP6agNgBtJRfTxBbAWNTp9yTgi9mE4ak 3uItG7jY6f8uGNl/3G2WwJdK7f+DoZecjelm33oZwf7abg4Ehx7IEMIm9z5ii512 Je7cyxOttHY2j52qgDBjixhC2AOwKp5/mgxGhD862C96qNlxgqiLJdL/74KFdlIK h/o+6c9J7eol5nMVLtwqfXqLI4xB9RcP2daswXkfalso0rqdMNEBtbth4aNQ+jGL yXhGeP3Xb9dQ+RfGvnFXPyXQAj0FgX1Uam6iygEpFWH9sNVYXfurx5UQRD6lLcgN LbS/xY3E1qahUDknqZsJHo14kQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOTIzdGf JkTb6QRAj5y4zTOjj48LMB8GA1UdIwQYMBaAFHnfECU1NfDWf6EdtopMdjSqakR8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzQzNy82NjNEMTgzRTlD RDExMUVCQThEMEJCNTdDNEY5QUUwMi9lZDhRSlRVMThOWl9vUjIyaWt4Mk5LcHFS SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VkOFFKVFUxOE5aX29SMjJpa3gyTktwcVJIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0M0MzcvNjYzRDE4M0U5Q0QxMTFFQkE4RDBCQjU3QzRGOUFFMDIvQkYxOTVDODI5 Q0QyMTFFQkEwRTNDQjU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnphgwDwQCAAIwCQMHACABDfZ6gDANBgkqhkiG9w0BAQsF AAOCAQEAXWY65krFlt+sskzYax1yxGdJNpZsHWCKOc6K00P90paUo4AvbalUL14j tUuO3ahXi115xj0yBqykvmYd7syur8meKHNzv15t/klVXf8gtG9OrPvw28muJJAM czOpFgOOfYB0ZzCetUm5BW0OE5Rn2KZ2jFXrI7wHLez/ZVsyxsdy7Z/LfEIOHlRc AD7ZOgKH2q1SJ++jgMi7Kc3ZnwhS0X7hlG+/LTTXNy/1m/7fAlg/ahLJfbWNTnCi OuTm2ynOHPZK4taCaqgcLToDPXnUieS2NJjDxGRt212NZL4TfmOPGkBt+ediYlw4 SjONeaj+PtErKTQKHDYRqi2HBKpPtA== -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:24 2024 by rpki-client on console-fra.rpki-client.org