$ rpki-client -vvf rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/29F6C42C1FD311EBA5D83A1EC4F9AE02.roa File: 29F6C42C1FD311EBA5D83A1EC4F9AE02.roa (raw, json) Hash identifier: epre9gPrGweKOSwkMZsEVYJd5/RVczknOfwPtxQUKwY= Subject key identifier: E0:0E:10:85:33:42:29:DE:96:89:4B:AD:58:67:97:87:17:4A:8C:C6 Certificate issuer: /CN=A913E881/serialNumber=A319DF4D0B44652CE8A055C235250118B4940585 Certificate serial: 06DA Authority key identifier: A3:19:DF:4D:0B:44:65:2C:E8:A0:55:C2:35:25:01:18:B4:94:05:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/29F6C42C1FD311EBA5D83A1EC4F9AE02.roa Signing time: Tue 20 Aug 2024 22:41:18 +0000 ROA not before: Tue 20 Aug 2024 22:41:18 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 133578 IP address blocks: 103.153.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.crl rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1754 (0x6da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E881/serialNumber=A319DF4D0B44652CE8A055C235250118B4940585 Validity Not Before: Aug 20 22:41:18 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66c51b8e-de98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:96:fd:8a:c9:0d:c0:82:32:4e:e9:d7:6b:72: f5:15:84:1c:1b:59:4d:4f:79:d7:31:c4:04:7b:7e: 15:00:32:e3:91:c3:77:9e:b3:60:2d:3c:9d:88:bf: ce:0b:34:34:81:23:7d:73:e7:23:35:18:fb:af:14: cc:43:87:d0:e6:a2:e3:c5:2f:9c:48:ae:62:ff:0e: ba:f9:de:d5:39:2b:82:63:03:15:49:dc:e7:8c:05: 67:3d:24:78:b7:fe:53:89:7d:4c:a5:cc:91:e7:34: 8d:d5:fc:a8:e4:22:b8:cf:a1:71:97:78:0f:d6:ee: 8c:2e:30:0b:07:62:1b:1a:a8:5d:99:9f:e4:0a:45: 9c:fa:e5:1b:36:be:6e:c1:f5:64:ad:69:40:e0:c3: 1b:79:11:63:49:61:df:f0:64:45:a8:97:3e:73:77: 49:47:03:d1:3a:37:58:30:4b:a5:15:ee:27:15:70: e3:3a:58:6a:d8:00:7f:2e:61:07:54:89:1e:1b:23: 19:97:f5:06:bd:2a:5a:dc:34:e7:dc:11:d2:66:ba: 8d:d4:4c:97:67:e0:67:05:bf:64:83:4e:4d:8a:56: 33:f5:65:2f:92:39:7c:e5:fc:71:75:88:fe:dd:71: 45:5f:02:71:22:ae:32:bf:8f:07:6a:c5:93:01:93: 1f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0E:10:85:33:42:29:DE:96:89:4B:AD:58:67:97:87:17:4A:8C:C6 X509v3 Authority Key Identifier: keyid:A3:19:DF:4D:0B:44:65:2C:E8:A0:55:C2:35:25:01:18:B4:94:05:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/oxnfTQtEZSzooFXCNSUBGLSUBYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxnfTQtEZSzooFXCNSUBGLSUBYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E881/1E642EE41FD111EBA57E741CC4F9AE02/29F6C42C1FD311EBA5D83A1EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.102.0/23 Signature Algorithm: sha256WithRSAEncryption bf:0c:fa:97:02:94:4d:ef:ab:34:ee:5d:85:94:53:20:52:a2: 5c:99:a3:48:99:2d:c1:85:e2:d9:b4:ec:3f:01:55:49:b3:43: 98:b4:21:60:fb:3f:48:58:32:18:a6:f5:93:8f:98:45:a1:4f: df:34:5a:61:9f:8c:31:ad:1c:3d:fa:69:ed:ca:60:f2:ea:db: 1c:84:ce:53:ac:e9:12:dd:da:13:f6:68:86:bd:47:e5:64:ba: 09:b8:60:2c:36:fb:76:a1:0b:74:b2:e7:ce:47:b5:81:e8:f3: a2:b8:d2:13:05:37:26:2c:ea:df:6f:fc:8b:04:a9:33:1d:13: e9:48:92:63:a9:91:66:d9:55:87:a8:28:91:79:5a:24:e4:8e: b1:e2:47:aa:d5:a2:32:56:ab:2e:00:75:c0:fc:a6:cf:88:18: 08:a2:a3:de:4a:ec:f8:e5:a8:0e:c0:20:1c:c5:c4:9e:8d:e2: 85:39:ab:e7:b1:37:3f:e4:c8:cd:a0:2e:49:e0:25:30:df:f3: 2d:f8:5e:79:9f:12:8e:46:ea:98:da:1f:e7:bf:20:31:cf:0c: e5:87:7a:5c:a1:88:2a:30:97:95:e8:1c:b7:e6:cd:99:e3:e6: 73:e2:2b:03:f6:2f:86:aa:cd:1a:12:2c:71:37:7a:82:b5:00: ac:61:46:74 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4ODExMTAvBgNVBAUTKEEzMTlERjREMEI0NDY1MkNFOEEwNTVDMjM1MjUwMTE4 QjQ5NDA1ODUwHhcNMjQwODIwMjI0MTE4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmM1MWI4ZS1kZTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Zb9iskNwIIyTunXa3L1FYQcG1lNT3nXMcQEe34VADLjkcN3nrNgLTydiL/O CzQ0gSN9c+cjNRj7rxTMQ4fQ5qLjxS+cSK5i/w66+d7VOSuCYwMVSdznjAVnPSR4 t/5TiX1MpcyR5zSN1fyo5CK4z6Fxl3gP1u6MLjALB2IbGqhdmZ/kCkWc+uUbNr5u wfVkrWlA4MMbeRFjSWHf8GRFqJc+c3dJRwPROjdYMEulFe4nFXDjOlhq2AB/LmEH VIkeGyMZl/UGvSpa3DTn3BHSZrqN1EyXZ+BnBb9kg05NilYz9WUvkjl85fxxdYj+ 3XFFXwJxIq4yv48HasWTAZMfhwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOAOEIUz QinelolLrVhnl4cXSozGMB8GA1UdIwQYMBaAFKMZ300LRGUs6KBVwjUlARi0lAWF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTg4MS8xRTY0MkVFNDFG RDExMUVCQTU3RTc0MUNDNEY5QUUwMi9veG5mVFF0RVpTem9vRlhDTlNVQkdMU1VC WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL294bmZUUXRFWlN6b29GWENOU1VCR0xTVUJZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0U4ODEvMUU2NDJFRTQxRkQxMTFFQkE1N0U3NDFDQzRGOUFFMDIvMjlGNkM0MkMx RkQzMTFFQkE1RDgzQTFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmWYwDQYJKoZIhvcNAQELBQADggEBAL8M+pcClE3vqzTu XYWUUyBSolyZo0iZLcGF4tm07D8BVUmzQ5i0IWD7P0hYMhim9ZOPmEWhT980WmGf jDGtHD36ae3KYPLq2xyEzlOs6RLd2hP2aIa9R+Vkugm4YCw2+3ahC3Sy585HtYHo 86K40hMFNyYs6t9v/IsEqTMdE+lIkmOpkWbZVYeoKJF5WiTkjrHiR6rVojJWqy4A dcD8ps+IGAiio95K7PjlqA7AIBzFxJ6N4oU5q+exNz/kyM2gLkngJTDf8y34Xnmf Eo5G6pjaH+e/IDHPDOWHelyhiCowl5XoHLfmzZnj5nPiKwP2L4aqzRoSLHE3eoK1 AKxhRnQ= -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:38 2024 by rpki-client on console-ams.rpki-client.org