$ rpki-client -vvf rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/06D647D4057811EC8BCE3783C4F9AE02.roa File: 06D647D4057811EC8BCE3783C4F9AE02.roa (raw, json) Hash identifier: grJhcWmzDCOgdxUnDbK2ZLr2jRQYlivgBq7XqkPgbbI= Subject key identifier: CB:B3:FC:8D:65:80:3B:05:1C:02:FB:EB:5A:10:59:E9:CB:11:7B:A2 Certificate issuer: /CN=A913EFAB/serialNumber=9F2BFD7D800CFA13E9048AE100B4851430126FD3 Certificate serial: 047A Authority key identifier: 9F:2B:FD:7D:80:0C:FA:13:E9:04:8A:E1:00:B4:85:14:30:12:6F:D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/06D647D4057811EC8BCE3783C4F9AE02.roa Signing time: Sat 13 Jul 2024 01:43:31 +0000 ROA not before: Sat 13 Jul 2024 01:43:31 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 138926 IP address blocks: 103.170.178.0/24 maxlen: 24 103.170.179.0/24 maxlen: 24 2001:df7:2380::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.crl rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1146 (0x47a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EFAB/serialNumber=9F2BFD7D800CFA13E9048AE100B4851430126FD3 Validity Not Before: Jul 13 01:43:31 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=6691dbc2-f373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2c:bf:2d:be:62:fb:e1:de:b8:4e:c4:fe:5f: e8:82:c8:2d:5d:8a:17:b6:93:46:56:b9:e0:9c:e3: 99:06:c3:1a:73:36:d4:33:33:3f:c5:cc:02:98:7c: ab:02:4a:5b:52:16:87:af:5c:0f:ca:26:73:3f:52: 48:ad:8e:ad:97:c4:8a:20:ee:7c:e7:ed:ad:4a:23: f2:d2:98:79:75:81:36:7c:9c:ce:c7:c4:8c:59:73: e7:87:ce:c8:11:1b:d1:aa:4f:38:0a:97:20:f6:89: 4a:05:95:03:1d:85:7d:79:41:5d:55:69:ba:20:4b: 7b:f8:d1:08:c3:5b:70:7f:cf:76:40:5f:44:7a:f6: fe:91:0f:72:63:e8:57:f9:08:37:29:e1:4f:9e:d0: d0:43:b1:13:dd:d7:cf:4e:39:1b:7c:82:f6:c0:58: c5:3c:cb:d2:27:50:93:28:fe:b0:0c:bd:47:4f:1b: 08:c6:3e:6b:32:7f:a1:7d:a6:46:93:de:40:46:a6: d5:2f:ae:45:bf:59:b4:d7:48:30:85:c7:d0:a6:97: 25:2a:bd:8a:55:ee:3e:19:a5:bf:ea:a3:60:01:a8: e5:79:d4:58:32:55:9c:c2:a0:12:60:83:32:08:ad: d6:f3:55:99:48:ae:01:7a:61:3d:f2:c8:f6:3b:da: 1c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B3:FC:8D:65:80:3B:05:1C:02:FB:EB:5A:10:59:E9:CB:11:7B:A2 X509v3 Authority Key Identifier: keyid:9F:2B:FD:7D:80:0C:FA:13:E9:04:8A:E1:00:B4:85:14:30:12:6F:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/06D647D4057811EC8BCE3783C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.170.178.0/23 IPv6: 2001:df7:2380::/48 Signature Algorithm: sha256WithRSAEncryption 3a:a1:a5:38:3b:d4:c8:54:2e:ca:a8:9c:d6:4a:b7:fa:d1:66: 19:52:da:cd:87:7c:2e:d6:aa:2b:d0:84:fd:12:41:09:9f:02: b1:ca:50:6c:b4:33:6c:5d:e1:64:19:72:42:85:82:01:a7:38: 53:22:12:57:29:6b:4f:38:f5:b8:e8:81:f5:f8:63:cb:a5:f5: c7:f6:6e:d4:6e:87:bc:ee:49:cd:0b:f3:b3:ca:fc:a7:cf:8b: f2:25:98:05:55:25:7b:dd:77:39:38:91:eb:9b:f4:2d:2f:f4: bb:c8:28:ce:95:a4:56:8b:32:da:b8:c8:81:7e:44:fe:ff:b6: 82:39:db:0a:7f:99:03:68:4a:98:11:aa:33:49:db:be:e0:b0: 83:ae:e8:3d:e7:50:55:da:77:9c:2c:8e:c1:b5:4a:f2:85:81: 38:9a:ed:e1:cd:c1:d2:23:fe:ec:a3:c0:53:bc:3b:c7:ff:83: 46:ce:bf:1b:c3:18:61:e3:e4:f2:c0:ab:81:87:13:b1:0f:8a: 05:84:24:9f:e8:21:80:cd:3d:0a:cb:36:7b:19:87:0d:77:8c: 13:b4:7a:f1:d2:5f:50:ad:e9:3f:2e:dc:ff:ec:cd:3e:a2:45: 93:56:72:b5:ba:ea:ae:23:33:6e:90:a5:c7:cb:bf:af:01:5d: 10:66:62:69 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VGQUIxMTAvBgNVBAUTKDlGMkJGRDdEODAwQ0ZBMTNFOTA0OEFFMTAwQjQ4NTE0 MzAxMjZGRDMwHhcNMjQwNzEzMDE0MzMxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjkxZGJjMi1mMzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoiy/Lb5i++HeuE7E/l/ogsgtXYoXtpNGVrngnOOZBsMaczbUMzM/xcwCmHyr AkpbUhaHr1wPyiZzP1JIrY6tl8SKIO585+2tSiPy0ph5dYE2fJzOx8SMWXPnh87I ERvRqk84Cpcg9olKBZUDHYV9eUFdVWm6IEt7+NEIw1twf892QF9Eevb+kQ9yY+hX +Qg3KeFPntDQQ7ET3dfPTjkbfIL2wFjFPMvSJ1CTKP6wDL1HTxsIxj5rMn+hfaZG k95ARqbVL65Fv1m010gwhcfQppclKr2KVe4+GaW/6qNgAajledRYMlWcwqASYIMy CK3W81WZSK4BemE98sj2O9ocKQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFMuz/I1l gDsFHAL761oQWenLEXuiMB8GA1UdIwQYMBaAFJ8r/X2ADPoT6QSK4QC0hRQwEm/T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUZBQi9FODJEMDZGRTA1 NzQxMUVDQTI0MkM1N0ZDNEY5QUUwMi9ueXY5ZllBTS1oUHBCSXJoQUxTRkZEQVNi OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL255djlmWUFNLWhQcEJJcmhBTFNGRkRBU2I5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0VGQUIvRTgyRDA2RkUwNTc0MTFFQ0EyNDJDNTdGQzRGOUFFMDIvMDZENjQ3RDQw NTc4MTFFQzhCQ0UzNzgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnqrIwDwQCAAIwCQMHACABDfcjgDANBgkqhkiG9w0BAQsF AAOCAQEAOqGlODvUyFQuyqic1kq3+tFmGVLazYd8LtaqK9CE/RJBCZ8CscpQbLQz bF3hZBlyQoWCAac4UyISVylrTzj1uOiB9fhjy6X1x/Zu1G6HvO5JzQvzs8r8p8+L 8iWYBVUle913OTiR65v0LS/0u8gozpWkVosy2rjIgX5E/v+2gjnbCn+ZA2hKmBGq M0nbvuCwg67oPedQVdp3nCyOwbVK8oWBOJrt4c3B0iP+7KPAU7w7x/+DRs6/G8MY YePk8sCrgYcTsQ+KBYQkn+ghgM09Css2exmHDXeME7R68dJfUK3pPy7c/+zNPqJF k1ZytbrqriMzbpClx8u/rwFdEGZiaQ== -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:33 2024 by rpki-client on console-fra.rpki-client.org