$ rpki-client -vvf rpki.apnic.net/member_repository/A914E337/DF8CD732FC1311EBBF774B3CC4F9AE02/F0B87A62FC1711EBA835010DC4F9AE02.roa File: F0B87A62FC1711EBA835010DC4F9AE02.roa (raw, json) Hash identifier: aswh5w4cWVhb4Gut39D4jhLci8TaAdFY4oNgRXl7mfI= Subject key identifier: 99:EF:38:1C:A2:F1:ED:0B:93:52:A2:E9:94:80:13:84:02:32:1C:EC Certificate issuer: /CN=A914E337/serialNumber=30431687582F935D1C8C4BA010DC1AAD7D6CAABF Certificate serial: 04C5 Authority key identifier: 30:43:16:87:58:2F:93:5D:1C:8C:4B:A0:10:DC:1A:AD:7D:6C:AA:BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEMWh1gvk10cjEugENwarX1sqr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E337/DF8CD732FC1311EBBF774B3CC4F9AE02/F0B87A62FC1711EBA835010DC4F9AE02.roa Signing time: Thu 31 Oct 2024 23:52:41 +0000 ROA not before: Thu 31 Oct 2024 23:52:41 +0000 ROA not after: Sat 01 Mar 2025 00:00:00 +0000 asID: 142639 IP address blocks: 103.171.140.0/23 maxlen: 23 103.171.140.0/24 maxlen: 24 103.171.141.0/24 maxlen: 24 2001:df7:4980::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E337/DF8CD732FC1311EBBF774B3CC4F9AE02/MEMWh1gvk10cjEugENwarX1sqr8.crl rsync://rpki.apnic.net/member_repository/A914E337/DF8CD732FC1311EBBF774B3CC4F9AE02/MEMWh1gvk10cjEugENwarX1sqr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEMWh1gvk10cjEugENwarX1sqr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1221 (0x4c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E337/serialNumber=30431687582F935D1C8C4BA010DC1AAD7D6CAABF Validity Not Before: Oct 31 23:52:41 2024 GMT Not After : Mar 1 00:00:00 2025 GMT Subject: CN=67241849-bb23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ce:50:5c:0a:fd:4a:66:f8:2e:2f:22:6b:84: dc:26:a7:7b:be:d0:7b:ab:30:06:26:bd:46:51:f6: 4b:81:64:3a:7e:d4:01:02:d0:e8:1d:30:24:3d:50: bd:35:ee:41:1a:8c:c2:b7:e3:57:e6:bd:08:41:d5: 56:8f:3a:5e:52:d4:1d:fc:16:19:20:e7:62:5e:47: 06:87:d3:b5:6a:0a:77:87:80:60:02:b5:e8:65:c5: c6:40:a3:4d:17:12:26:5d:d9:11:47:9b:48:56:a6: a9:76:ab:12:e7:ef:01:70:6c:a2:20:cd:7b:60:09: 01:2a:1d:d6:a8:08:04:92:6d:dc:55:64:4b:fa:1f: d2:b2:df:ed:cb:0a:93:a9:e4:0d:49:74:27:3e:53: bc:23:c2:6b:41:89:c6:57:41:eb:0c:fc:ff:51:81: 8c:8a:75:98:36:5c:09:49:13:05:8a:49:59:fe:13: 0c:d0:27:b5:fa:e7:b1:96:39:d8:0b:ff:cd:a0:bb: 72:e4:c5:cd:0e:ef:1d:31:4c:70:65:4c:c2:2b:12: f6:d2:1a:bf:7e:61:80:03:8d:65:d8:3a:2f:a2:0a: ea:37:7f:3e:38:36:4a:71:ef:03:f0:eb:42:83:5f: ec:cb:24:f3:ee:a6:c4:80:7e:84:43:42:cf:c4:20: 15:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:EF:38:1C:A2:F1:ED:0B:93:52:A2:E9:94:80:13:84:02:32:1C:EC X509v3 Authority Key Identifier: keyid:30:43:16:87:58:2F:93:5D:1C:8C:4B:A0:10:DC:1A:AD:7D:6C:AA:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E337/DF8CD732FC1311EBBF774B3CC4F9AE02/MEMWh1gvk10cjEugENwarX1sqr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEMWh1gvk10cjEugENwarX1sqr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E337/DF8CD732FC1311EBBF774B3CC4F9AE02/F0B87A62FC1711EBA835010DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.171.140.0/23 IPv6: 2001:df7:4980::/48 Signature Algorithm: sha256WithRSAEncryption cb:4b:a4:89:0f:69:73:3f:2d:58:5c:f8:6a:e7:2f:82:2c:46: ae:d0:d4:5e:de:34:2d:65:81:4b:5c:45:13:9d:03:2c:a7:f0: 6a:98:7e:bc:84:82:2b:60:7b:9b:f1:a3:29:54:6a:21:c2:41: 49:6a:c7:7a:35:e7:e0:12:1d:7f:5b:b1:9d:b9:d4:aa:f7:05: 9f:5f:50:96:1a:0a:8a:87:e8:aa:db:3b:a7:d5:e3:fb:da:88: bb:de:f1:b2:1d:1d:c5:eb:82:c8:2a:28:3a:c0:e5:f6:67:02: bb:73:07:75:47:fb:f6:a3:1d:49:cd:f3:b2:31:21:b4:0a:8d: b8:84:75:89:ed:50:1d:f5:4d:24:ab:8a:55:04:32:7c:a4:f6: 02:91:16:ae:cb:7c:9a:68:cd:d0:52:7a:be:9c:58:e5:5a:98: d5:b2:7d:f2:b6:1b:6c:58:7d:a0:85:b6:e3:83:f0:dd:ea:f9: 6e:3c:a7:98:75:e9:f9:b8:5a:4a:6d:dc:ae:f2:fe:5c:6f:c7: 0b:af:52:6a:bd:7f:d6:86:ad:13:09:44:89:91:e8:93:59:69: 8d:33:86:3e:36:26:6a:fc:3c:d7:d9:fe:99:39:14:e1:10:d7: ee:6b:92:49:81:43:b0:91:ba:cf:6b:98:fe:6b:f9:0e:8d:ef: ad:a2:fa:99 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUzMzcxMTAvBgNVBAUTKDMwNDMxNjg3NTgyRjkzNUQxQzhDNEJBMDEwREMxQUFE N0Q2Q0FBQkYwHhcNMjQxMDMxMjM1MjQxWhcNMjUwMzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzI0MTg0OS1iYjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6M5QXAr9Smb4Li8ia4TcJqd7vtB7qzAGJr1GUfZLgWQ6ftQBAtDoHTAkPVC9 Ne5BGozCt+NX5r0IQdVWjzpeUtQd/BYZIOdiXkcGh9O1agp3h4BgArXoZcXGQKNN FxImXdkRR5tIVqapdqsS5+8BcGyiIM17YAkBKh3WqAgEkm3cVWRL+h/Sst/tywqT qeQNSXQnPlO8I8JrQYnGV0HrDPz/UYGMinWYNlwJSRMFiklZ/hMM0Ce1+uexljnY C//NoLty5MXNDu8dMUxwZUzCKxL20hq/fmGAA41l2DovogrqN38+ODZKce8D8OtC g1/syyTz7qbEgH6EQ0LPxCAVBQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJnvOByi 8e0Lk1Ki6ZSAE4QCMhzsMB8GA1UdIwQYMBaAFDBDFodYL5NdHIxLoBDcGq19bKq/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTMzNy9ERjhDRDczMkZD MTMxMUVCQkY3NzRCM0NDNEY5QUUwMi9NRU1XaDFndmsxMGNqRXVnRU53YXJYMXNx cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01FTVdoMWd2azEwY2pFdWdFTndhclgxc3FyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEUzMzcvREY4Q0Q3MzJGQzEzMTFFQkJGNzc0QjNDQzRGOUFFMDIvRjBCODdBNjJG QzE3MTFFQkE4MzUwMTBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnq4wwDwQCAAIwCQMHACABDfdJgDANBgkqhkiG9w0BAQsF AAOCAQEAy0ukiQ9pcz8tWFz4aucvgixGrtDUXt40LWWBS1xFE50DLKfwaph+vISC K2B7m/GjKVRqIcJBSWrHejXn4BIdf1uxnbnUqvcFn19QlhoKiofoqts7p9Xj+9qI u97xsh0dxeuCyCooOsDl9mcCu3MHdUf79qMdSc3zsjEhtAqNuIR1ie1QHfVNJKuK VQQyfKT2ApEWrst8mmjN0FJ6vpxY5VqY1bJ98rYbbFh9oIW244Pw3er5bjynmHXp +bhaSm3crvL+XG/HC69Sar1/1oatEwlEiZHok1lpjTOGPjYmavw819n+mTkU4RDX 7muSSYFDsJG6z2uY/mv5Do3vraL6mQ== -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:22 2024 by rpki-client on console-ams.rpki-client.org