$ rpki-client -vvf rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/5A306016D15111EE98E6801EC4F9AE02.roa File: 5A306016D15111EE98E6801EC4F9AE02.roa (raw, json) Hash identifier: +6P6AQHkzNOzm6kHVQO5a81bv5yPJUOJbWXMWV3KVfA= Subject key identifier: 99:67:91:98:39:02:B8:78:3B:E8:F3:DE:75:78:DD:A9:98:25:4F:07 Certificate issuer: /CN=A915B2EC/serialNumber=46922C565440040BD99AFD4E329ED9DEB6F92573 Certificate serial: 04B0 Authority key identifier: 46:92:2C:56:54:40:04:0B:D9:9A:FD:4E:32:9E:D9:DE:B6:F9:25:73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/5A306016D15111EE98E6801EC4F9AE02.roa Signing time: Fri 22 Nov 2024 23:43:46 +0000 ROA not before: Fri 22 Nov 2024 23:43:46 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 51847 IP address blocks: 103.172.182.0/24 maxlen: 24 103.172.183.0/24 maxlen: 24 2407:d840:1::/48 maxlen: 48 2407:d840:2::/48 maxlen: 48 2407:d840:3:1::/64 maxlen: 64 2407:d840:50::/44 maxlen: 44 2407:d840:50::/48 maxlen: 48 2407:d840:51::/48 maxlen: 48 2407:d840:52::/48 maxlen: 48 2407:d840:53::/48 maxlen: 48 2407:d840:60::/44 maxlen: 44 2407:d840:60::/48 maxlen: 48 2407:d840:61::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1200 (0x4b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B2EC/serialNumber=46922C565440040BD99AFD4E329ED9DEB6F92573 Validity Not Before: Nov 22 23:43:46 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67411731-ddf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:68:04:bd:71:29:0a:69:04:51:37:24:5f:04: b8:95:c0:93:3b:0e:51:c1:8a:55:20:94:70:dd:ee: 31:c3:d3:91:97:37:cb:e2:17:21:6e:68:8c:33:a0: 94:a5:e8:d6:bf:85:6f:aa:ec:65:3c:5d:56:7f:e1: ca:87:94:3a:19:9e:87:25:cb:26:79:37:fa:cb:53: 1f:3e:ed:a3:52:2c:86:e5:3c:1e:e9:18:74:07:6b: 55:7f:f6:3e:b0:99:eb:10:57:a3:73:4b:21:1c:e5: ee:78:9a:0a:46:41:41:bf:3b:c0:30:7a:ea:82:7f: 04:12:69:d0:fe:01:ca:14:33:48:ce:03:3b:50:0c: 2c:9c:c7:16:be:8f:06:eb:88:b2:5b:0a:fb:63:2e: f3:d4:60:7e:d7:46:c5:68:3a:c8:6e:3c:d1:24:f6: a9:fd:3f:1c:78:a1:9a:f3:21:68:cc:b1:98:e7:89: a9:8d:f3:08:08:c9:26:7e:a4:0f:f1:07:0b:f9:cd: a4:78:9d:f6:f1:67:bc:36:d5:e9:57:35:d9:3e:2b: c9:04:1a:f1:10:96:b4:2f:5f:df:6c:20:09:bd:8a: 3b:03:25:73:d8:7b:e4:27:f4:8e:b1:c4:a0:b7:c2: 75:4d:f1:ac:71:85:89:02:09:b3:df:8f:90:24:0d: a7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:67:91:98:39:02:B8:78:3B:E8:F3:DE:75:78:DD:A9:98:25:4F:07 X509v3 Authority Key Identifier: keyid:46:92:2C:56:54:40:04:0B:D9:9A:FD:4E:32:9E:D9:DE:B6:F9:25:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/5A306016D15111EE98E6801EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.172.182.0/23 IPv6: 2407:d840:1::-2407:d840:2:ffff:ffff:ffff:ffff:ffff 2407:d840:3:1::/64 2407:d840:50::-2407:d840:6f:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 76:f5:0a:d5:37:3f:b2:da:08:17:a5:9b:8c:22:6f:e5:c6:8d: 9f:fb:31:3f:2e:af:68:45:3f:19:d8:30:f8:fe:c3:77:7b:cf: 72:f5:86:b8:14:84:34:a5:f3:20:2f:b6:e3:26:b1:c2:e1:4b: b9:fd:fa:42:5b:6e:bf:8e:59:aa:15:44:01:a9:a9:0b:af:41: c5:03:47:b8:c3:4b:21:36:d2:02:ad:06:a1:ca:28:a0:44:ce: bb:a1:02:49:7c:32:25:80:f9:60:73:80:b0:e1:96:9f:70:63: 66:60:ab:08:ed:f7:05:7b:5b:0d:d6:fa:1e:91:13:63:49:4c: 03:c2:3a:6a:90:58:23:16:8c:3c:26:ff:5d:ea:43:ac:7e:2b: e0:fd:6a:a8:62:42:30:8e:d6:f6:27:85:e5:ee:3e:ee:40:bd: 35:f8:7f:fa:b2:c2:88:e6:ab:3d:f8:54:2f:5b:f6:4e:13:87: 30:dc:ba:2b:0f:50:32:b1:7d:e3:02:4a:ff:70:d4:88:ac:f4: 3b:83:80:e7:82:ef:a6:eb:ba:4d:32:ce:bf:50:c6:22:ea:eb: fa:6b:f9:b7:08:36:af:77:83:0e:70:b0:f8:a8:00:97:c5:3f: 68:38:f6:38:71:4e:d7:c4:8e:6f:70:0f:12:80:34:5d:44:76: 59:d7:1e:d8 -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgICBLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIyRUMxMTAvBgNVBAUTKDQ2OTIyQzU2NTQ0MDA0MEJEOTlBRkQ0RTMyOUVEOURF QjZGOTI1NzMwHhcNMjQxMTIyMjM0MzQ2WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQxMTczMS1kZGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmgEvXEpCmkEUTckXwS4lcCTOw5RwYpVIJRw3e4xw9ORlzfL4hchbmiMM6CU pejWv4VvquxlPF1Wf+HKh5Q6GZ6HJcsmeTf6y1MfPu2jUiyG5Twe6Rh0B2tVf/Y+ sJnrEFejc0shHOXueJoKRkFBvzvAMHrqgn8EEmnQ/gHKFDNIzgM7UAwsnMcWvo8G 64iyWwr7Yy7z1GB+10bFaDrIbjzRJPap/T8ceKGa8yFozLGY54mpjfMICMkmfqQP 8QcL+c2keJ328We8NtXpVzXZPivJBBrxEJa0L1/fbCAJvYo7AyVz2HvkJ/SOscSg t8J1TfGscYWJAgmz34+QJA2nSQIDAQABo4IC0DCCAswwHQYDVR0OBBYEFJlnkZg5 Arh4O+jz3nV43amYJU8HMB8GA1UdIwQYMBaAFEaSLFZUQAQL2Zr9TjKe2d62+SVz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjJFQy84NDI3NTk1NjJC MDkxMUVDODUxQjk4MEVDNEY5QUUwMi9ScElzVmxSQUJBdlptdjFPTXA3WjNyYjVK WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JwSXNWbFJBQkF2Wm12MU9NcDdaM3JiNUpYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUIyRUMvODQyNzU5NTYyQjA5MTFFQzg1MUI5ODBFQzRGOUFFMDIvNUEzMDYwMTZE MTUxMTFFRTk4RTY4MDFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwWgYIKwYBBQUHAQcBAf8E SzBJMAwEAgABMAYDBAFnrLYwOQQCAAIwMzASAwcAJAfYQAABAwcAJAfYQAACAwkA JAfYQAADAAEwEgMHBCQH2EAAUAMHBCQH2EAAYDANBgkqhkiG9w0BAQsFAAOCAQEA dvUK1Tc/stoIF6WbjCJv5caNn/sxPy6vaEU/Gdgw+P7Dd3vPcvWGuBSENKXzIC+2 4yaxwuFLuf36Qltuv45ZqhVEAampC69BxQNHuMNLITbSAq0GocoooETOu6ECSXwy JYD5YHOAsOGWn3BjZmCrCO33BXtbDdb6HpETY0lMA8I6apBYIxaMPCb/XepDrH4r 4P1qqGJCMI7W9ieF5e4+7kC9Nfh/+rLCiOarPfhUL1v2ThOHMNy6Kw9QMrF94wJK /3DUiKz0O4OA54Lvpuu6TTLOv1DGIurr+mv5twg2r3eDDnCw+KgAl8U/aDj2OHFO 18SOb3APEoA0XUR2Wdce2A== -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:22 2024 by rpki-client on console-ams.rpki-client.org