$ rpki-client -vvf rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/8B656418F50011EBBF60EA16C4F9AE02.roa File: 8B656418F50011EBBF60EA16C4F9AE02.roa (raw, json) Hash identifier: IIm1yA8njoUcBWRxCoDaEZk7LCuRfNfjy2yV4TDOftg= Subject key identifier: 86:70:E0:8C:87:02:18:37:CA:78:42:F0:70:8A:84:6F:57:69:CB:42 Certificate issuer: /CN=A915BE00/serialNumber=80ED20F7FC07DE0C9F3C1B8E2AE9CD3FCE6EDB21 Certificate serial: 0437 Authority key identifier: 80:ED:20:F7:FC:07:DE:0C:9F:3C:1B:8E:2A:E9:CD:3F:CE:6E:DB:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/8B656418F50011EBBF60EA16C4F9AE02.roa Signing time: Thu 21 Dec 2023 01:33:12 +0000 ROA not before: Thu 21 Dec 2023 01:33:12 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 138453 IP address blocks: 103.125.240.0/24 maxlen: 24 103.125.241.0/24 maxlen: 24 103.125.242.0/24 maxlen: 24 103.125.243.0/24 maxlen: 24 2403:fcc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.crl rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1079 (0x437) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BE00/serialNumber=80ED20F7FC07DE0C9F3C1B8E2AE9CD3FCE6EDB21 Validity Not Before: Dec 21 01:33:12 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=658395d8-a67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c8:c5:9d:b5:0c:eb:50:29:29:0a:4e:5f:e6: ec:5d:0e:b5:c9:8d:f5:ab:2a:99:cc:e8:d4:b5:39: d1:df:f1:2d:4a:e9:6a:e0:90:c9:e3:c2:64:f2:72: b7:a9:a5:01:0d:86:ee:68:41:61:fc:c0:13:17:07: b5:ad:58:0c:71:c9:43:ae:38:e8:d6:2f:d7:28:cb: d1:9d:81:9f:a2:51:f1:17:33:91:cd:09:cb:93:1d: 09:b5:dc:bb:c4:95:f0:ca:d4:ad:57:f7:ef:61:8c: 5a:27:df:26:74:c2:dc:c2:14:c8:e4:a0:9d:c2:5f: d4:06:58:55:4b:36:b6:f3:e6:5b:40:ec:4b:d4:c3: a1:a6:d9:dc:fd:bc:37:a6:ea:83:37:98:0b:95:d5: fd:6f:39:3f:ee:ce:86:b6:29:bb:9d:42:33:d6:b2: b6:b3:9e:4c:98:fa:53:8b:80:6b:fc:6a:81:a4:e2: db:31:aa:51:6c:cf:09:2b:88:c4:b1:19:9f:2a:16: ac:b8:a6:03:e6:e4:48:cf:f2:69:99:6f:ce:58:74: de:6f:5a:5a:bc:c1:3f:c9:8d:0f:e2:31:01:a3:ea: 89:bf:de:96:b5:11:dd:8c:e5:1a:3d:5d:77:49:b2: 3f:94:68:b4:3a:ef:61:14:48:86:01:f9:d8:64:db: 08:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:70:E0:8C:87:02:18:37:CA:78:42:F0:70:8A:84:6F:57:69:CB:42 X509v3 Authority Key Identifier: keyid:80:ED:20:F7:FC:07:DE:0C:9F:3C:1B:8E:2A:E9:CD:3F:CE:6E:DB:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/8B656418F50011EBBF60EA16C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.125.240.0/22 IPv6: 2403:fcc0::/32 Signature Algorithm: sha256WithRSAEncryption b1:dd:63:d2:7a:a1:82:58:2f:6f:99:28:af:ad:03:ef:aa:c9: 4f:2f:f3:15:17:39:c9:7b:f3:ca:82:61:f7:a9:1f:39:07:73: 13:ab:4b:2a:61:f0:c1:a3:0f:a4:c2:cc:79:c2:7f:81:59:c9: 81:05:88:b8:3f:44:94:7b:b9:ba:dd:1e:8f:a7:e3:16:d3:64: a4:48:d0:1c:3a:f4:2f:5b:81:b2:80:17:e0:d0:5a:3d:ee:12: 2b:76:9e:da:6c:8c:81:e2:2e:78:d4:25:e5:38:04:64:4e:90: ef:1e:62:d7:cc:18:17:53:c9:12:a3:76:12:67:96:7d:91:97: ac:1c:f4:03:a2:66:f3:71:50:56:6c:4f:94:01:15:ba:cf:62: 59:1a:9d:36:4d:f4:80:f2:d5:0c:09:a5:29:58:68:ad:07:65: 22:22:e1:7e:66:4e:cd:77:a4:28:21:ec:ce:d5:c2:a6:a0:6b: 31:38:b9:87:7f:79:d0:77:37:bf:35:01:96:dc:6b:26:07:89: d1:5e:b0:46:2e:cd:9c:e8:c1:53:a1:7f:07:27:f3:6c:1b:d2: f1:cd:fc:cc:79:7a:e9:05:f3:2e:28:ec:1d:a4:01:ce:78:4b: b1:cd:52:69:45:96:96:ea:da:4e:c1:46:f5:1b:af:3c:8c:0e: 0c:a9:cc:65 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJFMDAxMTAvBgNVBAUTKDgwRUQyMEY3RkMwN0RFMEM5RjNDMUI4RTJBRTlDRDNG Q0U2RURCMjEwHhcNMjMxMjIxMDEzMzEyWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTgzOTVkOC1hNjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8jFnbUM61ApKQpOX+bsXQ61yY31qyqZzOjUtTnR3/EtSulq4JDJ48Jk8nK3 qaUBDYbuaEFh/MATFwe1rVgMcclDrjjo1i/XKMvRnYGfolHxFzORzQnLkx0Jtdy7 xJXwytStV/fvYYxaJ98mdMLcwhTI5KCdwl/UBlhVSza28+ZbQOxL1MOhptnc/bw3 puqDN5gLldX9bzk/7s6Gtim7nUIz1rK2s55MmPpTi4Br/GqBpOLbMapRbM8JK4jE sRmfKhasuKYD5uRIz/JpmW/OWHTeb1pavME/yY0P4jEBo+qJv96WtRHdjOUaPV13 SbI/lGi0Ou9hFEiGAfnYZNsIiwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFIZw4IyH Ahg3ynhC8HCKhG9XactCMB8GA1UdIwQYMBaAFIDtIPf8B94MnzwbjirpzT/Obtsh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkUwMC8zRDBCMjEyQUY0 RkQxMUVCQTUyQ0UyMTFDNEY5QUUwMi9nTzBnOV93SDNneWZQQnVPS3VuTlA4NXUy eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dPMGc5X3dIM2d5ZlBCdU9LdW5OUDg1dTJ5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUJFMDAvM0QwQjIxMkFGNEZEMTFFQkE1MkNFMjExQzRGOUFFMDIvOEI2NTY0MThG NTAwMTFFQkJGNjBFQTE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnffAwDQQCAAIwBwMFACQD/MAwDQYJKoZIhvcNAQELBQAD ggEBALHdY9J6oYJYL2+ZKK+tA++qyU8v8xUXOcl788qCYfepHzkHcxOrSyph8MGj D6TCzHnCf4FZyYEFiLg/RJR7ubrdHo+n4xbTZKRI0Bw69C9bgbKAF+DQWj3uEit2 ntpsjIHiLnjUJeU4BGROkO8eYtfMGBdTyRKjdhJnln2Rl6wc9AOiZvNxUFZsT5QB FbrPYlkanTZN9IDy1QwJpSlYaK0HZSIi4X5mTs13pCgh7M7VwqagazE4uYd/edB3 N781AZbcayYHidFesEYuzZzowVOhfwcn82wb0vHN/Mx5eukF8y4o7B2kAc54S7HN UmlFlpbq2k7BRvUbrzyMDgypzGU= -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:22 2024 by rpki-client on console-ams.rpki-client.org