$ rpki-client -vvf rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/1CD82986C36111E9A37AC46EC4F9AE02.roa File: 1CD82986C36111E9A37AC46EC4F9AE02.roa (raw, json) Hash identifier: KL8aICS0aayuRpdlvbYehEzSsatkO3Hs+QAJl8XQUok= Subject key identifier: 1E:6A:36:6F:27:EB:25:E8:34:B0:C1:46:69:47:5A:A7:69:7E:38:91 Certificate issuer: /CN=A915D529/serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63 Certificate serial: 0CF0 Authority key identifier: C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/1CD82986C36111E9A37AC46EC4F9AE02.roa Signing time: Fri 14 Jun 2024 19:42:39 +0000 ROA not before: Fri 14 Jun 2024 19:42:39 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 2 IP address blocks: 103.29.28.0/24 maxlen: 24 103.250.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3312 (0xcf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D529/serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63 Validity Not Before: Jun 14 19:42:39 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=666c9d2f-5140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:24:6b:57:f8:d0:33:74:a0:82:a9:44:a5:03: 90:d0:a7:1c:c7:8a:c3:24:a2:6a:0f:12:28:02:e2: 67:66:c0:40:ea:69:57:df:4e:c6:9d:85:09:1b:fe: de:14:52:f0:36:44:1f:a1:ab:45:2f:9d:96:49:d9: 3c:24:bf:64:81:5a:5b:6d:62:16:31:27:47:f3:77: c7:ec:3d:9b:e4:97:28:9b:cd:f9:55:34:1c:ce:ff: d0:ee:91:3f:d8:a5:1b:61:fc:30:59:b9:c9:3a:9e: 22:1b:5e:f4:5c:65:b8:65:02:52:ab:ac:ce:7d:74: a0:9d:8e:82:49:3f:c5:47:50:1a:4d:a3:23:44:e6: b1:d1:54:91:e5:4c:2a:de:e3:12:11:92:05:30:da: 5e:40:35:0a:86:1c:17:ac:d8:d0:93:83:8e:6e:ba: 5c:b1:c8:6e:ce:ac:50:18:ca:40:10:9c:e2:af:09: 5e:05:a9:b0:8c:33:e9:88:93:40:4c:e7:87:67:86: af:d7:e9:14:24:e7:d6:dd:6f:de:49:c3:d9:b2:c2: b1:35:f1:79:04:2a:de:bf:6b:97:25:bb:53:c1:d8: 96:71:d0:69:a8:74:34:ed:a6:ca:80:76:fc:42:a5: 72:4d:17:23:f7:7a:bf:97:1b:d3:3d:c2:79:2e:53: 18:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6A:36:6F:27:EB:25:E8:34:B0:C1:46:69:47:5A:A7:69:7E:38:91 X509v3 Authority Key Identifier: keyid:C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/1CD82986C36111E9A37AC46EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.29.28.0/24 103.250.31.0/24 Signature Algorithm: sha256WithRSAEncryption af:7f:fe:af:3e:59:c2:72:49:50:73:75:67:d1:65:79:01:56: 41:44:54:97:c6:2b:b7:fe:8a:03:22:f3:f2:42:a6:41:15:72: 83:e4:6b:b8:24:a1:43:7a:2f:b4:e3:1c:78:d4:4c:98:8a:f6: 0f:24:20:98:1f:00:de:e3:ac:89:88:9f:73:21:c2:99:d8:68: 30:2a:05:20:e1:32:39:63:aa:c0:10:d7:6a:3a:31:ce:97:e4: 12:d5:21:b6:2b:6d:cd:28:94:47:1f:f3:21:64:29:64:b2:39: ee:f1:df:86:28:3d:b0:e9:36:67:f2:60:26:70:1e:04:94:64: 4d:dd:8a:40:59:66:9e:2b:c4:5a:a8:32:b3:8e:25:74:b7:6a: c3:21:99:a3:e4:9c:2e:fe:7e:29:ae:fe:c9:8d:86:12:57:7e: 04:9f:19:12:c3:b9:d2:2c:d9:89:6e:39:69:dd:77:a7:ad:3a: 77:e5:de:d8:b2:ff:68:c8:1c:d8:8e:ad:75:44:a1:fd:c4:0c: 1f:60:43:24:dd:fa:2a:de:58:bf:5e:37:0a:7e:8b:60:5f:22: d3:13:d4:7f:2d:99:52:b6:03:58:4b:f3:6a:4a:12:5f:87:ed: 7c:99:d9:6f:81:82:a8:d7:f7:31:72:3c:27:b9:0a:ea:8a:87: ea:74:dc:d3 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ1MjkxMTAvBgNVBAUTKEM5OEFGQkI0QkI5QUU5QjFBMjdBM0REM0FENTk1NkIz NEVEQTlDNjMwHhcNMjQwNjE0MTk0MjM5WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjZjOWQyZi01MTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5yRrV/jQM3SggqlEpQOQ0Kccx4rDJKJqDxIoAuJnZsBA6mlX307GnYUJG/7e FFLwNkQfoatFL52WSdk8JL9kgVpbbWIWMSdH83fH7D2b5Jcom835VTQczv/Q7pE/ 2KUbYfwwWbnJOp4iG170XGW4ZQJSq6zOfXSgnY6CST/FR1AaTaMjROax0VSR5Uwq 3uMSEZIFMNpeQDUKhhwXrNjQk4OObrpcschuzqxQGMpAEJzirwleBamwjDPpiJNA TOeHZ4av1+kUJOfW3W/eScPZssKxNfF5BCrev2uXJbtTwdiWcdBpqHQ07abKgHb8 QqVyTRcj93q/lxvTPcJ5LlMYeQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFB5qNm8n 6yXoNLDBRmlHWqdpfjiRMB8GA1UdIwQYMBaAFMmK+7S7mumxono9061ZVrNO2pxj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDUyOS8yMENGMkUxNEMz NjAxMUU5OEE1QzAyNkRDNEY5QUUwMi95WXI3dEx1YTZiR2llajNUclZsV3MwN2Fu R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lZcjd0THVhNmJHaWVqM1RyVmxXczA3YW5HTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQ1MjkvMjBDRjJFMTRDMzYwMTFFOThBNUMwMjZEQzRGOUFFMDIvMUNEODI5ODZD MzYxMTFFOUEzN0FDNDZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnHRwDBABn+h8wDQYJKoZIhvcNAQELBQADggEBAK9//q8+ WcJySVBzdWfRZXkBVkFEVJfGK7f+igMi8/JCpkEVcoPka7gkoUN6L7TjHHjUTJiK 9g8kIJgfAN7jrImIn3MhwpnYaDAqBSDhMjljqsAQ12o6Mc6X5BLVIbYrbc0olEcf 8yFkKWSyOe7x34YoPbDpNmfyYCZwHgSUZE3dikBZZp4rxFqoMrOOJXS3asMhmaPk nC7+fimu/smNhhJXfgSfGRLDudIs2YluOWndd6etOnfl3tiy/2jIHNiOrXVEof3E DB9gQyTd+ireWL9eNwp+i2BfItMT1H8tmVK2A1hL82pKEl+H7XyZ2W+BgqjX9zFy PCe5CuqKh+p03NM= -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:58 2024 by rpki-client on console-fra.rpki-client.org