$ rpki-client -vvf rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/718673B6BB7F11EC9E187F19C4F9AE02.roa File: 718673B6BB7F11EC9E187F19C4F9AE02.roa (raw, json) Hash identifier: O8VxzFOTQcqKK+CbKNz7Oarn0uADD/6F4h0/93MvW2k= Subject key identifier: 57:C2:36:CE:61:79:23:EA:C2:31:E0:DC:6F:8D:47:2F:C9:09:ED:34 Certificate issuer: /CN=A916593B/serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504 Certificate serial: 02F4 Authority key identifier: 49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/718673B6BB7F11EC9E187F19C4F9AE02.roa Signing time: Sat 23 Nov 2024 01:04:31 +0000 ROA not before: Sat 23 Nov 2024 01:04:31 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 45809 IP address blocks: 103.70.24.0/22 maxlen: 24 2001:dce:8::/48 maxlen: 48 2001:dce:9::/48 maxlen: 48 2001:dce:a::/48 maxlen: 48 2001:dce:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.crl rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 756 (0x2f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916593B/serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504 Validity Not Before: Nov 23 01:04:31 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67412a1e-1310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:48:47:b6:a1:72:60:5e:12:81:8c:84:ae:42: cb:aa:e8:b5:6a:c2:9d:b5:03:4e:12:d1:b2:79:97: 53:98:08:0d:dc:13:75:0d:b2:e0:b3:c8:3c:62:42: 95:46:91:7c:da:cf:26:3b:2e:d8:29:28:70:58:07: 48:b5:b6:be:d4:91:be:29:21:8a:5d:f2:7a:7e:3a: 77:95:51:03:ba:5b:dd:2f:51:08:79:f3:a7:2a:41: 62:73:d6:c5:34:b6:01:b7:4b:be:8c:25:64:f4:f6: 45:3d:1b:d1:11:93:68:9a:c0:de:13:5d:7f:bf:a9: 09:2a:90:2f:19:76:67:da:1d:ed:e2:14:af:7f:99: 8d:f6:54:07:c7:94:d6:01:51:af:c8:80:17:52:60: e2:a5:ed:4b:61:fb:8d:63:e0:66:51:9a:a3:0b:ad: 66:54:29:59:5d:16:3b:ce:a2:f2:97:b7:98:bf:b1: b7:d9:c5:21:cb:ac:a9:9d:26:13:69:68:2f:21:d4: 07:6e:7f:78:57:76:27:4f:3e:2d:9f:ab:2b:d5:bb: 20:fb:6a:a3:39:51:38:26:26:0c:a1:0c:8b:e8:cc: 76:27:02:c2:74:7b:1e:b4:35:ff:00:31:0b:57:bb: d0:dd:cf:52:3a:ec:dd:67:b4:1b:7a:2b:87:66:f4: 0b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C2:36:CE:61:79:23:EA:C2:31:E0:DC:6F:8D:47:2F:C9:09:ED:34 X509v3 Authority Key Identifier: keyid:49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/718673B6BB7F11EC9E187F19C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.70.24.0/22 IPv6: 2001:dce:8::-2001:dce:a:ffff:ffff:ffff:ffff:ffff 2001:dce:2000::/48 Signature Algorithm: sha256WithRSAEncryption ae:03:d4:20:71:d5:a4:e2:e7:4d:7c:a2:e3:ee:b1:1c:8b:f9: a1:1b:b7:f7:83:87:c6:8e:76:4d:49:16:ba:0c:1b:4c:0d:c4: 3d:7e:52:b3:7e:a1:a1:88:c4:38:d4:3c:ea:19:db:68:7f:08: 14:3a:3b:0f:4d:63:3e:b9:df:cb:42:b2:61:2e:43:bf:2a:4e: 35:f9:38:99:67:df:99:95:2a:65:b7:ed:e8:fd:4e:df:ff:3c: fc:6d:0f:48:c5:12:21:f2:b0:1f:bf:e7:e6:4e:7a:eb:c0:c6: 72:84:67:e4:3b:30:19:fd:f1:14:4b:49:3f:ce:99:98:f6:22: c7:48:e4:31:8b:4f:4a:80:46:91:39:2b:e3:48:e1:d0:bc:39: 5b:ce:c4:93:c2:81:12:1b:7c:73:dc:ca:23:74:2f:2a:80:35: d1:fc:0d:9e:eb:77:1c:e4:f1:ce:8a:99:2b:20:88:91:ee:7a: 34:7a:3b:dd:50:be:2d:cd:6c:50:9c:bf:dd:24:88:93:dd:ff: 0b:bb:3a:8d:67:fb:24:7b:2a:00:5f:dc:a9:0e:f0:f3:7a:ec: 33:e1:9b:98:f0:4f:11:6e:6a:62:2b:d1:a2:86:04:8d:cb:d3: bf:ba:ed:c0:55:04:44:7c:d4:e2:5e:de:53:19:35:ed:ce:64: ef:af:73:58 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU5M0IxMTAvBgNVBAUTKDQ5QUI1REQxMURDOTIyRENDOEYyM0RENUE5MkM2OTk0 REQ3MDM1MDQwHhcNMjQxMTIzMDEwNDMxWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQxMmExZS0xMzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1EhHtqFyYF4SgYyErkLLqui1asKdtQNOEtGyeZdTmAgN3BN1DbLgs8g8YkKV RpF82s8mOy7YKShwWAdItba+1JG+KSGKXfJ6fjp3lVEDulvdL1EIefOnKkFic9bF NLYBt0u+jCVk9PZFPRvREZNomsDeE11/v6kJKpAvGXZn2h3t4hSvf5mN9lQHx5TW AVGvyIAXUmDipe1LYfuNY+BmUZqjC61mVClZXRY7zqLyl7eYv7G32cUhy6ypnSYT aWgvIdQHbn94V3YnTz4tn6sr1bsg+2qjOVE4JiYMoQyL6Mx2JwLCdHsetDX/ADEL V7vQ3c9SOuzdZ7QbeiuHZvQLKQIDAQABo4ICujCCArYwHQYDVR0OBBYEFFfCNs5h eSPqwjHg3G+NRy/JCe00MB8GA1UdIwQYMBaAFEmrXdEdySLcyPI91aksaZTdcDUE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTkzQi8xMDNDN0QxQ0JC N0ExMUVDODI5RUU4MERDNEY5QUUwMi9TYXRkMFIzSkl0ekk4ajNWcVN4cGxOMXdO UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NhdGQwUjNKSXR6SThqM1ZxU3hwbE4xd05RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjU5M0IvMTAzQzdEMUNCQjdBMTFFQzgyOUVFODBEQzRGOUFFMDIvNzE4NjczQjZC QjdGMTFFQzlFMTg3RjE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRAYIKwYBBQUHAQcBAf8E NTAzMAwEAgABMAYDBAJnRhgwIwQCAAIwHTASAwcDIAENzgAIAwcAIAENzgAKAwcA IAENziAAMA0GCSqGSIb3DQEBCwUAA4IBAQCuA9QgcdWk4udNfKLj7rEci/mhG7f3 g4fGjnZNSRa6DBtMDcQ9flKzfqGhiMQ41DzqGdtofwgUOjsPTWM+ud/LQrJhLkO/ Kk41+TiZZ9+ZlSplt+3o/U7f/zz8bQ9IxRIh8rAfv+fmTnrrwMZyhGfkOzAZ/fEU S0k/zpmY9iLHSOQxi09KgEaROSvjSOHQvDlbzsSTwoESG3xz3MojdC8qgDXR/A2e 63cc5PHOipkrIIiR7no0ejvdUL4tzWxQnL/dJIiT3f8LuzqNZ/skeyoAX9ypDvDz euwz4ZuY8E8RbmpiK9GihgSNy9O/uu3AVQREfNTiXt5TGTXtzmTvr3NY -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:37 2024 by rpki-client on console-fra.rpki-client.org