$ rpki-client -vvf rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/61E12BD0CA0611EEB05EB92CC4F9AE02.roa File: 61E12BD0CA0611EEB05EB92CC4F9AE02.roa (raw, json) Hash identifier: muZS9WNxEL2wJKlgL2513BvJDYDXcwI4cyb0WW+U1LY= Subject key identifier: 9C:8D:70:8E:42:58:8E:D9:FB:2B:7E:6F:F4:C5:EA:12:5E:19:77:14 Certificate issuer: /CN=A916D459/serialNumber=B5174D8265649CDD27426C927D168775D783D538 Certificate serial: 0A6B Authority key identifier: B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/61E12BD0CA0611EEB05EB92CC4F9AE02.roa Signing time: Thu 04 Jul 2024 20:18:24 +0000 ROA not before: Thu 04 Jul 2024 20:18:24 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 24459 IP address blocks: 103.248.179.0/24 maxlen: 24 2001:df3:9140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2667 (0xa6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D459/serialNumber=B5174D8265649CDD27426C927D168775D783D538 Validity Not Before: Jul 4 20:18:24 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66870390-f28c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:63:c5:31:2b:3f:cc:79:00:d0:92:a7:36:73: ce:84:b2:21:f5:86:14:27:33:26:10:44:7f:8e:2e: 0b:45:a6:30:99:08:21:30:38:c4:e1:a4:f1:7e:e2: 4e:d0:af:8a:f8:1c:67:a2:a7:8a:ba:18:76:fb:ce: 67:bc:cd:9e:60:aa:81:db:bc:17:73:db:1f:a9:5a: 5e:3a:36:f1:ce:41:0a:c1:e6:49:34:b1:e8:fc:5e: 59:f8:4b:3e:d3:d4:21:a6:dc:ef:4d:cb:7e:3f:b4: 64:d9:0f:48:e1:96:50:05:d2:b5:c4:e6:1f:92:74: 98:39:01:c3:26:c0:d5:39:56:4f:c0:dc:99:c3:dc: 06:ab:a8:64:c8:94:62:c0:05:94:4b:b3:eb:22:ae: 0a:f1:2e:d1:66:fe:ec:1c:de:86:50:6d:30:5d:50: 91:60:70:31:dc:db:12:b4:31:49:be:45:7e:72:a0: db:f3:c8:8f:9f:51:a2:35:be:cf:e5:24:be:2f:6d: f0:30:13:47:4e:59:df:b5:96:f4:d3:91:07:e5:0b: 56:4f:3d:3f:76:72:e7:c9:2a:8a:c6:12:33:64:dd: ef:83:a9:4b:8e:39:f0:37:d5:4b:a0:a4:3e:3c:ba: c7:66:c9:8e:94:18:36:61:8c:47:78:ff:d0:e9:c7: b0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8D:70:8E:42:58:8E:D9:FB:2B:7E:6F:F4:C5:EA:12:5E:19:77:14 X509v3 Authority Key Identifier: keyid:B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/61E12BD0CA0611EEB05EB92CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.248.179.0/24 IPv6: 2001:df3:9140::/48 Signature Algorithm: sha256WithRSAEncryption 34:d2:96:44:d0:55:3a:2f:4e:17:c8:0c:b2:bd:fb:19:ef:7c: 54:3a:05:18:4a:aa:8c:51:21:eb:ee:04:12:b1:c7:fc:5a:8e: c4:e2:f8:7b:26:0c:ab:89:2f:f1:08:91:6b:d2:29:0f:0e:53: fc:52:e0:f6:9d:cf:dd:ef:45:cf:81:12:3b:be:4a:2c:25:72: 62:5f:74:a2:3d:29:5f:db:4b:fa:69:60:84:19:51:7b:73:c0: b3:10:be:0f:e1:5f:2d:a6:16:3a:ed:ab:7c:cc:2a:f9:ba:e9: 42:57:bc:49:a7:da:a5:c5:29:c9:f8:6a:2d:c0:5f:5e:26:10: 9f:a5:42:e5:f7:a4:fd:e8:7a:d7:ff:12:c5:91:63:47:8c:1f: 0d:68:96:66:87:10:6b:a0:a6:cd:0a:65:11:88:10:f0:aa:39: ac:08:c7:e0:90:7c:82:36:9c:1c:73:34:85:36:c9:46:3d:ed: 2f:a9:99:d9:f1:57:b8:5e:03:ba:78:6b:7f:41:e8:86:7d:bb: 95:6b:a4:3e:fa:ed:02:70:b0:f7:01:70:f7:28:27:48:06:a7: 8b:ee:41:a1:9d:7d:58:c1:b0:49:9b:0a:5f:50:bb:8e:58:e1: 9a:42:02:11:44:77:1e:ff:6f:77:34:73:c5:e5:bb:3e:51:98: c4:d8:a8:0b -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ0NTkxMTAvBgNVBAUTKEI1MTc0RDgyNjU2NDlDREQyNzQyNkM5MjdEMTY4Nzc1 RDc4M0Q1MzgwHhcNMjQwNzA0MjAxODI0WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njg3MDM5MC1mMjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm2PFMSs/zHkA0JKnNnPOhLIh9YYUJzMmEER/ji4LRaYwmQghMDjE4aTxfuJO 0K+K+BxnoqeKuhh2+85nvM2eYKqB27wXc9sfqVpeOjbxzkEKweZJNLHo/F5Z+Es+ 09QhptzvTct+P7Rk2Q9I4ZZQBdK1xOYfknSYOQHDJsDVOVZPwNyZw9wGq6hkyJRi wAWUS7PrIq4K8S7RZv7sHN6GUG0wXVCRYHAx3NsStDFJvkV+cqDb88iPn1GiNb7P 5SS+L23wMBNHTlnftZb005EH5QtWTz0/dnLnySqKxhIzZN3vg6lLjjnwN9VLoKQ+ PLrHZsmOlBg2YYxHeP/Q6cewqQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJyNcI5C WI7Z+yt+b/TF6hJeGXcUMB8GA1UdIwQYMBaAFLUXTYJlZJzdJ0Jskn0Wh3XXg9U4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDQ1OS85OUVDODlFQzQy MjAxMUVBQjUzMDIwMTZDNEY5QUUwMi90UmROZ21Wa25OMG5RbXlTZlJhSGRkZUQx VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RSZE5nbVZrbk4wblFteVNmUmFIZGRlRDFUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkQ0NTkvOTlFQzg5RUM0MjIwMTFFQUI1MzAyMDE2QzRGOUFFMDIvNjFFMTJCRDBD QTA2MTFFRUIwNUVCOTJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABn+LMwDwQCAAIwCQMHACABDfORQDANBgkqhkiG9w0BAQsF AAOCAQEANNKWRNBVOi9OF8gMsr37Ge98VDoFGEqqjFEh6+4EErHH/FqOxOL4eyYM q4kv8QiRa9IpDw5T/FLg9p3P3e9Fz4ESO75KLCVyYl90oj0pX9tL+mlghBlRe3PA sxC+D+FfLaYWOu2rfMwq+brpQle8SafapcUpyfhqLcBfXiYQn6VC5fek/eh61/8S xZFjR4wfDWiWZocQa6CmzQplEYgQ8Ko5rAjH4JB8gjacHHM0hTbJRj3tL6mZ2fFX uF4Dunhrf0Hohn27lWukPvrtAnCw9wFw9ygnSAani+5BoZ19WMGwSZsKX1C7jljh mkICEUR3Hv9vdzRzxeW7PlGYxNioCw== -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:29 2024 by rpki-client on console-fra.rpki-client.org