$ rpki-client -vvf rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/06FD60AAA8CE11EBBD4DB90DC4F9AE02.roa File: 06FD60AAA8CE11EBBD4DB90DC4F9AE02.roa (raw, json) Hash identifier: fNpUJmaY/58+uPHYwxaUVKQVkJ1Z1JQOjKMefzdFE80= Subject key identifier: 3B:22:5A:73:A5:8B:44:A4:91:9A:63:BA:D6:A4:12:58:9C:13:5D:7A Certificate issuer: /CN=A917047F/serialNumber=97F9739F6409C875AEE1C49BB69AA743CF36611B Certificate serial: 0DCA Authority key identifier: 97:F9:73:9F:64:09:C8:75:AE:E1:C4:9B:B6:9A:A7:43:CF:36:61:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_lzn2QJyHWu4cSbtpqnQ882YRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/06FD60AAA8CE11EBBD4DB90DC4F9AE02.roa Signing time: Thu 26 Sep 2024 17:56:16 +0000 ROA not before: Thu 26 Sep 2024 17:56:16 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 135323 IP address blocks: 103.215.128.0/24 maxlen: 24 103.215.129.0/24 maxlen: 24 103.215.130.0/24 maxlen: 24 103.215.131.0/24 maxlen: 24 202.58.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/l_lzn2QJyHWu4cSbtpqnQ882YRs.crl rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/l_lzn2QJyHWu4cSbtpqnQ882YRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_lzn2QJyHWu4cSbtpqnQ882YRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:48:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3530 (0xdca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917047F/serialNumber=97F9739F6409C875AEE1C49BB69AA743CF36611B Validity Not Before: Sep 26 17:56:16 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66f5a040-b6a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f3:f8:e8:c8:34:aa:07:ec:2b:de:8b:e4:1a: d5:a3:86:ce:ca:9e:66:87:33:d5:e6:c0:1f:57:24: 4f:32:51:51:7c:0e:94:c4:52:bc:c6:2f:f4:8e:40: 15:7b:02:c2:2c:c9:e3:19:4d:cb:f8:89:99:66:0d: 48:c7:a0:ba:3b:fc:05:d0:f3:50:0f:74:c5:f1:76: 59:1b:0a:9d:d4:bc:e3:8d:9d:bb:5c:b2:81:51:0d: 54:b1:98:af:d7:ad:8d:66:a6:3b:07:b8:4e:e6:e8: 7d:50:54:d4:66:31:99:f7:ac:59:e3:90:3d:f2:8b: d9:2f:fd:e1:7a:a9:da:82:06:f0:4b:eb:c0:2b:12: f6:98:85:cd:c8:4d:c4:0e:ad:3c:05:33:d1:a1:e0: d7:9d:6c:0a:0f:d8:2d:8e:da:00:72:a5:47:2c:ff: d8:71:8e:b4:c3:b5:5a:76:b4:da:9d:a0:4f:62:53: 53:06:b2:c8:a9:6c:ee:a0:6f:ec:ec:26:6d:9b:e2: 6e:65:e4:9d:a2:8c:ea:1d:12:7c:2f:72:5d:cf:36: 84:39:b9:5f:58:75:91:0e:69:97:d1:88:dd:29:45: 54:10:23:2b:59:97:d7:83:de:ed:73:c5:c2:36:82: e7:18:1a:83:28:b7:ca:97:9f:71:b1:c8:88:46:16: dc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:22:5A:73:A5:8B:44:A4:91:9A:63:BA:D6:A4:12:58:9C:13:5D:7A X509v3 Authority Key Identifier: keyid:97:F9:73:9F:64:09:C8:75:AE:E1:C4:9B:B6:9A:A7:43:CF:36:61:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/l_lzn2QJyHWu4cSbtpqnQ882YRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_lzn2QJyHWu4cSbtpqnQ882YRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/06FD60AAA8CE11EBBD4DB90DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.215.128.0/22 202.58.233.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:8b:18:5b:03:26:0a:01:a2:6a:ad:59:39:e4:d7:12:6d:ae: 51:5e:fe:7b:2c:24:0b:36:c5:c9:2c:15:e6:f3:9a:1c:1f:73: 72:18:07:9c:b0:83:18:73:27:7f:99:e9:2b:9c:6d:57:99:50: 04:c0:82:9e:99:1d:53:a1:e8:ce:4e:37:0b:0b:b8:70:f1:e4: fe:fe:f3:02:ba:c8:2e:a8:b6:de:0c:42:18:9a:be:36:e2:2d: 94:14:ad:86:24:44:da:d4:b2:46:b2:01:aa:14:a1:03:0c:08: 35:b3:58:f4:5c:76:35:c3:29:ea:0e:30:06:4e:39:f1:4d:0a: fb:d8:4a:b9:e1:ee:cd:29:bb:cd:e6:52:99:39:9b:da:3d:18: b1:6b:9d:43:4e:ec:1b:8d:48:52:5d:cc:e5:c6:b2:43:62:e7: 93:d5:da:a1:28:ee:41:a3:90:f5:cb:e4:3e:74:ff:46:78:c3: 85:5f:74:c7:cc:1e:d0:88:5b:a1:ee:83:ee:60:e9:39:eb:ea: d0:b4:65:00:22:b5:e3:fb:c8:b6:ad:e6:af:5b:99:8e:90:71: fd:13:e0:3e:4b:71:32:18:db:4e:e1:05:0d:e2:e4:2e:a2:e1: fc:aa:17:22:d8:c0:2c:66:e7:c1:21:24:85:5b:be:71:9a:90: 2e:f9:89:03 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA0N0YxMTAvBgNVBAUTKDk3Rjk3MzlGNjQwOUM4NzVBRUUxQzQ5QkI2OUFBNzQz Q0YzNjYxMUIwHhcNMjQwOTI2MTc1NjE2WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmY1YTA0MC1iNmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/P46Mg0qgfsK96L5BrVo4bOyp5mhzPV5sAfVyRPMlFRfA6UxFK8xi/0jkAV ewLCLMnjGU3L+ImZZg1Ix6C6O/wF0PNQD3TF8XZZGwqd1LzjjZ27XLKBUQ1UsZiv 162NZqY7B7hO5uh9UFTUZjGZ96xZ45A98ovZL/3heqnaggbwS+vAKxL2mIXNyE3E Dq08BTPRoeDXnWwKD9gtjtoAcqVHLP/YcY60w7VadrTanaBPYlNTBrLIqWzuoG/s 7CZtm+JuZeSdoozqHRJ8L3JdzzaEOblfWHWRDmmX0YjdKUVUECMrWZfXg97tc8XC NoLnGBqDKLfKl59xsciIRhbcbQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDsiWnOl i0SkkZpjutakElicE116MB8GA1UdIwQYMBaAFJf5c59kCch1ruHEm7aap0PPNmEb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDQ3Ri9GRDcyREUxNEEz QTkxMUU5OUY3NTc3N0JDNEY5QUUwMi9sX2x6bjJRSnlIV3U0Y1NidHBxblE4ODJZ UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xfbHpuMlFKeUhXdTRjU2J0cHFuUTg4MllScy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzA0N0YvRkQ3MkRFMTRBM0E5MTFFOTlGNzU3NzdCQzRGOUFFMDIvMDZGRDYwQUFB OENFMTFFQkJENERCOTBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJn14ADBADKOukwDQYJKoZIhvcNAQELBQADggEBAE2LGFsD JgoBomqtWTnk1xJtrlFe/nssJAs2xcksFebzmhwfc3IYB5ywgxhzJ3+Z6SucbVeZ UATAgp6ZHVOh6M5ONwsLuHDx5P7+8wK6yC6ott4MQhiavjbiLZQUrYYkRNrUskay AaoUoQMMCDWzWPRcdjXDKeoOMAZOOfFNCvvYSrnh7s0pu83mUpk5m9o9GLFrnUNO 7BuNSFJdzOXGskNi55PV2qEo7kGjkPXL5D50/0Z4w4VfdMfMHtCIW6Hug+5g6Tnr 6tC0ZQAiteP7yLat5q9bmY6Qcf0T4D5LcTIY207hBQ3i5C6i4fyqFyLYwCxm58Eh JIVbvnGakC75iQM= -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:59 2024 by rpki-client on console-fra.rpki-client.org