$ rpki-client -vvf rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/C611EE6CBCF711EEA90A1F1DC4F9AE02.roa File: C611EE6CBCF711EEA90A1F1DC4F9AE02.roa (raw, json) Hash identifier: i9dMAMF25KUvras5KvDG1QM1xBWeYt+C+ALZFoy+wTs= Subject key identifier: F2:11:7F:8A:F5:B6:33:02:D0:63:AC:3C:49:AC:65:23:93:3A:9C:EC Certificate issuer: /CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881 Certificate serial: 04FD Authority key identifier: 45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/C611EE6CBCF711EEA90A1F1DC4F9AE02.roa Signing time: Wed 06 Nov 2024 23:22:11 +0000 ROA not before: Wed 06 Nov 2024 23:22:11 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 203963 IP address blocks: 103.31.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1277 (0x4fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881 Validity Not Before: Nov 6 23:22:11 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=672bfa23-c6cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c0:79:2d:99:40:d7:73:b5:0d:3e:4f:c3:0a: 5f:6a:1b:6b:16:d8:e7:07:54:65:de:37:14:2e:39: dd:6c:a2:80:65:ec:17:34:9a:4e:7e:f1:71:8a:09: 11:f9:f1:fa:04:5a:b3:15:60:e8:ff:21:8c:cb:e9: 2c:ac:c9:24:38:3e:f9:4d:6b:45:64:4b:b0:bb:50: a8:ab:4b:fd:c0:5c:e9:12:10:6c:80:fe:03:44:ec: ac:7e:37:bb:2b:6f:67:79:b1:2e:9a:0b:d2:ed:05: 44:26:6d:b2:76:a9:9c:95:93:32:87:2c:d4:fa:7e: ae:36:30:98:db:90:05:2e:0b:05:6a:ea:e4:7b:94: b9:6e:81:94:e5:0e:e9:a6:36:bb:f1:f8:88:42:d9: 1b:0e:59:3d:35:b9:c4:64:d7:62:b6:47:f6:e3:67: 93:5d:65:33:62:2a:b1:1d:60:62:da:f9:8f:b2:ac: 00:85:f3:4d:7d:37:42:dd:dc:6f:29:68:fd:f4:5f: 30:ec:1e:36:e0:06:05:51:9c:82:b9:82:e2:7a:d4: d8:dc:88:86:77:5d:aa:0e:07:42:b7:94:c7:51:e4: 06:f4:3c:e4:ac:bd:01:26:e3:65:3f:12:95:63:0c: 73:38:20:77:d0:80:b6:ca:d5:d8:f3:05:15:7d:25: 11:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:11:7F:8A:F5:B6:33:02:D0:63:AC:3C:49:AC:65:23:93:3A:9C:EC X509v3 Authority Key Identifier: keyid:45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/C611EE6CBCF711EEA90A1F1DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.31.209.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:2b:30:d8:0a:f3:58:5e:a0:30:76:64:7b:ab:74:98:da:18: 8e:72:e9:8a:ee:5a:81:f4:25:2d:a4:c1:b5:d3:68:b1:09:af: 02:a0:35:92:12:7b:58:d0:11:e0:37:32:f7:83:2d:5f:63:80: af:36:c6:ef:c3:ab:81:2f:d4:6f:20:f2:7e:af:dc:fe:2c:f3: 3c:3b:e0:73:5d:d3:25:81:ce:84:ed:be:7d:4c:1f:c6:56:a0: af:e9:40:e8:c0:e1:1c:0b:c8:eb:54:da:4b:d2:24:13:5b:26: 72:2a:c0:0f:84:89:60:77:c5:b0:38:da:8d:07:db:8e:f2:3c: 73:b0:97:52:43:1e:59:d5:1c:b3:40:3f:9d:cd:37:1b:57:4b: 57:5b:7d:8d:fe:ad:e6:60:28:70:8c:95:a7:f9:ac:15:c9:ff: 8a:c5:e3:fe:1a:b0:cb:a7:80:80:fc:95:53:8a:97:40:cf:fc: 93:96:a8:74:5a:ab:52:8a:a4:c6:a0:61:ac:e4:03:2c:18:8a: 25:00:f8:b1:74:0a:f7:74:a2:f6:ef:95:b9:d6:2e:52:c7:2d: 9e:31:80:1a:ea:63:00:88:30:13:95:23:a3:37:c1:23:f0:24: 0f:87:3a:9d:de:66:a3:78:02:31:0d:f7:18:ad:36:78:61:e6: cd:93:43:92 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U1REMxMTAvBgNVBAUTKDQ1MkZBQkJERjA5RERGN0U1NUZEMEY5REJEREQ0Mjc4 RjQ0RkI4ODEwHhcNMjQxMTA2MjMyMjExWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJiZmEyMy1jNmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcB5LZlA13O1DT5PwwpfahtrFtjnB1Rl3jcULjndbKKAZewXNJpOfvFxigkR +fH6BFqzFWDo/yGMy+ksrMkkOD75TWtFZEuwu1Coq0v9wFzpEhBsgP4DROysfje7 K29nebEumgvS7QVEJm2ydqmclZMyhyzU+n6uNjCY25AFLgsFaurke5S5boGU5Q7p pja78fiIQtkbDlk9NbnEZNditkf242eTXWUzYiqxHWBi2vmPsqwAhfNNfTdC3dxv KWj99F8w7B424AYFUZyCuYLietTY3IiGd12qDgdCt5THUeQG9DzkrL0BJuNlPxKV YwxzOCB30IC2ytXY8wUVfSURIQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPIRf4r1 tjMC0GOsPEmsZSOTOpzsMB8GA1UdIwQYMBaAFEUvq73wnd9+Vf0Pnb3dQnj0T7iB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTVEQy9CQkUyQjUwMkY4 RUIxMUVCQkVGNUFBMzdDNEY5QUUwMi9SUy1ydmZDZDMzNVZfUS1kdmQxQ2VQUlB1 SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JTLXJ2ZkNkMzM1Vl9RLWR2ZDFDZVBSUHVJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0U1REMvQkJFMkI1MDJGOEVCMTFFQkJFRjVBQTM3QzRGOUFFMDIvQzYxMUVFNkNC Q0Y3MTFFRUE5MEExRjFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnH9EwDQYJKoZIhvcNAQELBQADggEBACorMNgK81heoDB2 ZHurdJjaGI5y6YruWoH0JS2kwbXTaLEJrwKgNZISe1jQEeA3MveDLV9jgK82xu/D q4Ev1G8g8n6v3P4s8zw74HNd0yWBzoTtvn1MH8ZWoK/pQOjA4RwLyOtU2kvSJBNb JnIqwA+EiWB3xbA42o0H247yPHOwl1JDHlnVHLNAP53NNxtXS1dbfY3+reZgKHCM laf5rBXJ/4rF4/4asMungID8lVOKl0DP/JOWqHRaq1KKpMagYazkAywYiiUA+LF0 Cvd0ovbvlbnWLlLHLZ4xgBrqYwCIMBOVI6M3wSPwJA+HOp3eZqN4AjEN9xitNnhh 5s2TQ5I= -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:35 2024 by rpki-client on console-fra.rpki-client.org