$ rpki-client -vvf rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/2F79F386050511EA87CC7D42C4F9AE02.roa File: 2F79F386050511EA87CC7D42C4F9AE02.roa (raw, json) Hash identifier: 1r2fILVlnPF9g9/RvWkB32IMvkecllavKDmXeDe08HY= Subject key identifier: 8D:C1:E9:4F:0A:E8:C7:C3:A1:58:B0:B2:1C:8B:DA:FE:C6:CE:BE:8D Certificate issuer: /CN=A917E754/serialNumber=B509375E25A95D2B59C19581C3C635B68A49112D Certificate serial: 3415 Authority key identifier: B5:09:37:5E:25:A9:5D:2B:59:C1:95:81:C3:C6:35:B6:8A:49:11:2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tQk3XiWpXStZwZWBw8Y1topJES0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/2F79F386050511EA87CC7D42C4F9AE02.roa Signing time: Sat 28 Sep 2024 15:31:15 +0000 ROA not before: Sat 28 Sep 2024 15:31:15 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 132394 IP address blocks: 103.20.20.0/24 maxlen: 24 103.232.159.0/24 maxlen: 24 103.232.216.0/23 maxlen: 23 202.0.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.crl rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tQk3XiWpXStZwZWBw8Y1topJES0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13333 (0x3415) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E754/serialNumber=B509375E25A95D2B59C19581C3C635B68A49112D Validity Not Before: Sep 28 15:31:15 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66f82143-5d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:67:f9:7f:85:ef:58:78:2b:82:51:b6:a2:12: 24:d9:6b:5f:bf:4c:9c:5d:16:21:eb:38:0b:d5:1a: 04:aa:0b:24:a6:c5:15:cd:d4:1e:5c:31:04:27:47: 54:75:98:d9:e2:a4:18:4a:a0:7c:76:16:d3:4a:e3: 05:55:9e:3a:72:76:4c:7b:6f:50:d2:a0:fc:13:cf: 23:24:e6:21:43:83:d0:61:5f:95:f8:42:82:02:b3: 7a:e1:7a:1e:87:a2:03:e7:57:6d:53:0b:76:b4:9d: 66:95:8e:5f:06:4f:f4:d0:4f:88:ce:e1:c2:e0:4d: 32:d7:90:47:1a:5e:c2:d4:bd:bf:e5:09:38:7e:fa: 70:b2:23:74:fd:73:31:42:de:00:82:44:1b:a4:c6: 5c:8d:75:e0:30:51:bf:9f:59:68:38:86:ba:d2:1e: ad:45:47:ea:8d:33:e1:b7:0f:7d:6f:b8:cb:31:39: 36:29:f3:f1:d6:45:25:96:38:21:9f:ef:05:73:f6: dd:ed:b2:c2:76:d3:90:9e:4e:c1:65:8c:be:90:f2: ad:aa:da:03:7e:c7:22:9a:ec:1a:9c:29:ae:20:65: c6:92:f6:05:64:73:20:8a:ad:8b:5c:4b:ff:11:03: 32:a8:63:39:89:af:32:45:73:9e:6b:52:0a:dc:db: 3a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C1:E9:4F:0A:E8:C7:C3:A1:58:B0:B2:1C:8B:DA:FE:C6:CE:BE:8D X509v3 Authority Key Identifier: keyid:B5:09:37:5E:25:A9:5D:2B:59:C1:95:81:C3:C6:35:B6:8A:49:11:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tQk3XiWpXStZwZWBw8Y1topJES0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/2F79F386050511EA87CC7D42C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.20.20.0/24 103.232.159.0/24 103.232.216.0/23 202.0.150.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:d0:2c:01:cb:b4:6d:2b:bb:19:ce:21:57:f7:4b:6a:a6:b9: 5b:8c:df:02:1d:c5:e4:69:46:5f:9f:f6:b0:2d:4c:11:ac:d8: cf:e2:ca:b2:5a:44:93:69:61:4a:27:15:fd:27:25:2d:98:45: 34:40:6b:ba:22:cd:72:8c:77:0a:33:de:1b:1b:7d:a8:df:4d: e5:53:3f:78:1d:0d:b4:a0:8b:66:3f:02:34:16:5f:1b:7a:c4: 0c:a4:3c:4b:29:d5:f2:97:8a:42:33:db:05:cc:cd:e8:2c:e5: ef:c0:66:38:b4:56:1e:cc:98:f3:b8:60:4a:3e:36:99:34:75: 7d:55:76:04:84:c6:98:f3:4b:bf:98:78:ba:af:3c:d4:03:a4: ed:73:67:2c:04:6d:dd:c1:b9:0b:4e:4d:53:8f:07:f0:ad:de: c9:19:c7:4a:d1:49:91:85:8b:6f:0e:ec:bf:e5:63:c5:44:8c: 48:5f:4e:a6:d8:77:b8:98:2b:e5:0a:2e:e9:9a:bf:8a:20:53: a5:2d:47:43:a3:92:12:4b:c1:d4:b2:1e:63:c3:61:ab:26:cc: 57:67:15:1b:b9:e0:9d:1a:3e:b9:4c:79:80:cb:ca:5c:a4:74: cf:fb:cc:f4:af:34:dd:eb:4c:17:09:c2:41:91:17:22:fc:6d: 40:98:f4:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICNBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U3NTQxMTAvBgNVBAUTKEI1MDkzNzVFMjVBOTVEMkI1OUMxOTU4MUMzQzYzNUI2 OEE0OTExMkQwHhcNMjQwOTI4MTUzMTE1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmY4MjE0My01ZDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2f5f4XvWHgrglG2ohIk2Wtfv0ycXRYh6zgL1RoEqgskpsUVzdQeXDEEJ0dU dZjZ4qQYSqB8dhbTSuMFVZ46cnZMe29Q0qD8E88jJOYhQ4PQYV+V+EKCArN64Xoe h6ID51dtUwt2tJ1mlY5fBk/00E+IzuHC4E0y15BHGl7C1L2/5Qk4fvpwsiN0/XMx Qt4AgkQbpMZcjXXgMFG/n1loOIa60h6tRUfqjTPhtw99b7jLMTk2KfPx1kUlljgh n+8Fc/bd7bLCdtOQnk7BZYy+kPKtqtoDfscimuwanCmuIGXGkvYFZHMgiq2LXEv/ EQMyqGM5ia8yRXOea1IK3Ns6gwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFI3B6U8K 6MfDoViwshyL2v7Gzr6NMB8GA1UdIwQYMBaAFLUJN14lqV0rWcGVgcPGNbaKSREt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTc1NC9BQ0QxRDc3MDFE QUIxMUUyQkEyODA2QUEwOEIwMkNEMi90UWszWGlXcFhTdFp3WldCdzhZMXRvcEpF UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RRazNYaVdwWFN0WndaV0J3OFkxdG9wSkVTMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0U3NTQvQUNEMUQ3NzAxREFCMTFFMkJBMjgwNkFBMDhCMDJDRDIvMkY3OUYzODYw NTA1MTFFQTg3Q0M3RDQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBABnFBQDBABn6J8DBAFn6NgDBADKAJYwDQYJKoZIhvcNAQEL BQADggEBAGzQLAHLtG0ruxnOIVf3S2qmuVuM3wIdxeRpRl+f9rAtTBGs2M/iyrJa RJNpYUonFf0nJS2YRTRAa7oizXKMdwoz3hsbfajfTeVTP3gdDbSgi2Y/AjQWXxt6 xAykPEsp1fKXikIz2wXMzegs5e/AZji0Vh7MmPO4YEo+Npk0dX1VdgSExpjzS7+Y eLqvPNQDpO1zZywEbd3BuQtOTVOPB/Ct3skZx0rRSZGFi28O7L/lY8VEjEhfTqbY d7iYK+UKLumav4ogU6UtR0OjkhJLwdSyHmPDYasmzFdnFRu54J0aPrlMeYDLylyk dM/7zPSvNN3rTBcJwkGRFyL8bUCY9E4= -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:22 2024 by rpki-client on console-ams.rpki-client.org