$ rpki-client -vvf rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/E331E83206CD11EBA6A91612C4F9AE02.roa File: E331E83206CD11EBA6A91612C4F9AE02.roa (raw, json) Hash identifier: YgjG4RIq8/AXh0+vxXX2Pz+/mF/LDmvghTRwjTbmhTs= Subject key identifier: D8:67:58:38:C5:1C:85:F6:9F:F1:91:CE:F4:14:11:B2:38:0E:11:5E Certificate issuer: /CN=A917EF96/serialNumber=809B7E6DDDE42F0627843DB59FA41AFA7F3B7C3B Certificate serial: 0713 Authority key identifier: 80:9B:7E:6D:DD:E4:2F:06:27:84:3D:B5:9F:A4:1A:FA:7F:3B:7C:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/E331E83206CD11EBA6A91612C4F9AE02.roa Signing time: Wed 28 Aug 2024 22:31:05 +0000 ROA not before: Wed 28 Aug 2024 22:31:05 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 140918 IP address blocks: 103.153.118.0/24 maxlen: 24 2001:df4:4480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.crl rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1811 (0x713) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EF96/serialNumber=809B7E6DDDE42F0627843DB59FA41AFA7F3B7C3B Validity Not Before: Aug 28 22:31:05 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66cfa529-0cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e2:72:e9:1a:55:61:7c:71:46:7b:8e:14:9d: 9a:1e:72:1a:b8:6f:bc:20:26:23:1c:8a:b6:5f:07: e5:7d:92:39:b3:29:2a:b9:58:88:73:e4:5f:88:62: d5:10:c1:23:da:ca:26:ec:b5:c9:c8:3e:06:65:66: 01:b4:60:73:9b:e8:99:5e:10:e8:75:71:88:e6:7c: 10:2f:76:a2:6a:6d:ab:9d:40:c8:e9:5d:bb:d2:1a: c8:43:37:ec:d7:6c:31:7a:42:be:c4:cd:71:a8:6f: 44:52:5a:5e:c5:db:f1:ba:a3:b3:96:15:3f:1d:52: 4d:ad:cf:5b:cf:33:80:50:55:ec:f0:16:57:94:1c: fb:5b:f9:3b:26:aa:e6:3e:c9:d3:15:1a:4e:03:18: 70:87:dc:8b:bf:01:08:a8:4c:25:04:8d:1d:d7:7d: 71:6a:55:13:1f:63:76:65:ae:3f:05:ab:b6:ff:f9: 99:c8:a0:90:e3:b3:3f:3f:b4:28:9d:eb:ab:94:3e: 55:47:53:8e:c3:b0:52:56:c8:5d:5e:b1:fb:a1:74: d7:72:c2:fe:e5:80:23:69:3d:65:a5:46:1c:22:40: fa:3d:09:0a:36:1c:d6:cc:be:4f:b4:d0:10:18:ab: fe:e4:06:9a:57:92:e2:10:e6:c0:cb:16:ef:07:f2: a8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:67:58:38:C5:1C:85:F6:9F:F1:91:CE:F4:14:11:B2:38:0E:11:5E X509v3 Authority Key Identifier: keyid:80:9B:7E:6D:DD:E4:2F:06:27:84:3D:B5:9F:A4:1A:FA:7F:3B:7C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/E331E83206CD11EBA6A91612C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.118.0/24 IPv6: 2001:df4:4480::/48 Signature Algorithm: sha256WithRSAEncryption c2:ac:38:6c:92:96:f3:51:51:69:4e:5f:96:0a:4c:2d:7d:e6: cf:cc:a4:24:22:02:55:55:a7:a0:0c:e4:73:aa:94:83:49:1e: a7:8d:6c:c3:e4:2c:8a:49:59:45:b6:63:4d:c3:4c:8c:7d:68: 61:bd:aa:7d:96:a4:0c:58:a2:b3:24:a4:6c:3e:b8:74:bd:1a: 5c:38:d7:31:c5:a4:59:c0:a2:09:82:0b:00:bd:bd:3d:56:5f: 99:93:38:44:54:05:8d:70:83:59:37:bd:36:28:2c:de:2b:9b: 13:10:22:da:0c:d4:89:34:fe:e9:f6:d2:da:b2:e3:89:5d:90: 1c:0d:6d:07:0d:4c:8b:f4:88:d3:0c:42:15:d8:8f:b7:d8:d0: 1f:3f:39:e0:04:d2:5c:15:32:71:c7:e4:ec:95:df:4e:7a:29: 5a:36:73:92:ca:72:0f:10:f7:5e:03:78:3e:7d:a7:a6:21:cb: 82:03:a5:6e:5d:a9:1e:16:8f:1e:58:c0:ca:18:49:bc:73:04: 8a:1d:bc:1f:0c:e7:49:ca:87:65:35:57:bb:c0:96:5a:db:5e: 52:e6:fb:e1:f9:b2:65:6c:e3:f9:93:bc:18:fd:a0:26:d8:cf: 79:e6:c9:bc:6c:7b:38:82:ef:f7:72:00:fa:44:1d:5c:88:75: 06:d6:f3:06 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VGOTYxMTAvBgNVBAUTKDgwOUI3RTZERERFNDJGMDYyNzg0M0RCNTlGQTQxQUZB N0YzQjdDM0IwHhcNMjQwODI4MjIzMTA1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmNmYTUyOS0wY2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAteJy6RpVYXxxRnuOFJ2aHnIauG+8ICYjHIq2XwflfZI5sykquViIc+RfiGLV EMEj2som7LXJyD4GZWYBtGBzm+iZXhDodXGI5nwQL3aiam2rnUDI6V270hrIQzfs 12wxekK+xM1xqG9EUlpexdvxuqOzlhU/HVJNrc9bzzOAUFXs8BZXlBz7W/k7Jqrm PsnTFRpOAxhwh9yLvwEIqEwlBI0d131xalUTH2N2Za4/Bau2//mZyKCQ47M/P7Qo neurlD5VR1OOw7BSVshdXrH7oXTXcsL+5YAjaT1lpUYcIkD6PQkKNhzWzL5PtNAQ GKv+5AaaV5LiEObAyxbvB/KotQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNhnWDjF HIX2n/GRzvQUEbI4DhFeMB8GA1UdIwQYMBaAFICbfm3d5C8GJ4Q9tZ+kGvp/O3w7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUY5Ni8wRjg2RTYwRTA2 Q0QxMUVCOUYwMEFGMTFDNEY5QUUwMi9nSnQtYmQza0x3WW5oRDIxbjZRYS1uODdm RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dKdC1iZDNrTHdZbmhEMjFuNlFhLW44N2ZEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VGOTYvMEY4NkU2MEUwNkNEMTFFQjlGMDBBRjExQzRGOUFFMDIvRTMzMUU4MzIw NkNEMTFFQkE2QTkxNjEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnmXYwDwQCAAIwCQMHACABDfREgDANBgkqhkiG9w0BAQsF AAOCAQEAwqw4bJKW81FRaU5flgpMLX3mz8ykJCICVVWnoAzkc6qUg0kep41sw+Qs iklZRbZjTcNMjH1oYb2qfZakDFiisySkbD64dL0aXDjXMcWkWcCiCYILAL29PVZf mZM4RFQFjXCDWTe9Nigs3iubExAi2gzUiTT+6fbS2rLjiV2QHA1tBw1Mi/SI0wxC FdiPt9jQHz854ATSXBUyccfk7JXfTnopWjZzkspyDxD3XgN4Pn2npiHLggOlbl2p HhaPHljAyhhJvHMEih28HwznScqHZTVXu8CWWtteUub74fmyZWzj+ZO8GP2gJtjP eebJvGx7OILv93IA+kQdXIh1BtbzBg== -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:09 2024 by rpki-client on console-fra.rpki-client.org