$ rpki-client -vvf rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/AD1B7E40A5C511E8A9B85134C4F9AE02.roa File: AD1B7E40A5C511E8A9B85134C4F9AE02.roa (raw, json) Hash identifier: G/+aMcdn4Jk49lhNesVyUlNP1/Jmx6JWIxijg1iwB7I= Subject key identifier: E8:FC:74:7B:B7:EA:A6:38:C7:27:3D:F3:AE:BA:78:D5:30:82:42:CD Certificate issuer: /CN=A917F89D/serialNumber=C396305D02D2F885F3FADED53AC310F21BD05487 Certificate serial: 12BA Authority key identifier: C3:96:30:5D:02:D2:F8:85:F3:FA:DE:D5:3A:C3:10:F2:1B:D0:54:87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/AD1B7E40A5C511E8A9B85134C4F9AE02.roa Signing time: Thu 22 Aug 2024 17:35:12 +0000 ROA not before: Thu 22 Aug 2024 17:35:12 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 133977 IP address blocks: 103.116.176.0/24 maxlen: 24 103.116.177.0/24 maxlen: 24 103.116.178.0/24 maxlen: 24 103.116.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.crl rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:03:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4794 (0x12ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F89D/serialNumber=C396305D02D2F885F3FADED53AC310F21BD05487 Validity Not Before: Aug 22 17:35:12 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66c776cf-2d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:84:9a:69:08:a7:27:18:4a:d6:a7:ca:79:b4: 6f:bd:21:b3:e5:b0:1e:21:ad:54:df:59:17:0d:86: b6:83:68:71:dc:cf:19:91:eb:b0:ef:d0:9c:47:5d: 2a:b1:96:96:8b:0b:f0:cf:06:02:21:b4:e1:f8:d5: 73:14:bc:06:7c:eb:50:0d:cc:89:d7:a7:76:88:a8: 29:ae:83:d4:d7:8f:a9:96:0c:5a:53:cf:3a:c3:fc: 7c:dc:65:02:86:78:6e:18:c8:de:70:e0:91:4b:7d: 66:55:f6:f0:06:7c:6e:8b:87:bd:5e:16:4c:69:06: e7:31:51:4b:89:4f:d4:9b:32:04:a5:d2:33:73:8a: b6:18:d3:34:25:8d:cf:64:1b:e1:d6:e2:56:96:38: 0f:c5:4c:59:ba:80:85:8c:31:0f:d2:ca:1e:15:8e: d2:ca:89:87:73:69:4a:2d:73:18:67:9a:c3:36:e8: 80:1d:e3:84:45:93:ad:f6:6a:e0:a8:1c:0b:cc:65: 6f:35:88:7f:54:30:36:bd:16:20:9c:c8:68:35:5a: 0b:44:49:3d:14:0c:05:96:e4:b8:25:7d:6b:73:aa: 36:3e:4e:f4:51:f5:32:9f:a5:41:d0:82:95:f5:39: 62:b6:c5:84:01:ef:53:d1:e5:fb:7a:f5:ac:ff:dd: 92:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FC:74:7B:B7:EA:A6:38:C7:27:3D:F3:AE:BA:78:D5:30:82:42:CD X509v3 Authority Key Identifier: keyid:C3:96:30:5D:02:D2:F8:85:F3:FA:DE:D5:3A:C3:10:F2:1B:D0:54:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/AD1B7E40A5C511E8A9B85134C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.116.176.0/22 Signature Algorithm: sha256WithRSAEncryption 61:62:1b:eb:dc:7d:fb:1d:88:9b:8a:88:e3:40:ed:f7:c4:8f: 37:f5:b3:46:16:33:b5:d7:79:f1:f9:2d:32:20:40:b8:f7:cb: 56:69:8d:45:d2:4c:bb:47:fe:42:a0:05:fb:ef:df:0c:9b:06: 96:8b:28:00:43:c8:66:75:1b:ea:42:cc:e5:55:39:4b:42:87: 16:e9:0f:8b:b9:9e:df:e2:a7:5c:72:c8:30:8a:d4:25:12:97: ef:13:f1:10:ac:ec:bf:07:04:dd:09:94:36:66:66:2e:9a:25: ca:17:54:f7:da:dc:80:34:a8:da:21:fc:9f:68:0f:9a:97:1d: 11:4b:95:7b:2b:f7:f3:a9:e7:64:4f:95:c6:85:33:cc:69:d4: 9d:95:61:80:69:f9:9a:f0:87:3b:92:41:29:31:1e:93:5d:37: 40:95:fd:de:ca:ae:a5:0f:5a:03:a6:91:91:4a:6a:0f:33:9b: a6:bc:3e:17:04:64:44:3c:9c:03:d6:92:ce:e3:25:fe:f5:9c: 39:5f:a2:d1:c2:b1:5f:66:74:03:17:f7:33:da:ba:0d:ec:ea: 51:21:c8:e5:b7:42:54:c3:03:d8:5e:e3:aa:e7:41:19:2b:8f: 23:65:e3:23:f8:50:60:ed:76:d4:02:54:7a:d9:a2:b7:f6:e5: fa:a6:92:52 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICErowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4OUQxMTAvBgNVBAUTKEMzOTYzMDVEMDJEMkY4ODVGM0ZBREVENTNBQzMxMEYy MUJEMDU0ODcwHhcNMjQwODIyMTczNTEyWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmM3NzZjZi0yZDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYSaaQinJxhK1qfKebRvvSGz5bAeIa1U31kXDYa2g2hx3M8Zkeuw79CcR10q sZaWiwvwzwYCIbTh+NVzFLwGfOtQDcyJ16d2iKgproPU14+plgxaU886w/x83GUC hnhuGMjecOCRS31mVfbwBnxui4e9XhZMaQbnMVFLiU/UmzIEpdIzc4q2GNM0JY3P ZBvh1uJWljgPxUxZuoCFjDEP0soeFY7SyomHc2lKLXMYZ5rDNuiAHeOERZOt9mrg qBwLzGVvNYh/VDA2vRYgnMhoNVoLREk9FAwFluS4JX1rc6o2Pk70UfUyn6VB0IKV 9TlitsWEAe9T0eX7evWs/92SrwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOj8dHu3 6qY4xyc98666eNUwgkLNMB8GA1UdIwQYMBaAFMOWMF0C0viF8/re1TrDEPIb0FSH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Rjg5RC85Njc0QUZDOEE1 QzQxMUU4OTUwNUZEMzFDNEY5QUUwMi93NVl3WFFMUy1JWHotdDdWT3NNUThodlFW SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c1WXdYUUxTLUlYei10N1ZPc01ROGh2UVZJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0Y4OUQvOTY3NEFGQzhBNUM0MTFFODk1MDVGRDMxQzRGOUFFMDIvQUQxQjdFNDBB NUM1MTFFOEE5Qjg1MTM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJndLAwDQYJKoZIhvcNAQELBQADggEBAGFiG+vcffsdiJuK iONA7ffEjzf1s0YWM7XXefH5LTIgQLj3y1ZpjUXSTLtH/kKgBfvv3wybBpaLKABD yGZ1G+pCzOVVOUtChxbpD4u5nt/ip1xyyDCK1CUSl+8T8RCs7L8HBN0JlDZmZi6a JcoXVPfa3IA0qNoh/J9oD5qXHRFLlXsr9/Op52RPlcaFM8xp1J2VYYBp+ZrwhzuS QSkxHpNdN0CV/d7KrqUPWgOmkZFKag8zm6a8PhcEZEQ8nAPWks7jJf71nDlfotHC sV9mdAMX9zPaug3s6lEhyOW3QlTDA9he46rnQRkrjyNl4yP4UGDtdtQCVHrZorf2 5fqmklI= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:06 2024 by rpki-client on console-ams.rpki-client.org