$ rpki-client -vvf rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/4BECBAFCB99811E98000600AC4F9AE02.roa File: 4BECBAFCB99811E98000600AC4F9AE02.roa (raw, json) Hash identifier: rqASzwwK7FbCaVAYTK88nCqRcfP1vi7cp+uLy8ucquU= Subject key identifier: 9F:C9:3A:FA:1A:C8:42:CE:36:96:49:D2:76:8B:E7:61:D7:34:19:DE Certificate issuer: /CN=A918B2F8/serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Certificate serial: 0D57 Authority key identifier: BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/4BECBAFCB99811E98000600AC4F9AE02.roa Signing time: Thu 10 Oct 2024 18:26:24 +0000 ROA not before: Thu 10 Oct 2024 18:26:24 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 134722 IP address blocks: 103.198.52.0/23 maxlen: 23 103.198.52.0/24 maxlen: 24 103.198.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:55:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3415 (0xd57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B2F8/serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Validity Not Before: Oct 10 18:26:24 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67081c50-51c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5f:22:7e:dc:20:cb:02:72:e9:c0:56:2b:e6: 8b:d5:fa:79:25:5f:07:44:14:c2:50:81:2d:19:29: 37:1e:9b:78:e4:75:ec:e4:40:75:c7:8b:13:b5:53: 97:09:22:b8:20:48:31:ea:3c:b3:41:df:6b:79:7c: 4b:b5:94:01:90:f1:c9:1b:77:57:d3:9e:bb:db:14: de:59:6c:83:f8:be:3c:42:bc:ce:74:85:7b:1f:e8: 74:e3:db:66:1e:e2:b9:f2:d4:fb:3c:1d:7c:31:0c: f4:10:12:64:3b:5b:8e:2b:a5:a9:b6:d5:00:af:18: 57:b5:a3:c4:aa:ca:64:7e:9f:c9:75:c3:9b:d5:28: d2:2a:b7:77:bd:ed:de:c4:f2:7a:22:9d:4e:ed:e0: d3:fd:0f:31:03:f5:af:b3:4c:d6:0b:a2:f2:65:47: 17:2b:22:de:82:d2:be:ff:36:66:ff:9b:82:ef:98: 31:7e:a2:22:60:46:43:64:69:1b:0c:e8:b7:c1:e9: a4:4e:f3:21:f4:2f:b3:8a:22:ea:a2:09:23:ec:c7: 1b:7c:ae:ea:96:33:56:3e:31:38:c9:b9:1a:f8:9f: 39:51:f9:0b:de:ff:eb:dd:f9:83:e8:8c:40:39:6a: be:87:21:11:37:d6:51:38:13:42:33:b4:71:72:70: 69:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C9:3A:FA:1A:C8:42:CE:36:96:49:D2:76:8B:E7:61:D7:34:19:DE X509v3 Authority Key Identifier: keyid:BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/4BECBAFCB99811E98000600AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.198.52.0/23 Signature Algorithm: sha256WithRSAEncryption 18:ef:33:d3:1e:37:28:d0:5e:9d:32:4d:40:0c:42:fc:f6:27: 33:a8:8e:cc:03:9a:b4:65:cd:30:7b:34:21:26:a9:12:2f:8e: fe:53:49:9f:b3:fc:e2:c3:e2:3d:4b:07:bd:4c:1f:2a:ad:e2: d8:fe:5e:53:87:52:f8:22:ba:3e:1d:8b:74:3b:d3:bb:c4:2b: 46:e5:87:43:8b:0d:f0:a0:40:04:ca:b0:82:96:90:30:49:94: 54:e4:5e:48:48:7b:0e:2d:a3:9a:40:82:81:7d:fc:3c:bc:47: 4b:90:f6:28:7b:5d:c4:d1:a8:e4:cb:40:23:d7:81:08:7f:5b: c5:cd:b9:10:06:e7:8e:85:c3:06:98:c9:37:8f:42:00:91:f1: 2a:2a:92:95:02:16:7e:ee:25:07:0b:f1:9c:43:ef:93:36:6a: c0:be:b7:3c:8c:89:e4:eb:0c:67:17:19:9b:f3:4a:41:30:c3: d5:cb:2d:bf:d3:c1:94:d4:72:0c:e7:02:20:65:fe:a1:9a:75: 3d:9d:64:67:61:96:5a:7e:44:ea:45:f1:c9:42:1c:b6:11:83: d4:4f:25:59:30:52:fe:2e:c5:f0:ba:c3:03:b4:8d:c9:c1:1c: 5e:42:bc:72:d4:44:70:2e:b3:75:c7:b0:b8:09:7e:4e:4c:fb: 41:2c:1a:8d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIyRjgxMTAvBgNVBAUTKEJFQjUwRTQxMUNDM0UyQzQwNjAzQjE2QTkxNjA5RUE0 RDQwNjY0OTUwHhcNMjQxMDEwMTgyNjI0WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzA4MWM1MC01MWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvV8iftwgywJy6cBWK+aL1fp5JV8HRBTCUIEtGSk3Hpt45HXs5EB1x4sTtVOX CSK4IEgx6jyzQd9reXxLtZQBkPHJG3dX05672xTeWWyD+L48QrzOdIV7H+h049tm HuK58tT7PB18MQz0EBJkO1uOK6WpttUArxhXtaPEqspkfp/JdcOb1SjSKrd3ve3e xPJ6Ip1O7eDT/Q8xA/Wvs0zWC6LyZUcXKyLegtK+/zZm/5uC75gxfqIiYEZDZGkb DOi3wemkTvMh9C+ziiLqogkj7McbfK7qljNWPjE4ybka+J85UfkL3v/r3fmD6IxA OWq+hyERN9ZROBNCM7RxcnBp0QIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ/JOvoa yELONpZJ0naL52HXNBneMB8GA1UdIwQYMBaAFL61DkEcw+LEBgOxapFgnqTUBmSV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjJGOC9ERkVFNjFERUI5 OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRzUUdBN0Zxa1dDZXBOUUda SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZyVU9RUnpENHNRR0E3RnFrV0NlcE5RR1pKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEIyRjgvREZFRTYxREVCOTk3MTFFOUIwOTkwRTBBQzRGOUFFMDIvNEJFQ0JBRkNC OTk4MTFFOTgwMDA2MDBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnxjQwDQYJKoZIhvcNAQELBQADggEBABjvM9MeNyjQXp0y TUAMQvz2JzOojswDmrRlzTB7NCEmqRIvjv5TSZ+z/OLD4j1LB71MHyqt4tj+XlOH Uvgiuj4di3Q707vEK0blh0OLDfCgQATKsIKWkDBJlFTkXkhIew4to5pAgoF9/Dy8 R0uQ9ih7XcTRqOTLQCPXgQh/W8XNuRAG546FwwaYyTePQgCR8SoqkpUCFn7uJQcL 8ZxD75M2asC+tzyMieTrDGcXGZvzSkEww9XLLb/TwZTUcgznAiBl/qGadT2dZGdh llp+ROpF8clCHLYRg9RPJVkwUv4uxfC6wwO0jcnBHF5CvHLURHAus3XHsLgJfk5M +0EsGo0= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:07 2024 by rpki-client on console-ams.rpki-client.org