$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/9680FCD2A87011EFB3944C13C4F9AE02.roa File: 9680FCD2A87011EFB3944C13C4F9AE02.roa (raw, json) Hash identifier: wgqTSes8Z5WuSWm7F0QhoRYlX6rkxSIBBmBKa5erFXs= Subject key identifier: C1:25:B4:C2:AE:01:67:2E:EB:A3:47:EB:0E:87:AD:48:95:20:90:01 Certificate issuer: /CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Certificate serial: 1864 Authority key identifier: 4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/9680FCD2A87011EFB3944C13C4F9AE02.roa Signing time: Fri 22 Nov 2024 01:24:59 +0000 ROA not before: Fri 22 Nov 2024 01:24:59 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 152472 IP address blocks: 103.243.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:32:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6244 (0x1864) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Validity Not Before: Nov 22 01:24:59 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=673fdd6a-531b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:14:92:fc:17:8e:41:1c:0b:3c:2e:1d:0d:95: e4:80:d6:ec:48:d4:18:77:57:7f:37:20:f1:f0:0a: 67:91:d1:0d:63:68:ab:48:1d:87:7f:9e:10:2d:1e: 9b:5c:e6:16:6d:70:31:3d:3a:bb:40:ff:a2:d5:40: fe:bc:8a:98:dc:9b:08:1b:bb:a5:5c:92:28:d0:ca: c4:8c:14:92:41:81:cb:c2:c2:9d:ca:71:98:4d:c6: c9:60:60:2b:07:6e:2e:d2:1a:99:63:8e:d4:83:03: fa:58:a2:6c:10:cf:39:cc:3b:3c:ca:3b:85:d3:bc: fd:fc:e8:dc:75:3d:35:53:51:ea:53:f0:f1:6a:d7: e4:11:84:78:95:d6:18:03:51:eb:39:80:80:cd:71: e7:ee:6b:9a:86:53:68:78:5b:a5:b3:46:62:c4:4d: 70:7d:bc:a1:e2:7c:d1:3a:ae:08:00:39:d1:3d:ac: 0c:c6:27:34:7c:0c:c6:eb:39:8f:df:17:9c:e8:6e: ed:1b:6d:47:29:3a:d1:03:5c:fd:ab:c0:ba:75:aa: 64:80:45:e9:16:42:5c:8a:19:e5:01:a7:c8:86:98: aa:db:c6:59:c3:87:a4:ff:74:fe:a2:46:32:a5:55: 2f:4d:93:b6:b1:d0:ba:d6:c9:92:75:03:89:03:60: 5e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:25:B4:C2:AE:01:67:2E:EB:A3:47:EB:0E:87:AD:48:95:20:90:01 X509v3 Authority Key Identifier: keyid:4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/9680FCD2A87011EFB3944C13C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.243.239.0/24 Signature Algorithm: sha256WithRSAEncryption c6:5a:9b:5a:b8:ee:d3:42:21:5d:31:48:d0:18:37:58:c2:a5: bd:ce:e2:4b:b5:e4:a0:51:65:6e:ea:25:37:30:4a:9c:ed:e0: c5:ab:4c:49:53:58:da:b8:94:d7:b8:c9:74:f8:8e:93:13:a6: 83:c9:c9:10:6c:78:85:e5:1a:65:b0:d0:a3:de:e7:12:d4:0c: 25:27:b6:d3:5f:56:6d:47:ea:0a:f8:13:f0:6b:ab:e2:a8:a7: be:bb:86:a8:56:b9:f7:6b:66:f8:f8:32:f1:8e:ad:9e:bf:b1: 67:58:2a:5f:8b:b3:44:57:8d:60:78:de:1b:9e:35:a1:45:c2: a6:39:90:99:bb:eb:e3:9f:f2:6f:ca:0e:f3:ed:3a:49:46:e6: 09:11:16:5e:c6:3a:31:4a:a6:0c:d4:8f:ad:f7:f5:75:d3:11: 09:77:df:8f:1f:29:47:eb:64:03:45:48:37:20:d8:5c:eb:d1: ad:04:79:2b:80:8f:76:71:59:fe:e4:72:43:c9:dc:61:ea:20: 75:81:fd:5f:b2:02:b7:b9:4c:3e:5a:bc:94:49:43:45:cd:61: 02:bf:aa:57:96:0e:65:7a:0b:33:5a:d8:b3:20:b2:66:19:55: 79:50:81:1c:64:15:e1:95:4c:43:7e:c9:ac:00:99:f6:11:07: 23:94:15:29 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ2QkYxMTAvBgNVBAUTKDRFMDFGNEZDQTc2REJGOTI5NURFQzYxQzFCMzJBNEVF NjhBREZEMjMwHhcNMjQxMTIyMDEyNDU5WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzNmZGQ2YS01MzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRSS/BeOQRwLPC4dDZXkgNbsSNQYd1d/NyDx8ApnkdENY2irSB2Hf54QLR6b XOYWbXAxPTq7QP+i1UD+vIqY3JsIG7ulXJIo0MrEjBSSQYHLwsKdynGYTcbJYGAr B24u0hqZY47UgwP6WKJsEM85zDs8yjuF07z9/OjcdT01U1HqU/DxatfkEYR4ldYY A1HrOYCAzXHn7muahlNoeFuls0ZixE1wfbyh4nzROq4IADnRPawMxic0fAzG6zmP 3xec6G7tG21HKTrRA1z9q8C6dapkgEXpFkJcihnlAafIhpiq28ZZw4ek/3T+okYy pVUvTZO2sdC61smSdQOJA2BeowIDAQABo4IClTCCApEwHQYDVR0OBBYEFMEltMKu AWcu66NH6w6HrUiVIJABMB8GA1UdIwQYMBaAFE4B9Pynbb+Sld7GHBsypO5orf0j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDZCRi9FMzYxQkEyMEE1 QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1S1Yzc1ljR3pLazdtaXRf U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RnSDBfS2R0djVLVjNzWWNHektrN21pdF9TTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEQ2QkYvRTM2MUJBMjBBNUExMTFFN0IzQTMxMjdEQzRGOUFFMDIvOTY4MEZDRDJB ODcwMTFFRkIzOTQ0QzEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn8+8wDQYJKoZIhvcNAQELBQADggEBAMZam1q47tNCIV0x SNAYN1jCpb3O4ku15KBRZW7qJTcwSpzt4MWrTElTWNq4lNe4yXT4jpMTpoPJyRBs eIXlGmWw0KPe5xLUDCUnttNfVm1H6gr4E/Brq+Kop767hqhWufdrZvj4MvGOrZ6/ sWdYKl+Ls0RXjWB43hueNaFFwqY5kJm76+Of8m/KDvPtOklG5gkRFl7GOjFKpgzU j6339XXTEQl3348fKUfrZANFSDcg2Fzr0a0EeSuAj3ZxWf7kckPJ3GHqIHWB/V+y Are5TD5avJRJQ0XNYQK/qleWDmV6CzNa2LMgsmYZVXlQgRxkFeGVTEN+yawAmfYR ByOUFSk= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:07 2024 by rpki-client on console-ams.rpki-client.org