$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/974F9BA0A87011EFB3944C13C4F9AE02.roa File: 974F9BA0A87011EFB3944C13C4F9AE02.roa (raw, json) Hash identifier: fLeXIO4xgoHFoI3C4eo+BG2dTIwnKEmypWhUBJBKqvU= Subject key identifier: 94:BA:DE:EF:EC:7A:1A:36:5F:E6:0C:3F:AF:3D:58:B5:81:E1:2C:53 Certificate issuer: /CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Certificate serial: 1865 Authority key identifier: 4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/974F9BA0A87011EFB3944C13C4F9AE02.roa Signing time: Fri 22 Nov 2024 01:25:00 +0000 ROA not before: Fri 22 Nov 2024 01:25:00 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 59256 IP address blocks: 103.39.238.0/24 maxlen: 24 103.39.239.0/24 maxlen: 24 103.39.248.0/24 maxlen: 24 2001:df6:9000::/48 maxlen: 48 2401:9cc0:200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6245 (0x1865) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Validity Not Before: Nov 22 01:25:00 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=673fdd6c-e473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:62:60:40:d5:17:34:9f:72:98:a4:5f:58:48: 51:27:12:5a:95:60:51:dd:cc:68:eb:fd:33:9b:58: bc:43:9c:2d:0b:c6:ab:d6:d9:1d:bd:d0:e9:1e:2d: d1:36:d2:92:42:f7:d6:21:d7:98:69:8e:dc:2a:9c: d7:3f:94:f4:52:d4:72:b3:17:9c:2f:57:09:31:f8: 82:54:e8:8b:3a:6b:f9:d0:21:5e:d3:30:c2:73:42: 9f:e0:4c:58:8b:02:c5:c9:50:bb:3e:d7:18:fd:18: 9e:04:84:60:13:b0:6d:85:f7:c9:59:27:c0:7c:f9: 12:3b:ab:41:61:a3:26:4f:3c:37:94:81:15:c7:ef: a1:dc:ec:a8:0b:f3:d8:f5:65:6c:65:5b:e8:44:f0: 76:ce:b4:c4:d5:4d:ed:07:0b:d4:16:24:a6:aa:0e: cb:eb:68:fe:0b:41:93:60:df:d4:e1:61:73:c7:5e: 4e:0e:7d:19:88:d5:14:5a:78:89:c1:94:a4:2e:25: af:62:f7:46:bb:3b:6b:f2:b0:41:a7:f7:06:05:84: 5c:77:a7:63:53:0d:ff:a8:9f:c8:93:53:36:1c:d5: f7:ce:7f:7c:bc:dc:95:79:6e:03:26:8e:eb:54:6b: f9:9c:c9:e3:4c:06:ff:33:36:51:d2:e7:e3:b1:e7: da:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BA:DE:EF:EC:7A:1A:36:5F:E6:0C:3F:AF:3D:58:B5:81:E1:2C:53 X509v3 Authority Key Identifier: keyid:4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/974F9BA0A87011EFB3944C13C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.39.238.0/23 103.39.248.0/24 IPv6: 2001:df6:9000::/48 2401:9cc0:200::/48 Signature Algorithm: sha256WithRSAEncryption c0:78:29:7e:76:b0:24:1c:6d:09:a4:20:c0:4b:6b:a9:14:c3: eb:c4:7e:89:5b:21:86:ed:43:42:bc:8f:cc:68:73:05:28:35: 1a:0a:47:cc:e0:0d:06:24:5e:92:23:b9:47:05:b8:17:4b:4d: 62:e9:2e:18:ed:00:3c:85:16:cc:52:34:e0:47:22:d3:bd:7b: 8e:20:2c:8a:83:db:e2:30:bd:d1:6a:25:ad:b3:77:36:89:16: a5:09:ca:53:7d:d9:21:7c:68:77:6e:01:43:6e:c4:85:74:d9: bb:33:c9:f9:15:62:f3:42:eb:57:ce:83:6c:b1:c5:02:75:04: 89:02:d9:37:56:10:7e:74:51:cb:b3:4d:ba:14:88:06:4f:4a: 20:08:25:c8:22:c6:84:bf:25:58:54:6c:a2:b6:09:d6:16:34: 50:91:0e:5f:1b:c9:7f:26:9a:bc:d7:96:77:66:1d:de:c2:6d: be:38:14:0e:6d:73:b6:98:85:c1:b6:bd:f0:c3:0e:07:f3:61: 11:0c:25:0f:58:67:d6:05:83:a8:ec:56:e5:a7:ba:43:f3:e6: 44:fd:cc:82:98:d3:e7:55:3b:5d:b6:b7:62:c9:d5:7f:2b:79: 21:ee:07:7c:57:52:2b:c8:07:e9:cf:b2:fe:b1:a8:df:6f:bd: d2:d5:eb:01 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICGGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ2QkYxMTAvBgNVBAUTKDRFMDFGNEZDQTc2REJGOTI5NURFQzYxQzFCMzJBNEVF NjhBREZEMjMwHhcNMjQxMTIyMDEyNTAwWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzNmZGQ2Yy1lNDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4WJgQNUXNJ9ymKRfWEhRJxJalWBR3cxo6/0zm1i8Q5wtC8ar1tkdvdDpHi3R NtKSQvfWIdeYaY7cKpzXP5T0UtRysxecL1cJMfiCVOiLOmv50CFe0zDCc0Kf4ExY iwLFyVC7PtcY/RieBIRgE7BthffJWSfAfPkSO6tBYaMmTzw3lIEVx++h3OyoC/PY 9WVsZVvoRPB2zrTE1U3tBwvUFiSmqg7L62j+C0GTYN/U4WFzx15ODn0ZiNUUWniJ wZSkLiWvYvdGuztr8rBBp/cGBYRcd6djUw3/qJ/Ik1M2HNX3zn98vNyVeW4DJo7r VGv5nMnjTAb/MzZR0ufjsefaOwIDAQABo4ICtTCCArEwHQYDVR0OBBYEFJS63u/s eho2X+YMP689WLWB4SxTMB8GA1UdIwQYMBaAFE4B9Pynbb+Sld7GHBsypO5orf0j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDZCRi9FMzYxQkEyMEE1 QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1S1Yzc1ljR3pLazdtaXRf U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RnSDBfS2R0djVLVjNzWWNHektrN21pdF9TTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEQ2QkYvRTM2MUJBMjBBNUExMTFFN0IzQTMxMjdEQzRGOUFFMDIvOTc0RjlCQTBB ODcwMTFFRkIzOTQ0QzEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E MDAuMBIEAgABMAwDBAFnJ+4DBABnJ/gwGAQCAAIwEgMHACABDfaQAAMHACQBnMAC ADANBgkqhkiG9w0BAQsFAAOCAQEAwHgpfnawJBxtCaQgwEtrqRTD68R+iVshhu1D QryPzGhzBSg1GgpHzOANBiRekiO5RwW4F0tNYukuGO0APIUWzFI04Eci0717jiAs ioPb4jC90WolrbN3NokWpQnKU33ZIXxod24BQ27EhXTZuzPJ+RVi80LrV86DbLHF AnUEiQLZN1YQfnRRy7NNuhSIBk9KIAglyCLGhL8lWFRsorYJ1hY0UJEOXxvJfyaa vNeWd2Yd3sJtvjgUDm1ztpiFwba98MMOB/NhEQwlD1hn1gWDqOxW5ae6Q/PmRP3M gpjT51U7Xba3YsnVfyt5Ie4HfFdSK8gH6c+y/rGo32+90tXrAQ== -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:51 2024 by rpki-client on console-fra.rpki-client.org