$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCF0B8600BC611ECB1647071C4F9AE02.roa File: CCF0B8600BC611ECB1647071C4F9AE02.roa (raw, json) Hash identifier: dIQOXCdjgT0XhjHazuJ81gBFx2zRNS+WCapb/hodV3I= Subject key identifier: EF:A4:0E:C4:CC:9B:7A:65:B3:A3:46:79:AA:C4:D9:A1:C3:BA:11:56 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8E4C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCF0B8600BC611ECB1647071C4F9AE02.roa Signing time: Thu 30 May 2024 16:19:07 +0000 ROA not before: Thu 30 May 2024 16:19:07 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 146879 IP address blocks: 103.171.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36428 (0x8e4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:19:07 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a6fb-9fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a7:22:6d:5e:64:0c:7d:d6:fe:46:09:df:8a: 25:32:f4:33:75:7d:87:ed:08:7e:32:c1:65:77:18: 7b:2f:ac:bc:14:72:9c:5e:d2:e6:4f:a5:0f:6f:0f: cd:a5:24:5f:22:dd:c8:26:9a:f8:a7:10:7a:38:6d: e9:f8:63:1b:1f:d3:9a:be:fa:ed:cd:21:47:02:ae: 16:c0:6f:6d:58:18:7f:5d:0b:09:2a:9e:46:69:3b: 50:87:df:b9:16:b7:29:a3:6d:88:5e:be:1a:32:20: 27:78:6c:97:06:9a:6b:a5:c1:e7:57:37:3f:56:02: 05:e1:35:d1:4e:a1:56:90:63:82:5f:ea:09:29:3b: 60:d8:0f:35:3d:e5:61:37:77:77:c7:80:f8:ac:46: 73:3c:01:e0:91:48:68:a0:32:35:9c:15:9d:02:71: 90:ab:df:52:0b:73:34:c3:ef:bb:cf:37:74:42:7c: 08:ab:a1:90:07:2d:0b:a7:b4:7c:86:f7:ec:a6:d2: 08:f1:14:8e:25:58:4a:0b:15:3e:97:b7:50:34:08: 84:72:d3:ec:2d:f5:63:36:63:62:82:24:5c:8d:72: 67:46:1f:2d:61:00:9b:db:98:70:e9:d3:1f:6f:0e: 55:7c:8c:a1:85:69:14:00:7e:68:c6:39:4a:4c:24: 1f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A4:0E:C4:CC:9B:7A:65:B3:A3:46:79:AA:C4:D9:A1:C3:BA:11:56 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCF0B8600BC611ECB1647071C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.171.78.0/24 Signature Algorithm: sha256WithRSAEncryption 10:b0:f2:f2:0b:17:55:27:dc:70:d6:44:bc:e3:ba:01:74:8b: 20:b5:ba:0f:d4:f5:b7:5f:fe:cc:1c:21:87:8f:01:2e:1f:95: ac:a9:03:c4:de:82:e5:32:02:1d:61:76:7b:34:81:53:6f:23: e6:6a:e3:1f:dd:5b:03:27:64:45:3c:71:57:dd:92:fc:0f:b2: 78:7f:35:be:c2:63:8c:04:f6:88:c5:a8:5f:79:e5:e2:54:9b: ed:f1:96:f0:1d:e5:8a:76:fc:fb:b0:1a:ef:64:fc:25:7c:b4: 7b:b4:ba:48:f5:f4:a2:4d:83:18:8c:d8:2d:43:92:f9:bf:37: 8c:ea:9e:e2:98:37:95:cd:7d:0c:d8:12:81:57:a0:63:d3:0c: fd:53:1b:12:78:53:09:eb:77:1c:e8:16:24:2d:c4:d3:56:8f: f1:0c:88:86:41:98:a9:2e:74:2e:44:72:4a:33:03:dd:94:c0: 76:1b:59:7d:40:0b:ce:8d:13:e6:d9:d0:42:35:8f:5b:5b:e1: cf:ba:15:4c:5a:87:44:99:e0:30:e1:2d:51:25:75:6a:b8:97: 86:5d:31:bb:24:40:bf:b6:8a:53:dc:76:83:0f:95:a8:49:c2: 3f:7f:8a:11:1b:da:54:0b:40:1f:94:96:3b:08:d5:85:49:a9: f7:b0:f0:b5 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAI5MMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MTkwN1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE2ZmItOWZhYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANinIm1eZAx91v5GCd+KJTL0M3V9h+0IfjLBZXcYey+svBRynF7S5k+lD28P zaUkXyLdyCaa+KcQejht6fhjGx/Tmr767c0hRwKuFsBvbVgYf10LCSqeRmk7UIff uRa3KaNtiF6+GjIgJ3hslwaaa6XB51c3P1YCBeE10U6hVpBjgl/qCSk7YNgPNT3l YTd3d8eA+KxGczwB4JFIaKAyNZwVnQJxkKvfUgtzNMPvu883dEJ8CKuhkActC6e0 fIb37KbSCPEUjiVYSgsVPpe3UDQIhHLT7C31YzZjYoIkXI1yZ0YfLWEAm9uYcOnT H28OVXyMoYVpFAB+aMY5SkwkHzsCAwEAAaOCApUwggKRMB0GA1UdDgQWBBTvpA7E zJt6ZbOjRnmqxNmhw7oRVjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0NDRjBCODYw MEJDNjExRUNCMTY0NzA3MUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAZ6tOMA0GCSqGSIb3DQEBCwUAA4IBAQAQsPLyCxdVJ9xw 1kS847oBdIsgtboP1PW3X/7MHCGHjwEuH5WsqQPE3oLlMgIdYXZ7NIFTbyPmauMf 3VsDJ2RFPHFX3ZL8D7J4fzW+wmOMBPaIxahfeeXiVJvt8ZbwHeWKdvz7sBrvZPwl fLR7tLpI9fSiTYMYjNgtQ5L5vzeM6p7imDeVzX0M2BKBV6Bj0wz9UxsSeFMJ63cc 6BYkLcTTVo/xDIiGQZipLnQuRHJKMwPdlMB2G1l9QAvOjRPm2dBCNY9bW+HPuhVM WodEmeAw4S1RJXVquJeGXTG7JEC/topT3HaDD5WoScI/f4oRG9pUC0AflJY7CNWF San3sPC1 -----END CERTIFICATE-----Generated at Mon Nov 25 13:05:08 2024 by rpki-client on console-fra.rpki-client.org