$ rpki-client -vvf rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/FC1D8B7A9C7C11ED96690F39C4F9AE02.roa File: FC1D8B7A9C7C11ED96690F39C4F9AE02.roa (raw, json) Hash identifier: ywWchnTSu/qeQDeWbCVaFbaIpGcNtf7MxWBgX+a8m9E= Subject key identifier: 07:0D:A3:79:8E:5F:60:ED:0C:39:C7:AA:42:A0:11:C4:91:FE:A2:13 Certificate issuer: /CN=A918F7A1/serialNumber=83D60CF8DEA80226B80724BCDE6703D10D657FFE Certificate serial: 0129 Authority key identifier: 83:D6:0C:F8:DE:A8:02:26:B8:07:24:BC:DE:67:03:D1:0D:65:7F:FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/FC1D8B7A9C7C11ED96690F39C4F9AE02.roa Signing time: Sat 17 Aug 2024 00:52:22 +0000 ROA not before: Sat 17 Aug 2024 00:52:22 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 142605 IP address blocks: 103.170.204.0/23 maxlen: 23 103.170.204.0/24 maxlen: 24 103.170.205.0/24 maxlen: 24 2001:df7:2780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.crl rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F7A1/serialNumber=83D60CF8DEA80226B80724BCDE6703D10D657FFE Validity Not Before: Aug 17 00:52:22 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66bff446-c474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:57:e2:83:8b:4e:bd:8a:1e:6d:58:a5:35:58: ea:5f:4c:ab:cb:0a:e8:b1:cf:d7:4c:8b:52:0e:64: d5:40:47:77:f0:53:f5:ab:f1:92:b5:50:55:5b:21: 19:85:53:20:ff:14:ae:0c:2f:c2:1a:03:52:7e:fb: e0:55:40:73:55:d3:47:08:f9:bf:0b:37:e8:17:0e: e5:2a:b9:65:07:cb:37:3f:99:20:2f:dd:34:ba:2f: 6e:13:42:c8:da:d4:36:03:ac:8f:0e:fb:c0:fa:51: ca:ff:f9:1f:7b:5f:44:2b:23:30:46:db:fa:ac:a0: b1:e6:9e:78:07:60:61:71:ff:d7:ed:4f:ef:f3:02: f5:87:95:0b:47:ef:33:f8:c3:67:0e:8f:79:9a:1d: 36:53:ac:a6:1d:90:d4:a8:67:03:1e:af:49:26:3f: 10:1e:a6:33:f3:ed:21:dc:43:e4:01:c0:49:02:f8: 59:8d:67:55:42:07:96:6e:02:11:17:ff:c4:26:af: 10:c4:ac:18:34:b8:60:9b:28:d9:10:5b:0d:3e:12: f2:4d:46:8d:2d:37:8c:9d:2d:0f:e0:87:cb:93:60: 60:82:f1:db:95:72:1f:63:0a:ed:7a:09:b9:2b:a0: f6:5f:48:fc:61:65:6d:9d:e4:4b:f4:87:16:7e:c7: 54:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:0D:A3:79:8E:5F:60:ED:0C:39:C7:AA:42:A0:11:C4:91:FE:A2:13 X509v3 Authority Key Identifier: keyid:83:D6:0C:F8:DE:A8:02:26:B8:07:24:BC:DE:67:03:D1:0D:65:7F:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/FC1D8B7A9C7C11ED96690F39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.170.204.0/23 IPv6: 2001:df7:2780::/48 Signature Algorithm: sha256WithRSAEncryption 98:dd:19:3e:f4:5f:b3:4d:2e:6e:6b:d1:5a:27:cd:79:4d:8c: 07:42:32:97:4b:0f:da:71:73:fc:78:0b:51:54:ce:6a:4b:21: a2:50:a9:f6:61:59:e9:09:f2:1a:e6:eb:c0:00:af:07:2b:f0: 37:c3:f2:c7:e1:5f:4d:bd:96:cb:07:5a:27:91:fe:d0:ae:9b: 31:03:61:d0:6d:19:2b:ed:88:90:d8:d8:38:0d:00:87:c2:08: 2c:4e:ed:a9:3e:5f:f7:62:90:e7:b7:c8:40:b9:34:76:67:54: db:c5:56:8f:34:86:48:43:bd:20:fc:41:52:ae:63:09:37:93: 05:e0:5c:82:49:db:08:7f:54:ac:2b:28:b7:9f:f7:9c:d2:e3: e8:9a:a0:f5:d6:18:dd:dc:8e:a4:37:99:fe:97:0a:1d:da:a2: c7:b2:93:f9:b3:52:25:b6:54:82:2f:2f:e3:4b:49:00:ed:4f: 2c:3e:a3:70:b9:c7:d8:a0:04:db:11:e3:e6:fd:19:37:33:ae: 5b:66:64:6f:b4:c5:e2:94:1e:ec:23:d2:0e:d6:94:1a:0a:83: 50:0d:3d:ff:75:02:41:b0:fe:ee:cf:11:4b:ea:6f:1d:2b:3e: 96:0e:99:22:62:ef:d0:a7:ff:2c:59:d9:d3:74:f0:ba:fe:f0: bd:f3:f4:c5 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY3QTExMTAvBgNVBAUTKDgzRDYwQ0Y4REVBODAyMjZCODA3MjRCQ0RFNjcwM0Qx MEQ2NTdGRkUwHhcNMjQwODE3MDA1MjIyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmJmZjQ0Ni1jNDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Ffig4tOvYoebVilNVjqX0yrywrosc/XTItSDmTVQEd38FP1q/GStVBVWyEZ hVMg/xSuDC/CGgNSfvvgVUBzVdNHCPm/CzfoFw7lKrllB8s3P5kgL900ui9uE0LI 2tQ2A6yPDvvA+lHK//kfe19EKyMwRtv6rKCx5p54B2Bhcf/X7U/v8wL1h5ULR+8z +MNnDo95mh02U6ymHZDUqGcDHq9JJj8QHqYz8+0h3EPkAcBJAvhZjWdVQgeWbgIR F//EJq8QxKwYNLhgmyjZEFsNPhLyTUaNLTeMnS0P4IfLk2BggvHblXIfYwrtegm5 K6D2X0j8YWVtneRL9IcWfsdUqwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFAcNo3mO X2DtDDnHqkKgEcSR/qITMB8GA1UdIwQYMBaAFIPWDPjeqAImuAckvN5nA9ENZX/+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjdBMS85MUU4RTI4NEY0 MzcxMUVCQjVENTY5MUNDNEY5QUUwMi9nOVlNLU42b0FpYTRCeVM4M21jRDBRMWxm XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c5WU0tTjZvQWlhNEJ5UzgzbWNEMFExbGZfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEY3QTEvOTFFOEUyODRGNDM3MTFFQkI1RDU2OTFDQzRGOUFFMDIvRkMxRDhCN0E5 QzdDMTFFRDk2NjkwRjM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnqswwDwQCAAIwCQMHACABDfcngDANBgkqhkiG9w0BAQsF AAOCAQEAmN0ZPvRfs00ubmvRWifNeU2MB0Iyl0sP2nFz/HgLUVTOaksholCp9mFZ 6QnyGubrwACvByvwN8Pyx+FfTb2WywdaJ5H+0K6bMQNh0G0ZK+2IkNjYOA0Ah8II LE7tqT5f92KQ57fIQLk0dmdU28VWjzSGSEO9IPxBUq5jCTeTBeBcgknbCH9UrCso t5/3nNLj6Jqg9dYY3dyOpDeZ/pcKHdqix7KT+bNSJbZUgi8v40tJAO1PLD6jcLnH 2KAE2xHj5v0ZNzOuW2Zkb7TF4pQe7CPSDtaUGgqDUA09/3UCQbD+7s8RS+pvHSs+ lg6ZImLv0Kf/LFnZ03Twuv7wvfP0xQ== -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:25 2024 by rpki-client on console-ams.rpki-client.org