$ rpki-client -vvf rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/D1D7F9AE0FF911E9B45E3B10C4F9AE02.roa File: D1D7F9AE0FF911E9B45E3B10C4F9AE02.roa (raw, json) Hash identifier: 3Wqu6xOv+Yqgn98imVoKo0C/3S3sn8xVZaKt7qUGL5g= Subject key identifier: C3:E2:7B:D8:47:38:7F:65:16:3A:C9:B3:E7:77:5D:9C:FA:46:49:29 Certificate issuer: /CN=A918F862/serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE Certificate serial: 10AD Authority key identifier: E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/D1D7F9AE0FF911E9B45E3B10C4F9AE02.roa Signing time: Mon 02 Sep 2024 17:55:24 +0000 ROA not before: Mon 02 Sep 2024 17:55:24 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 132372 IP address blocks: 103.28.90.0/24 maxlen: 24 103.28.91.0/24 maxlen: 24 103.72.162.0/23 maxlen: 24 103.117.20.0/24 maxlen: 24 103.122.164.0/24 maxlen: 24 2403:fd40:1001::/48 maxlen: 48 2403:fd40:1002::/48 maxlen: 48 2403:fd40:1003::/48 maxlen: 48 2403:fd40:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4269 (0x10ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F862/serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE Validity Not Before: Sep 2 17:55:24 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66d5fc0c-96ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c1:10:99:2f:b1:f8:e7:cd:16:d8:ce:e5:ce: 12:ec:b8:22:36:17:66:e3:71:8d:28:98:a9:e1:5c: 9f:c9:39:7a:75:13:93:de:4e:a4:eb:0b:2f:ff:16: 32:62:f0:49:a0:ea:21:10:d6:63:21:f1:c3:0a:ff: c1:11:00:79:1d:2c:aa:37:29:8b:e6:fb:62:60:c5: af:82:d1:f2:5d:1f:aa:cb:6f:a3:b7:5c:a3:e6:cb: 1a:c9:d5:ad:44:48:fc:fb:2c:ac:f4:ab:2f:a4:92: 39:28:c7:fa:a8:46:28:f1:c8:d7:5e:2d:76:32:8d: 51:b5:4f:e4:68:11:30:22:03:7f:da:b1:28:90:36: 69:22:4d:ab:6a:e3:ff:c7:66:a4:b3:e4:8e:25:fc: c2:1d:66:aa:72:d1:d2:ce:8d:c8:7f:44:01:e3:c1: 8d:09:62:2e:39:4c:47:bc:6c:6e:12:74:62:fe:3f: 85:11:46:61:5e:e8:84:64:ab:ba:07:13:e7:f1:09: 26:f4:b4:d4:b0:4e:3d:25:25:d3:1c:0b:60:45:2c: 9a:fb:3d:a1:b9:82:76:f7:7b:8b:1d:32:8d:65:61: 80:3b:d1:c4:08:e6:49:97:64:60:dc:bc:25:b3:40: f4:8e:64:1b:98:e2:af:35:5d:8e:40:f6:92:33:d5: ae:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E2:7B:D8:47:38:7F:65:16:3A:C9:B3:E7:77:5D:9C:FA:46:49:29 X509v3 Authority Key Identifier: keyid:E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/D1D7F9AE0FF911E9B45E3B10C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.28.90.0/23 103.72.162.0/23 103.117.20.0/24 103.122.164.0/24 IPv6: 2403:fd40:1001::-2403:fd40:1003:ffff:ffff:ffff:ffff:ffff 2403:fd40:a000::/48 Signature Algorithm: sha256WithRSAEncryption 71:3c:60:07:62:ee:4b:c4:ec:bb:a1:63:a6:ef:ff:f1:04:41: 70:e6:ad:ff:2e:a0:cb:87:d1:ee:56:a6:6c:f3:76:e9:14:e3: 77:49:5d:07:10:a3:9c:53:f2:1c:50:6d:7b:c1:c0:f1:51:b9: 92:11:53:fd:d1:10:eb:5f:fb:0f:29:ae:6a:39:e9:2f:81:c3: 9b:5a:83:c0:de:b0:c2:a6:e9:5d:93:d7:b2:5a:03:e8:5a:d0: 15:e8:aa:b3:c1:a3:a7:fd:98:1b:2c:b3:a1:21:8d:49:4c:62: 58:3d:af:29:cd:a9:46:a2:f3:c6:7e:2d:00:fc:98:95:1e:50: fd:be:b9:4b:c6:29:f0:ca:ec:cb:b3:ba:e5:0a:56:14:0b:17: 40:69:e5:27:e3:ba:ce:a7:a5:fa:cf:c4:bc:05:36:a0:aa:fe: e8:1a:15:f9:8a:ed:b0:2b:25:56:d7:d0:33:0e:47:12:01:b0: 27:d7:41:51:54:b9:b6:33:21:76:34:67:f4:8e:c2:49:27:83: e7:ea:0b:21:d7:8c:81:a1:ef:7a:0c:a2:dd:2c:82:83:c4:ae: 2a:ff:aa:57:a0:8f:56:97:e8:fc:73:f4:94:4d:2a:5e:bf:f9: b4:59:e1:28:ab:43:92:27:2d:75:22:0e:a8:4b:e4:7f:c6:3d: a5:cc:03:cb -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgICEK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4NjIxMTAvBgNVBAUTKEU4NTJBNThERTg3MTlGOEJDNkJENjQ5NDk4NTRCNDc0 NDdCODlDREUwHhcNMjQwOTAyMTc1NTI0WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ1ZmMwYy05NmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnMEQmS+x+OfNFtjO5c4S7LgiNhdm43GNKJip4VyfyTl6dROT3k6k6wsv/xYy YvBJoOohENZjIfHDCv/BEQB5HSyqNymL5vtiYMWvgtHyXR+qy2+jt1yj5ssaydWt REj8+yys9KsvpJI5KMf6qEYo8cjXXi12Mo1RtU/kaBEwIgN/2rEokDZpIk2rauP/ x2aks+SOJfzCHWaqctHSzo3If0QB48GNCWIuOUxHvGxuEnRi/j+FEUZhXuiEZKu6 BxPn8Qkm9LTUsE49JSXTHAtgRSya+z2huYJ293uLHTKNZWGAO9HECOZJl2Rg3Lwl s0D0jmQbmOKvNV2OQPaSM9WupQIDAQABo4ICzDCCAsgwHQYDVR0OBBYEFMPie9hH OH9lFjrJs+d3XZz6RkkpMB8GA1UdIwQYMBaAFOhSpY3ocZ+Lxr1klJhUtHRHuJze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjg2Mi8xRTZGNkMxMjBG RjkxMUU5QTBEOTJCMEZDNEY5QUUwMi82RktsamVoeG40dkd2V1NVbUZTMGRFZTRu TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZGS2xqZWh4bjR2R3ZXU1VtRlMwZEVlNG5ONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEY4NjIvMUU2RjZDMTIwRkY5MTFFOUEwRDkyQjBGQzRGOUFFMDIvRDFEN0Y5QUUw RkY5MTFFOUI0NUUzQjEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVgYIKwYBBQUHAQcBAf8E RzBFMB4EAgABMBgDBAFnHFoDBAFnSKIDBABndRQDBABneqQwIwQCAAIwHTASAwcA JAP9QBABAwcCJAP9QBAAAwcAJAP9QKAAMA0GCSqGSIb3DQEBCwUAA4IBAQBxPGAH Yu5LxOy7oWOm7//xBEFw5q3/LqDLh9HuVqZs83bpFON3SV0HEKOcU/IcUG17wcDx UbmSEVP90RDrX/sPKa5qOekvgcObWoPA3rDCpuldk9eyWgPoWtAV6KqzwaOn/Zgb LLOhIY1JTGJYPa8pzalGovPGfi0A/JiVHlD9vrlLxinwyuzLs7rlClYUCxdAaeUn 47rOp6X6z8S8BTagqv7oGhX5iu2wKyVW19AzDkcSAbAn10FRVLm2MyF2NGf0jsJJ J4Pn6gsh14yBoe96DKLdLIKDxK4q/6pXoI9Wl+j8c/SUTSpev/m0WeEoq0OSJy11 Ig6oS+R/xj2lzAPL -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:07 2024 by rpki-client on console-ams.rpki-client.org