$ rpki-client -vvf rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/C49E2E22FF0111E591C15659C4F9AE02.roa File: C49E2E22FF0111E591C15659C4F9AE02.roa (raw, json) Hash identifier: 8rysbZt21FvuQ0omuoFXFp8YfdP5EnJpmuu61zguRxM= Subject key identifier: 9C:CB:B6:02:AF:95:8E:06:39:18:CD:64:0B:A3:11:FD:FE:90:B8:0E Certificate issuer: /CN=A919B5BB/serialNumber=CAC4478F0FDD9AE41E24E9FC67F851FF43C33309 Certificate serial: 2063 Authority key identifier: CA:C4:47:8F:0F:DD:9A:E4:1E:24:E9:FC:67:F8:51:FF:43:C3:33:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/C49E2E22FF0111E591C15659C4F9AE02.roa Signing time: Wed 30 Oct 2024 06:33:35 +0000 ROA not before: Wed 30 Oct 2024 06:33:35 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 133610 IP address blocks: 103.43.93.0/24 maxlen: 24 103.238.63.0/24 maxlen: 24 2001:df1:9200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8291 (0x2063) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B5BB/serialNumber=CAC4478F0FDD9AE41E24E9FC67F851FF43C33309 Validity Not Before: Oct 30 06:33:35 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=6721d33f-ec06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4b:03:f7:8d:f2:49:08:49:13:12:12:2b:30: 38:e2:b7:5f:65:06:92:8f:1b:a1:9e:6c:b6:73:a8: cc:8e:e6:d6:59:ac:af:20:5b:99:25:d4:5b:94:aa: a7:4c:20:07:13:27:2a:a3:b2:0d:a7:1b:49:cd:f1: 9b:8b:0c:ab:f8:77:57:dd:6f:2a:e6:f7:fc:11:95: 5d:de:33:49:5c:69:3b:fd:0d:ee:ce:f3:db:16:72: d1:80:ba:25:1a:83:2e:31:c7:a0:56:00:fd:fa:f2: d7:5a:3d:57:b7:21:cd:61:8e:0c:98:1a:89:59:b4: 6b:f7:b9:1b:2c:5b:57:51:dc:65:23:d9:cc:26:9e: 19:87:85:2b:be:7a:cc:c2:64:63:1f:99:65:78:45: d8:62:f0:f8:d1:8b:89:58:4f:c6:25:26:52:10:82: a4:14:93:94:bc:f8:ad:75:65:17:f6:a6:8a:9c:ab: 59:9e:e4:b7:7c:e1:0d:a2:72:b1:8a:3a:3d:12:0b: f5:8c:b3:24:c2:94:f8:a0:90:c5:71:51:68:e1:ef: 6d:c3:66:df:5b:15:d9:c1:4b:b2:04:5f:5c:6b:fb: c7:87:fa:e1:62:85:88:1f:71:d6:29:ff:71:46:00: 2d:a3:e9:f6:76:f5:44:b8:fa:fd:7e:fd:09:11:f5: a0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CB:B6:02:AF:95:8E:06:39:18:CD:64:0B:A3:11:FD:FE:90:B8:0E X509v3 Authority Key Identifier: keyid:CA:C4:47:8F:0F:DD:9A:E4:1E:24:E9:FC:67:F8:51:FF:43:C3:33:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/C49E2E22FF0111E591C15659C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.43.93.0/24 103.238.63.0/24 IPv6: 2001:df1:9200::/48 Signature Algorithm: sha256WithRSAEncryption 22:af:1b:30:3f:93:f2:49:e9:00:50:2b:04:49:85:43:2a:31: 33:8e:28:b2:48:e0:3d:11:c0:f7:29:b7:0e:68:07:07:23:25: ae:57:d0:eb:f8:3c:c6:c5:e4:8c:b5:34:07:91:5b:89:33:5b: 24:97:0b:f1:50:7b:ec:03:d5:53:c0:fa:d8:6b:4c:d2:d5:be: f8:15:4b:fb:d7:3f:da:23:c8:25:c6:a7:c3:e0:51:f8:b6:a2: fe:58:a5:dc:ff:1e:8c:ff:51:20:f0:56:46:f3:7b:6f:14:3b: 7b:f7:f5:b3:1f:8b:aa:64:c0:1a:22:22:07:95:be:68:54:c0: b7:3f:cb:62:1f:62:fa:99:64:fd:98:c1:7e:8c:02:8f:b1:f2: a6:90:f0:c5:83:62:0a:b8:fe:53:f8:f5:7a:bb:65:1e:2c:94: 45:e4:5b:3d:03:34:7e:06:c2:62:34:ba:e2:68:7a:60:b7:19: cc:c3:cd:c6:4d:fe:07:86:4d:65:79:36:02:b7:63:58:46:2e: 9e:54:e7:fa:c6:13:9a:a6:1f:94:d3:17:ba:40:da:42:ac:e6: 9e:c7:fe:fc:67:75:92:bd:7c:8b:a4:96:ee:af:61:ee:ce:30: 53:2c:ce:ee:6f:2c:db:64:d7:8a:19:ea:ca:e7:ed:97:af:ca: 9a:de:ab:87 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICIGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI1QkIxMTAvBgNVBAUTKENBQzQ0NzhGMEZERDlBRTQxRTI0RTlGQzY3Rjg1MUZG NDNDMzMzMDkwHhcNMjQxMDMwMDYzMzM1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzIxZDMzZi1lYzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEsD943ySQhJExISKzA44rdfZQaSjxuhnmy2c6jMjubWWayvIFuZJdRblKqn TCAHEycqo7INpxtJzfGbiwyr+HdX3W8q5vf8EZVd3jNJXGk7/Q3uzvPbFnLRgLol GoMuMcegVgD9+vLXWj1XtyHNYY4MmBqJWbRr97kbLFtXUdxlI9nMJp4Zh4UrvnrM wmRjH5lleEXYYvD40YuJWE/GJSZSEIKkFJOUvPitdWUX9qaKnKtZnuS3fOENonKx ijo9Egv1jLMkwpT4oJDFcVFo4e9tw2bfWxXZwUuyBF9ca/vHh/rhYoWIH3HWKf9x RgAto+n2dvVEuPr9fv0JEfWgdQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFJzLtgKv lY4GORjNZAujEf3+kLgOMB8GA1UdIwQYMBaAFMrER48P3ZrkHiTp/Gf4Uf9DwzMJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjVCQi80NEJCQzE0Q0ZG MDExMUU1QjFDRkIwNThDNEY5QUUwMi95c1JIandfZG11UWVKT244Wl9oUl8wUERN d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lzUkhqd19kbXVRZUpPbjhaX2hSXzBQRE13ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUI1QkIvNDRCQkMxNENGRjAxMTFFNUIxQ0ZCMDU4QzRGOUFFMDIvQzQ5RTJFMjJG RjAxMTFFNTkxQzE1NjU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnK10DBABn7j8wDwQCAAIwCQMHACABDfGSADANBgkqhkiG 9w0BAQsFAAOCAQEAIq8bMD+T8knpAFArBEmFQyoxM44oskjgPRHA9ym3DmgHByMl rlfQ6/g8xsXkjLU0B5FbiTNbJJcL8VB77APVU8D62GtM0tW++BVL+9c/2iPIJcan w+BR+Lai/lil3P8ejP9RIPBWRvN7bxQ7e/f1sx+LqmTAGiIiB5W+aFTAtz/LYh9i +plk/ZjBfowCj7HyppDwxYNiCrj+U/j1ertlHiyUReRbPQM0fgbCYjS64mh6YLcZ zMPNxk3+B4ZNZXk2ArdjWEYunlTn+sYTmqYflNMXukDaQqzmnsf+/Gd1kr18i6SW 7q9h7s4wUyzO7m8s22TXihnqyuftl6/Kmt6rhw== -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:13 2024 by rpki-client on console-ams.rpki-client.org