$ rpki-client -vvf rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/F0208B2012BC11EBB3294950C4F9AE02.roa File: F0208B2012BC11EBB3294950C4F9AE02.roa (raw, json) Hash identifier: eaM5ERmLR+NewtcyA9NoXbFVJmh3ke0mtpONHl7mYGQ= Subject key identifier: 39:74:CD:80:59:3E:AD:70:BE:A7:18:74:1A:62:9E:23:E9:39:A8:7C Certificate issuer: /CN=A919C451/serialNumber=6A185BF417A2EB02A12E19D57590AD8D118475F7 Certificate serial: 0BBC Authority key identifier: 6A:18:5B:F4:17:A2:EB:02:A1:2E:19:D5:75:90:AD:8D:11:84:75:F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/F0208B2012BC11EBB3294950C4F9AE02.roa Signing time: Thu 12 Sep 2024 19:57:25 +0000 ROA not before: Thu 12 Sep 2024 19:57:25 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 138150 IP address blocks: 103.121.104.0/24 maxlen: 24 103.121.105.0/24 maxlen: 24 103.121.106.0/24 maxlen: 24 103.121.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.crl rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3004 (0xbbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C451/serialNumber=6A185BF417A2EB02A12E19D57590AD8D118475F7 Validity Not Before: Sep 12 19:57:25 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66e347a5-7301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d5:83:f5:84:b4:c6:8b:6f:7c:83:05:26:4e: 7a:02:fc:36:3c:03:c8:28:a7:17:c4:ba:0b:3a:2d: 6f:94:48:48:cf:2e:70:20:2d:7a:e3:e8:f6:76:78: 44:2d:f9:17:49:ab:d9:0e:a7:5c:e0:72:4b:c9:2f: 17:e0:57:f7:56:ab:dd:70:9d:c4:40:17:4d:e3:b8: db:b1:ec:86:92:90:b9:ff:9e:59:a9:aa:61:ef:26: c1:8a:95:e8:5e:01:00:3f:a5:06:5c:6e:04:4e:77: 62:85:fc:41:c9:f2:4c:e1:aa:90:43:d7:26:5d:e7: 6b:57:e3:d1:b2:ad:6b:e0:8a:f6:ec:44:fa:2f:4a: 0a:f8:37:80:1e:a1:b5:47:c1:a4:6d:36:db:78:2f: 98:9d:7f:77:f5:44:77:65:47:2f:88:1c:59:24:1d: c1:60:a2:72:c2:7e:0e:1f:f5:f1:38:27:bd:59:b1: c0:f4:61:c5:0d:eb:98:db:9b:61:92:d8:81:78:52: 18:85:15:c3:bd:1c:cf:1e:a1:3f:69:9a:d7:86:34: 45:58:cd:9c:b3:17:4d:5b:11:bd:55:de:41:47:c8: 13:ac:41:01:66:c7:d1:c3:b9:60:e0:da:83:85:3e: 1c:f1:81:ac:63:1d:ca:be:f0:88:c1:d9:1c:27:18: 86:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:74:CD:80:59:3E:AD:70:BE:A7:18:74:1A:62:9E:23:E9:39:A8:7C X509v3 Authority Key Identifier: keyid:6A:18:5B:F4:17:A2:EB:02:A1:2E:19:D5:75:90:AD:8D:11:84:75:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/F0208B2012BC11EBB3294950C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.121.104.0/22 Signature Algorithm: sha256WithRSAEncryption 36:62:a0:bc:12:e2:48:54:c8:51:25:e2:e0:de:82:42:c9:d3: 38:54:d4:5d:65:ac:bc:24:b1:d2:c7:de:eb:db:8c:0c:1d:a4: 58:d8:29:99:11:2d:3a:74:5b:1e:c1:55:49:34:2e:3c:13:1c: d4:76:53:92:8a:0e:68:83:95:d4:b7:36:e0:45:a9:2b:09:60: 0a:63:6f:3f:bd:74:72:e0:eb:64:7b:66:5e:52:9a:a3:64:c2: c3:7e:b9:7d:82:ba:86:5c:aa:54:91:ce:16:79:ef:cb:c6:85: d0:1d:e9:12:77:a5:25:b7:56:f9:b4:95:2b:f1:6d:3b:29:c4: 3b:15:ca:59:b8:2c:a0:f3:db:6c:53:87:76:32:58:87:4f:df: 91:ad:9a:0e:a8:d1:f0:c5:e8:49:ee:84:c9:90:d8:ef:ff:f0: 71:db:20:68:4f:f0:56:f8:5a:05:0e:09:9b:01:72:27:0a:f6: 67:40:dc:98:c8:be:80:15:3e:4f:67:53:7b:3e:6e:37:16:a7: 64:3f:ef:79:53:e1:3a:91:f3:cd:2e:60:3c:2d:f2:03:a4:cd: 21:ab:50:0d:6b:ca:8a:d6:48:34:b8:9f:36:f2:c1:4a:a5:7c: 9f:b4:68:1e:f5:32:3a:45:5d:5e:ce:42:db:d1:3d:5d:d0:41: 57:b4:67:6f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM0NTExMTAvBgNVBAUTKDZBMTg1QkY0MTdBMkVCMDJBMTJFMTlENTc1OTBBRDhE MTE4NDc1RjcwHhcNMjQwOTEyMTk1NzI1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmUzNDdhNS03MzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdWD9YS0xotvfIMFJk56Avw2PAPIKKcXxLoLOi1vlEhIzy5wIC164+j2dnhE LfkXSavZDqdc4HJLyS8X4Ff3VqvdcJ3EQBdN47jbseyGkpC5/55Zqaph7ybBipXo XgEAP6UGXG4ETndihfxByfJM4aqQQ9cmXedrV+PRsq1r4Ir27ET6L0oK+DeAHqG1 R8GkbTbbeC+YnX939UR3ZUcviBxZJB3BYKJywn4OH/XxOCe9WbHA9GHFDeuY25th ktiBeFIYhRXDvRzPHqE/aZrXhjRFWM2csxdNWxG9Vd5BR8gTrEEBZsfRw7lg4NqD hT4c8YGsYx3KvvCIwdkcJxiGpQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDl0zYBZ Pq1wvqcYdBpiniPpOah8MB8GA1UdIwQYMBaAFGoYW/QXousCoS4Z1XWQrY0RhHX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzQ1MS9COTM0OTM3QTA2 RDAxMUVBOEQ0MzhDM0ZDNEY5QUUwMi9haGhiOUJlaTZ3S2hMaG5WZFpDdGpSR0Vk ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoaGI5QmVpNndLaExoblZkWkN0alJHRWRmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUM0NTEvQjkzNDkzN0EwNkQwMTFFQThENDM4QzNGQzRGOUFFMDIvRjAyMDhCMjAx MkJDMTFFQkIzMjk0OTUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJneWgwDQYJKoZIhvcNAQELBQADggEBADZioLwS4khUyFEl 4uDegkLJ0zhU1F1lrLwksdLH3uvbjAwdpFjYKZkRLTp0Wx7BVUk0LjwTHNR2U5KK DmiDldS3NuBFqSsJYApjbz+9dHLg62R7Zl5SmqNkwsN+uX2CuoZcqlSRzhZ578vG hdAd6RJ3pSW3Vvm0lSvxbTspxDsVylm4LKDz22xTh3YyWIdP35Gtmg6o0fDF6Enu hMmQ2O//8HHbIGhP8Fb4WgUOCZsBcicK9mdA3JjIvoAVPk9nU3s+bjcWp2Q/73lT 4TqR880uYDwt8gOkzSGrUA1ryorWSDS4nzbywUqlfJ+0aB71MjpFXV7OQtvRPV3Q QVe0Z28= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:14 2024 by rpki-client on console-ams.rpki-client.org