$ rpki-client -vvf rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/E4BA0144BA8E11EE91E3AF15C4F9AE02.roa File: E4BA0144BA8E11EE91E3AF15C4F9AE02.roa (raw, json) Hash identifier: opgCLiPvltRVZTimE7GHd6S5jzb7OIm+U5D/6sM4IWI= Subject key identifier: 0B:78:F7:57:50:D4:C6:02:6B:12:C5:7B:83:55:46:45:03:A4:CB:B1 Certificate issuer: /CN=A911112F/serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1 Certificate serial: 6C Authority key identifier: 1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/E4BA0144BA8E11EE91E3AF15C4F9AE02.roa Signing time: Mon 01 Jul 2024 07:49:04 +0000 ROA not before: Mon 01 Jul 2024 07:49:04 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 58504 IP address blocks: 103.167.186.0/24 maxlen: 24 103.167.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911112F/serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1 Validity Not Before: Jul 1 07:49:04 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66825f70-19a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:28:39:5c:9c:8e:21:4b:96:4f:29:5c:f1:a5: 55:23:70:fe:f4:8a:77:d2:a7:55:d7:31:37:cc:f6: 19:73:9f:83:77:b1:52:5e:3a:04:6e:27:4c:33:d6: ed:64:17:d5:67:dd:a2:b7:ce:8c:94:82:ca:8a:c3: d3:55:1b:ca:f0:53:57:be:c8:0f:d6:1e:12:02:f1: cf:c6:8b:18:f2:43:63:10:04:1e:9a:78:df:cb:c2: 6a:b2:e4:3f:2e:4c:7c:4e:39:25:8b:31:f4:35:fb: 1c:cb:83:45:fa:f7:5e:be:b0:53:8c:49:57:14:10: 05:49:39:33:14:2b:8d:7a:cc:d6:de:02:65:ad:a5: 39:aa:96:e9:22:3f:64:6f:64:93:6d:1d:8b:78:1f: a4:75:d6:47:86:80:92:0d:80:5b:6a:d1:d7:5b:7d: 17:16:a5:b2:5d:52:39:fe:36:78:95:ea:33:21:a6: 29:b2:f8:f0:6c:cb:f0:65:6b:45:9e:d4:44:68:a7: bb:05:86:03:2d:37:b4:1d:b3:41:90:b8:6f:95:ea: b8:f2:f6:de:42:19:90:19:bd:57:15:e1:29:f9:0d: 14:9e:ab:1a:b1:fb:d3:54:a4:c7:15:db:7a:76:86: e0:76:d1:bb:ba:88:46:75:5c:66:fd:af:b1:b8:ad: 1f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:78:F7:57:50:D4:C6:02:6B:12:C5:7B:83:55:46:45:03:A4:CB:B1 X509v3 Authority Key Identifier: keyid:1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/E4BA0144BA8E11EE91E3AF15C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.167.186.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:a5:73:22:17:59:0f:5b:16:09:d5:ff:39:d5:30:a2:45:ee: d4:7d:e2:4a:80:9a:9d:6f:12:d5:db:39:86:0c:31:db:88:9d: a5:39:2d:4f:97:bf:40:88:ab:c1:1c:d4:e1:b3:40:62:6a:e1: 4a:03:20:19:91:34:6f:64:d7:4b:d2:04:24:9e:40:eb:cc:a3: 9d:9a:90:c8:3c:f0:31:70:e8:21:db:70:87:07:22:cd:d5:2b: 97:d4:68:ed:06:d5:87:64:1d:0e:7a:ac:b6:0d:ca:0e:83:94: 70:bc:b7:26:37:a9:00:c4:7b:4e:34:8c:05:1a:5a:99:3c:28: 8d:b2:29:a6:51:cb:4d:c7:e1:c6:1b:0f:e3:52:f8:6e:43:ef: d0:e3:ed:d3:b5:f5:ea:d5:56:27:d4:3d:7a:38:f6:67:c0:70: cb:c2:88:7d:7c:cd:b7:af:e7:b4:89:87:db:07:17:52:d1:92: e3:e4:68:27:d0:a6:f9:4c:2d:75:41:5b:c3:61:8b:67:0d:3e: ad:f1:eb:af:40:42:42:57:51:cd:65:75:7d:26:4a:cc:ac:e2: b2:63:0c:89:6f:a0:00:e9:0c:db:cd:d5:3a:9c:d4:d2:99:87: a5:f8:c0:c5:8c:7d:d4:16:24:f1:02:76:e2:e5:51:22:60:67: 65:ac:8e:2d -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MTEyRjExMC8GA1UEBRMoMUU1N0I0M0YwNDRENEFCQTgyMjJBNDA5Nzg2NjE0Mjgw QUE3MzlBMTAeFw0yNDA3MDEwNzQ5MDRaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ODI1ZjcwLTE5YTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDKDlcnI4hS5ZPKVzxpVUjcP70infSp1XXMTfM9hlzn4N3sVJeOgRuJ0wz1u1k F9Vn3aK3zoyUgsqKw9NVG8rwU1e+yA/WHhIC8c/GixjyQ2MQBB6aeN/Lwmqy5D8u THxOOSWLMfQ1+xzLg0X6916+sFOMSVcUEAVJOTMUK416zNbeAmWtpTmqlukiP2Rv ZJNtHYt4H6R11keGgJINgFtq0ddbfRcWpbJdUjn+NniV6jMhpimy+PBsy/Bla0We 1ERop7sFhgMtN7Qds0GQuG+V6rjy9t5CGZAZvVcV4Sn5DRSeqxqx+9NUpMcV23p2 huB20bu6iEZ1XGb9r7G4rR95AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUC3j3V1DU xgJrEsV7g1VGRQOky7EwHwYDVR0jBBgwFoAUHle0PwRNSrqCIqQJeGYUKAqnOaEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExMTJGLzk2NERDNjlBQkE4 RDExRUU4MjhBODk0NkM0RjlBRTAyL0hsZTBQd1JOU3JxQ0lxUUplR1lVS0Fxbk9h RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSGxlMFB3Uk5TcnFDSXFRSmVHWVVLQXFuT2FFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTEyRi85NjREQzY5QUJBOEQxMUVFODI4QTg5NDZDNEY5QUUwMi9FNEJBMDE0NEJB OEUxMUVFOTFFM0FGMTVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWenujANBgkqhkiG9w0BAQsFAAOCAQEAi6VzIhdZD1sWCdX/ OdUwokXu1H3iSoCanW8S1ds5hgwx24idpTktT5e/QIirwRzU4bNAYmrhSgMgGZE0 b2TXS9IEJJ5A68yjnZqQyDzwMXDoIdtwhwcizdUrl9Ro7QbVh2QdDnqstg3KDoOU cLy3JjepAMR7TjSMBRpamTwojbIpplHLTcfhxhsP41L4bkPv0OPt07X16tVWJ9Q9 ejj2Z8Bwy8KIfXzNt6/ntImH2wcXUtGS4+RoJ9Cm+UwtdUFbw2GLZw0+rfHrr0BC QldRzWV1fSZKzKzismMMiW+gAOkM283VOpzU0pmHpfjAxYx91BYk8QJ24uVRImBn ZayOLQ== -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:00 2024 by rpki-client on console-ams.rpki-client.org