$ rpki-client -vvf rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/E8B6593E38D611EF9B2A0B1CC4F9AE02.roa File: E8B6593E38D611EF9B2A0B1CC4F9AE02.roa (raw, json) Hash identifier: 5rUspi1ZMp7o9y755G4Ny7Y5XFHiGTiO4CSn7vG0JJ0= Subject key identifier: 41:2A:5C:EF:56:C9:05:11:7D:84:7D:13:8E:81:12:6C:54:30:9B:B9 Certificate issuer: /CN=A911AB17/serialNumber=42F2791EEAC1FC7D7EC10B69F25E9EE95DAB34E1 Certificate serial: D3 Authority key identifier: 42:F2:79:1E:EA:C1:FC:7D:7E:C1:0B:69:F2:5E:9E:E9:5D:AB:34:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvJ5HurB_H1-wQtp8l6e6V2rNOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/E8B6593E38D611EF9B2A0B1CC4F9AE02.roa Signing time: Mon 30 Sep 2024 17:27:17 +0000 ROA not before: Mon 30 Sep 2024 17:27:17 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 139008 IP address blocks: 103.218.226.0/24 maxlen: 24 103.218.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.crl rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvJ5HurB_H1-wQtp8l6e6V2rNOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AB17/serialNumber=42F2791EEAC1FC7D7EC10B69F25E9EE95DAB34E1 Validity Not Before: Sep 30 17:27:17 2024 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=66fadf75-c371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8d:4d:70:54:a4:c6:5c:56:71:e9:b5:87:65: 6e:75:d7:c8:e2:39:2f:e9:d8:17:0f:d8:e5:6d:5e: 61:6a:27:e8:3c:2c:a2:a6:bb:2e:5d:0c:f3:f2:26: 8a:46:40:70:ef:df:2e:b7:c1:22:5e:2b:58:e8:c2: e9:98:25:82:7f:9a:f8:c5:41:ac:e9:d6:4f:89:37: 89:d0:86:7f:4a:07:a0:16:1f:5e:eb:c9:ff:0f:e9: 34:bd:0d:73:bf:af:0f:24:e3:f6:23:c5:f1:dc:df: a8:11:db:c9:12:be:29:65:36:01:68:5a:66:56:a2: d2:fa:7b:01:43:6f:3f:de:9b:cc:e6:a0:0d:8d:aa: 2e:b1:5a:91:25:f6:0a:0b:45:d8:b9:25:5d:8c:cf: 4e:84:d3:b8:1e:21:74:de:9b:96:c0:7c:e8:06:e7: 53:2a:30:d3:7f:f6:6c:3f:49:af:22:8f:58:2e:7f: d3:bb:4f:c5:40:1c:3e:9e:bc:49:ac:ba:ab:12:84: 2a:11:d8:c0:5b:d9:3b:a4:fc:7a:73:69:b3:b5:91: 75:8c:69:63:ee:ca:9c:54:a9:dc:cc:57:55:1c:f2: d8:6f:e6:17:9f:72:9c:1a:c7:8d:e2:61:ff:53:d7: d4:c0:34:05:ca:dc:3d:12:55:17:7e:87:70:14:15: 68:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2A:5C:EF:56:C9:05:11:7D:84:7D:13:8E:81:12:6C:54:30:9B:B9 X509v3 Authority Key Identifier: keyid:42:F2:79:1E:EA:C1:FC:7D:7E:C1:0B:69:F2:5E:9E:E9:5D:AB:34:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvJ5HurB_H1-wQtp8l6e6V2rNOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/E8B6593E38D611EF9B2A0B1CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.218.226.0/23 Signature Algorithm: sha256WithRSAEncryption 79:95:47:cb:45:10:4b:7c:0b:6d:43:3b:d1:3f:ea:25:d9:f8: de:cc:45:d7:47:04:5c:bd:eb:27:fb:9b:be:7c:c9:8b:a9:f1: 8c:7e:19:33:60:cd:5c:3c:f1:e4:a0:ff:b7:06:b6:38:26:7f: a7:af:e9:f0:48:55:14:cd:59:82:a2:32:69:f5:3b:8c:c3:ed: a6:59:12:31:dd:47:0f:1c:36:36:59:53:e9:d5:a3:65:e0:cb: 34:df:6d:ca:5c:92:1c:44:8b:ce:f5:e8:2d:18:7e:31:02:8f: e6:51:cb:99:5d:f9:63:8c:12:c3:fc:d3:16:3f:e0:c7:e6:03: be:e6:45:86:00:b4:b3:07:37:42:be:23:d2:3f:6b:bc:e1:af: 69:51:24:0e:ce:16:9b:9f:02:15:27:4b:27:11:df:b0:24:c5: dc:22:45:15:e5:01:90:04:29:3e:02:33:f1:85:e3:95:e7:8f: 8b:ab:51:ee:b7:ae:42:ab:90:58:94:45:e8:af:12:08:31:1f: 2e:ac:1e:41:40:df:dc:43:98:62:b4:5f:e2:f6:fa:05:46:1e: f6:45:ef:b1:2b:26:c5:5d:02:f5:3c:a8:b8:38:d1:d7:f0:d6: 0c:07:3c:ec:65:e2:5b:47:b6:9f:64:e3:6a:07:72:67:b0:ba: c0:85:d5:14 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCMTcxMTAvBgNVBAUTKDQyRjI3OTFFRUFDMUZDN0Q3RUMxMEI2OUYyNUU5RUU5 NURBQjM0RTEwHhcNMjQwOTMwMTcyNzE3WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZhZGY3NS1jMzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwY1NcFSkxlxWcem1h2VuddfI4jkv6dgXD9jlbV5haifoPCyiprsuXQzz8iaK RkBw798ut8EiXitY6MLpmCWCf5r4xUGs6dZPiTeJ0IZ/SgegFh9e68n/D+k0vQ1z v68PJOP2I8Xx3N+oEdvJEr4pZTYBaFpmVqLS+nsBQ28/3pvM5qANjaousVqRJfYK C0XYuSVdjM9OhNO4HiF03puWwHzoBudTKjDTf/ZsP0mvIo9YLn/Tu0/FQBw+nrxJ rLqrEoQqEdjAW9k7pPx6c2mztZF1jGlj7sqcVKnczFdVHPLYb+YXn3KcGseN4mH/ U9fUwDQFytw9ElUXfodwFBVorQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEEqXO9W yQURfYR9E46BEmxUMJu5MB8GA1UdIwQYMBaAFELyeR7qwfx9fsELafJenuldqzTh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUIxNy81OTY2REQyNjcy QTcxMUVFQjEwQkU4NTJDNEY5QUUwMi9Rdko1SHVyQl9IMS13UXRwOGw2ZTZWMnJO T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F2SjVIdXJCX0gxLXdRdHA4bDZlNlYyck5PRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUFCMTcvNTk2NkREMjY3MkE3MTFFRUIxMEJFODUyQzRGOUFFMDIvRThCNjU5M0Uz OEQ2MTFFRjlCMkEwQjFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn2uIwDQYJKoZIhvcNAQELBQADggEBAHmVR8tFEEt8C21D O9E/6iXZ+N7MRddHBFy96yf7m758yYup8Yx+GTNgzVw88eSg/7cGtjgmf6ev6fBI VRTNWYKiMmn1O4zD7aZZEjHdRw8cNjZZU+nVo2XgyzTfbcpckhxEi8716C0YfjEC j+ZRy5ld+WOMEsP80xY/4MfmA77mRYYAtLMHN0K+I9I/a7zhr2lRJA7OFpufAhUn SycR37AkxdwiRRXlAZAEKT4CM/GF45Xnj4urUe63rkKrkFiUReivEggxHy6sHkFA 39xDmGK0X+L2+gVGHvZF77ErJsVdAvU8qLg40dfw1gwHPOxl4ltHtp9k42oHcmew usCF1RQ= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:00 2024 by rpki-client on console-ams.rpki-client.org