$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/738CDD3E2C8A11EF93B8A709C4F9AE02.roa File: 738CDD3E2C8A11EF93B8A709C4F9AE02.roa (raw, json) Hash identifier: KJYfbg4zrYKKjLKtGx8UXjsE8IdRp8mbqGUvHKp23l4= Subject key identifier: 10:14:58:A0:FB:60:69:53:E8:E4:6A:F7:66:BF:A7:FE:8F:AC:45:C4 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 06B6 Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/738CDD3E2C8A11EF93B8A709C4F9AE02.roa Signing time: Thu 24 Oct 2024 23:43:04 +0000 ROA not before: Thu 24 Oct 2024 23:43:04 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 150436 IP address blocks: 103.228.66.0/24 maxlen: 24 103.228.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1718 (0x6b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Oct 24 23:43:04 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=671adb88-3ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e1:b3:de:c4:a6:26:37:bb:0d:b7:f4:75:ab: a0:65:3e:03:6e:92:9c:73:71:34:fe:2e:16:8d:cd: 71:76:bd:31:9f:db:40:75:eb:3d:e8:e2:61:38:87: 88:8e:3d:e8:c9:ba:d5:07:3e:ec:5d:ca:92:6e:05: 47:9a:34:bc:96:da:07:78:78:73:37:d0:d1:b3:27: 7e:1d:96:42:dd:52:55:74:2a:21:ab:7e:6a:0c:d8: d6:df:6d:a0:23:69:e8:56:a9:68:56:8d:fc:37:4c: 59:11:50:74:e7:a0:b4:82:82:a8:82:69:8f:23:ee: 4f:a2:85:5a:e8:80:cc:2e:f1:d4:56:71:42:82:9a: cc:6e:ba:9a:ce:33:86:be:8b:2f:ce:2f:fb:b9:ee: 78:c2:8f:a5:fc:35:fc:8b:42:5b:bd:6c:49:d3:43: 6a:62:76:c2:e9:e2:70:5f:0d:68:b3:e4:52:71:9d: 76:7a:6a:d6:7e:f3:df:fb:97:bb:6e:1b:aa:b0:2c: e5:3f:c4:20:dc:94:4d:e0:7b:f8:ab:0f:66:b0:94: 39:70:74:d1:82:74:a0:6d:70:de:6a:92:24:51:8f: a5:96:99:db:e6:69:07:96:84:5e:5d:7a:e9:15:d4: a8:99:c9:3a:1a:e1:d9:10:5c:ec:ad:cf:f4:35:9a: 57:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:14:58:A0:FB:60:69:53:E8:E4:6A:F7:66:BF:A7:FE:8F:AC:45:C4 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/738CDD3E2C8A11EF93B8A709C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.228.66.0/23 Signature Algorithm: sha256WithRSAEncryption 44:f4:05:e7:8b:6d:e9:9d:59:74:10:90:5e:e7:54:c6:b0:e1: f4:51:90:fd:98:57:d2:80:0a:85:0b:10:56:36:7c:2f:ec:05: 69:dc:d4:6a:c7:21:fb:cc:54:8d:12:0e:cb:04:10:64:9a:0a: 8f:4f:47:b1:c3:31:a3:a7:83:51:24:54:01:60:c3:f4:06:b6: ea:1f:09:68:81:7e:70:8e:9d:68:ff:50:3c:c5:d9:36:25:bd: b0:13:6c:70:24:e7:62:4d:6f:34:fc:47:cb:0a:1c:9b:98:7e: 0f:50:0d:25:6a:a6:4c:da:f0:54:14:cf:56:82:0a:fc:26:40: 14:9e:39:0c:94:b5:ac:86:35:b8:77:2e:4d:ea:4d:0e:26:7e: 8d:b5:49:fb:53:13:a7:62:e8:4b:ee:6a:2c:4a:97:2a:90:f3: 13:34:d0:84:17:88:22:68:c9:19:a6:63:4f:3f:7f:01:c9:dd: 24:e4:48:be:3b:61:37:cb:9a:95:a0:df:11:85:48:3c:2d:af: c7:2b:0c:db:f3:41:be:41:be:94:5e:1b:40:88:89:76:b6:c2: 82:a8:2f:f8:74:22:55:83:ff:aa:dd:c0:77:40:af:2c:dc:0d: 50:b9:f2:50:d1:48:4b:25:b2:bd:74:39:0b:d5:f9:1a:7f:ae: 2d:6b:51:99 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjQxMDI0MjM0MzA0WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFhZGI4OC0zZWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+Gz3sSmJje7Dbf0daugZT4DbpKcc3E0/i4Wjc1xdr0xn9tAdes96OJhOIeI jj3oybrVBz7sXcqSbgVHmjS8ltoHeHhzN9DRsyd+HZZC3VJVdCohq35qDNjW322g I2noVqloVo38N0xZEVB056C0goKogmmPI+5PooVa6IDMLvHUVnFCgprMbrqazjOG vosvzi/7ue54wo+l/DX8i0JbvWxJ00NqYnbC6eJwXw1os+RScZ12emrWfvPf+5e7 bhuqsCzlP8Qg3JRN4Hv4qw9msJQ5cHTRgnSgbXDeapIkUY+llpnb5mkHloReXXrp FdSomck6GuHZEFzsrc/0NZpXxwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBAUWKD7 YGlT6ORq92a/p/6PrEXEMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvNzM4Q0REM0Uy QzhBMTFFRjkzQjhBNzA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn5EIwDQYJKoZIhvcNAQELBQADggEBAET0BeeLbemdWXQQ kF7nVMaw4fRRkP2YV9KACoULEFY2fC/sBWnc1GrHIfvMVI0SDssEEGSaCo9PR7HD MaOng1EkVAFgw/QGtuofCWiBfnCOnWj/UDzF2TYlvbATbHAk52JNbzT8R8sKHJuY fg9QDSVqpkza8FQUz1aCCvwmQBSeOQyUtayGNbh3Lk3qTQ4mfo21SftTE6di6Evu aixKlyqQ8xM00IQXiCJoyRmmY08/fwHJ3STkSL47YTfLmpWg3xGFSDwtr8crDNvz Qb5BvpReG0CIiXa2woKoL/h0IlWD/6rdwHdAryzcDVC58lDRSEslsr10OQvV+Rp/ ri1rUZk= -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:36 2024 by rpki-client on console-ams.rpki-client.org