$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa File: 7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa (raw, json) Hash identifier: /zYRYz7hw59PN1H99rZM8/IUYjLUkVgpuVofdR3Vzlc= Subject key identifier: 07:21:A9:D9:83:4D:57:52:C6:9A:0F:E3:27:05:AF:BD:95:17:A2:83 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 06B1 Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa Signing time: Thu 24 Oct 2024 23:42:58 +0000 ROA not before: Thu 24 Oct 2024 23:42:58 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 141153 IP address blocks: 103.48.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1713 (0x6b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Oct 24 23:42:58 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=671adb82-cddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:66:38:b7:aa:ea:46:a8:f9:76:37:e2:be:01: a9:bb:db:b3:fe:a4:c5:0c:7b:5b:c4:2f:cb:73:74: df:c0:13:ff:5f:85:d7:f6:0d:4b:7e:4e:de:38:1f: 5f:38:f0:70:e0:fa:59:03:4c:69:62:1c:81:fc:9d: cf:23:6a:9b:36:4a:21:5e:8a:b7:f9:4a:8f:47:8d: f5:09:02:0d:e3:e0:2a:29:49:2c:b7:fa:55:ad:7d: 0d:53:b6:08:2e:8b:28:e8:a0:1b:bb:5d:cb:66:d0: 73:3d:42:6b:07:f4:42:02:95:5f:d0:7e:74:d8:03: 07:2f:76:01:17:6e:f9:a2:32:27:9e:a0:19:ab:05: b5:27:63:93:35:be:6d:00:da:8e:96:7e:e9:18:59: 05:22:71:d0:25:4a:c7:7d:a9:e1:2e:1f:a6:80:15: de:a3:10:d9:09:88:e3:95:8a:28:21:32:ef:5b:3c: 59:78:60:34:c2:6f:df:54:d9:74:8a:45:ad:e8:d1: 76:97:32:7e:e2:95:a6:02:2a:f5:0f:95:ca:67:14: f7:b8:58:6a:79:f2:6b:6d:c8:cd:f2:ba:97:84:6d: a1:ff:8e:aa:9d:9a:63:14:59:23:30:d9:f2:b5:ea: 25:92:8e:a9:1d:17:c4:76:58:23:c6:94:84:46:f8: 11:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:21:A9:D9:83:4D:57:52:C6:9A:0F:E3:27:05:AF:BD:95:17:A2:83 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.48.171.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:54:c7:c3:77:6d:1e:df:3f:e3:56:b4:68:9a:6e:e2:78:fe: 50:a4:6e:1c:7e:40:27:ca:c8:80:d5:87:6b:42:92:2b:db:16: 7a:e4:2e:bf:18:d4:46:03:05:ea:10:02:0b:fe:7c:2f:3d:99: 6f:6b:17:5e:54:cf:07:37:3d:46:b0:4d:ea:89:11:3e:1d:58: 11:91:23:9e:3a:c8:49:eb:58:14:50:d5:e1:4b:8e:98:9f:7d: 78:c5:91:82:51:8e:fc:34:c3:23:ed:e9:57:b5:c0:1c:1b:74: 35:83:b9:d4:96:97:75:30:f9:ce:f4:49:17:8b:2b:26:9c:82: 07:97:fa:16:d7:40:16:de:b2:55:f2:8a:80:2c:80:6b:3f:52: b3:3c:93:3e:d9:b5:b1:73:a3:19:0a:9d:cc:c1:3b:99:8a:64: 32:94:5f:1c:4c:af:e3:e4:b0:be:e3:b7:71:1c:38:a2:91:e5: 11:64:34:24:1b:42:53:7e:c0:98:39:54:c1:de:1f:7b:be:70: ec:0c:84:80:07:11:75:71:70:39:41:04:9b:6d:27:1a:10:74: 64:a7:ca:b0:21:ef:c6:6d:cf:30:64:1d:6d:14:5f:a8:fc:5c: e2:33:d0:cc:44:4c:fd:ff:ed:e3:e8:ba:18:ab:a0:bc:97:5c: e6:46:50:c4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjQxMDI0MjM0MjU4WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFhZGI4Mi1jZGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmmY4t6rqRqj5djfivgGpu9uz/qTFDHtbxC/Lc3TfwBP/X4XX9g1Lfk7eOB9f OPBw4PpZA0xpYhyB/J3PI2qbNkohXoq3+UqPR431CQIN4+AqKUkst/pVrX0NU7YI Loso6KAbu13LZtBzPUJrB/RCApVf0H502AMHL3YBF275ojInnqAZqwW1J2OTNb5t ANqOln7pGFkFInHQJUrHfanhLh+mgBXeoxDZCYjjlYooITLvWzxZeGA0wm/fVNl0 ikWt6NF2lzJ+4pWmAir1D5XKZxT3uFhqefJrbcjN8rqXhG2h/46qnZpjFFkjMNny teolko6pHRfEdlgjxpSERvgRFQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAchqdmD TVdSxpoP4ycFr72VF6KDMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvN0NGQ0QxMTBF Q0NDMTFFRThBQ0MyRjI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnMKswDQYJKoZIhvcNAQELBQADggEBAGxUx8N3bR7fP+NW tGiabuJ4/lCkbhx+QCfKyIDVh2tCkivbFnrkLr8Y1EYDBeoQAgv+fC89mW9rF15U zwc3PUawTeqJET4dWBGRI546yEnrWBRQ1eFLjpiffXjFkYJRjvw0wyPt6Ve1wBwb dDWDudSWl3Uw+c70SReLKyacggeX+hbXQBbeslXyioAsgGs/UrM8kz7ZtbFzoxkK nczBO5mKZDKUXxxMr+PksL7jt3EcOKKR5RFkNCQbQlN+wJg5VMHeH3u+cOwMhIAH EXVxcDlBBJttJxoQdGSnyrAh78ZtzzBkHW0UX6j8XOIz0MxETP3/7ePouhiroLyX XOZGUMQ= -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:36 2024 by rpki-client on console-ams.rpki-client.org