$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/427B58D0654F11EF9C952771C4F9AE02.roa File: 427B58D0654F11EF9C952771C4F9AE02.roa (raw, json) Hash identifier: yWRvXglXcdDVhIhVeeVKHwmNKBvkPKhzmoTyyJ5q5HE= Subject key identifier: 97:81:82:3E:3C:94:C9:E3:2D:F0:75:E3:30:2C:6B:74:CB:89:4A:8A Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 2786 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/427B58D0654F11EF9C952771C4F9AE02.roa Signing time: Wed 28 Aug 2024 15:07:37 +0000 ROA not before: Wed 28 Aug 2024 15:07:37 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 152918 IP address blocks: 103.196.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10118 (0x2786) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Aug 28 15:07:37 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66cf3d38-7215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:72:63:53:1a:e4:2b:b8:6e:f5:d4:ed:51:4c: 9d:f9:00:87:e8:89:1e:d7:79:e5:e7:24:f1:60:53: 12:f6:6d:6a:60:99:01:4c:48:ff:b1:13:e8:06:77: 62:b2:7d:ef:4c:f1:21:82:a5:e2:f5:b0:e7:90:b7: 89:53:5d:1d:07:cf:23:8a:af:f6:da:d0:5a:8f:bb: a6:43:01:1b:c1:45:55:6d:2a:68:a7:60:41:d9:7d: 0f:13:b4:06:29:2b:89:2b:b0:d2:31:8e:e0:08:31: ab:48:10:b5:72:3b:02:d3:ee:e7:89:04:09:a5:41: ad:cc:d7:cc:3f:9d:ec:e7:52:39:54:c5:25:8b:5c: f4:bf:16:9f:74:fa:13:5f:a7:a7:56:01:19:e4:b0: 12:40:5c:42:78:53:2e:57:a1:fd:ee:e6:5b:da:c0: f2:80:ce:66:43:f2:26:1a:c0:ad:d7:eb:c4:82:6b: 01:0e:70:3a:0b:02:6a:f8:19:4e:cb:93:b4:2d:33: ea:a6:fb:dd:9b:42:3d:d0:29:8c:7f:0b:2c:b4:60: ce:bb:44:9c:95:9a:5b:cd:45:6f:19:f3:7e:aa:94: fb:09:b6:ef:6e:d6:9a:ab:0b:7d:1a:46:ed:91:3c: 4d:94:8a:ad:7b:59:f8:3d:66:f7:45:7e:4a:f3:8f: 2a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:81:82:3E:3C:94:C9:E3:2D:F0:75:E3:30:2C:6B:74:CB:89:4A:8A X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/427B58D0654F11EF9C952771C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.196.21.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:fd:a5:cf:16:61:1f:a3:21:ed:5a:c3:a8:38:8e:b5:24:e7: 31:81:72:3d:f1:4e:f1:b9:12:af:42:8b:7c:70:e9:2d:74:f3: 5e:b1:62:8b:f7:17:54:f2:b2:90:1a:87:4c:7b:1b:bb:1b:5a: 6d:25:36:81:5c:36:de:9a:27:b8:43:9e:16:5e:08:4b:e4:91: 44:64:ad:00:51:ef:29:7a:64:37:1c:d1:d8:bb:02:6a:c6:ce: a9:50:fe:6d:97:b7:8a:59:50:a7:c3:8f:14:32:e1:a3:1f:22: cf:f1:97:78:35:6c:74:d4:51:0d:b7:14:5b:80:46:ab:8f:86: 39:1d:d5:bb:81:16:37:78:57:b3:de:cd:32:d3:d7:cc:23:15: 88:60:62:50:f0:00:ad:f3:0d:a5:fc:a5:4d:3b:26:05:5e:69: 2e:52:c6:da:b2:4d:37:73:57:ac:cd:45:1f:4c:db:a8:8d:04: cd:c9:b0:ac:33:1a:e5:8f:a7:92:40:02:90:11:dc:ae:00:6a: 6b:32:a9:95:ba:12:80:12:54:e7:33:ab:2d:2b:6d:8c:2f:ef: 74:65:ba:b7:c0:75:a3:59:15:b3:70:16:5f:c8:fd:29:18:83: ac:39:cd:ad:fe:9f:81:7b:fe:d6:02:34:99:43:57:b7:26:e0: 1f:8b:cb:7a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJ4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjQwODI4MTUwNzM3WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmNmM2QzOC03MjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXJjUxrkK7hu9dTtUUyd+QCH6Ike13nl5yTxYFMS9m1qYJkBTEj/sRPoBndi sn3vTPEhgqXi9bDnkLeJU10dB88jiq/22tBaj7umQwEbwUVVbSpop2BB2X0PE7QG KSuJK7DSMY7gCDGrSBC1cjsC0+7niQQJpUGtzNfMP53s51I5VMUli1z0vxafdPoT X6enVgEZ5LASQFxCeFMuV6H97uZb2sDygM5mQ/ImGsCt1+vEgmsBDnA6CwJq+BlO y5O0LTPqpvvdm0I90CmMfwsstGDOu0SclZpbzUVvGfN+qpT7Cbbvbtaaqwt9Gkbt kTxNlIqte1n4PWb3RX5K848qBQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJeBgj48 lMnjLfB14zAsa3TLiUqKMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvNDI3QjU4RDA2 NTRGMTFFRjlDOTUyNzcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnxBUwDQYJKoZIhvcNAQELBQADggEBACr9pc8WYR+jIe1a w6g4jrUk5zGBcj3xTvG5Eq9Ci3xw6S10816xYov3F1TyspAah0x7G7sbWm0lNoFc Nt6aJ7hDnhZeCEvkkURkrQBR7yl6ZDcc0di7AmrGzqlQ/m2Xt4pZUKfDjxQy4aMf Is/xl3g1bHTUUQ23FFuARquPhjkd1buBFjd4V7PezTLT18wjFYhgYlDwAK3zDaX8 pU07JgVeaS5SxtqyTTdzV6zNRR9M26iNBM3JsKwzGuWPp5JAApAR3K4AamsyqZW6 EoASVOczqy0rbYwv73RlurfAdaNZFbNwFl/I/SkYg6w5za3+n4F7/tYCNJlDV7cm 4B+Ly3o= -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:38 2024 by rpki-client on console-fra.rpki-client.org