$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/99B4BAA6D3E411EBB67F2616C4F9AE02.roa File: 99B4BAA6D3E411EBB67F2616C4F9AE02.roa (raw, json) Hash identifier: uorWefsb8OvwMByFaUFxQVQuG9e9l+g4lViL2blRqv0= Subject key identifier: B1:F8:5A:60:B2:23:EC:BC:51:40:6B:47:08:52:D5:E6:81:FF:CD:45 Certificate issuer: /CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Certificate serial: 0507 Authority key identifier: 5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/99B4BAA6D3E411EBB67F2616C4F9AE02.roa Signing time: Sat 03 Aug 2024 00:52:34 +0000 ROA not before: Sat 03 Aug 2024 00:52:34 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 137967 IP address blocks: 103.168.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 22:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1287 (0x507) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F8BC Validity Not Before: Aug 3 00:52:34 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66ad7f51-01f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e7:ef:59:d2:96:df:ee:a5:79:d1:0c:47:35: 4d:12:30:60:f2:84:b1:9b:dd:0f:87:42:4a:d1:c2: f2:f4:1d:cf:21:a0:07:15:f0:93:5f:81:a2:45:a2: 1d:bd:7d:05:59:a6:3f:d1:40:71:fb:55:9a:a5:7c: 8b:d0:f2:b9:55:e7:4a:05:b8:83:cb:02:25:33:d2: 8d:9c:74:d8:9e:81:ca:ee:1d:44:5d:a7:3f:02:e7: 35:66:29:c1:95:7b:74:34:bf:8d:ce:55:58:5c:9c: 67:5d:f7:5b:86:ba:55:7b:48:e9:d7:c5:2b:58:9c: da:ad:62:7d:19:be:ec:5e:4a:17:14:ad:06:b6:b1: c0:e1:aa:a3:67:20:3b:6c:9b:d2:0d:f3:f7:c7:24: 9e:9f:79:33:f5:ec:73:1e:7a:1e:be:1d:bb:f8:c1: 01:d2:82:ea:c9:d6:a5:f3:11:f3:d7:16:6b:26:d0: 49:ac:7a:52:bc:6c:4e:a9:7e:a7:ab:9b:ff:c3:e8: 4c:3e:1d:a3:09:fe:31:bb:9f:50:18:4e:29:bf:86: be:aa:1d:8c:3a:e6:ce:b7:a2:19:ec:31:91:28:0f: 85:8e:12:ac:1a:10:a4:11:4d:3b:44:1a:ae:13:e0: c3:5b:a2:9c:df:54:b4:30:d7:cf:39:6d:d0:2d:a0: 94:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F8:5A:60:B2:23:EC:BC:51:40:6B:47:08:52:D5:E6:81:FF:CD:45 X509v3 Authority Key Identifier: keyid:5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/99B4BAA6D3E411EBB67F2616C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.168.207.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:86:ce:6e:84:bb:f5:4d:ff:cf:d8:52:c3:bb:31:31:db:5a: 7f:68:06:6f:ec:c9:64:7c:17:65:8e:e5:9b:f9:3a:02:50:a8: 78:0c:d7:1e:fc:08:0e:f0:5f:1f:fa:c4:c8:f8:14:92:3a:d5: 76:c9:61:9c:17:b7:57:2e:b0:23:bb:ea:26:16:23:dd:80:e9: 7a:9f:37:5e:12:94:de:1f:95:e3:d4:d6:b7:91:ac:09:b3:38: 13:47:65:52:14:bf:35:74:46:be:e8:3d:dc:80:5b:73:89:1b: fe:64:dc:83:13:25:fb:95:aa:2b:1a:5c:d8:26:1a:00:9e:59: 65:7a:9e:83:cb:28:c8:c3:75:c3:63:ea:0b:21:de:77:4f:54: 25:c4:c0:d5:cf:fa:89:2f:e3:6f:3e:f2:37:2e:49:bf:6b:41: 09:4e:2f:e1:eb:dc:35:ae:23:b5:b8:ad:2c:fe:07:78:af:d3: 52:d4:fd:0a:c9:01:9f:18:c8:06:7d:46:02:2f:7d:ba:c0:22: e5:e8:85:00:d6:30:5d:cf:01:cf:ac:ac:08:fc:6a:f3:ed:86: b7:69:01:69:0f:01:1b:c2:87:ea:9d:f8:d9:1e:21:00:6c:2b: 94:80:a4:b5:f0:0d:6c:8b:cf:fd:d7:21:0b:43:f6:99:a5:a0: 59:c8:62:12 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY4QkMxMTAvBgNVBAUTKDVBMDdFNkQ4RjcxOTdFMzRBOTM5NDRFQUY2OTM5OEU0 QUE3NDI4RTkwHhcNMjQwODAzMDA1MjM0WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmFkN2Y1MS0wMWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOfvWdKW3+6ledEMRzVNEjBg8oSxm90Ph0JK0cLy9B3PIaAHFfCTX4GiRaId vX0FWaY/0UBx+1WapXyL0PK5VedKBbiDywIlM9KNnHTYnoHK7h1EXac/Auc1ZinB lXt0NL+NzlVYXJxnXfdbhrpVe0jp18UrWJzarWJ9Gb7sXkoXFK0GtrHA4aqjZyA7 bJvSDfP3xySen3kz9exzHnoevh27+MEB0oLqydal8xHz1xZrJtBJrHpSvGxOqX6n q5v/w+hMPh2jCf4xu59QGE4pv4a+qh2MOubOt6IZ7DGRKA+FjhKsGhCkEU07RBqu E+DDW6Kc31S0MNfPOW3QLaCU2QIDAQABo4IClTCCApEwHQYDVR0OBBYEFLH4WmCy I+y8UUBrRwhS1eaB/81FMB8GA1UdIwQYMBaAFFoH5tj3GX40qTlE6vaTmOSqdCjp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhCQy9CMTcwNkY0OEQz RDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZqU3BPVVRxOXBPWTVLcDBL T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dnZm0yUGNaZmpTcE9VVHE5cE9ZNUtwMEtPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUY4QkMvQjE3MDZGNDhEM0Q4MTFFQkFBMUJGNDEwQzRGOUFFMDIvOTlCNEJBQTZE M0U0MTFFQkI2N0YyNjE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnqM8wDQYJKoZIhvcNAQELBQADggEBAJ+Gzm6Eu/VN/8/Y UsO7MTHbWn9oBm/syWR8F2WO5Zv5OgJQqHgM1x78CA7wXx/6xMj4FJI61XbJYZwX t1cusCO76iYWI92A6XqfN14SlN4flePU1reRrAmzOBNHZVIUvzV0Rr7oPdyAW3OJ G/5k3IMTJfuVqisaXNgmGgCeWWV6noPLKMjDdcNj6gsh3ndPVCXEwNXP+okv428+ 8jcuSb9rQQlOL+Hr3DWuI7W4rSz+B3iv01LU/QrJAZ8YyAZ9RgIvfbrAIuXohQDW MF3PAc+srAj8avPthrdpAWkPARvCh+qd+NkeIQBsK5SApLXwDWyLz/3XIQtD9pml oFnIYhI= -----END CERTIFICATE-----Generated at Thu Mar 13 21:49:03 2025 by rpki-client