$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/3D870D1C685F11EEA29D9F4BC4F9AE02.roa File: 3D870D1C685F11EEA29D9F4BC4F9AE02.roa (raw, json) Hash identifier: XwxYtSorve+SAC3u+XigKdLjB1a8nt+xDntpvYaL7J8= Subject key identifier: 94:FA:E1:6E:7D:CD:8B:07:D1:32:0A:50:F9:EC:C6:89:53:E1:D0:31 Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Certificate serial: D9 Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/3D870D1C685F11EEA29D9F4BC4F9AE02.roa Signing time: Sun 27 Oct 2024 04:15:31 +0000 ROA not before: Sun 27 Oct 2024 04:15:31 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 151791 IP address blocks: 103.72.64.0/24 maxlen: 24 2001:df2:e840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Validity Not Before: Oct 27 04:15:31 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=671dbe63-7b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9b:57:96:06:bf:eb:a1:76:31:f1:fb:bc:0b: 02:df:a5:6b:49:d0:ea:e0:65:e4:c3:ae:e7:5a:0d: 54:01:22:13:25:b8:1d:7c:b4:2c:28:95:53:1e:3e: a2:f6:38:63:53:65:95:c8:6b:e2:7a:60:6c:22:18: 04:14:cc:9f:c5:75:6b:0a:2f:6a:80:d2:17:bf:cc: 65:37:f3:5a:b1:7b:d1:a1:d6:f3:6f:9b:19:cc:99: 52:ac:d0:8f:2c:c2:26:db:ef:8f:03:e6:d3:73:bc: 13:a9:3d:0c:73:20:65:7a:83:a1:b2:03:17:24:ae: 35:46:49:58:bd:58:74:e8:c9:4a:ff:f8:47:99:f6: ee:97:f8:c0:06:15:ff:4e:83:88:56:28:5d:db:f3: 85:31:2b:70:a6:ad:3e:6b:1a:b0:39:0b:f5:36:c8: c8:05:cb:b8:5b:70:00:3d:2c:a2:02:66:89:96:4a: 8f:be:d7:ce:a1:d6:83:61:0d:55:0d:71:05:46:d5: c0:28:37:47:1f:05:b1:13:27:8c:58:96:85:49:07: 55:8b:fa:22:f8:8d:41:e2:d8:ca:fc:49:fe:1f:34: ad:f6:fc:da:e3:71:45:27:94:8d:c0:9f:16:31:a9: bd:6c:eb:37:12:1d:e7:a4:e3:0b:73:c0:9d:50:94: 0a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FA:E1:6E:7D:CD:8B:07:D1:32:0A:50:F9:EC:C6:89:53:E1:D0:31 X509v3 Authority Key Identifier: keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/3D870D1C685F11EEA29D9F4BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.72.64.0/24 IPv6: 2001:df2:e840::/48 Signature Algorithm: sha256WithRSAEncryption 50:2f:bd:c0:2b:46:34:fc:a6:84:a0:ce:14:01:5d:2b:24:f1: 43:14:e3:f7:cb:2e:ae:46:07:5d:07:71:8a:76:9a:53:af:62: b0:d2:66:1b:5c:3d:b7:9a:da:d7:d3:82:7f:33:22:4e:66:e2: 63:7d:29:90:db:a3:0d:9f:7b:e3:6f:29:2c:45:ef:47:e1:49: c9:16:f5:a0:95:64:cd:58:65:c9:62:71:8d:91:76:c9:7a:17: 48:04:c7:35:21:b1:3c:97:3e:36:0c:4b:72:5f:d4:e4:a2:8f: 8d:36:09:71:62:66:f5:bf:a0:a0:17:6e:f6:21:9d:ab:d1:63: 0e:43:92:fa:9a:38:2c:3a:01:b5:1d:65:e1:82:83:bf:8b:2a: ce:e7:ab:0f:7d:68:99:c4:1e:1a:02:03:be:dd:2c:0b:df:31: 3a:b2:af:e0:68:86:03:d3:c0:55:3c:a9:80:8b:c0:2e:b9:b1: 4f:d2:46:96:26:49:1d:dc:60:f7:25:33:e7:91:43:1a:34:21: 84:93:ea:87:01:d9:8b:09:fc:aa:b5:4d:fd:9f:82:5c:5f:a1: dd:42:5e:1a:72:6a:64:94:11:94:ef:4a:8c:94:20:e7:53:f0: aa:e6:36:68:da:40:a2:31:ee:27:a5:af:51:33:db:03:f6:21: b0:b1:c8:48 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGMjUxMTAvBgNVBAUTKEYxMUYyNDlCODIxREZDQzJCMUI5N0FGNEU3MDUyNkRE OTMzQTEyN0QwHhcNMjQxMDI3MDQxNTMxWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFkYmU2My03YjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZtXlga/66F2MfH7vAsC36VrSdDq4GXkw67nWg1UASITJbgdfLQsKJVTHj6i 9jhjU2WVyGviemBsIhgEFMyfxXVrCi9qgNIXv8xlN/NasXvRodbzb5sZzJlSrNCP LMIm2++PA+bTc7wTqT0McyBleoOhsgMXJK41RklYvVh06MlK//hHmfbul/jABhX/ ToOIVihd2/OFMStwpq0+axqwOQv1NsjIBcu4W3AAPSyiAmaJlkqPvtfOodaDYQ1V DXEFRtXAKDdHHwWxEyeMWJaFSQdVi/oi+I1B4tjK/En+HzSt9vza43FFJ5SNwJ8W Mam9bOs3Eh3npOMLc8CdUJQK0wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJT64W59 zYsH0TIKUPnsxolT4dAxMB8GA1UdIwQYMBaAFPEfJJuCHfzCsbl69OcFJt2TOhJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkYyNS82MDY0QkFCMjUy RjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9NS3h1WHIwNXdVbTNaTTZF bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOGttNElkX01LeHVYcjA1d1VtM1pNNkVuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUZGMjUvNjA2NEJBQjI1MkY0MTFFRTg5OEI5QjQzQzRGOUFFMDIvM0Q4NzBEMUM2 ODVGMTFFRUEyOUQ5RjRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnSEAwDwQCAAIwCQMHACABDfLoQDANBgkqhkiG9w0BAQsF AAOCAQEAUC+9wCtGNPymhKDOFAFdKyTxQxTj98surkYHXQdxinaaU69isNJmG1w9 t5ra19OCfzMiTmbiY30pkNujDZ97428pLEXvR+FJyRb1oJVkzVhlyWJxjZF2yXoX SATHNSGxPJc+NgxLcl/U5KKPjTYJcWJm9b+goBdu9iGdq9FjDkOS+po4LDoBtR1l 4YKDv4sqzuerD31omcQeGgIDvt0sC98xOrKv4GiGA9PAVTypgIvALrmxT9JGliZJ Hdxg9yUz55FDGjQhhJPqhwHZiwn8qrVN/Z+CXF+h3UJeGnJqZJQRlO9KjJQg51Pw quY2aNpAojHuJ6WvUTPbA/YhsLHISA== -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:44 2024 by rpki-client on console-fra.rpki-client.org