$ rpki-client -vvf rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/34E1DFE8BF7011EAB745BE31C4F9AE02.roa File: 34E1DFE8BF7011EAB745BE31C4F9AE02.roa (raw, json) Hash identifier: Ikd/LHIFGkrNvlawlhSa/JEAr9UmpAWA/8H+UH2uQws= Subject key identifier: 4B:76:0F:93:91:DC:E0:53:5F:D4:9F:AE:E0:86:E7:0E:A5:D2:54:86 Certificate issuer: /CN=A912A13F/serialNumber=AB1627B7A8514392E1C678B7B078855A445566E4 Certificate serial: 080A Authority key identifier: AB:16:27:B7:A8:51:43:92:E1:C6:78:B7:B0:78:85:5A:44:55:66:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/34E1DFE8BF7011EAB745BE31C4F9AE02.roa Signing time: Sat 14 Sep 2024 22:39:54 +0000 ROA not before: Sat 14 Sep 2024 22:39:54 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 138168 IP address blocks: 103.121.228.0/22 maxlen: 22 103.121.228.0/24 maxlen: 24 103.121.229.0/24 maxlen: 24 103.121.230.0/24 maxlen: 24 103.121.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.crl rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2058 (0x80a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A13F/serialNumber=AB1627B7A8514392E1C678B7B078855A445566E4 Validity Not Before: Sep 14 22:39:54 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66e610ba-950e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b4:d0:ac:11:de:b2:32:84:25:56:32:32:9d: fc:64:0e:cb:ba:a5:6e:ba:f8:ff:31:03:5b:dd:30: 3f:0f:f4:dd:c6:b4:58:e6:9f:39:34:c0:68:20:a8: 0f:44:88:eb:1d:f2:cc:80:4b:4d:bd:78:93:a3:c3: 07:6e:45:fc:0f:9d:46:de:cb:13:2f:ac:77:f6:cb: 8e:cc:f7:6e:14:b0:00:14:8e:1d:d9:72:82:1f:b8: fd:77:e7:4b:48:da:d7:22:5d:3c:0e:97:90:a6:58: b6:30:ed:ae:2d:d2:f6:1d:94:29:6a:9e:d7:d0:f3: 45:8e:45:b6:de:3a:43:1b:77:c3:e3:0f:b1:f3:a9: 74:de:52:4a:fb:f6:77:6c:ec:a4:93:9f:99:19:0d: 97:9c:8c:81:d2:09:90:b5:47:62:1f:41:ef:87:8d: 59:2e:75:15:d7:0f:7f:1e:47:70:c9:b7:b9:35:84: 24:f7:c8:e7:0e:e2:82:ed:89:b1:18:94:ee:35:f8: 6e:fc:c4:76:0f:89:3c:1b:16:f2:50:a8:d1:06:9a: 04:16:01:1e:fe:d7:98:f5:b2:0a:93:b0:0d:e2:1e: 1e:98:77:30:b1:71:f5:82:91:9a:57:6c:06:9f:6c: 88:d2:34:5e:0d:c3:bb:bf:01:d2:0d:89:ae:a8:8f: 5f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:76:0F:93:91:DC:E0:53:5F:D4:9F:AE:E0:86:E7:0E:A5:D2:54:86 X509v3 Authority Key Identifier: keyid:AB:16:27:B7:A8:51:43:92:E1:C6:78:B7:B0:78:85:5A:44:55:66:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/34E1DFE8BF7011EAB745BE31C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.121.228.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:8f:8e:be:5e:d0:ca:0d:b0:dd:d2:ad:02:8a:1f:94:8f:e6: d7:56:fc:c8:43:32:50:ba:0f:f4:ab:93:34:dc:ce:10:35:17: b1:1c:18:29:09:36:3e:95:8f:b9:0e:a9:c6:69:57:c6:66:b6: 31:af:ff:27:36:c8:c3:2d:3b:2a:dd:40:ad:6d:a0:ec:fa:b4: 05:ac:e3:b3:88:3a:ac:91:cd:89:0b:aa:78:50:8d:b2:76:84: 7a:ce:8e:b5:a1:93:ad:a2:4f:c2:61:c2:8b:26:6f:4c:fe:cd: c3:46:09:d7:1f:c5:06:2b:c4:52:66:04:56:75:e1:57:08:8b: 2d:2d:de:98:4c:1e:ee:10:1f:40:b4:eb:b1:4e:98:38:69:ac: c8:ef:89:90:6d:5f:f3:5f:81:2a:53:b0:cb:9d:ee:61:a5:22: 4b:8a:ca:20:c5:7d:57:9e:79:07:6c:ed:3a:1c:87:77:ce:59: 09:7b:49:3c:72:63:8b:60:4f:e0:b2:f2:37:ed:09:b3:cd:d1: b9:79:40:94:d7:e6:53:77:83:bd:e8:f8:2b:1e:17:43:59:60: 1b:bd:30:d4:87:86:90:91:ad:13:23:79:87:5b:05:12:1c:b6: ad:f8:f8:93:c8:54:67:59:c8:9e:42:db:0e:b0:b0:14:0a:55: 22:b7:94:f9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkExM0YxMTAvBgNVBAUTKEFCMTYyN0I3QTg1MTQzOTJFMUM2NzhCN0IwNzg4NTVB NDQ1NTY2RTQwHhcNMjQwOTE0MjIzOTU0WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmU2MTBiYS05NTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7TQrBHesjKEJVYyMp38ZA7LuqVuuvj/MQNb3TA/D/TdxrRY5p85NMBoIKgP RIjrHfLMgEtNvXiTo8MHbkX8D51G3ssTL6x39suOzPduFLAAFI4d2XKCH7j9d+dL SNrXIl08DpeQpli2MO2uLdL2HZQpap7X0PNFjkW23jpDG3fD4w+x86l03lJK+/Z3 bOykk5+ZGQ2XnIyB0gmQtUdiH0Hvh41ZLnUV1w9/Hkdwybe5NYQk98jnDuKC7Ymx GJTuNfhu/MR2D4k8GxbyUKjRBpoEFgEe/teY9bIKk7AN4h4emHcwsXH1gpGaV2wG n2yI0jReDcO7vwHSDYmuqI9fyQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEt2D5OR 3OBTX9SfruCG5w6l0lSGMB8GA1UdIwQYMBaAFKsWJ7eoUUOS4cZ4t7B4hVpEVWbk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTEzRi9BNjcyRTNCNkJG NkUxMUVBQjY1NkJGMkZDNEY5QUUwMi9xeFludDZoUlE1TGh4bmkzc0hpRldrUlZa dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F4WW50NmhSUTVMaHhuaTNzSGlGV2tSVlp1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkExM0YvQTY3MkUzQjZCRjZFMTFFQUI2NTZCRjJGQzRGOUFFMDIvMzRFMURGRThC RjcwMTFFQUI3NDVCRTMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJneeQwDQYJKoZIhvcNAQELBQADggEBAHyPjr5e0MoNsN3S rQKKH5SP5tdW/MhDMlC6D/SrkzTczhA1F7EcGCkJNj6Vj7kOqcZpV8ZmtjGv/yc2 yMMtOyrdQK1toOz6tAWs47OIOqyRzYkLqnhQjbJ2hHrOjrWhk62iT8Jhwosmb0z+ zcNGCdcfxQYrxFJmBFZ14VcIiy0t3phMHu4QH0C067FOmDhprMjviZBtX/NfgSpT sMud7mGlIkuKyiDFfVeeeQds7Toch3fOWQl7STxyY4tgT+Cy8jftCbPN0bl5QJTX 5lN3g73o+CseF0NZYBu9MNSHhpCRrRMjeYdbBRIctq34+JPIVGdZyJ5C2w6wsBQK VSK3lPk= -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:37 2024 by rpki-client on console-fra.rpki-client.org