$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/204CB89672C011EC809A5933C4F9AE02.roa File: 204CB89672C011EC809A5933C4F9AE02.roa (raw, json) Hash identifier: Gfvw/vl1mymWE2Hz3blrobSO5Bvy6xdNCRghpmsy0TE= Subject key identifier: 2E:F5:86:AD:4B:46:E8:42:2B:C3:32:EE:A7:75:E4:BA:53:8D:91:22 Certificate issuer: /CN=A912AC33/serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634 Certificate serial: 038F Authority key identifier: C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/204CB89672C011EC809A5933C4F9AE02.roa Signing time: Wed 11 Sep 2024 03:35:05 +0000 ROA not before: Wed 11 Sep 2024 03:35:05 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 133114 IP address blocks: 103.47.154.0/24 maxlen: 24 103.47.155.0/24 maxlen: 24 103.241.150.0/24 maxlen: 24 103.241.151.0/24 maxlen: 24 2401:e280:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 911 (0x38f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC33/serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634 Validity Not Before: Sep 11 03:35:05 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66e10fe8-7eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:07:08:b0:10:40:0b:14:46:9f:7c:da:60:15: 81:d5:df:4a:14:4e:78:19:78:a7:f4:68:db:f0:9d: e5:5d:a7:a0:d1:2d:26:68:f1:7e:cc:17:a9:01:2f: 9a:7f:15:3b:5b:0f:7b:21:7a:8c:e4:fa:0d:e3:62: a9:76:2a:0a:8f:70:fa:e4:bd:95:72:c3:a9:23:1e: 97:56:9d:6a:c4:ee:ef:89:25:dc:cc:00:63:2c:c2: bf:19:5a:dd:e4:f8:c5:7a:3f:76:45:33:d4:cd:28: 6c:30:24:87:92:8e:f4:cc:c4:54:92:1d:84:ae:2f: 31:a1:cf:98:de:e6:20:3c:ea:ed:71:af:e2:8d:08: b1:fb:18:49:49:2c:79:1e:de:e3:58:c3:a2:a5:19: 6a:3b:46:85:62:e1:93:4b:88:d5:ba:40:73:18:db: 08:43:10:c7:5f:b2:9a:f6:3d:1e:fc:be:f8:a7:f7: 10:d1:1b:fb:8c:7e:93:16:88:df:2d:f0:47:7b:0c: 53:3f:4a:9f:e3:b3:83:cc:16:8f:ff:90:87:5b:dc: 37:92:e4:12:43:5f:82:2c:ff:8b:0f:7d:5a:a2:05: fb:e0:26:3a:52:b0:36:c1:fa:32:a6:cc:f9:b2:99: 3d:3e:fc:e5:79:cf:f2:af:08:f8:84:9c:40:f6:b5: fb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F5:86:AD:4B:46:E8:42:2B:C3:32:EE:A7:75:E4:BA:53:8D:91:22 X509v3 Authority Key Identifier: keyid:C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/204CB89672C011EC809A5933C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.47.154.0/23 103.241.150.0/23 IPv6: 2401:e280:1000::/36 Signature Algorithm: sha256WithRSAEncryption 9f:14:44:60:f0:a6:0a:ca:3f:7a:38:30:56:97:c0:a5:49:14: 95:97:43:58:82:de:90:56:fb:cb:8e:b0:d6:48:53:7c:25:75: e2:7f:02:46:2e:bb:cb:4d:16:d5:72:cd:b1:e0:98:2f:68:10: 0c:45:ec:73:31:72:32:d8:d9:e9:09:85:a2:9d:2d:57:95:83: 5d:7c:d3:10:71:67:79:0e:b5:6f:05:cf:6e:38:3f:83:9e:83: 87:e8:a9:9d:4b:5e:56:03:cb:d9:d7:5e:a5:4d:72:b1:2e:ad: 66:0a:93:88:43:2d:00:2b:0b:c3:40:03:0e:47:f8:1a:d9:15: b9:a1:a0:41:13:4d:96:3d:a6:47:1d:8d:f6:4f:2e:ae:cd:92: 5d:f0:85:ae:f3:76:43:13:cb:32:4e:07:1c:33:ad:be:ab:52: 05:d8:7d:cf:81:4e:31:11:36:64:75:75:b9:81:bf:06:12:dd: ce:b2:06:d4:b9:95:1e:ca:a8:a7:bd:9b:4e:71:d9:a8:29:b4: 53:c9:08:ee:fb:19:74:b3:e5:94:e6:8b:b6:21:b9:f9:3d:a6: 4c:7d:fe:a3:06:1d:6b:dd:33:76:9c:72:7f:9a:fa:b4:25:e2: 09:fd:b7:16:29:22:8a:f7:99:a0:1d:9e:af:b3:56:1d:77:3c: 45:f0:8d:ff -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICA48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDMzMxMTAvBgNVBAUTKEM5NUNFOUQxQjZCMzEwODFDMDI1RDQ2QTNBMTY3RkNG REZBNzI2MzQwHhcNMjQwOTExMDMzNTA1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmUxMGZlOC03ZWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygcIsBBACxRGn3zaYBWB1d9KFE54GXin9Gjb8J3lXaeg0S0maPF+zBepAS+a fxU7Ww97IXqM5PoN42KpdioKj3D65L2VcsOpIx6XVp1qxO7viSXczABjLMK/GVrd 5PjFej92RTPUzShsMCSHko70zMRUkh2Eri8xoc+Y3uYgPOrtca/ijQix+xhJSSx5 Ht7jWMOipRlqO0aFYuGTS4jVukBzGNsIQxDHX7Ka9j0e/L74p/cQ0Rv7jH6TFojf LfBHewxTP0qf47ODzBaP/5CHW9w3kuQSQ1+CLP+LD31aogX74CY6UrA2wfoypsz5 spk9Pvzlec/yrwj4hJxA9rX7gQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFC71hq1L RuhCK8My7qd15LpTjZEiMB8GA1UdIwQYMBaAFMlc6dG2sxCBwCXUajoWf8/fpyY0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzMy8wNEIzMzQ4ODcy QkMxMUVDODYxMTZENUVDNEY5QUUwMi95VnpwMGJhekVJSEFKZFJxT2haX3o5LW5K alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lWenAwYmF6RUlIQUpkUnFPaFpfejktbkpqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkFDMzMvMDRCMzM0ODg3MkJDMTFFQzg2MTE2RDVFQzRGOUFFMDIvMjA0Q0I4OTY3 MkMwMTFFQzgwOUE1OTMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMBIEAgABMAwDBAFnL5oDBAFn8ZYwDgQCAAIwCAMGBCQB4oAQMA0GCSqGSIb3 DQEBCwUAA4IBAQCfFERg8KYKyj96ODBWl8ClSRSVl0NYgt6QVvvLjrDWSFN8JXXi fwJGLrvLTRbVcs2x4JgvaBAMRexzMXIy2NnpCYWinS1XlYNdfNMQcWd5DrVvBc9u OD+DnoOH6KmdS15WA8vZ116lTXKxLq1mCpOIQy0AKwvDQAMOR/ga2RW5oaBBE02W PaZHHY32Ty6uzZJd8IWu83ZDE8syTgccM62+q1IF2H3PgU4xETZkdXW5gb8GEt3O sgbUuZUeyqinvZtOcdmoKbRTyQju+xl0s+WU5ou2Ibn5PaZMff6jBh1r3TN2nHJ/ mvq0JeIJ/bcWKSKK95mgHZ6vs1YddzxF8I3/ -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:32 2024 by rpki-client on console-fra.rpki-client.org