$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/AFF53F96556211EE9C34E435C4F9AE02.roa File: AFF53F96556211EE9C34E435C4F9AE02.roa (raw, json) Hash identifier: LM315PXaZ9khTUzGflBEPkGQjhCerawkLIiZZc3Qylg= Subject key identifier: 66:AA:75:77:7E:8F:44:D4:9B:16:77:54:CD:A4:89:E7:83:88:57:D9 Certificate issuer: /CN=A912CB7D/serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5 Certificate serial: D8 Authority key identifier: 94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/AFF53F96556211EE9C34E435C4F9AE02.roa Signing time: Tue 13 Aug 2024 05:06:40 +0000 ROA not before: Tue 13 Aug 2024 05:06:40 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 150683 IP address blocks: 103.229.252.0/24 maxlen: 24 103.229.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.crl rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CB7D/serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5 Validity Not Before: Aug 13 05:06:40 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66bae9e0-4c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ac:20:24:49:0c:4f:74:47:d3:bc:cf:39:97: ff:85:b8:92:66:ab:7a:5d:5e:07:24:cc:03:ec:04: 20:f0:e5:bc:6c:ee:41:bd:fd:ff:e6:ef:76:8e:50: 44:55:9d:77:f6:09:91:c1:43:f4:c3:0d:5d:76:df: 42:8c:a2:48:63:a1:ad:33:7c:2d:58:ba:d9:58:86: 86:48:79:87:9b:57:e6:75:a0:7c:04:d3:c2:96:91: 9a:cf:61:27:99:5c:bc:95:74:64:40:38:6c:48:97: d2:5a:57:91:49:82:44:b4:85:3e:98:e7:c5:c9:c5: 88:f9:ae:fb:ec:e5:9d:da:a6:9e:d0:f0:12:c7:e5: d7:a0:8c:36:95:71:01:7e:be:a7:0f:ff:19:68:19: 64:93:24:ce:5d:23:f5:b1:e7:61:85:5c:70:1d:a8: 72:4e:73:57:e1:31:14:84:19:81:bd:9d:bd:82:12: e8:90:e3:51:d5:8a:08:d3:72:8a:ba:33:3d:3b:17: 18:89:7d:f0:2f:8e:8d:56:7f:d3:9e:de:e7:c5:79: 18:6c:5e:2d:b8:b6:bc:2f:ff:75:37:6b:a9:ff:c6: d6:3a:12:79:20:0d:e6:f3:fd:9a:b6:02:0b:dd:23: 8b:68:86:c7:ee:bc:c9:e9:c2:a5:a3:73:8c:a9:15: 77:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:AA:75:77:7E:8F:44:D4:9B:16:77:54:CD:A4:89:E7:83:88:57:D9 X509v3 Authority Key Identifier: keyid:94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/AFF53F96556211EE9C34E435C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.229.252.0/23 Signature Algorithm: sha256WithRSAEncryption a9:e1:4e:33:dd:f3:7d:df:0c:52:52:a7:02:dc:56:c1:05:8c: 65:ef:30:88:f8:27:b3:e9:ab:e5:ab:05:f4:7e:d7:2f:b0:f1: 47:9f:8f:2e:ab:aa:da:61:97:b8:29:72:ef:69:5d:57:82:4c: d3:5f:da:d1:73:18:69:b8:74:02:f8:6f:31:44:19:db:fc:74: 13:78:7a:56:94:20:68:67:10:dc:2c:6e:5b:3c:10:db:6b:a3: 3a:5c:fe:00:11:d2:8e:1b:79:b6:3a:aa:35:d0:96:b1:ff:80: bb:4c:fb:42:34:97:bc:70:0c:f6:27:ad:c4:91:cc:14:39:2e: a6:40:bc:f4:0a:a7:63:a8:6a:87:bd:ea:92:a7:52:44:67:07: e4:5d:01:19:45:3b:82:c0:da:b0:e1:36:c0:99:c6:d7:85:83: 8d:1b:d8:91:96:25:1a:46:23:b1:8e:df:e0:2c:b3:e5:0e:23: fc:01:4c:80:0e:61:05:38:3b:6e:de:06:46:f0:a7:74:1a:8e: 47:65:40:64:2c:81:86:14:9f:7c:69:9f:65:37:96:17:2d:84: 0c:63:4c:41:e8:56:7d:c9:39:11:ce:d2:b1:96:d1:03:c4:47: bc:f8:35:85:c9:e4:ca:59:12:7d:dc:9c:dc:49:9c:c2:79:e1: 23:2c:a7:ee -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNCN0QxMTAvBgNVBAUTKDk0MDRDRURGNzRCOTQ5NzQ1MUVGMzJCQjdBMTJCRUQ3 MUQyQzIzRTUwHhcNMjQwODEzMDUwNjQwWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmJhZTllMC00YzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1awgJEkMT3RH07zPOZf/hbiSZqt6XV4HJMwD7AQg8OW8bO5Bvf3/5u92jlBE VZ139gmRwUP0ww1ddt9CjKJIY6GtM3wtWLrZWIaGSHmHm1fmdaB8BNPClpGaz2En mVy8lXRkQDhsSJfSWleRSYJEtIU+mOfFycWI+a777OWd2qae0PASx+XXoIw2lXEB fr6nD/8ZaBlkkyTOXSP1sedhhVxwHahyTnNX4TEUhBmBvZ29ghLokONR1YoI03KK ujM9OxcYiX3wL46NVn/Tnt7nxXkYbF4tuLa8L/91N2up/8bWOhJ5IA3m8/2atgIL 3SOLaIbH7rzJ6cKlo3OMqRV3bwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGaqdXd+ j0TUmxZ3VM2kieeDiFfZMB8GA1UdIwQYMBaAFJQEzt90uUl0Ue8yu3oSvtcdLCPl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0I3RC9CMkIzRDc3QzFC NDQxMUVFQTM1NzhFMjlDNEY5QUUwMi9sQVRPMzNTNVNYUlI3eks3ZWhLLTF4MHNJ LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBVE8zM1M1U1hSUjd6SzdlaEstMXgwc0ktVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkNCN0QvQjJCM0Q3N0MxQjQ0MTFFRUEzNTc4RTI5QzRGOUFFMDIvQUZGNTNGOTY1 NTYyMTFFRTlDMzRFNDM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn5fwwDQYJKoZIhvcNAQELBQADggEBAKnhTjPd833fDFJS pwLcVsEFjGXvMIj4J7Ppq+WrBfR+1y+w8Uefjy6rqtphl7gpcu9pXVeCTNNf2tFz GGm4dAL4bzFEGdv8dBN4elaUIGhnENwsbls8ENtrozpc/gAR0o4bebY6qjXQlrH/ gLtM+0I0l7xwDPYnrcSRzBQ5LqZAvPQKp2Ooaoe96pKnUkRnB+RdARlFO4LA2rDh NsCZxteFg40b2JGWJRpGI7GO3+Ass+UOI/wBTIAOYQU4O27eBkbwp3QajkdlQGQs gYYUn3xpn2U3lhcthAxjTEHoVn3JORHO0rGW0QPER7z4NYXJ5MpZEn3cnNxJnMJ5 4SMsp+4= -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:45 2024 by rpki-client on console-fra.rpki-client.org