$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/4F69940080B811EBBEE2CA7FC4F9AE02.roa File: 4F69940080B811EBBEE2CA7FC4F9AE02.roa (raw, json) Hash identifier: LElymbbaXnwfsL0CJFDTRhRa4LQUnyfVYBKWXvLFjH4= Subject key identifier: 3C:9C:7B:4B:A9:CB:1A:34:B7:CE:B0:95:8B:40:4D:DF:E8:50:61:C5 Certificate issuer: /CN=A912CDC5/serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7 Certificate serial: 05FD Authority key identifier: 1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/4F69940080B811EBBEE2CA7FC4F9AE02.roa Signing time: Sat 12 Oct 2024 22:31:59 +0000 ROA not before: Sat 12 Oct 2024 22:31:59 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 133206 IP address blocks: 103.75.134.0/23 maxlen: 23 103.204.240.0/22 maxlen: 22 203.76.224.0/22 maxlen: 22 2404:d4c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1533 (0x5fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDC5/serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7 Validity Not Before: Oct 12 22:31:59 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=670af8df-33d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6b:5b:71:72:9f:fe:40:30:68:3a:3c:fb:6b: db:ba:66:df:d3:a1:bd:54:05:e6:56:3d:c3:6a:02: 42:a5:05:16:0e:93:15:e6:e7:f3:35:9f:ff:ea:22: f1:92:48:8b:6e:c4:9d:17:8d:d4:73:2f:cc:56:23: b4:fa:d4:ef:35:5b:23:18:e9:55:fd:66:e0:24:58: f1:62:a7:ff:3f:e8:17:59:a4:2b:02:c1:4c:c0:11: c8:a1:e0:b3:4a:36:1e:97:47:18:0a:1b:ef:52:8d: 49:b9:7e:97:61:db:27:94:35:dc:9e:65:13:0a:e6: 31:ce:3d:45:6f:cf:b6:24:f3:a2:49:9e:9d:c7:86: 98:ad:4e:1d:ff:30:5d:76:dc:4a:80:bc:cf:6c:29: 90:13:83:8e:96:c1:c6:22:10:7f:e8:24:18:33:cf: ad:99:ef:ff:72:4d:1a:cc:f6:b1:8a:6c:f7:dc:2b: 96:1f:d8:ad:76:63:3b:8c:bc:c9:c1:9f:80:62:27: 40:38:89:bd:22:46:75:6d:04:c6:eb:50:dc:fa:a3: 2f:ff:ea:d2:30:80:8b:eb:b4:d3:db:75:9e:49:6b: 8d:6d:47:18:78:9d:bc:28:6e:c6:3c:4e:36:1c:36: 9c:d4:de:29:4d:9f:a4:61:20:b5:31:40:bb:39:75: 61:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:9C:7B:4B:A9:CB:1A:34:B7:CE:B0:95:8B:40:4D:DF:E8:50:61:C5 X509v3 Authority Key Identifier: keyid:1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/4F69940080B811EBBEE2CA7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.75.134.0/23 103.204.240.0/22 203.76.224.0/22 IPv6: 2404:d4c0::/32 Signature Algorithm: sha256WithRSAEncryption 7f:f9:a5:c0:dc:73:19:1d:0c:3d:f4:4f:60:b5:f7:ea:cb:f5: 09:30:f3:f3:f8:1d:20:14:80:f9:98:52:07:8f:49:33:eb:4b: 04:8f:0c:f5:0e:1f:ec:1b:8d:5c:95:96:00:01:56:64:34:ad: b6:9a:34:cc:47:59:53:70:ad:98:0b:d1:3c:e6:57:eb:9f:cb: fe:86:06:b1:74:7a:9d:01:d2:94:47:51:87:d9:9f:7e:1a:03: 63:38:54:f4:87:e0:e9:b8:24:a6:e7:4b:56:3e:22:ff:6a:76: e0:3d:a5:bc:20:f6:db:47:af:c2:8e:72:81:6c:36:e3:cc:be: 57:b6:f7:3d:41:0e:77:66:45:fe:bd:e8:e5:a2:9a:70:4e:0b: 5e:63:e4:12:7f:62:54:cb:90:d7:19:77:92:a0:03:fa:20:f5: 22:7b:93:f5:38:b1:4a:ef:5b:b9:ce:cf:52:5c:09:ac:8e:61: 8b:e7:79:80:cb:47:af:d8:f0:09:af:34:7d:a7:fc:29:a6:93: fe:4b:0a:32:c6:73:54:b4:6c:cd:c2:4a:0a:f1:ca:ef:8f:a9: 21:c3:2d:ab:a9:0e:0f:97:58:30:5b:80:fb:96:d7:c7:7b:a3: 33:8a:32:6f:40:47:cc:57:c8:e0:05:11:dd:ea:1f:98:44:58: 14:27:20:a8 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICBf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQzUxMTAvBgNVBAUTKDFBRUI5OTUxQjU4NEUxRTIxQkJGQzUyQ0NFODkwOTQx MTNDNkZDQTcwHhcNMjQxMDEyMjIzMTU5WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzBhZjhkZi0zM2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA22tbcXKf/kAwaDo8+2vbumbf06G9VAXmVj3DagJCpQUWDpMV5ufzNZ//6iLx kkiLbsSdF43Ucy/MViO0+tTvNVsjGOlV/WbgJFjxYqf/P+gXWaQrAsFMwBHIoeCz SjYel0cYChvvUo1JuX6XYdsnlDXcnmUTCuYxzj1Fb8+2JPOiSZ6dx4aYrU4d/zBd dtxKgLzPbCmQE4OOlsHGIhB/6CQYM8+tme//ck0azPaximz33CuWH9itdmM7jLzJ wZ+AYidAOIm9IkZ1bQTG61Dc+qMv/+rSMICL67TT23WeSWuNbUcYeJ28KG7GPE42 HDac1N4pTZ+kYSC1MUC7OXVhlQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFDyce0up yxo0t86wlYtATd/oUGHFMB8GA1UdIwQYMBaAFBrrmVG1hOHiG7/FLM6JCUETxvyn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDNS9GM0RGNTg4Qzgw QjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9HdXVaVWJXRTRlSWJ2OFVzem9rSlFSUEdf S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1dVpVYldFNGVJYnY4VXN6b2tKUVJQR19LYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkNEQzUvRjNERjU4OEM4MEI2MTFFQkJFQ0JGMzc5QzRGOUFFMDIvNEY2OTk0MDA4 MEI4MTFFQkJFRTJDQTdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAFnS4YDBAJnzPADBALLTOAwDQQCAAIwBwMFACQE1MAwDQYJ KoZIhvcNAQELBQADggEBAH/5pcDccxkdDD30T2C19+rL9Qkw8/P4HSAUgPmYUgeP STPrSwSPDPUOH+wbjVyVlgABVmQ0rbaaNMxHWVNwrZgL0TzmV+ufy/6GBrF0ep0B 0pRHUYfZn34aA2M4VPSH4Om4JKbnS1Y+Iv9qduA9pbwg9ttHr8KOcoFsNuPMvle2 9z1BDndmRf696OWimnBOC15j5BJ/YlTLkNcZd5KgA/og9SJ7k/U4sUrvW7nOz1Jc CayOYYvneYDLR6/Y8AmvNH2n/Cmmk/5LCjLGc1S0bM3CSgrxyu+PqSHDLaupDg+X WDBbgPuW18d7ozOKMm9AR8xXyOAFEd3qH5hEWBQnIKg= -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:37 2024 by rpki-client on console-ams.rpki-client.org