$ rpki-client -vvf rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/B69382D2CCC911EBB3A3513CC4F9AE02.roa File: B69382D2CCC911EBB3A3513CC4F9AE02.roa (raw, json) Hash identifier: D8iOeMM09bmAAiYt4BbyTyvEUrQlP8eN6kbCvVZAb2o= Subject key identifier: 72:2A:E6:B8:B7:96:31:72:76:CC:BA:9E:4F:EC:72:73:66:A7:BC:68 Certificate issuer: /CN=A912D8C3/serialNumber=2C4502394FD9CC4D877A65397350A495306136C1 Certificate serial: 0520 Authority key identifier: 2C:45:02:39:4F:D9:CC:4D:87:7A:65:39:73:50:A4:95:30:61:36:C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/B69382D2CCC911EBB3A3513CC4F9AE02.roa Signing time: Mon 29 Jul 2024 00:22:18 +0000 ROA not before: Mon 29 Jul 2024 00:22:18 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 55567 IP address blocks: 103.1.7.0/24 maxlen: 24 103.231.159.0/24 maxlen: 24 103.231.168.0/23 maxlen: 24 202.61.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.crl rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1312 (0x520) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D8C3/serialNumber=2C4502394FD9CC4D877A65397350A495306136C1 Validity Not Before: Jul 29 00:22:18 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66a6e0ba-fc32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5d:12:99:f8:a2:41:b7:9f:3f:8d:7a:33:81: 3c:8b:24:82:97:bc:3e:4e:6f:3a:32:96:b5:76:55: a4:31:11:71:a0:9c:78:24:55:36:a3:72:c3:06:52: f9:71:fe:bc:1c:1b:16:1d:e5:16:e0:e8:0d:ea:84: 19:ac:8e:9a:94:f6:2b:35:e9:31:28:42:fe:70:20: eb:57:36:1b:9d:5c:7b:81:da:7a:f6:7d:f9:6f:76: d9:27:e3:be:87:26:e5:7a:d3:3c:5b:a7:51:66:ea: 24:38:09:ef:6c:93:54:80:26:87:c9:10:75:35:29: 25:9d:8c:0e:1d:8e:2c:21:c3:68:23:60:44:36:86: ef:55:bb:e2:f6:02:83:f5:57:de:26:74:27:9f:f1: da:1f:eb:44:b0:92:84:e3:a9:a2:19:30:ee:88:48: ec:b8:83:b5:da:3b:7f:df:21:a6:75:a7:93:61:fb: f6:4e:8c:eb:ac:8e:b8:a0:16:dd:1d:b1:ca:76:8f: 49:0a:95:77:29:ac:2b:91:f3:b1:6a:d7:41:00:0c: 99:67:10:19:15:2b:2a:d1:98:4f:9f:11:ab:e3:ba: 45:f9:ac:18:02:5c:6f:69:fd:c0:3e:a8:c2:51:32: da:f1:37:73:c1:26:77:42:38:9e:62:39:7e:24:9d: d4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:2A:E6:B8:B7:96:31:72:76:CC:BA:9E:4F:EC:72:73:66:A7:BC:68 X509v3 Authority Key Identifier: keyid:2C:45:02:39:4F:D9:CC:4D:87:7A:65:39:73:50:A4:95:30:61:36:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/B69382D2CCC911EBB3A3513CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.1.7.0/24 103.231.159.0/24 103.231.168.0/23 202.61.122.0/24 Signature Algorithm: sha256WithRSAEncryption 88:fc:a4:44:8e:9b:ff:7d:47:a1:63:c4:2e:5d:46:e2:69:da: 80:4d:c5:c1:23:fd:81:84:07:2c:e5:09:b9:2b:57:47:20:ac: f7:64:4b:8c:f2:8e:0e:a7:fc:e2:fc:26:b7:51:cb:b3:a5:77: ef:28:25:13:39:28:d7:22:27:7d:a4:c4:d6:f9:e9:55:65:8f: e5:42:64:e9:aa:3c:27:e2:ca:e6:06:f6:1e:79:ad:7a:fc:3c: b6:97:e6:70:b4:5a:f2:83:15:8c:2b:41:88:4f:a1:40:84:d0: f3:ea:c3:e4:9c:09:31:2f:05:c3:8c:83:84:24:6a:f8:71:15: ac:83:4a:75:cf:9c:11:cf:d3:b3:41:99:3b:c2:a3:23:f6:a1: 81:46:1c:93:15:b8:83:7d:44:00:01:36:cb:ec:c0:ec:68:a0: 8a:c0:4c:0c:a2:51:ec:1b:c2:d5:e4:50:a9:5b:16:17:4e:63: f8:76:dc:b8:08:b4:6f:e6:da:e3:55:5f:8b:ae:4d:e0:47:4e: bd:01:22:4c:44:2d:d2:08:e7:84:a5:30:2b:56:30:ad:c4:e3: a9:ed:97:28:03:38:b2:f8:97:65:37:17:00:a5:55:f1:3c:f2: fb:1d:b4:3f:f4:52:20:1d:15:a4:1d:98:e1:a7:be:4c:c2:8c: 57:95:7b:2e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICBSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ4QzMxMTAvBgNVBAUTKDJDNDUwMjM5NEZEOUNDNEQ4NzdBNjUzOTczNTBBNDk1 MzA2MTM2QzEwHhcNMjQwNzI5MDAyMjE4WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmE2ZTBiYS1mYzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2V0SmfiiQbefP416M4E8iySCl7w+Tm86Mpa1dlWkMRFxoJx4JFU2o3LDBlL5 cf68HBsWHeUW4OgN6oQZrI6alPYrNekxKEL+cCDrVzYbnVx7gdp69n35b3bZJ+O+ hybletM8W6dRZuokOAnvbJNUgCaHyRB1NSklnYwOHY4sIcNoI2BENobvVbvi9gKD 9VfeJnQnn/HaH+tEsJKE46miGTDuiEjsuIO12jt/3yGmdaeTYfv2TozrrI64oBbd HbHKdo9JCpV3KawrkfOxatdBAAyZZxAZFSsq0ZhPnxGr47pF+awYAlxvaf3APqjC UTLa8TdzwSZ3QjieYjl+JJ3UeQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFHIq5ri3 ljFydsy6nk/scnNmp7xoMB8GA1UdIwQYMBaAFCxFAjlP2cxNh3plOXNQpJUwYTbB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDhDMy9ENzQxNEQ1NEM3 MjIxMUVCQTQ3MTRGNDBDNEY5QUUwMi9MRVVDT1VfWnpFMkhlbVU1YzFDa2xUQmhO c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFVUNPVV9aekUySGVtVTVjMUNrbFRCaE5zRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkQ4QzMvRDc0MTRENTRDNzIyMTFFQkE0NzE0RjQwQzRGOUFFMDIvQjY5MzgyRDJD Q0M5MTFFQkIzQTM1MTNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBABnAQcDBABn558DBAFn56gDBADKPXowDQYJKoZIhvcNAQEL BQADggEBAIj8pESOm/99R6FjxC5dRuJp2oBNxcEj/YGEByzlCbkrV0cgrPdkS4zy jg6n/OL8JrdRy7Old+8oJRM5KNciJ32kxNb56VVlj+VCZOmqPCfiyuYG9h55rXr8 PLaX5nC0WvKDFYwrQYhPoUCE0PPqw+ScCTEvBcOMg4QkavhxFayDSnXPnBHP07NB mTvCoyP2oYFGHJMVuIN9RAABNsvswOxooIrATAyiUewbwtXkUKlbFhdOY/h23LgI tG/m2uNVX4uuTeBHTr0BIkxELdII54SlMCtWMK3E46ntlygDOLL4l2U3FwClVfE8 8vsdtD/0UiAdFaQdmOGnvkzCjFeVey4= -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:23 2024 by rpki-client on console-fra.rpki-client.org