$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/E58351049F2011EE8D92FF5EC4F9AE02.roa File: E58351049F2011EE8D92FF5EC4F9AE02.roa (raw, json) Hash identifier: iAgZl5cjC5GY9UT1VAX4lVlQAoyGZHmwHR+AO/vqBI0= Subject key identifier: 95:62:22:A3:21:46:16:93:07:AD:86:0A:B1:75:00:80:D1:05:25:7D Certificate issuer: /CN=A912DB99/serialNumber=E98612EEEA4AE70D1FB5B6524B969D4742DCE810 Certificate serial: DA Authority key identifier: E9:86:12:EE:EA:4A:E7:0D:1F:B5:B6:52:4B:96:9D:47:42:DC:E8:10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/E58351049F2011EE8D92FF5EC4F9AE02.roa Signing time: Tue 03 Sep 2024 05:48:42 +0000 ROA not before: Tue 03 Sep 2024 05:48:42 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 45650 IP address blocks: 103.246.64.0/23 maxlen: 24 2001:df2:c540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.crl rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DB99/serialNumber=E98612EEEA4AE70D1FB5B6524B969D4742DCE810 Validity Not Before: Sep 3 05:48:42 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d6a339-b147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:63:fa:95:26:49:7f:97:d5:1b:3c:e0:dd:cb: 5e:99:94:3c:13:f2:ee:3f:d3:92:8e:11:10:39:ff: 55:39:51:e3:07:77:8c:3a:d0:a5:79:16:3a:e1:bf: aa:61:e4:6b:ac:8e:77:82:67:49:5d:ad:65:79:81: 2d:b4:9f:b4:ee:9e:8a:ed:8c:f7:c5:aa:28:47:dc: 04:1a:f0:6a:2c:eb:52:7d:b0:48:33:1a:22:3f:3f: 51:ce:b5:f4:fa:90:e8:6f:df:11:56:e3:ee:94:57: d5:0c:6f:ce:ad:44:b1:0c:f8:b1:c7:69:e9:24:e9: f0:bc:41:a5:e5:21:a3:43:d0:99:54:ed:54:82:4a: 3d:16:eb:e6:b4:e3:0d:e3:dd:86:55:3c:83:07:45: f4:d4:20:62:76:33:b6:12:7f:67:ba:52:f7:29:9c: d3:9e:d7:2e:26:60:d2:dc:b3:24:3e:d4:db:bc:ad: 69:f5:a8:d8:91:99:ce:41:42:4e:a7:d0:e0:55:a3: f5:9f:c9:0f:c6:7d:7b:ca:d9:66:61:fa:92:16:f6: 6e:50:0a:38:7d:97:14:c4:aa:6d:64:45:fe:14:4c: 94:2d:27:b3:2a:8b:1e:6b:5c:ff:c3:36:14:73:63: b5:db:b9:be:66:ce:2b:fb:8b:34:53:db:79:79:2c: 7c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:62:22:A3:21:46:16:93:07:AD:86:0A:B1:75:00:80:D1:05:25:7D X509v3 Authority Key Identifier: keyid:E9:86:12:EE:EA:4A:E7:0D:1F:B5:B6:52:4B:96:9D:47:42:DC:E8:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/E58351049F2011EE8D92FF5EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.246.64.0/23 IPv6: 2001:df2:c540::/48 Signature Algorithm: sha256WithRSAEncryption 4c:74:da:76:ba:9d:6c:06:07:ab:57:c7:25:a8:e2:36:aa:74: 7f:96:41:25:fa:53:b3:40:da:40:3c:e3:e9:8e:20:76:fc:99: 4f:3c:57:ed:d3:fd:2c:d2:04:b2:4a:f2:6a:65:ea:8f:a3:f1: e5:3a:aa:e4:78:29:2e:d3:72:49:0c:94:58:e1:d3:05:46:11: 58:30:c8:8b:5a:55:82:78:a3:5d:68:98:4b:d9:f7:85:c6:85: 61:ae:20:c7:15:0f:86:78:e4:ff:e7:f8:13:68:7d:77:a7:74: af:13:5c:9d:14:98:93:43:b3:39:35:14:e3:b4:16:dc:00:27: 20:0e:f3:36:23:5c:8c:da:4f:6e:ac:af:2a:51:a7:db:c5:47: d5:74:8c:8f:f2:ed:bf:d5:f6:ab:c0:c6:e3:2a:16:99:29:a1: a3:49:b0:f6:b0:f3:84:78:9c:d8:30:50:6d:f1:74:b3:04:df: 4a:6a:72:36:bd:4c:de:62:80:e9:06:07:0a:96:65:7c:c3:92: 44:ae:2a:ea:b9:6c:52:77:1a:2a:70:fa:e9:87:c7:9d:1d:15: 1c:21:d3:54:f0:76:3d:2c:1b:86:1a:b3:ca:7e:c7:4d:63:e5: 04:e8:05:de:7b:6f:35:5b:68:5f:b7:df:cd:7c:2d:82:75:a3: 17:fe:d9:b5 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRCOTkxMTAvBgNVBAUTKEU5ODYxMkVFRUE0QUU3MEQxRkI1QjY1MjRCOTY5RDQ3 NDJEQ0U4MTAwHhcNMjQwOTAzMDU0ODQyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ2YTMzOS1iMTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4GP6lSZJf5fVGzzg3ctemZQ8E/LuP9OSjhEQOf9VOVHjB3eMOtCleRY64b+q YeRrrI53gmdJXa1leYEttJ+07p6K7Yz3xaooR9wEGvBqLOtSfbBIMxoiPz9RzrX0 +pDob98RVuPulFfVDG/OrUSxDPixx2npJOnwvEGl5SGjQ9CZVO1Ugko9FuvmtOMN 492GVTyDB0X01CBidjO2En9nulL3KZzTntcuJmDS3LMkPtTbvK1p9ajYkZnOQUJO p9DgVaP1n8kPxn17ytlmYfqSFvZuUAo4fZcUxKptZEX+FEyULSezKosea1z/wzYU c2O127m+Zs4r+4s0U9t5eSx8GQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJViIqMh RhaTB62GCrF1AIDRBSV9MB8GA1UdIwQYMBaAFOmGEu7qSucNH7W2UkuWnUdC3OgQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREI5OS9CQzY1OUJDNjMx QjQxMUVFQjU1MUYyMTFDNEY5QUUwMi82WVlTN3VwSzV3MGZ0YlpTUzVhZFIwTGM2 QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZZWVM3dXBLNXcwZnRiWlNTNWFkUjBMYzZCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkRCOTkvQkM2NTlCQzYzMUI0MTFFRUI1NTFGMjExQzRGOUFFMDIvRTU4MzUxMDQ5 RjIwMTFFRThEOTJGRjVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFn9kAwDwQCAAIwCQMHACABDfLFQDANBgkqhkiG9w0BAQsF AAOCAQEATHTadrqdbAYHq1fHJajiNqp0f5ZBJfpTs0DaQDzj6Y4gdvyZTzxX7dP9 LNIEskryamXqj6Px5Tqq5HgpLtNySQyUWOHTBUYRWDDIi1pVgnijXWiYS9n3hcaF Ya4gxxUPhnjk/+f4E2h9d6d0rxNcnRSYk0OzOTUU47QW3AAnIA7zNiNcjNpPbqyv KlGn28VH1XSMj/Ltv9X2q8DG4yoWmSmho0mw9rDzhHic2DBQbfF0swTfSmpyNr1M 3mKA6QYHCpZlfMOSRK4q6rlsUncaKnD66YfHnR0VHCHTVPB2PSwbhhqzyn7HTWPl BOgF3ntvNVtoX7ffzXwtgnWjF/7ZtQ== -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:03 2024 by rpki-client on console-ams.rpki-client.org