$ rpki-client -vvf rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/8BF809E4892411EDBAF42C12C4F9AE02.roa File: 8BF809E4892411EDBAF42C12C4F9AE02.roa (raw, json) Hash identifier: eXbmOFmMxcvm0Xsyzg3/1U2kY3p0kjNdosXsryg+sqE= Subject key identifier: 0A:D0:40:A4:BB:F5:4C:92:59:79:13:8C:83:23:9C:BD:B8:FA:35:30 Certificate issuer: /CN=A912E791/serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E Certificate serial: 0447 Authority key identifier: C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/8BF809E4892411EDBAF42C12C4F9AE02.roa Signing time: Thu 07 Nov 2024 00:03:07 +0000 ROA not before: Thu 07 Nov 2024 00:03:07 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 150683 IP address blocks: 103.174.4.0/24 maxlen: 24 103.174.5.0/24 maxlen: 24 2400:7360::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1095 (0x447) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E791/serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E Validity Not Before: Nov 7 00:03:07 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=672c03bb-efb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d3:1d:7e:ed:c8:38:bc:86:6a:9b:4d:26:cd: d7:f8:67:4a:e6:41:8f:5c:5d:04:a7:33:b5:b0:3c: c4:07:d7:13:4c:66:79:59:2f:20:b6:1a:e7:8a:43: 4f:94:35:f3:91:53:e9:3d:17:bc:e7:0e:cb:8c:45: 78:96:09:0f:aa:15:38:66:a6:9a:98:54:57:29:60: df:98:86:c2:4d:ee:10:fe:f9:d5:96:d4:0e:d4:8b: 5f:35:bf:9b:52:ed:24:2b:e2:68:c5:e8:11:47:94: 68:6e:fa:78:e4:37:38:40:20:cb:78:c7:93:e1:5d: f9:12:7c:ec:d1:8c:03:58:21:d1:71:ed:2f:26:c7: 90:72:d3:67:ad:13:51:a2:cd:06:01:1d:98:d0:51: 98:e2:64:2c:c6:86:35:5c:30:22:01:21:79:52:37: a3:a7:62:39:e4:ce:31:51:f4:fd:90:67:f0:01:40: f1:7c:04:f3:21:6c:96:aa:fd:0a:29:8a:f2:e2:06: 0d:4f:53:03:56:6c:e2:ed:0f:a2:68:c2:76:0a:c1: 1c:3d:4f:14:d3:a1:f8:f1:56:82:e0:b8:cf:4a:33: 79:85:e2:e5:79:c6:13:91:dc:3f:67:d1:2e:11:3c: aa:f4:f9:3d:c6:2a:33:3b:0c:3d:8c:8c:ae:e0:99: 71:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D0:40:A4:BB:F5:4C:92:59:79:13:8C:83:23:9C:BD:B8:FA:35:30 X509v3 Authority Key Identifier: keyid:C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/8BF809E4892411EDBAF42C12C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.174.4.0/23 IPv6: 2400:7360::/32 Signature Algorithm: sha256WithRSAEncryption 9f:7b:a2:c3:fc:91:39:9d:b6:60:10:fb:3a:b7:e9:bf:a5:18: b1:de:c5:3f:c6:90:ef:47:b1:af:e8:8d:50:20:09:0c:1b:2c: 5a:f5:01:55:c4:fe:95:ba:e7:78:79:48:43:16:3c:5e:db:6f: d1:97:6a:0e:be:54:ac:c7:ed:6e:41:fa:d7:00:d9:63:ee:0b: 69:f8:70:cb:10:53:d4:0f:95:20:7f:f0:17:2a:44:5c:ae:81: 29:d0:5b:de:aa:3a:32:21:33:c3:09:4c:cd:98:d8:01:6c:e4: 9a:ef:6f:0f:3a:5a:2f:08:bd:1b:ba:40:9f:23:0d:9b:b9:7f: 39:4a:c0:92:d8:84:96:52:86:18:b9:16:a0:ef:1f:63:3f:a1: cd:d2:0e:e2:94:56:ba:95:db:53:a8:20:cd:00:d1:38:df:07: 3e:8c:0b:45:1d:ba:4f:c5:10:23:2c:db:d4:21:58:1e:eb:cd: 2f:ab:49:4e:2c:45:96:5b:7d:cf:c2:d7:f2:dd:00:12:44:1b: 55:05:4b:ad:cd:17:3c:ce:be:09:83:f7:be:eb:74:cb:b0:a1: 2c:0d:db:48:c7:c0:34:2f:96:78:5e:62:b7:70:c9:2d:8b:5e: c1:29:53:d2:e4:b9:4f:52:d0:e7:72:0c:a5:1c:ab:66:67:59: d9:2a:7b:9a -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU3OTExMTAvBgNVBAUTKEM0RDdCOTRCOURGQjY0RjVDMTg5MjcyMzMwREJEQ0FE MkE3RDAxNkUwHhcNMjQxMTA3MDAwMzA3WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJjMDNiYi1lZmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNMdfu3IOLyGaptNJs3X+GdK5kGPXF0EpzO1sDzEB9cTTGZ5WS8gthrnikNP lDXzkVPpPRe85w7LjEV4lgkPqhU4ZqaamFRXKWDfmIbCTe4Q/vnVltQO1ItfNb+b Uu0kK+JoxegRR5Robvp45Dc4QCDLeMeT4V35Enzs0YwDWCHRce0vJseQctNnrRNR os0GAR2Y0FGY4mQsxoY1XDAiASF5Ujejp2I55M4xUfT9kGfwAUDxfATzIWyWqv0K KYry4gYNT1MDVmzi7Q+iaMJ2CsEcPU8U06H48VaC4LjPSjN5heLlecYTkdw/Z9Eu ETyq9Pk9xiozOww9jIyu4JlxNwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFArQQKS7 9UySWXkTjIMjnL24+jUwMB8GA1UdIwQYMBaAFMTXuUud+2T1wYknIzDb3K0qfQFu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTc5MS8xOUM2OEQwNjNB MDUxMUVDQTk0NDA1MUJDNEY5QUUwMi94TmU1UzUzN1pQWEJpU2NqTU52Y3JTcDlB VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOZTVTNTM3WlBYQmlTY2pNTnZjclNwOUFXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkU3OTEvMTlDNjhEMDYzQTA1MTFFQ0E5NDQwNTFCQzRGOUFFMDIvOEJGODA5RTQ4 OTI0MTFFREJBRjQyQzEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnrgQwDQQCAAIwBwMFACQAc2AwDQYJKoZIhvcNAQELBQAD ggEBAJ97osP8kTmdtmAQ+zq36b+lGLHexT/GkO9Hsa/ojVAgCQwbLFr1AVXE/pW6 53h5SEMWPF7bb9GXag6+VKzH7W5B+tcA2WPuC2n4cMsQU9QPlSB/8BcqRFyugSnQ W96qOjIhM8MJTM2Y2AFs5Jrvbw86Wi8IvRu6QJ8jDZu5fzlKwJLYhJZShhi5FqDv H2M/oc3SDuKUVrqV21OoIM0A0TjfBz6MC0Uduk/FECMs29QhWB7rzS+rSU4sRZZb fc/C1/LdABJEG1UFS63NFzzOvgmD977rdMuwoSwN20jHwDQvlnheYrdwyS2LXsEp U9LkuU9S0OdyDKUcq2ZnWdkqe5o= -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:20 2024 by rpki-client on console-ams.rpki-client.org