$ rpki-client -vvf rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/5590E4766AD111EFB8AD551AC4F9AE02.roa File: 5590E4766AD111EFB8AD551AC4F9AE02.roa (raw, json) Hash identifier: qD2u8kEzX6LXoe/sZOlv/N8vLlfDphWTentVgOW9AlE= Subject key identifier: 21:CF:10:C2:0D:3F:AB:3B:A7:E2:CD:1F:B0:C1:4E:3D:7A:F0:81:81 Certificate issuer: /CN=A912E990/serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1 Certificate serial: 03B5 Authority key identifier: CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/5590E4766AD111EFB8AD551AC4F9AE02.roa Signing time: Wed 04 Sep 2024 15:21:19 +0000 ROA not before: Wed 04 Sep 2024 15:21:19 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 150740 IP address blocks: 103.161.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 949 (0x3b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E990/serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1 Validity Not Before: Sep 4 15:21:19 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66d87aef-50bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1d:a7:32:48:61:f0:68:c1:b3:e9:a3:b3:33: f2:d1:5d:4c:86:81:6c:3d:a1:37:6f:6f:c6:ba:65: 3b:1f:db:d7:f5:08:5f:5b:38:a1:65:fe:2d:8b:5e: 6a:95:19:da:dd:b4:cd:71:8d:49:eb:b5:37:c4:8b: 28:b1:0c:cd:46:dd:ef:a8:54:da:d9:90:67:e9:56: 05:b2:65:0c:9c:3e:43:82:df:de:12:51:a9:02:b9: e3:ec:dd:f2:d0:a0:e5:44:8b:eb:40:2d:1b:78:2d: 50:d3:82:a0:f3:68:59:af:90:72:aa:9e:0c:84:01: 02:38:d7:d8:c6:97:2e:83:36:91:37:c4:32:a5:de: a2:aa:e7:1c:5d:0f:d4:1b:0e:64:11:69:43:a0:ed: 86:ca:f0:e4:ea:2c:56:34:a0:73:45:c9:ab:81:d0: 61:bb:07:51:21:7b:93:4d:ce:e1:43:f6:2f:94:17: 7d:4b:cb:c3:72:86:1c:09:86:21:2a:e6:b1:9e:7b: 57:2e:28:18:d5:0a:01:10:19:b0:05:39:a8:1a:6b: 5d:fd:23:8c:b2:ee:f7:e2:f2:cd:aa:fd:ba:fe:72: 82:93:f7:c1:fb:d4:4b:64:08:f1:ac:5f:29:95:92: da:ba:26:ca:21:fd:ed:bc:12:58:f5:e6:45:6b:62: 3d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CF:10:C2:0D:3F:AB:3B:A7:E2:CD:1F:B0:C1:4E:3D:7A:F0:81:81 X509v3 Authority Key Identifier: keyid:CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/5590E4766AD111EFB8AD551AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.161.215.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:84:a4:b2:48:59:a0:81:f7:09:89:4a:a0:ca:f4:aa:bc:76: 51:4a:be:6a:d0:7e:6d:6f:49:9e:49:14:0b:c8:2c:2f:1a:ab: 68:9e:4b:66:74:ff:a1:bf:cd:04:f8:dc:d9:f7:96:fa:1d:1d: b4:51:56:b2:88:d6:f6:77:be:e9:50:94:07:3f:3e:9d:22:a7: c8:f1:48:97:fd:d6:86:56:ad:e5:3c:13:3a:ce:5c:c8:ef:b8: a6:73:97:54:2d:74:50:23:f6:ee:92:f7:29:7a:51:c3:8f:95: 39:0a:96:41:8c:0a:16:e1:d0:a1:41:d2:42:f9:99:9c:d4:bb: 6c:15:8d:aa:cb:8b:81:9e:70:45:e1:dc:29:d9:b2:ec:1a:21: 2e:1e:f0:26:d0:17:c7:e3:7a:e4:7c:6b:a7:2f:29:ab:17:2c: 1c:7d:79:43:8c:fa:b4:43:5d:cc:07:b4:08:92:4f:1b:31:59: 8f:ea:9e:1e:3f:ee:64:16:60:fe:a3:bf:0c:c1:6d:9c:5e:7f: 8a:42:b0:38:1a:0b:af:b8:75:15:55:86:c3:8c:de:44:e0:70: ea:94:b3:2c:7a:b0:67:1d:8e:17:e2:cf:d7:46:97:3b:b1:55: 8a:5f:c2:12:71:48:57:3b:c0:9d:f2:e2:68:c2:2c:6a:e4:d2: a1:47:00:10 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OTAxMTAvBgNVBAUTKENFRjJEQjNGNjI3RDcyNDE4RTlCM0VBODJBNEZDODlB NDFCN0I1RDEwHhcNMjQwOTA0MTUyMTE5WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ4N2FlZi01MGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqx2nMkhh8GjBs+mjszPy0V1MhoFsPaE3b2/GumU7H9vX9QhfWzihZf4ti15q lRna3bTNcY1J67U3xIsosQzNRt3vqFTa2ZBn6VYFsmUMnD5Dgt/eElGpArnj7N3y 0KDlRIvrQC0beC1Q04Kg82hZr5Byqp4MhAECONfYxpcugzaRN8Qypd6iquccXQ/U Gw5kEWlDoO2GyvDk6ixWNKBzRcmrgdBhuwdRIXuTTc7hQ/YvlBd9S8vDcoYcCYYh KuaxnntXLigY1QoBEBmwBTmoGmtd/SOMsu734vLNqv26/nKCk/fB+9RLZAjxrF8p lZLauibKIf3tvBJY9eZFa2I9UwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCHPEMIN P6s7p+LNH7DBTj168IGBMB8GA1UdIwQYMBaAFM7y2z9ifXJBjps+qCpPyJpBt7XR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5MC84RjQzQjMwMjYw QjUxMUVDQkIwRDU3NDNDNEY5QUUwMi96dkxiUDJKOWNrR09tejZvS2tfSW1rRzN0 ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p2TGJQMko5Y2tHT216Nm9La19JbWtHM3RkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkU5OTAvOEY0M0IzMDI2MEI1MTFFQ0JCMEQ1NzQzQzRGOUFFMDIvNTU5MEU0NzY2 QUQxMTFFRkI4QUQ1NTFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnodcwDQYJKoZIhvcNAQELBQADggEBAH6EpLJIWaCB9wmJ SqDK9Kq8dlFKvmrQfm1vSZ5JFAvILC8aq2ieS2Z0/6G/zQT43Nn3lvodHbRRVrKI 1vZ3vulQlAc/Pp0ip8jxSJf91oZWreU8EzrOXMjvuKZzl1QtdFAj9u6S9yl6UcOP lTkKlkGMChbh0KFB0kL5mZzUu2wVjarLi4GecEXh3CnZsuwaIS4e8CbQF8fjeuR8 a6cvKasXLBx9eUOM+rRDXcwHtAiSTxsxWY/qnh4/7mQWYP6jvwzBbZxef4pCsDga C6+4dRVVhsOM3kTgcOqUsyx6sGcdjhfiz9dGlzuxVYpfwhJxSFc7wJ3y4mjCLGrk 0qFHABA= -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:32 2024 by rpki-client on console-fra.rpki-client.org