$ rpki-client -vvf rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/6877A622A9DB11E9B353AF85C4F9AE02.roa File: 6877A622A9DB11E9B353AF85C4F9AE02.roa (raw, json) Hash identifier: 041/+q2U6C3NS+0FvYUDZgs9ujhQmOXumHp5fUehTOA= Subject key identifier: B9:79:B5:F0:05:DA:7F:DA:28:F6:37:A7:AB:B1:CC:5C:BA:47:16:0C Certificate issuer: /CN=A912EF71/serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Certificate serial: 0D63 Authority key identifier: 91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/6877A622A9DB11E9B353AF85C4F9AE02.roa Signing time: Thu 06 Jun 2024 19:32:40 +0000 ROA not before: Thu 06 Jun 2024 19:32:40 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 137818 IP address blocks: 103.114.198.0/23 maxlen: 23 103.114.198.0/24 maxlen: 24 103.114.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:50:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3427 (0xd63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EF71/serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Validity Not Before: Jun 6 19:32:40 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66620ed8-cf3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:97:fa:09:97:e1:16:78:33:b6:73:61:c1:d5: e8:21:4c:a4:73:4d:bd:e2:0e:56:59:a1:a2:d7:89: b6:67:97:cf:32:53:b5:b1:da:5f:60:f9:a9:0a:ed: d3:07:90:76:04:03:a5:e8:9d:a3:04:74:03:f0:51: 29:c7:b1:33:90:6d:19:0f:21:48:e4:df:1d:ef:b0: 71:d9:cf:8f:05:04:05:02:eb:e5:47:88:b5:ff:f9: d5:25:12:84:1e:8c:b3:88:ae:5b:69:d0:5c:c3:83: ca:48:6e:3d:d1:c0:72:4c:6c:99:81:54:9c:a3:a7: 74:af:37:ff:42:3f:83:f3:4d:8a:1c:45:a2:31:d0: 32:93:17:12:0e:34:44:48:cd:0f:b2:95:34:1c:aa: 80:04:bf:29:7f:a4:1f:07:d6:45:c8:10:de:65:b6: 85:5f:03:07:9e:da:6c:07:e6:e7:c1:6f:0d:ae:8e: 82:0d:af:a8:09:0e:be:34:7c:ae:cd:2f:94:31:20: f0:d2:d5:b4:85:a9:77:6d:c9:33:2b:6f:8b:c1:45: 21:2a:0e:9c:a6:e2:56:90:e1:30:69:45:4b:ef:4d: 8a:cc:83:ee:f4:09:0a:cf:5d:20:c3:76:c8:07:ea: 06:95:22:b1:a2:a5:5c:a3:8b:0f:00:c7:34:d5:57: de:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:79:B5:F0:05:DA:7F:DA:28:F6:37:A7:AB:B1:CC:5C:BA:47:16:0C X509v3 Authority Key Identifier: keyid:91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/6877A622A9DB11E9B353AF85C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.114.198.0/23 Signature Algorithm: sha256WithRSAEncryption 75:3d:f4:cc:93:ab:9f:a0:91:dd:44:be:b1:04:ce:a8:42:a4: b5:de:0f:57:11:28:d8:9f:ae:be:6d:12:06:b6:a3:e0:18:74: 90:67:cf:44:22:fe:3c:45:19:c3:b0:d6:db:42:ff:4c:fb:a8: a6:71:19:83:de:48:12:d8:b8:66:2f:ea:9e:44:93:a0:9c:14: 0e:86:fa:8b:d1:5b:03:93:35:5a:b1:39:3a:c5:fb:41:85:4b: c4:4f:0a:8b:b9:26:8d:b2:ac:ae:3b:c0:b4:68:4f:d4:53:13: 7e:87:d7:52:e8:71:fc:4c:d0:ce:7c:29:e5:12:83:a7:9a:00: 8f:f3:22:cd:f3:47:dc:85:5e:63:d8:ba:1d:3f:df:db:d0:8b: cf:fb:ee:e5:87:8a:0c:f7:30:e7:90:bd:6b:fd:b5:8e:d8:57: 7f:a6:64:af:79:69:49:b3:8e:b2:0d:8e:73:5e:ad:e5:4a:36: 6c:92:28:50:bc:27:ca:5e:d7:60:a3:d6:d5:7e:6b:dd:98:b8: f5:72:c3:bd:3b:4e:02:33:8b:17:7b:98:b1:3a:e8:38:e7:8b: 62:e0:59:49:e1:6e:ec:89:9f:97:a3:97:bf:64:e2:da:28:77: 66:ec:cb:ed:a9:8d:de:e2:9d:22:cf:d8:9e:36:8d:86:4d:82: 36:9c:25:01 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGNzExMTAvBgNVBAUTKDkxNkEyRkUyQUEyQzIwQUIwMUM1QTEzRDIzNkRBNDlE QjdFQTUwNjIwHhcNMjQwNjA2MTkzMjQwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjYyMGVkOC1jZjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJf6CZfhFngztnNhwdXoIUykc0294g5WWaGi14m2Z5fPMlO1sdpfYPmpCu3T B5B2BAOl6J2jBHQD8FEpx7EzkG0ZDyFI5N8d77Bx2c+PBQQFAuvlR4i1//nVJRKE HoyziK5badBcw4PKSG490cByTGyZgVSco6d0rzf/Qj+D802KHEWiMdAykxcSDjRE SM0PspU0HKqABL8pf6QfB9ZFyBDeZbaFXwMHntpsB+bnwW8Nro6CDa+oCQ6+NHyu zS+UMSDw0tW0hal3bckzK2+LwUUhKg6cpuJWkOEwaUVL702KzIPu9AkKz10gw3bI B+oGlSKxoqVco4sPAMc01VfevwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLl5tfAF 2n/aKPY3p6uxzFy6RxYMMB8GA1UdIwQYMBaAFJFqL+KqLCCrAcWhPSNtpJ236lBi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUY3MS83RUE4Mjk3Q0E5 REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lLc0J4YUU5STIya25iZnFV R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tXb3Y0cW9zSUtzQnhhRTlJMjJrbmJmcVVHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkVGNzEvN0VBODI5N0NBOURBMTFFOTk1NDMzNDg0QzRGOUFFMDIvNjg3N0E2MjJB OURCMTFFOUIzNTNBRjg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFncsYwDQYJKoZIhvcNAQELBQADggEBAHU99MyTq5+gkd1E vrEEzqhCpLXeD1cRKNifrr5tEga2o+AYdJBnz0Qi/jxFGcOw1ttC/0z7qKZxGYPe SBLYuGYv6p5Ek6CcFA6G+ovRWwOTNVqxOTrF+0GFS8RPCou5Jo2yrK47wLRoT9RT E36H11LocfxM0M58KeUSg6eaAI/zIs3zR9yFXmPYuh0/39vQi8/77uWHigz3MOeQ vWv9tY7YV3+mZK95aUmzjrINjnNereVKNmySKFC8J8pe12Cj1tV+a92YuPVyw707 TgIzixd7mLE66Djni2LgWUnhbuyJn5ejl79k4tood2bsy+2pjd7inSLP2J42jYZN gjacJQE= -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:58 2024 by rpki-client on console-ams.rpki-client.org