$ rpki-client -vvf rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/C098D762675111E9A0C4BB36C4F9AE02.roa File: C098D762675111E9A0C4BB36C4F9AE02.roa (raw, json) Hash identifier: INyUubVzyzPFDA6zTyRhkIRyBY0HoCb9vhAv2oVdZVY= Subject key identifier: C0:10:4E:51:A1:0B:0A:63:1B:44:20:A9:2F:B4:52:A2:BC:F3:1F:BB Certificate issuer: /CN=A912FB1D/serialNumber=942F25D7350B203EA89EF2D1CC150B05B17B2B87 Certificate serial: 3422 Authority key identifier: 94:2F:25:D7:35:0B:20:3E:A8:9E:F2:D1:CC:15:0B:05:B1:7B:2B:87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/C098D762675111E9A0C4BB36C4F9AE02.roa Signing time: Wed 04 Sep 2024 15:51:08 +0000 ROA not before: Wed 04 Sep 2024 15:51:08 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 132423 IP address blocks: 103.21.124.0/22 maxlen: 22 103.21.124.0/24 maxlen: 24 103.21.125.0/24 maxlen: 24 103.21.126.0/24 maxlen: 24 103.21.127.0/24 maxlen: 24 2001:df0:413::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.crl rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13346 (0x3422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FB1D/serialNumber=942F25D7350B203EA89EF2D1CC150B05B17B2B87 Validity Not Before: Sep 4 15:51:08 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=66d881ec-1d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1b:93:90:be:c0:24:d2:f2:27:bc:b9:03:2e: 12:5a:38:66:33:33:7d:ae:17:17:9f:1d:9a:0f:34: 7a:79:19:fc:f7:89:67:97:bd:76:13:7a:3d:71:65: a1:14:e1:c9:4c:c9:f4:cc:b9:cd:18:65:36:a5:73: a2:3c:41:d6:fa:63:2a:e8:24:63:50:9c:cc:5b:22: cb:8c:17:59:14:13:58:1a:0e:02:d5:ac:60:ec:b7: 47:74:89:35:16:18:cc:f3:d6:07:30:e7:3f:57:cc: 74:0b:62:34:a1:c0:95:a0:cc:bb:60:85:d8:6f:90: 1e:ab:54:69:a5:03:08:04:80:25:5b:ea:6b:58:75: d3:c3:6c:75:cb:78:b5:e6:6b:d0:ab:45:19:3c:25: f2:8e:e8:74:d9:86:3c:05:f1:25:1b:0c:95:43:9d: 09:56:e7:b8:d7:a3:32:b4:70:71:38:43:bc:12:c2: 81:d9:3e:1d:a4:ee:d8:f1:88:52:1d:0d:cd:e9:80: 94:09:cf:79:2c:14:aa:e8:80:e7:92:bd:80:19:e9: e4:1f:36:49:76:d7:bf:e1:c8:e2:6d:ef:46:11:a3: 11:95:10:c6:04:02:3d:00:fd:c8:2a:fa:31:34:55: d7:ed:3e:0e:61:70:7b:9b:8e:e6:83:da:3f:1b:b9: 78:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:10:4E:51:A1:0B:0A:63:1B:44:20:A9:2F:B4:52:A2:BC:F3:1F:BB X509v3 Authority Key Identifier: keyid:94:2F:25:D7:35:0B:20:3E:A8:9E:F2:D1:CC:15:0B:05:B1:7B:2B:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/C098D762675111E9A0C4BB36C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.21.124.0/22 IPv6: 2001:df0:413::/48 Signature Algorithm: sha256WithRSAEncryption 0b:a4:33:df:91:d1:d4:04:7c:63:51:ad:b8:c0:c4:df:38:a4: 69:6c:f1:e9:6f:80:77:bc:b4:7a:37:e9:7e:f0:cd:e7:10:6d: 1f:47:c5:63:4d:e5:03:85:1d:36:c1:91:ae:d9:ab:cd:87:94: e1:c9:56:c7:63:f0:c5:07:91:ee:b7:f2:0b:8a:32:f4:1e:4d: 80:4c:69:26:8f:e6:86:05:e0:f3:0e:0d:de:77:09:90:b9:8f: 51:c4:da:5c:ba:27:3d:66:9d:1c:46:43:7c:ed:3d:be:86:b5: 5a:8a:75:09:11:2d:5c:6a:0f:69:52:89:f4:b8:18:68:49:97: 4d:d4:c0:8e:dc:4b:15:be:b4:16:a1:0e:30:90:09:78:c4:72: 77:ae:ba:6d:c0:39:c5:56:c6:f5:1a:13:e8:17:8e:73:75:39: 3b:78:5d:e3:be:f8:54:5d:44:4a:3d:e5:ba:1a:54:f4:0d:fc: 2c:89:4c:08:64:6a:f1:0f:61:ec:85:31:d4:57:d7:cd:ac:c4: 7e:79:ed:01:96:bc:da:f6:a1:0a:55:6d:d7:30:bc:59:f9:79: a2:05:70:83:a5:6c:93:a0:a2:a6:23:d0:3f:27:ee:81:bc:5b: 2b:2d:ef:ad:02:e2:39:b5:a1:59:8b:e5:07:b0:60:a3:46:4f: 2d:9a:a8:c9 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICNCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCMUQxMTAvBgNVBAUTKDk0MkYyNUQ3MzUwQjIwM0VBODlFRjJEMUNDMTUwQjA1 QjE3QjJCODcwHhcNMjQwOTA0MTU1MTA4WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ4ODFlYy0xZDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1huTkL7AJNLyJ7y5Ay4SWjhmMzN9rhcXnx2aDzR6eRn894lnl712E3o9cWWh FOHJTMn0zLnNGGU2pXOiPEHW+mMq6CRjUJzMWyLLjBdZFBNYGg4C1axg7LdHdIk1 FhjM89YHMOc/V8x0C2I0ocCVoMy7YIXYb5Aeq1RppQMIBIAlW+prWHXTw2x1y3i1 5mvQq0UZPCXyjuh02YY8BfElGwyVQ50JVue416MytHBxOEO8EsKB2T4dpO7Y8YhS HQ3N6YCUCc95LBSq6IDnkr2AGenkHzZJdte/4cjibe9GEaMRlRDGBAI9AP3IKvox NFXX7T4OYXB7m47mg9o/G7l4WQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFMAQTlGh CwpjG0QgqS+0UqK88x+7MB8GA1UdIwQYMBaAFJQvJdc1CyA+qJ7y0cwVCwWxeyuH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkIxRC9DNjg0Q0E5QzFE QUIxMUUyQTIxRTM1QUEwOEIwMkNEMi9sQzhsMXpVTElENm9udkxSekJVTEJiRjdL NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDOGwxelVMSUQ2b252TFJ6QlVMQmJGN0s0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZCMUQvQzY4NENBOUMxREFCMTFFMkEyMUUzNUFBMDhCMDJDRDIvQzA5OEQ3NjI2 NzUxMTFFOUEwQzRCQjM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJnFXwwDwQCAAIwCQMHACABDfAEEzANBgkqhkiG9w0BAQsF AAOCAQEAC6Qz35HR1AR8Y1GtuMDE3zikaWzx6W+Ad7y0ejfpfvDN5xBtH0fFY03l A4UdNsGRrtmrzYeU4clWx2PwxQeR7rfyC4oy9B5NgExpJo/mhgXg8w4N3ncJkLmP UcTaXLonPWadHEZDfO09voa1Wop1CREtXGoPaVKJ9LgYaEmXTdTAjtxLFb60FqEO MJAJeMRyd666bcA5xVbG9RoT6BeOc3U5O3hd4774VF1ESj3luhpU9A38LIlMCGRq 8Q9h7IUx1FfXzazEfnntAZa82vahClVt1zC8Wfl5ogVwg6Vsk6CipiPQPyfugbxb Ky3vrQLiObWhWYvlB7Bgo0ZPLZqoyQ== -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:15 2024 by rpki-client on console-ams.rpki-client.org