$ rpki-client -vvf rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/DBC08AD4457911E9BA84DA51C4F9AE02.roa File: DBC08AD4457911E9BA84DA51C4F9AE02.roa (raw, json) Hash identifier: 3uEvau4LmZq2DpE2z3DPriV9G2TAsCRZC5hyBAIi04A= Subject key identifier: 2C:6E:11:38:69:65:FB:FD:0F:A0:0E:AF:2C:FB:E1:85:BF:20:C8:37 Certificate issuer: /CN=A913559B/serialNumber=D032E0614923F4A582338EB7636C39684AED51ED Certificate serial: 0FBA Authority key identifier: D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/DBC08AD4457911E9BA84DA51C4F9AE02.roa Signing time: Tue 18 Jun 2024 19:00:30 +0000 ROA not before: Tue 18 Jun 2024 19:00:30 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 132277 IP address blocks: 103.12.2.0/24 maxlen: 24 103.96.108.0/24 maxlen: 24 2001:df0:2ba::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4026 (0xfba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913559B/serialNumber=D032E0614923F4A582338EB7636C39684AED51ED Validity Not Before: Jun 18 19:00:30 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6671d94e-501b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3b:31:4d:d9:46:02:3d:47:16:fd:49:40:f9: 27:2c:c0:c8:82:b5:7e:ab:30:2b:dd:c1:6d:eb:8d: 8b:e6:38:86:a1:f4:24:62:f7:a9:08:f9:8f:95:3f: d2:32:fe:03:f2:30:d6:f8:02:82:10:62:23:9a:92: 44:12:18:4c:e8:cf:70:71:32:13:01:84:2f:97:a6: 76:df:1e:c9:38:27:9a:2e:55:0c:df:51:8d:4b:14: 37:95:52:24:d8:89:e5:b1:f0:1a:ce:c2:12:6b:b8: fb:0d:9d:d4:1e:b8:98:0c:a6:66:7f:6c:14:80:6e: 36:1a:60:a2:55:e0:e0:fa:27:2a:76:5d:ae:6b:4c: 9a:a2:01:86:3b:2f:58:65:2a:bd:62:c0:bc:6c:42: 20:6f:5c:37:95:9e:e2:99:ca:01:ed:c3:eb:74:4f: d0:48:57:12:7f:15:7d:86:a4:76:b2:9b:71:98:c0: 5e:87:6d:a4:ac:8d:36:13:c1:fb:30:9f:2a:6e:23: ce:3e:fe:5f:94:27:0f:1f:a6:b3:fe:ea:e7:12:3e: 2a:20:a7:44:4c:3d:84:06:68:31:02:f2:c8:96:26: 37:1b:25:20:a4:32:bd:77:0f:b1:34:3d:25:a6:e4: e1:96:f9:70:af:7b:cb:77:c2:7e:1d:9d:24:20:f0: 6d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:6E:11:38:69:65:FB:FD:0F:A0:0E:AF:2C:FB:E1:85:BF:20:C8:37 X509v3 Authority Key Identifier: keyid:D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/DBC08AD4457911E9BA84DA51C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.12.2.0/24 103.96.108.0/24 IPv6: 2001:df0:2ba::/48 Signature Algorithm: sha256WithRSAEncryption 2c:7a:e4:f0:69:e6:0a:14:48:58:a8:e5:85:d7:30:68:fe:b0: d2:74:d1:8b:59:06:99:52:48:7e:63:a7:b6:35:83:36:eb:cc: 2b:07:4c:60:51:21:97:ac:0b:6e:d0:6c:b4:91:bc:42:98:e2: 6b:3f:2d:1d:d7:ef:e3:01:f7:9b:22:91:bc:dd:f8:e4:a9:24: 95:7b:2f:23:cd:a1:95:b6:fc:19:c1:ce:44:1e:2d:c8:55:9a: 7b:9d:a7:35:42:e8:52:97:87:80:10:54:bd:ea:28:1d:ae:89: 86:b6:cb:1d:92:0b:ea:76:b3:e4:ee:be:d8:70:ff:82:f7:56: 35:c2:0e:18:27:06:d8:28:b0:ec:da:72:60:65:43:60:58:b9: d0:9c:27:26:a8:6b:2e:c8:46:c4:ef:c6:58:c4:84:55:a4:07: 1f:27:6f:77:88:ce:61:19:0a:6d:38:ec:a1:0b:86:e0:8f:75: fa:25:e2:66:52:a4:d4:ac:ae:50:68:e8:18:c1:74:33:fb:20: 4d:39:fb:85:32:8d:58:ac:21:0a:f1:3d:10:7b:ee:f9:1d:14: 41:a6:0b:3e:15:18:9e:f3:ef:d0:52:fb:7a:04:e4:32:c4:60: ec:0f:f0:e9:d8:c0:09:a4:f8:64:00:b6:66:fc:1b:ec:71:ed: b0:77:9c:c1 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICD7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU1OUIxMTAvBgNVBAUTKEQwMzJFMDYxNDkyM0Y0QTU4MjMzOEVCNzYzNkMzOTY4 NEFFRDUxRUQwHhcNMjQwNjE4MTkwMDMwWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjcxZDk0ZS01MDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDsxTdlGAj1HFv1JQPknLMDIgrV+qzAr3cFt642L5jiGofQkYvepCPmPlT/S Mv4D8jDW+AKCEGIjmpJEEhhM6M9wcTITAYQvl6Z23x7JOCeaLlUM31GNSxQ3lVIk 2InlsfAazsISa7j7DZ3UHriYDKZmf2wUgG42GmCiVeDg+icqdl2ua0yaogGGOy9Y ZSq9YsC8bEIgb1w3lZ7imcoB7cPrdE/QSFcSfxV9hqR2sptxmMBeh22krI02E8H7 MJ8qbiPOPv5flCcPH6az/urnEj4qIKdETD2EBmgxAvLIliY3GyUgpDK9dw+xND0l puThlvlwr3vLd8J+HZ0kIPBtqwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFCxuEThp Zfv9D6AOryz74YW/IMg3MB8GA1UdIwQYMBaAFNAy4GFJI/SlgjOOt2NsOWhK7VHt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Qi82QzFBMEVGQTM2 N0MxMUU5QjI3OEY5M0JDNEY5QUUwMi8wRExnWVVrajlLV0NNNDYzWTJ3NWFFcnRV ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBETGdZVWtqOUtXQ000NjNZMnc1YUVydFVlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzU1OUIvNkMxQTBFRkEzNjdDMTFFOUIyNzhGOTNCQzRGOUFFMDIvREJDMDhBRDQ0 NTc5MTFFOUJBODREQTUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnDAIDBABnYGwwDwQCAAIwCQMHACABDfACujANBgkqhkiG 9w0BAQsFAAOCAQEALHrk8GnmChRIWKjlhdcwaP6w0nTRi1kGmVJIfmOntjWDNuvM KwdMYFEhl6wLbtBstJG8Qpjiaz8tHdfv4wH3myKRvN345KkklXsvI82hlbb8GcHO RB4tyFWae52nNULoUpeHgBBUveooHa6JhrbLHZIL6naz5O6+2HD/gvdWNcIOGCcG 2Ciw7NpyYGVDYFi50JwnJqhrLshGxO/GWMSEVaQHHydvd4jOYRkKbTjsoQuG4I91 +iXiZlKk1KyuUGjoGMF0M/sgTTn7hTKNWKwhCvE9EHvu+R0UQaYLPhUYnvPv0FL7 egTkMsRg7A/w6djACaT4ZAC2Zvwb7HHtsHecwQ== -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:57 2024 by rpki-client on console-fra.rpki-client.org