$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/8FA95EF2E52811ED863E8C34C4F9AE02.roa File: 8FA95EF2E52811ED863E8C34C4F9AE02.roa (raw, json) Hash identifier: hwXZ4x1ri2Ou6C07i1b+lYsBLNvtNkvAv3I1gcMsZsU= Subject key identifier: 99:64:B7:FC:BF:5B:87:24:DC:9F:55:93:17:DD:8A:4A:BE:56:C8:47 Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Certificate serial: 0629 Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/8FA95EF2E52811ED863E8C34C4F9AE02.roa Signing time: Tue 03 Sep 2024 01:14:10 +0000 ROA not before: Tue 03 Sep 2024 01:14:10 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 149448 IP address blocks: 103.24.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1577 (0x629) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Validity Not Before: Sep 3 01:14:10 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66d662e2-beed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:99:ff:00:94:fa:b6:c8:28:3b:cb:d0:56:17: a5:ec:89:75:e4:b8:42:d8:3b:1c:9a:cc:5e:69:8d: 63:bc:1b:46:7d:84:bd:90:93:07:a4:09:e5:80:41: c9:3d:e0:f0:eb:f9:a4:4a:64:da:85:86:68:d2:b6: 73:97:b3:28:bb:7d:eb:10:10:d5:d2:41:49:d9:84: dd:62:8a:bc:58:38:aa:03:e0:f1:21:2f:79:70:aa: 08:47:1f:3f:8c:17:4e:e2:39:a0:ef:da:82:c1:bb: 7d:ac:9b:2e:d1:62:14:98:ea:5f:bb:70:c8:71:db: f8:24:90:91:b9:80:10:cd:42:77:71:c9:c4:be:6d: 6e:ba:c5:29:21:25:8c:c5:d4:38:be:e5:f9:a9:1e: 5a:d9:d9:7a:16:6a:ab:b4:4b:e6:63:4b:52:2a:79: 35:4b:12:f8:bd:4b:17:59:ab:cd:5e:9a:19:7c:86: 0c:99:81:76:63:9c:c6:d2:3a:33:63:c1:34:4a:52: 59:86:ee:9f:4d:ab:ca:15:9d:0f:2b:dc:6c:a6:fa: da:7c:29:5f:50:f4:06:5b:7e:8c:0b:23:c7:07:d9: 8d:97:4e:8c:ca:a0:31:29:43:f6:43:a8:27:2f:67: 45:34:2c:2d:36:2e:a6:3a:6f:b6:bd:dd:8e:1f:74: 16:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:64:B7:FC:BF:5B:87:24:DC:9F:55:93:17:DD:8A:4A:BE:56:C8:47 X509v3 Authority Key Identifier: keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/8FA95EF2E52811ED863E8C34C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.24.218.0/24 Signature Algorithm: sha256WithRSAEncryption 14:3f:40:c9:67:e3:9a:0e:a3:89:24:14:55:f2:ad:7e:cc:d5: 7b:55:14:b8:4a:51:95:d7:dd:48:85:d1:3a:8c:64:63:71:e8: cc:ce:a5:c2:10:9e:4d:8d:52:34:2a:e5:94:29:79:a1:d7:2c: c1:10:43:0c:56:be:f4:98:07:90:5f:c5:b4:d3:23:28:f5:59: c4:bc:8e:ce:90:fd:64:13:4d:c6:43:93:8c:22:58:18:61:0e: 67:0e:69:f8:4b:3c:c5:7c:ce:9a:e8:ca:06:1f:f3:e8:3e:e0: fb:14:fc:25:9b:30:e1:36:46:2a:06:2a:dc:50:d3:fd:13:11: 57:14:89:77:be:37:60:cb:8f:c9:d6:b7:37:40:44:93:c8:4c: 16:6d:9e:f0:95:11:7a:ee:eb:d7:06:97:6a:c3:3a:37:0f:5d: ad:ac:f3:10:88:23:22:db:f0:4e:f5:ba:e1:63:0b:c9:87:08: 9d:bd:87:09:2d:b9:17:a6:a8:ea:64:36:d3:03:b6:b3:56:8d: 22:f0:eb:a5:42:ce:af:ca:b0:03:f2:9d:a1:76:c4:cd:a2:ee: ce:56:6b:6b:b3:c8:15:f3:fd:4a:40:25:5e:e8:63:a1:bc:8d: 77:26:65:26:3c:de:3f:26:c2:b7:6d:a7:c0:eb:64:84:79:ad: 2d:70:a7:d1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKEVEQzU0N0JEMEU2QzBDMDcwNkExODU4MzM4MzVGNjVF QTNDNzEwMTMwHhcNMjQwOTAzMDExNDEwWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ2NjJlMi1iZWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Zn/AJT6tsgoO8vQVhel7Il15LhC2DscmsxeaY1jvBtGfYS9kJMHpAnlgEHJ PeDw6/mkSmTahYZo0rZzl7Mou33rEBDV0kFJ2YTdYoq8WDiqA+DxIS95cKoIRx8/ jBdO4jmg79qCwbt9rJsu0WIUmOpfu3DIcdv4JJCRuYAQzUJ3ccnEvm1uusUpISWM xdQ4vuX5qR5a2dl6FmqrtEvmY0tSKnk1SxL4vUsXWavNXpoZfIYMmYF2Y5zG0joz Y8E0SlJZhu6fTavKFZ0PK9xspvrafClfUPQGW36MCyPHB9mNl06MyqAxKUP2Q6gn L2dFNCwtNi6mOm+2vd2OH3QWgwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJlkt/y/ W4ck3J9Vkxfdikq+VshHMB8GA1UdIwQYMBaAFO3FR70ObAwHBqGFgzg19l6jxxAT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi8yQ0IxRUVCQUY2 NTMxMUVCQTFCNEE2MUFDNEY5QUUwMi83Y1ZIdlE1c0RBY0dvWVdET0RYMlhxUEhF Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdjVkh2UTVzREFjR29ZV0RPRFgyWHFQSEVCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzkzMjIvMkNCMUVFQkFGNjUzMTFFQkExQjRBNjFBQzRGOUFFMDIvOEZBOTVFRjJF NTI4MTFFRDg2M0U4QzM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnGNowDQYJKoZIhvcNAQELBQADggEBABQ/QMln45oOo4kk FFXyrX7M1XtVFLhKUZXX3UiF0TqMZGNx6MzOpcIQnk2NUjQq5ZQpeaHXLMEQQwxW vvSYB5BfxbTTIyj1WcS8js6Q/WQTTcZDk4wiWBhhDmcOafhLPMV8zproygYf8+g+ 4PsU/CWbMOE2RioGKtxQ0/0TEVcUiXe+N2DLj8nWtzdARJPITBZtnvCVEXru69cG l2rDOjcPXa2s8xCIIyLb8E71uuFjC8mHCJ29hwktuRemqOpkNtMDtrNWjSLw66VC zq/KsAPynaF2xM2i7s5Wa2uzyBXz/UpAJV7oY6G8jXcmZSY83j8mwrdtp8DrZIR5 rS1wp9E= -----END CERTIFICATE-----Generated at Thu Nov 21 00:21:19 2024 by rpki-client on console-fra.rpki-client.org