$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/8EF0A700973911EDB1E3C460C4F9AE02.roa File: 8EF0A700973911EDB1E3C460C4F9AE02.roa (raw, json) Hash identifier: oLvgBlCfWBHyM0kCruTmzfjRSB8vdmfkR8wPd7mjdoU= Subject key identifier: F4:BE:F5:9A:BB:24:96:CF:6E:B6:48:50:E1:FB:06:B1:6A:8E:E9:02 Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0 Certificate serial: 2582 Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/8EF0A700973911EDB1E3C460C4F9AE02.roa Signing time: Fri 22 Nov 2024 18:06:31 +0000 ROA not before: Fri 22 Nov 2024 18:06:31 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 4294967200 IP address blocks: 103.138.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9602 (0x2582) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0 Validity Not Before: Nov 22 18:06:31 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=6740c826-90a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:30:0f:eb:37:4e:b9:95:a6:d9:2a:6c:4b:34: 42:d4:0f:2d:84:40:74:6c:58:80:5b:92:94:ea:0a: 11:47:c7:47:45:2b:a7:c7:43:a3:72:cb:62:6f:b0: b4:56:2f:3c:5f:f4:ba:3c:41:4a:4a:8d:3a:c8:52: 41:c7:26:98:da:38:65:4d:6e:cf:4c:d3:c0:d4:ab: d2:cb:ad:e0:68:eb:08:dc:43:e4:ae:3b:ec:d9:c3: a6:8b:0f:01:79:15:08:62:7f:4b:8f:44:44:bc:22: 76:3e:fa:5d:4b:1b:3b:87:a7:d4:01:84:54:85:45: 06:18:9a:3e:26:b5:a3:2e:42:fe:4b:d4:6f:48:0f: 0d:ff:99:b3:61:20:71:cb:8f:e4:61:ee:8a:d8:89: 47:4d:b6:a4:8b:fd:cf:c8:93:26:32:4a:06:a3:c9: c6:80:4e:a2:d5:ae:f0:0f:c4:a3:d5:f4:cd:3a:04: 02:fd:79:97:ec:3c:46:5e:b7:0c:5d:69:dc:22:7b: ff:0c:59:94:22:20:60:8a:60:87:a1:8c:39:70:56: 40:fe:ba:e7:f2:e5:26:81:ab:7a:fd:a6:a4:97:59: c7:a5:41:d9:2c:c4:df:1d:16:7d:ec:b0:e7:87:d5: ca:eb:88:42:fd:ad:d9:2b:58:97:c8:40:2a:43:53: 0a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BE:F5:9A:BB:24:96:CF:6E:B6:48:50:E1:FB:06:B1:6A:8E:E9:02 X509v3 Authority Key Identifier: keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/8EF0A700973911EDB1E3C460C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.210.0/24 Signature Algorithm: sha256WithRSAEncryption 28:58:38:dd:c6:04:9c:fa:1b:59:65:67:84:90:a3:b7:92:f8: ae:f7:0d:ef:f3:ef:43:63:a2:32:d6:73:d6:54:72:f4:1d:24: df:4e:46:85:a8:eb:60:0c:93:35:ca:80:96:b5:84:69:c9:5e: c8:8d:c5:21:3b:9a:f0:1c:03:fa:4e:4d:77:0d:09:6b:53:5e: 6d:8b:57:6f:16:3f:a1:46:74:0c:e4:e9:54:84:8f:e3:c0:47: c1:44:08:ae:b7:91:29:18:70:1d:a0:43:80:c2:2c:3a:eb:11: e5:de:04:ee:b4:da:cc:cd:16:d9:0f:f4:57:7a:d2:88:7c:4c: 52:49:4e:7e:f7:24:73:fd:e2:28:49:15:bc:12:e9:22:4d:8c: 1d:02:d9:84:d0:94:95:b2:a3:43:78:4b:42:b9:99:6d:bc:ab: 46:05:44:b0:7b:c5:62:0b:84:96:3d:f5:ae:28:c9:72:da:ef: f7:75:6a:fd:82:2b:9a:44:57:0a:d1:50:3d:1e:ea:1a:33:e8: e5:6d:86:c6:c7:9c:9b:4d:5a:b6:21:05:92:d9:79:ba:a3:eb: d8:52:0f:55:06:53:af:32:97:c1:ee:de:d1:cf:9b:a9:8a:de: 10:89:cb:ca:fd:73:3d:af:39:c4:06:86:5d:be:db:54:2e:d7: 2f:68:d4:01 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I4MDUxMTAvBgNVBAUTKDQyRDNFQ0I5Qzg1NzBBQjA5MEVCNjAxRURCMzM3OUMw RDNEOEE2RDAwHhcNMjQxMTIyMTgwNjMxWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQwYzgyNi05MGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzAP6zdOuZWm2SpsSzRC1A8thEB0bFiAW5KU6goRR8dHRSunx0Ojcstib7C0 Vi88X/S6PEFKSo06yFJBxyaY2jhlTW7PTNPA1KvSy63gaOsI3EPkrjvs2cOmiw8B eRUIYn9Lj0REvCJ2PvpdSxs7h6fUAYRUhUUGGJo+JrWjLkL+S9RvSA8N/5mzYSBx y4/kYe6K2IlHTbaki/3PyJMmMkoGo8nGgE6i1a7wD8Sj1fTNOgQC/XmX7DxGXrcM XWncInv/DFmUIiBgimCHoYw5cFZA/rrn8uUmgat6/aakl1nHpUHZLMTfHRZ97LDn h9XK64hC/a3ZK1iXyEAqQ1MKjwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPS+9Zq7 JJbPbrZIUOH7BrFqjukCMB8GA1UdIwQYMBaAFELT7LnIVwqwkOtgHtszecDT2KbQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjgwNS9GODA3NkI4QTdC N0IxMUU5OEI2RUMwNzRDNEY5QUUwMi9RdFBzdWNoWENyQ1E2MkFlMnpONXdOUFlw dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F0UHN1Y2hYQ3JDUTYyQWUyek41d05QWXB0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0I4MDUvRjgwNzZCOEE3QjdCMTFFOThCNkVDMDc0QzRGOUFFMDIvOEVGMEE3MDA5 NzM5MTFFREIxRTNDNDYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnitIwDQYJKoZIhvcNAQELBQADggEBAChYON3GBJz6G1ll Z4SQo7eS+K73De/z70NjojLWc9ZUcvQdJN9ORoWo62AMkzXKgJa1hGnJXsiNxSE7 mvAcA/pOTXcNCWtTXm2LV28WP6FGdAzk6VSEj+PAR8FECK63kSkYcB2gQ4DCLDrr EeXeBO602szNFtkP9Fd60oh8TFJJTn73JHP94ihJFbwS6SJNjB0C2YTQlJWyo0N4 S0K5mW28q0YFRLB7xWILhJY99a4oyXLa7/d1av2CK5pEVwrRUD0e6hoz6OVthsbH nJtNWrYhBZLZebqj69hSD1UGU68yl8Hu3tHPm6mK3hCJy8r9cz2vOcQGhl2+21Qu 1y9o1AE= -----END CERTIFICATE-----Generated at Sun Nov 24 18:36:19 2024 by rpki-client on console-fra.rpki-client.org