$ rpki-client -vvf rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/12E476745E1A11EFB61C6844C4F9AE02.roa File: 12E476745E1A11EFB61C6844C4F9AE02.roa (raw, json) Hash identifier: 3IAJ+9W9KeEq7QTVszcmLK1ObY/QRBXZfU+eVRZCpyc= Subject key identifier: E0:B9:D8:5B:05:84:5C:C5:23:44:C3:BA:5E:A9:5C:89:54:82:0D:78 Certificate issuer: /CN=A913BF1E/serialNumber=B14B2EE5C5ED736AB736B2553586759AFCDEC3E2 Certificate serial: 0EDB Authority key identifier: B1:4B:2E:E5:C5:ED:73:6A:B7:36:B2:55:35:86:75:9A:FC:DE:C3:E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/12E476745E1A11EFB61C6844C4F9AE02.roa Signing time: Sat 24 Aug 2024 18:06:30 +0000 ROA not before: Sat 24 Aug 2024 18:06:30 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 134562 IP address blocks: 103.120.164.0/22 maxlen: 22 103.120.164.0/24 maxlen: 24 103.120.165.0/24 maxlen: 24 103.120.166.0/24 maxlen: 24 103.120.167.0/24 maxlen: 24 2403:5a40::/32 maxlen: 32 2403:5a40::/41 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3803 (0xedb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BF1E/serialNumber=B14B2EE5C5ED736AB736B2553586759AFCDEC3E2 Validity Not Before: Aug 24 18:06:30 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66ca2126-2200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5c:12:b0:b0:78:e6:23:48:37:de:12:52:0b: 8d:84:d7:1d:30:4f:db:a8:99:b9:01:be:2f:40:ac: 65:10:05:33:3b:c4:ef:2b:1f:e0:8e:94:1f:7b:e7: 95:23:15:62:c6:2f:02:8c:89:1d:dc:ff:2a:ba:47: d7:f1:d3:57:2f:11:10:1b:15:81:5d:88:b7:a2:ee: 95:95:27:65:27:50:7c:a0:5c:76:e6:33:77:40:02: 96:a9:fe:73:99:60:98:48:fa:5a:88:bc:2a:6d:d8: 65:9a:c9:0e:43:0b:24:37:50:c1:f2:c9:16:d8:a7: e9:32:b8:15:fe:98:eb:e8:4c:a8:e2:98:c8:8b:58: 55:48:f8:da:04:e5:0f:a0:db:82:b1:24:03:fb:ca: 4e:6b:30:aa:20:f6:f6:e2:80:f9:75:e1:39:84:ab: 8e:32:a5:88:8e:f9:77:eb:3e:a0:e0:5b:0c:16:7b: 9c:e8:cb:f4:c8:a8:f7:e4:12:7b:ba:23:c7:19:90: 56:cb:a7:06:12:c9:da:d0:44:68:58:63:d6:34:de: de:10:d5:ff:59:23:ad:15:82:73:6a:cb:16:75:62: b0:fe:85:cf:aa:8d:d2:de:fb:f3:e1:8a:3e:c8:8c: 4b:73:ea:c8:88:1a:86:76:6b:2e:1f:cb:ac:8b:91: 86:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B9:D8:5B:05:84:5C:C5:23:44:C3:BA:5E:A9:5C:89:54:82:0D:78 X509v3 Authority Key Identifier: keyid:B1:4B:2E:E5:C5:ED:73:6A:B7:36:B2:55:35:86:75:9A:FC:DE:C3:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/12E476745E1A11EFB61C6844C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.120.164.0/22 IPv6: 2403:5a40::/32 Signature Algorithm: sha256WithRSAEncryption 96:f5:a7:2d:c9:0b:ae:15:7d:f2:3f:18:ca:ad:9d:da:66:02: 85:29:b2:6a:b6:c0:61:6a:45:9b:c4:32:ae:41:95:0b:e3:c1: 72:65:88:97:a3:c4:9d:39:04:86:f6:b1:20:69:44:9f:01:5a: 78:35:07:32:13:10:45:8f:0a:90:7c:47:c6:f6:81:92:a0:46: 46:bf:7a:32:b7:bc:c0:ed:4f:52:aa:78:18:9a:c1:c3:93:54: 4b:c4:58:98:5d:8c:12:4e:c4:52:a8:b9:30:51:9a:73:35:ab: 07:40:90:8c:51:ca:c6:e3:1f:02:e8:b5:b7:70:ab:ae:85:f8: 9f:83:a3:42:c3:71:b8:32:a3:10:d6:89:8c:09:75:95:e0:7a: ec:dd:6e:76:43:63:6a:87:37:11:7a:cc:e0:d7:e8:88:f9:46: 44:ed:57:fd:46:e9:b5:0d:93:bd:95:03:16:4c:3d:6d:16:1b: 5c:64:37:36:63:27:79:45:bd:71:60:bd:59:d2:c4:7b:e8:23: 7b:97:24:4c:a1:af:75:1c:50:37:5b:40:21:10:03:fa:be:2b: 4f:34:a8:aa:11:de:85:8f:a8:a6:be:52:07:df:df:63:b9:dd: 25:80:3f:f0:2e:2c:5a:15:49:c5:d6:54:bd:a9:06:fe:80:a5: cd:39:b9:25 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JGMUUxMTAvBgNVBAUTKEIxNEIyRUU1QzVFRDczNkFCNzM2QjI1NTM1ODY3NTlB RkNERUMzRTIwHhcNMjQwODI0MTgwNjMwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmNhMjEyNi0yMjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3FwSsLB45iNIN94SUguNhNcdME/bqJm5Ab4vQKxlEAUzO8TvKx/gjpQfe+eV IxVixi8CjIkd3P8qukfX8dNXLxEQGxWBXYi3ou6VlSdlJ1B8oFx25jN3QAKWqf5z mWCYSPpaiLwqbdhlmskOQwskN1DB8skW2KfpMrgV/pjr6Eyo4pjIi1hVSPjaBOUP oNuCsSQD+8pOazCqIPb24oD5deE5hKuOMqWIjvl36z6g4FsMFnuc6Mv0yKj35BJ7 uiPHGZBWy6cGEsna0ERoWGPWNN7eENX/WSOtFYJzassWdWKw/oXPqo3S3vvz4Yo+ yIxLc+rIiBqGdmsuH8usi5GGcwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFOC52FsF hFzFI0TDul6pXIlUgg14MB8GA1UdIwQYMBaAFLFLLuXF7XNqtzayVTWGdZr83sPi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkYxRS9EQkIyQkY2NjZF NkYxMUU5QUEwMTdDMzNDNEY5QUUwMi9zVXN1NWNYdGMycTNOckpWTllaMW12emV3 LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NVc3U1Y1h0YzJxM05ySlZOWVoxbXZ6ZXctSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0JGMUUvREJCMkJGNjY2RTZGMTFFOUFBMDE3QzMzQzRGOUFFMDIvMTJFNDc2NzQ1 RTFBMTFFRkI2MUM2ODQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJneKQwDQQCAAIwBwMFACQDWkAwDQYJKoZIhvcNAQELBQAD ggEBAJb1py3JC64VffI/GMqtndpmAoUpsmq2wGFqRZvEMq5BlQvjwXJliJejxJ05 BIb2sSBpRJ8BWng1BzITEEWPCpB8R8b2gZKgRka/ejK3vMDtT1KqeBiawcOTVEvE WJhdjBJOxFKouTBRmnM1qwdAkIxRysbjHwLotbdwq66F+J+Do0LDcbgyoxDWiYwJ dZXgeuzdbnZDY2qHNxF6zODX6Ij5RkTtV/1G6bUNk72VAxZMPW0WG1xkNzZjJ3lF vXFgvVnSxHvoI3uXJEyhr3UcUDdbQCEQA/q+K080qKoR3oWPqKa+Ugff32O53SWA P/AuLFoVScXWVL2pBv6Apc05uSU= -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:59 2024 by rpki-client on console-ams.rpki-client.org