$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/8FC6588099D711EFB8A4757AC4F9AE02.roa File: 8FC6588099D711EFB8A4757AC4F9AE02.roa (raw, json) Hash identifier: 1CSi3qctGMotONHo8tYYgLhlzkmsspX1ps6Gp7aQZp4= Subject key identifier: F1:6D:DD:A1:9D:4C:5C:01:9B:78:93:A3:D8:E5:B0:E6:0C:77:2D:B5 Certificate issuer: /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Certificate serial: 260A Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/8FC6588099D711EFB8A4757AC4F9AE02.roa Signing time: Sun 03 Nov 2024 11:35:29 +0000 ROA not before: Sun 03 Nov 2024 11:35:29 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 64005 IP address blocks: 103.228.200.0/24 maxlen: 24 2001:df4:3800::/48 maxlen: 48 2400:eb80::/48 maxlen: 48 2400:eb80:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9738 (0x260a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Validity Not Before: Nov 3 11:35:29 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=67276001-c08d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:29:6a:b5:d5:ba:b0:72:d7:b4:f5:a2:35:62: c7:83:4a:5d:6a:41:c8:f5:06:45:28:8d:c5:66:5a: 86:c3:2d:dd:01:70:67:62:df:3e:48:d3:df:88:97: 1b:6d:7d:61:64:c5:0c:35:55:f9:af:9c:68:ac:4b: e8:9e:d7:9a:8f:85:d9:02:bb:dc:94:ba:0a:3f:39: 42:69:10:1e:c9:99:a1:95:c1:90:47:0c:ad:90:ed: b6:fb:f6:e8:fe:84:d3:4b:17:0c:88:96:15:bf:16: 41:2d:e0:9b:b7:79:c5:f3:46:80:ff:02:c7:6a:c8: 45:c6:98:0a:ff:74:10:0f:2b:b7:2b:4a:40:50:61: 73:b2:d3:ee:6d:db:ff:75:63:fc:b8:87:cc:8a:6e: 05:fb:29:c1:bf:70:bf:1c:4a:84:d9:5e:e1:d2:ad: 8a:6b:91:e7:95:39:43:0e:1a:88:f9:23:a4:0c:c1: bd:60:87:c8:e4:2f:b8:17:7d:dc:5b:68:18:af:a4: 55:ba:ed:32:7e:1e:07:92:ca:ca:eb:03:4d:8e:dd: 47:94:01:e7:2e:94:0c:51:df:50:2e:58:6e:d7:65: 94:e2:0d:26:2b:66:85:15:fd:14:89:99:2a:4e:f9: 69:74:d9:88:2a:7c:d1:f0:a8:8b:53:fc:6b:82:72: 9d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:6D:DD:A1:9D:4C:5C:01:9B:78:93:A3:D8:E5:B0:E6:0C:77:2D:B5 X509v3 Authority Key Identifier: keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/8FC6588099D711EFB8A4757AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.228.200.0/24 IPv6: 2001:df4:3800::/48 2400:eb80::/48 2400:eb80:1000::/48 Signature Algorithm: sha256WithRSAEncryption 5b:5e:43:52:71:8b:e5:66:a5:b3:b8:6c:18:91:b1:a6:ba:8f: 2f:df:0a:cb:ba:0e:0e:62:ff:15:50:45:6f:45:7a:39:1f:47: 18:86:24:4d:2f:e4:0e:6e:3e:b1:43:d9:2e:12:5c:23:38:64: 6c:d1:43:3a:ab:1c:3f:3e:95:82:c6:ae:15:eb:24:65:36:18: 74:48:84:9a:66:54:fb:a1:00:e5:a4:c9:52:40:00:6b:3b:5a: d3:e7:5f:58:83:8b:8d:ba:1e:a5:fc:a5:5d:1e:ce:7d:d9:86: 56:84:74:81:4f:5f:1e:2a:5c:d1:77:aa:bd:c7:f8:32:f4:15: 72:66:2b:6e:98:75:e3:3f:52:b7:3f:20:2f:7d:85:0c:a7:8d: 2b:9e:af:f7:99:6e:74:04:f4:da:52:b0:5b:5d:26:43:cf:80: 47:61:ba:33:32:3e:45:96:8d:a7:ff:94:31:0b:61:23:60:38: e1:03:e5:c3:84:0e:85:93:2b:c3:61:9c:d7:40:29:a7:d1:f6: fc:99:3b:e6:e1:ef:fb:b7:8e:a7:3b:2d:94:cf:5c:0a:a4:a9: e6:2d:da:2b:22:d0:fa:ff:82:f7:00:cd:9a:2b:02:39:57:88: 37:04:9a:33:f0:2e:da:ca:28:78:20:db:4c:fb:6f:52:1d:41: e8:75:5f:f3 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICJgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNEQjAxMTAvBgNVBAUTKDlCQzc2NTFBQzRCQUJGOEM0NDc4NTM0RkFEQTYxMEFD REE3NDZCRDQwHhcNMjQxMTAzMTEzNTI5WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NzI3NjAwMS1jMDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ylqtdW6sHLXtPWiNWLHg0pdakHI9QZFKI3FZlqGwy3dAXBnYt8+SNPfiJcb bX1hZMUMNVX5r5xorEvonteaj4XZArvclLoKPzlCaRAeyZmhlcGQRwytkO22+/bo /oTTSxcMiJYVvxZBLeCbt3nF80aA/wLHashFxpgK/3QQDyu3K0pAUGFzstPubdv/ dWP8uIfMim4F+ynBv3C/HEqE2V7h0q2Ka5HnlTlDDhqI+SOkDMG9YIfI5C+4F33c W2gYr6RVuu0yfh4HksrK6wNNjt1HlAHnLpQMUd9QLlhu12WU4g0mK2aFFf0UiZkq TvlpdNmIKnzR8KiLU/xrgnKdnwIDAQABo4ICuDCCArQwHQYDVR0OBBYEFPFt3aGd TFwBm3iTo9jlsOYMdy21MB8GA1UdIwQYMBaAFJvHZRrEur+MRHhTT62mEKzadGvU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0RCMC9CODk1QUY3NDA1 MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0eEVlRk5QcmFZUXJOcDBh OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204ZGxHc1M2djR4RWVGTlByYVlRck5wMGE5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDNEQjAvQjg5NUFGNzQwNTE1MTFFNThENDlBRTQyQzRGOUFFMDIvOEZDNjU4ODA5 OUQ3MTFFRkI4QTQ3NTdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMAwEAgABMAYDBABn5MgwIQQCAAIwGwMHACABDfQ4AAMHACQA64AAAAMHACQA 64AQADANBgkqhkiG9w0BAQsFAAOCAQEAW15DUnGL5Wals7hsGJGxprqPL98Ky7oO DmL/FVBFb0V6OR9HGIYkTS/kDm4+sUPZLhJcIzhkbNFDOqscPz6VgsauFeskZTYY dEiEmmZU+6EA5aTJUkAAazta0+dfWIOLjboepfylXR7OfdmGVoR0gU9fHipc0Xeq vcf4MvQVcmYrbph14z9Stz8gL32FDKeNK56v95ludAT02lKwW10mQ8+AR2G6MzI+ RZaNp/+UMQthI2A44QPlw4QOhZMrw2Gc10App9H2/Jk75uHv+7eOpzstlM9cCqSp 5i3aKyLQ+v+C9wDNmisCOVeINwSaM/Au2sooeCDbTPtvUh1B6HVf8w== -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:17 2024 by rpki-client on console-ams.rpki-client.org