$ rpki-client -vvf rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/1AF42E76BBAC11EC8A07FE72C4F9AE02.roa File: 1AF42E76BBAC11EC8A07FE72C4F9AE02.roa (raw, json) Hash identifier: M8EeCK4wseDGRAVaayv2SdcAD2UENUp0dQWvk3BdYlg= Subject key identifier: C8:32:7B:2C:98:F3:D7:CD:31:42:44:8C:E0:5F:A7:F1:26:8A:51:67 Certificate issuer: /CN=A914711C/serialNumber=FA26F34A8339B1DF36DC9C11912057C3A583F673 Certificate serial: 028C Authority key identifier: FA:26:F3:4A:83:39:B1:DF:36:DC:9C:11:91:20:57:C3:A5:83:F6:73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ibzSoM5sd823JwRkSBXw6WD9nM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/1AF42E76BBAC11EC8A07FE72C4F9AE02.roa Signing time: Sat 25 May 2024 04:08:49 +0000 ROA not before: Sat 25 May 2024 04:08:49 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 58580 IP address blocks: 103.186.82.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.crl rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ibzSoM5sd823JwRkSBXw6WD9nM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 23:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 652 (0x28c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914711C/serialNumber=FA26F34A8339B1DF36DC9C11912057C3A583F673 Validity Not Before: May 25 04:08:49 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66516451-5e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5f:8d:18:a5:a0:ee:08:af:ea:4a:06:b1:06: fc:46:fe:45:cc:34:0b:f4:28:92:28:61:b1:f9:33: 6e:85:74:76:5c:85:52:c4:eb:6c:94:f3:44:42:c4: e2:80:7c:08:70:47:1b:eb:28:ef:5c:d9:29:19:87: ae:ad:c1:a2:b1:ba:b5:35:31:32:ca:5d:a2:37:36: 99:df:6b:68:f2:49:25:c8:bb:3e:0e:a6:50:cf:fe: 45:35:0d:5b:a6:38:78:15:22:8e:63:4f:53:33:ae: b4:f3:7f:ad:ce:2d:3a:73:25:16:d3:7c:78:93:5d: ad:06:c0:18:b9:b3:fe:89:9e:19:13:9c:e6:b9:0c: be:eb:36:0d:d4:b9:ed:d4:f4:85:1b:56:ac:a0:22: 4c:da:eb:48:bf:68:23:a2:e5:9c:3f:57:07:e1:bd: 6b:7f:70:ad:f2:48:10:d7:93:4d:32:5d:24:34:f8: df:48:7c:a8:c8:2c:d0:5b:a6:b4:e3:1f:9e:5b:44: 21:ad:6f:81:c7:5e:d7:bb:46:44:98:e6:b1:18:4b: 64:e8:40:c7:eb:f9:7b:a9:1e:5f:62:be:14:7f:54: b9:a7:98:eb:40:b9:1a:39:b4:40:91:db:6e:bf:a3: 05:4b:86:c8:2a:b1:83:8c:49:29:77:31:de:5a:70: a3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:32:7B:2C:98:F3:D7:CD:31:42:44:8C:E0:5F:A7:F1:26:8A:51:67 X509v3 Authority Key Identifier: keyid:FA:26:F3:4A:83:39:B1:DF:36:DC:9C:11:91:20:57:C3:A5:83:F6:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/-ibzSoM5sd823JwRkSBXw6WD9nM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ibzSoM5sd823JwRkSBXw6WD9nM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914711C/A8AC7250BBA711EC8FCD4422C4F9AE02/1AF42E76BBAC11EC8A07FE72C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.186.82.0/23 Signature Algorithm: sha256WithRSAEncryption cb:84:a1:07:7d:8d:52:02:5a:be:90:50:9f:84:5a:9c:15:72: 77:02:9f:25:38:96:96:96:e7:44:45:d3:42:79:54:6a:f1:d7: 34:20:f9:22:eb:f9:55:a4:f2:46:0a:bf:68:b4:f5:c7:26:63: f5:cd:22:9a:43:57:39:c6:ec:8b:a7:25:91:4a:f5:cf:1c:0e: 65:f6:df:10:14:18:0a:0b:44:df:3f:8a:ed:78:d0:6a:ab:72: 6e:e2:09:c3:18:c5:66:2e:c2:21:4f:cb:19:5f:5f:60:e6:c9: 98:07:4f:fa:71:0a:da:10:0a:43:ae:b4:73:85:a4:08:d9:42: a1:c9:32:13:51:96:5f:68:c8:ff:6a:a7:db:b2:e7:05:d1:cb: 2f:fb:cf:a2:6b:7f:f8:ec:28:2d:eb:34:d5:21:30:5c:ec:96: 4e:d5:aa:b8:41:e1:43:c8:76:23:20:67:72:57:eb:ce:6f:db: b8:8b:0f:0f:45:da:d7:8a:13:a1:0c:74:93:5a:5b:ad:79:ef: c7:86:ef:2b:10:56:3e:fa:65:3f:77:37:10:67:93:1a:9c:71: be:2e:18:21:49:6e:14:55:0a:50:6a:7f:03:17:3b:4b:12:a1: 37:22:22:ce:42:a1:7f:86:20:f6:59:ad:fa:57:9a:46:8c:ae: 47:fc:be:52 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcxMUMxMTAvBgNVBAUTKEZBMjZGMzRBODMzOUIxREYzNkRDOUMxMTkxMjA1N0Mz QTU4M0Y2NzMwHhcNMjQwNTI1MDQwODQ5WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjUxNjQ1MS01ZTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1+NGKWg7giv6koGsQb8Rv5FzDQL9CiSKGGx+TNuhXR2XIVSxOtslPNEQsTi gHwIcEcb6yjvXNkpGYeurcGisbq1NTEyyl2iNzaZ32to8kklyLs+DqZQz/5FNQ1b pjh4FSKOY09TM66083+tzi06cyUW03x4k12tBsAYubP+iZ4ZE5zmuQy+6zYN1Lnt 1PSFG1asoCJM2utIv2gjouWcP1cH4b1rf3Ct8kgQ15NNMl0kNPjfSHyoyCzQW6a0 4x+eW0QhrW+Bx17Xu0ZEmOaxGEtk6EDH6/l7qR5fYr4Uf1S5p5jrQLkaObRAkdtu v6MFS4bIKrGDjEkpdzHeWnCjtwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMgyeyyY 89fNMUJEjOBfp/EmilFnMB8GA1UdIwQYMBaAFPom80qDObHfNtycEZEgV8Olg/Zz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzExQy9BOEFDNzI1MEJC QTcxMUVDOEZDRDQ0MjJDNEY5QUUwMi8taWJ6U29NNXNkODIzSndSa1NCWHc2V0Q5 bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1pYnpTb001c2Q4MjNKd1JrU0JYdzZXRDluTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDcxMUMvQThBQzcyNTBCQkE3MTFFQzhGQ0Q0NDIyQzRGOUFFMDIvMUFGNDJFNzZC QkFDMTFFQzhBMDdGRTcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnulIwDQYJKoZIhvcNAQELBQADggEBAMuEoQd9jVICWr6Q UJ+EWpwVcncCnyU4lpaW50RF00J5VGrx1zQg+SLr+VWk8kYKv2i09ccmY/XNIppD VznG7IunJZFK9c8cDmX23xAUGAoLRN8/iu140Gqrcm7iCcMYxWYuwiFPyxlfX2Dm yZgHT/pxCtoQCkOutHOFpAjZQqHJMhNRll9oyP9qp9uy5wXRyy/7z6Jrf/jsKC3r NNUhMFzslk7VqrhB4UPIdiMgZ3JX685v27iLDw9F2teKE6EMdJNaW61578eG7ysQ Vj76ZT93NxBnkxqccb4uGCFJbhRVClBqfwMXO0sSoTciIs5CoX+GIPZZrfpXmkaM rkf8vlI= -----END CERTIFICATE-----Generated at Mon Nov 25 03:00:20 2024 by rpki-client on console-fra.rpki-client.org