$ rpki-client -vvf rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/433FBBECF1A511E6BE0A844EC4F9AE02.roa File: 433FBBECF1A511E6BE0A844EC4F9AE02.roa (raw, json) Hash identifier: UTjSg2cr4EOymY78oxKDbnxxdk7LUhNg4mssHXCS3hY= Subject key identifier: A9:6C:78:91:54:0D:D7:D0:F3:84:19:E7:6A:77:D8:BF:C7:CF:F0:10 Certificate issuer: /CN=A914749C/serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78 Certificate serial: 1B8A Authority key identifier: 8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/433FBBECF1A511E6BE0A844EC4F9AE02.roa Signing time: Wed 04 Sep 2024 16:53:37 +0000 ROA not before: Wed 04 Sep 2024 16:53:37 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 135516 IP address blocks: 103.5.212.0/23 maxlen: 23 103.192.175.0/24 maxlen: 24 103.214.207.0/24 maxlen: 24 192.140.226.0/23 maxlen: 23 192.140.226.0/24 maxlen: 24 192.140.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7050 (0x1b8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914749C/serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78 Validity Not Before: Sep 4 16:53:37 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66d89090-662a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:60:4d:1f:4e:f6:06:66:29:fb:3e:c3:57:fe: 75:29:cc:05:fa:10:78:56:aa:b0:7d:b4:93:92:cf: f8:f9:a2:0c:b4:34:c2:09:62:c0:39:3d:de:75:47: cf:50:3f:80:54:e1:0d:7f:f5:ac:e5:ff:8a:ac:1a: 2f:63:8e:f1:09:ee:f5:2c:54:c1:e9:a3:2e:7d:f1: 39:a4:8e:5a:38:18:c0:c3:24:eb:0b:cb:ba:66:b9: 64:25:c7:15:a7:94:76:1e:8c:a4:1a:44:0e:45:fb: ea:b9:7f:74:4d:6f:37:e5:4b:55:4f:3d:07:df:c1: 39:2a:ef:d8:ad:40:5d:56:d2:53:79:c7:de:07:93: 0d:d9:0d:c6:46:a8:8a:15:48:69:a2:b6:30:c5:a5: 1d:99:cf:2c:41:3c:e9:b6:1b:27:41:93:d5:69:44: 96:d9:dd:3c:1a:00:7b:44:8b:80:f3:aa:b8:0e:96: c5:42:cd:47:86:33:1a:12:55:a6:c3:59:43:2e:0f: a0:e1:17:0e:03:de:43:13:3e:c4:44:13:81:e6:27: dd:50:5d:31:ee:cb:63:f6:b0:77:16:78:c3:ea:63: d2:0c:92:89:0f:91:f1:e4:5d:a0:20:2a:94:05:9f: 15:4f:fb:5e:a3:4a:b1:58:0a:de:58:0e:bb:43:4c: 49:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:6C:78:91:54:0D:D7:D0:F3:84:19:E7:6A:77:D8:BF:C7:CF:F0:10 X509v3 Authority Key Identifier: keyid:8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/433FBBECF1A511E6BE0A844EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.5.212.0/23 103.192.175.0/24 103.214.207.0/24 192.140.226.0/23 Signature Algorithm: sha256WithRSAEncryption 06:ca:a9:f9:08:6a:30:28:06:8f:9a:9f:69:7f:56:ae:08:a5: f3:97:b0:5d:c5:45:4a:ae:19:9d:52:31:61:46:43:3e:c7:41: ba:2c:a4:83:6b:d9:70:44:88:fd:75:6a:23:c7:de:33:8e:36: 4f:fe:5c:23:ce:88:5a:8d:54:6c:59:b6:f2:5a:79:30:68:fb: 67:f5:3f:54:40:8a:11:18:4e:6b:9f:16:29:de:f8:f4:c3:7b: 94:a4:32:a9:a8:e0:5b:73:8b:8f:71:32:32:9b:a5:4d:31:a9: fd:c0:b9:92:0d:6f:46:34:a0:1a:9b:8e:43:ec:d5:82:a6:05: 3c:c3:f8:9b:89:6a:f5:d6:8e:06:52:fd:21:f9:e5:be:c8:ab: 0d:c1:8f:42:cb:60:28:cc:26:10:3e:bc:8d:a3:bf:ee:5f:3e: 50:8d:20:56:f6:73:d3:79:c4:0c:70:a8:a7:0f:2f:5e:66:91: 48:6b:35:53:ad:93:6a:14:11:0e:86:a3:2c:5a:68:03:e5:04: 8f:a3:9a:41:0d:71:83:c4:29:3e:36:95:83:0f:70:4a:16:b2: 64:83:86:74:d5:72:08:e5:be:11:dd:0d:2a:e2:a9:63:0e:6f: 86:fb:3a:0c:8a:39:7a:2b:70:9c:08:f4:28:6f:00:1b:18:b1: 64:fa:90:c6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICG4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0OUMxMTAvBgNVBAUTKDhDQjJCQkQ2NEI2QTc3NEUxNkMxMEZEQ0E2NTBBN0FE QzVCMzhENzgwHhcNMjQwOTA0MTY1MzM3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ4OTA5MC02NjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWBNH072BmYp+z7DV/51KcwF+hB4VqqwfbSTks/4+aIMtDTCCWLAOT3edUfP UD+AVOENf/Ws5f+KrBovY47xCe71LFTB6aMuffE5pI5aOBjAwyTrC8u6ZrlkJccV p5R2HoykGkQORfvquX90TW835UtVTz0H38E5Ku/YrUBdVtJTecfeB5MN2Q3GRqiK FUhporYwxaUdmc8sQTzpthsnQZPVaUSW2d08GgB7RIuA86q4DpbFQs1HhjMaElWm w1lDLg+g4RcOA95DEz7ERBOB5ifdUF0x7stj9rB3FnjD6mPSDJKJD5Hx5F2gICqU BZ8VT/teo0qxWAreWA67Q0xJbQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFKlseJFU DdfQ84QZ52p32L/Hz/AQMB8GA1UdIwQYMBaAFIyyu9ZLandOFsEP3KZQp63Fs414 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ5Qy84RDc4RTU3RUYx QTIxMUU2OTQyMUI1NDVDNEY5QUUwMi9qTEs3MWt0cWQwNFd3UV9jcGxDbnJjV3pq WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMSzcxa3RxZDA0V3dRX2NwbENucmNXempYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc0OUMvOEQ3OEU1N0VGMUEyMTFFNjk0MjFCNTQ1QzRGOUFFMDIvNDMzRkJCRUNG MUE1MTFFNkJFMEE4NDRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAFnBdQDBABnwK8DBABn1s8DBAHAjOIwDQYJKoZIhvcNAQEL BQADggEBAAbKqfkIajAoBo+an2l/Vq4IpfOXsF3FRUquGZ1SMWFGQz7HQbospINr 2XBEiP11aiPH3jOONk/+XCPOiFqNVGxZtvJaeTBo+2f1P1RAihEYTmufFine+PTD e5SkMqmo4Ftzi49xMjKbpU0xqf3AuZINb0Y0oBqbjkPs1YKmBTzD+JuJavXWjgZS /SH55b7Iqw3Bj0LLYCjMJhA+vI2jv+5fPlCNIFb2c9N5xAxwqKcPL15mkUhrNVOt k2oUEQ6GoyxaaAPlBI+jmkENcYPEKT42lYMPcEoWsmSDhnTVcgjlvhHdDSriqWMO b4b7OgyKOXorcJwI9ChvABsYsWT6kMY= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:01 2024 by rpki-client on console-ams.rpki-client.org