$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4D4EE370408A11EE91A09746C4F9AE02.roa File: 4D4EE370408A11EE91A09746C4F9AE02.roa (raw, json) Hash identifier: a0UD+/qG4UMDv/2WmEJk9pk9QhXhkwYYYzMZ4c/XI1s= Subject key identifier: A3:7C:C5:A0:70:76:ED:DA:E0:D1:72:CE:53:3B:7C:8D:53:38:8C:11 Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 35EF Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4D4EE370408A11EE91A09746C4F9AE02.roa Signing time: Fri 16 Aug 2024 14:40:22 +0000 ROA not before: Fri 16 Aug 2024 14:40:22 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 14618 IP address blocks: 103.104.86.0/24 maxlen: 24 103.253.240.0/22 maxlen: 22 144.48.40.0/22 maxlen: 24 211.44.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 14:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13807 (0x35ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Aug 16 14:40:22 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66bf64d6-e1a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a9:a8:e4:f2:2f:a2:2e:31:ee:e1:ed:17:ca: 7a:fd:2f:92:05:bd:dd:8c:81:8e:a4:2d:35:a4:90: 98:35:dd:23:c3:9b:49:d3:0c:55:57:47:b5:8a:0c: 95:ed:68:68:4c:67:c4:ee:c9:60:dd:91:2a:d4:24: b2:61:c3:b2:bd:e1:62:12:79:f5:f8:1d:1e:db:bd: e7:37:42:54:3d:2f:47:8d:64:cf:67:3f:63:8b:e8: ca:47:d1:6f:28:ca:13:10:e9:f8:3f:25:46:a5:bb: 9f:8b:83:f1:76:82:9c:6f:3e:22:b0:8b:89:5c:20: d4:c4:7b:43:8d:e7:33:1b:e4:94:58:71:7a:90:a0: 3c:61:8a:5b:fb:05:97:b9:14:76:64:be:00:dd:d9: 79:79:e4:0b:52:e0:14:14:1b:6d:6c:30:87:29:95: 03:43:f6:38:84:7d:db:2a:72:a2:88:ea:6a:b7:17: 31:54:f4:1b:7d:7c:21:f0:80:27:3c:77:89:45:53: cc:1c:41:9e:77:3d:fd:3d:ce:8a:d8:38:ab:39:23: 66:69:3f:35:5c:65:77:e1:b3:5e:54:e9:cc:4f:28: 35:80:8b:d7:e5:97:c3:93:de:1a:d4:4c:4c:71:d5: d5:d9:b9:d0:fe:b8:39:1c:96:32:37:17:dc:d6:f3: 37:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7C:C5:A0:70:76:ED:DA:E0:D1:72:CE:53:3B:7C:8D:53:38:8C:11 X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4D4EE370408A11EE91A09746C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.104.86.0/24 103.253.240.0/22 144.48.40.0/22 211.44.103.0/24 Signature Algorithm: sha256WithRSAEncryption c9:eb:b8:b3:52:4e:00:e0:37:2f:1d:e5:ba:8f:f4:63:a8:44: 22:bc:8a:51:4d:b2:c2:b3:e6:1a:ef:b0:94:7d:e6:4b:22:2b: 9e:96:a0:19:28:47:3c:10:43:d1:07:50:e4:71:7e:81:ab:3a: 0c:02:5b:aa:75:d6:0f:ed:75:26:9e:e6:db:71:15:4e:c7:f5: f3:22:ee:7b:06:74:50:72:90:b9:b4:1f:d9:73:b9:dc:f1:81: ea:d1:23:c1:7b:78:7d:a2:6a:e2:bd:05:f2:c9:5a:16:57:de: 94:c2:0b:b5:81:95:e3:38:8e:86:c7:8a:1e:66:bf:2d:ca:a7: 69:2a:40:c3:fc:66:5a:40:b1:88:e3:28:40:49:29:6b:87:d5: a6:34:47:07:c2:ff:f1:98:82:28:c3:94:25:d1:67:47:2f:a2: 7d:ec:bf:90:a7:7e:a7:34:16:da:ec:ca:3f:30:ab:e6:2d:82: 32:43:b8:6b:f1:38:dd:d4:8e:f1:69:80:73:ce:52:d6:5d:78: 4d:ba:c8:e8:b3:6a:7b:08:41:a1:b0:d4:05:25:21:b5:e0:d9: 16:68:53:60:72:25:b8:99:15:2d:92:77:f9:9a:53:b5:12:0c: 1e:22:94:4d:4f:34:8b:e9:d8:d8:d4:a2:cf:df:24:dc:f8:f9: 7e:97:62:31 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICNe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjQwODE2MTQ0MDIyWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmJmNjRkNi1lMWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6mo5PIvoi4x7uHtF8p6/S+SBb3djIGOpC01pJCYNd0jw5tJ0wxVV0e1igyV 7WhoTGfE7slg3ZEq1CSyYcOyveFiEnn1+B0e273nN0JUPS9HjWTPZz9ji+jKR9Fv KMoTEOn4PyVGpbufi4PxdoKcbz4isIuJXCDUxHtDjeczG+SUWHF6kKA8YYpb+wWX uRR2ZL4A3dl5eeQLUuAUFBttbDCHKZUDQ/Y4hH3bKnKiiOpqtxcxVPQbfXwh8IAn PHeJRVPMHEGedz39Pc6K2DirOSNmaT81XGV34bNeVOnMTyg1gIvX5ZfDk94a1ExM cdXV2bnQ/rg5HJYyNxfc1vM3lQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFKN8xaBw du3a4NFyzlM7fI1TOIwRMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvNEQ0RUUzNzA0 MDhBMTFFRTkxQTA5NzQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBABnaFYDBAJn/fADBAKQMCgDBADTLGcwDQYJKoZIhvcNAQEL BQADggEBAMnruLNSTgDgNy8d5bqP9GOoRCK8ilFNssKz5hrvsJR95ksiK56WoBko RzwQQ9EHUORxfoGrOgwCW6p11g/tdSae5ttxFU7H9fMi7nsGdFBykLm0H9lzudzx gerRI8F7eH2iauK9BfLJWhZX3pTCC7WBleM4jobHih5mvy3Kp2kqQMP8ZlpAsYjj KEBJKWuH1aY0RwfC//GYgijDlCXRZ0cvon3sv5Cnfqc0Ftrsyj8wq+YtgjJDuGvx ON3UjvFpgHPOUtZdeE26yOizansIQaGw1AUlIbXg2RZoU2ByJbiZFS2Sd/maU7US DB4ilE1PNIvp2NjUos/fJNz4+X6XYjE= -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:02 2024 by rpki-client on console-fra.rpki-client.org