$ rpki-client -vvf rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/3482BB06AB3E11E7B15D1874C4F9AE02.roa File: 3482BB06AB3E11E7B15D1874C4F9AE02.roa (raw, json) Hash identifier: f/iGCTTWKgyC6GDNoG48hLtnpOGko6TY6XeoD7uohtY= Subject key identifier: 4F:DC:C0:E1:2C:59:F3:44:D6:1F:82:78:2F:9B:32:35:5C:CF:C9:46 Certificate issuer: /CN=A914B05F/serialNumber=B883E16BBCD3715B561731316BA1B0EF4053C12E Certificate serial: 17D1 Authority key identifier: B8:83:E1:6B:BC:D3:71:5B:56:17:31:31:6B:A1:B0:EF:40:53:C1:2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIPha7zTcVtWFzExa6Gw70BTwS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/3482BB06AB3E11E7B15D1874C4F9AE02.roa Signing time: Wed 02 Oct 2024 16:54:39 +0000 ROA not before: Wed 02 Oct 2024 16:54:39 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 137004 IP address blocks: 103.101.233.0/24 maxlen: 24 103.113.2.0/24 maxlen: 24 2001:df2:b500::/48 maxlen: 48 2001:df2:b500::/50 maxlen: 50 2001:df2:b500:4000::/50 maxlen: 50 2001:df2:b500:8000::/50 maxlen: 50 2001:df2:b500:c000::/50 maxlen: 50 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.crl rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIPha7zTcVtWFzExa6Gw70BTwS4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6097 (0x17d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B05F/serialNumber=B883E16BBCD3715B561731316BA1B0EF4053C12E Validity Not Before: Oct 2 16:54:39 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=66fd7acf-6c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7c:14:05:8e:a0:2b:88:8e:77:31:11:73:9b: 30:96:1b:83:57:8e:d5:51:2d:1a:3d:41:34:78:9b: 4f:d0:48:71:51:2b:4a:33:f5:34:b9:c4:43:c3:39: e4:d6:d4:ea:73:f0:81:11:6c:7e:0c:28:84:f3:42: 2a:9a:db:4c:69:7f:1f:7b:fd:3f:0e:ca:63:d0:9b: f9:f7:ca:0d:0e:0a:d9:cd:2f:2e:c1:31:3e:bf:8a: 8c:63:ba:c5:b3:c5:62:9c:64:70:3c:1a:ba:b7:7b: 4a:61:45:2e:f6:b0:1c:08:98:f2:68:4a:5d:5a:e7: 5b:d3:71:0f:54:6a:7f:87:e9:4b:d4:02:be:ec:d3: 30:ed:cf:92:1e:c0:75:d8:a5:69:ae:31:2a:62:23: 80:37:1c:5f:0e:44:07:d2:eb:4c:a4:95:6a:7e:0e: 67:61:b5:ee:1e:00:e8:76:3b:31:e0:a4:ec:f2:0d: 5b:1f:9f:f7:52:db:18:1e:e0:3d:df:f7:89:b0:48: 47:22:34:fb:01:e6:0f:ac:a6:cf:36:38:c7:44:76: 2b:90:f6:c1:c8:d1:82:7f:ac:b5:9b:32:e9:d6:21: 10:8b:1c:ae:75:78:4b:5a:ca:b2:0e:d7:87:83:e0: e2:47:33:aa:e4:df:2d:7c:9f:6d:11:7f:93:16:78: b8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DC:C0:E1:2C:59:F3:44:D6:1F:82:78:2F:9B:32:35:5C:CF:C9:46 X509v3 Authority Key Identifier: keyid:B8:83:E1:6B:BC:D3:71:5B:56:17:31:31:6B:A1:B0:EF:40:53:C1:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/uIPha7zTcVtWFzExa6Gw70BTwS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIPha7zTcVtWFzExa6Gw70BTwS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B05F/33512040AB3B11E7BAAB0D6BC4F9AE02/3482BB06AB3E11E7B15D1874C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.101.233.0/24 103.113.2.0/24 IPv6: 2001:df2:b500::/48 Signature Algorithm: sha256WithRSAEncryption c6:e1:5f:9e:b0:98:fe:74:88:b8:8a:62:04:8c:33:9b:4c:01: 4a:99:14:26:5f:b3:d5:f3:62:8d:6b:bd:1f:6b:2f:e0:ca:5f: 5a:79:82:a3:6e:41:0c:3f:95:b3:c8:af:55:ca:22:48:c5:a0: 01:84:f3:ad:89:0a:02:48:65:81:9d:72:b9:83:a7:67:7d:9f: f5:ba:76:2a:c1:68:9d:6c:02:82:b5:54:4f:dd:1f:35:e9:9e: d3:c4:07:5c:67:db:02:c4:c9:9a:5c:b9:8d:fa:8b:04:35:64: 8d:5e:26:c9:63:75:14:1e:4a:98:ed:17:d2:74:f6:c6:ce:d7: da:57:d5:f9:fc:e4:a9:a0:0b:9d:a7:db:09:83:47:ab:7d:72: 39:02:b7:5d:9e:d2:a8:7d:96:29:a1:17:69:87:93:84:62:29: 09:f3:17:1f:df:9b:79:ba:cd:d3:2d:0b:e8:fb:77:c1:12:f7: ef:d1:e4:7a:61:55:a4:69:80:76:15:b3:e2:f3:f7:a4:04:23: ef:88:58:fa:b2:5e:85:24:55:41:2f:2e:97:2c:34:ef:8f:84: 2d:e9:ae:2b:19:de:e8:dc:37:d5:c5:0c:3d:12:fd:b7:ca:c3: 6a:9e:ee:7b:f2:e2:d8:9b:36:84:c8:d1:17:01:8d:a4:fc:41: e0:65:e1:2a -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICF9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIwNUYxMTAvBgNVBAUTKEI4ODNFMTZCQkNEMzcxNUI1NjE3MzEzMTZCQTFCMEVG NDA1M0MxMkUwHhcNMjQxMDAyMTY1NDM5WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZkN2FjZi02YzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznwUBY6gK4iOdzERc5swlhuDV47VUS0aPUE0eJtP0EhxUStKM/U0ucRDwznk 1tTqc/CBEWx+DCiE80IqmttMaX8fe/0/Dspj0Jv598oNDgrZzS8uwTE+v4qMY7rF s8VinGRwPBq6t3tKYUUu9rAcCJjyaEpdWudb03EPVGp/h+lL1AK+7NMw7c+SHsB1 2KVprjEqYiOANxxfDkQH0utMpJVqfg5nYbXuHgDodjsx4KTs8g1bH5/3UtsYHuA9 3/eJsEhHIjT7AeYPrKbPNjjHRHYrkPbByNGCf6y1mzLp1iEQixyudXhLWsqyDteH g+DiRzOq5N8tfJ9tEX+TFni4mwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFE/cwOEs WfNE1h+CeC+bMjVcz8lGMB8GA1UdIwQYMBaAFLiD4Wu803FbVhcxMWuhsO9AU8Eu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjA1Ri8zMzUxMjA0MEFC M0IxMUU3QkFBQjBENkJDNEY5QUUwMi91SVBoYTd6VGNWdFdGekV4YTZHdzcwQlR3 UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VJUGhhN3pUY1Z0V0Z6RXhhNkd3NzBCVHdTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEIwNUYvMzM1MTIwNDBBQjNCMTFFN0JBQUIwRDZCQzRGOUFFMDIvMzQ4MkJCMDZB QjNFMTFFN0IxNUQxODc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnZekDBABncQIwDwQCAAIwCQMHACABDfK1ADANBgkqhkiG 9w0BAQsFAAOCAQEAxuFfnrCY/nSIuIpiBIwzm0wBSpkUJl+z1fNijWu9H2sv4Mpf WnmCo25BDD+Vs8ivVcoiSMWgAYTzrYkKAkhlgZ1yuYOnZ32f9bp2KsFonWwCgrVU T90fNeme08QHXGfbAsTJmly5jfqLBDVkjV4myWN1FB5KmO0X0nT2xs7X2lfV+fzk qaALnafbCYNHq31yOQK3XZ7SqH2WKaEXaYeThGIpCfMXH9+bebrN0y0L6Pt3wRL3 79HkemFVpGmAdhWz4vP3pAQj74hY+rJehSRVQS8ulyw074+ELemuKxne6Nw31cUM PRL9t8rDap7ue/Li2Js2hMjRFwGNpPxB4GXhKg== -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:01 2024 by rpki-client on console-ams.rpki-client.org