$ rpki-client -vvf rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa File: C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa (raw, json) Hash identifier: B+UIB58IevJFHi1QUj4sqmfL/RMK0LGyhhucuugtqng= Subject key identifier: B8:BF:57:95:69:ED:F9:5D:E6:AB:EB:75:49:7D:39:75:48:34:A6:8E Certificate issuer: /CN=A914DB69/serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38 Certificate serial: CD Authority key identifier: F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa Signing time: Thu 07 Nov 2024 03:57:27 +0000 ROA not before: Thu 07 Nov 2024 03:57:27 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 141210 IP address blocks: 103.173.188.0/24 maxlen: 24 103.173.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DB69/serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38 Validity Not Before: Nov 7 03:57:27 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=672c3aa6-ce94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:0d:97:f3:57:86:ac:b6:bb:41:f8:67:a1:b1: fd:ae:16:22:00:e2:a0:71:23:8c:dd:a6:fa:46:bd: 92:2f:4f:26:33:09:12:86:93:41:00:70:61:19:ce: f7:e3:e2:1d:6a:ea:ac:78:68:0a:4a:b1:7b:65:6a: 08:f6:f2:de:16:b7:d9:dc:65:7a:18:63:c9:87:c1: 3b:96:25:26:51:6c:7a:22:73:dc:21:35:7a:24:9e: 8e:da:18:a8:58:2f:68:e0:2f:1d:42:58:51:25:46: 66:3e:0a:fe:7b:f0:d2:4f:22:ae:11:b8:83:75:eb: bc:82:ae:9d:f1:9e:47:39:1d:94:64:7e:bf:b0:fb: e7:86:e4:7b:04:81:31:76:aa:23:f4:1d:1d:76:0b: 07:f0:0c:e9:a1:09:be:ac:11:5f:8d:1f:be:e4:f5: 11:f4:1c:87:8c:db:3f:9e:b5:a0:a8:45:fd:0d:fe: 4c:86:5f:8c:7b:9f:5f:60:48:d9:af:07:69:d3:df: 8b:2b:58:be:a5:a0:0d:a0:b8:18:94:3b:fd:63:11: a7:63:13:24:e8:51:b9:69:a9:b5:d7:b4:fa:a3:f8: d7:c2:ab:7e:5d:0e:71:bc:26:9a:01:b1:60:b8:13: 4c:9a:4b:d8:5b:0a:8e:78:1f:fe:cd:8d:9f:23:37: f8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:BF:57:95:69:ED:F9:5D:E6:AB:EB:75:49:7D:39:75:48:34:A6:8E X509v3 Authority Key Identifier: keyid:F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.173.188.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:ba:b3:25:cb:2e:5b:81:2d:a5:b9:69:18:b9:84:58:e6:e0: 51:2b:43:96:28:c9:15:82:87:ba:39:e4:47:3a:f9:3e:e7:25: 4e:be:1d:3a:b7:5b:1e:a5:88:3e:66:aa:70:1d:dd:ab:79:02: ae:a9:0d:d8:e5:a5:89:ae:e5:1c:21:cc:8b:71:c7:cf:2a:27: da:f1:fb:bf:a6:c8:6a:e6:f4:4a:b5:0b:f8:07:f5:ae:02:a2: cd:43:4f:84:93:6f:e3:a9:d8:ea:a9:79:de:b6:93:2b:64:2c: 52:94:1d:bd:ac:1f:ce:1a:8a:2b:13:40:24:86:18:70:8b:5a: 87:3b:7f:b0:24:ff:dc:d9:51:af:83:95:00:24:4a:aa:0a:e8: 79:fd:48:68:31:52:07:01:60:cf:87:79:69:f9:89:f1:0c:44: 59:08:b9:87:67:41:1a:dd:18:5c:a5:a3:ec:b7:78:9b:9a:f0: bb:c1:b6:07:dc:54:af:74:d9:e1:22:90:39:70:74:ee:04:db: f0:15:13:fd:5b:b6:31:31:31:0a:87:0d:c7:28:24:04:d8:de: 8e:7b:f0:fe:18:1c:e9:12:30:7a:d3:f5:0e:d4:b7:40:56:7f: 63:95:85:d6:76:6a:14:62:45:42:f6:5d:cb:8b:82:54:f8:8c: 2b:6a:f2:7b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERCNjkxMTAvBgNVBAUTKEY5N0M2QjlGMDY5QjZDMDJDQjNEOEVBRDVBRjczRTUw NkMwOENBMzgwHhcNMjQxMTA3MDM1NzI3WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJjM2FhNi1jZTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8A2X81eGrLa7QfhnobH9rhYiAOKgcSOM3ab6Rr2SL08mMwkShpNBAHBhGc73 4+IdauqseGgKSrF7ZWoI9vLeFrfZ3GV6GGPJh8E7liUmUWx6InPcITV6JJ6O2hio WC9o4C8dQlhRJUZmPgr+e/DSTyKuEbiDdeu8gq6d8Z5HOR2UZH6/sPvnhuR7BIEx dqoj9B0ddgsH8AzpoQm+rBFfjR++5PUR9ByHjNs/nrWgqEX9Df5Mhl+Me59fYEjZ rwdp09+LK1i+paANoLgYlDv9YxGnYxMk6FG5aam117T6o/jXwqt+XQ5xvCaaAbFg uBNMmkvYWwqOeB/+zY2fIzf46wIDAQABo4IClTCCApEwHQYDVR0OBBYEFLi/V5Vp 7fld5qvrdUl9OXVINKaOMB8GA1UdIwQYMBaAFPl8a58Gm2wCyz2OrVr3PlBsCMo4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REI2OS9EQTg2MENDODZF NUMxMUVFOUMwMTMzNjFDNEY5QUUwMi8tWHhybndhYmJBTExQWTZ0V3ZjLVVHd0l5 amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YeHJud2FiYkFMTFBZNnRXdmMtVUd3SXlqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NERCNjkvREE4NjBDQzg2RTVDMTFFRTlDMDEzMzYxQzRGOUFFMDIvQzRBQTdBM0E2 RTVGMTFFRTlGNjZFOTY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnrbwwDQYJKoZIhvcNAQELBQADggEBAG26syXLLluBLaW5 aRi5hFjm4FErQ5YoyRWCh7o55Ec6+T7nJU6+HTq3Wx6liD5mqnAd3at5Aq6pDdjl pYmu5RwhzItxx88qJ9rx+7+myGrm9Eq1C/gH9a4Cos1DT4STb+Op2Oqped62kytk LFKUHb2sH84aiisTQCSGGHCLWoc7f7Ak/9zZUa+DlQAkSqoK6Hn9SGgxUgcBYM+H eWn5ifEMRFkIuYdnQRrdGFylo+y3eJua8LvBtgfcVK902eEikDlwdO4E2/AVE/1b tjExMQqHDccoJATY3o578P4YHOkSMHrT9Q7Ut0BWf2OVhdZ2ahRiRUL2XcuLglT4 jCtq8ns= -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:05 2024 by rpki-client on console-ams.rpki-client.org