$ rpki-client -vvf rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/8AEE4940EAB511ECBBDE3C50C4F9AE02.roa File: 8AEE4940EAB511ECBBDE3C50C4F9AE02.roa (raw, json) Hash identifier: mO2TDz8iVH1QjiN6s50lIdAYCPwhB4UYqdlU/m/h8sE= Subject key identifier: 3C:09:77:B1:47:F8:53:2C:59:4F:DC:23:C5:23:29:93:D2:03:DC:A7 Certificate issuer: /CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Certificate serial: 038F Authority key identifier: 0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/8AEE4940EAB511ECBBDE3C50C4F9AE02.roa Signing time: Fri 11 Oct 2024 01:04:31 +0000 ROA not before: Fri 11 Oct 2024 01:04:31 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 205960 IP address blocks: 103.91.217.0/24 maxlen: 24 103.99.208.0/24 maxlen: 24 103.99.209.0/24 maxlen: 24 103.99.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 911 (0x38f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Validity Not Before: Oct 11 01:04:31 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=6708799f-3300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:14:1d:59:b2:f2:9c:cd:44:e5:39:ad:89:a7: 28:c7:98:9f:2e:4e:85:79:31:1d:3c:54:3a:e9:66: f6:f9:cf:d8:f9:11:e1:46:4a:60:2a:ec:16:69:fa: db:35:9d:56:37:b4:b8:cd:88:52:52:67:4a:17:60: 18:e6:28:1f:ba:28:5b:60:52:6a:3a:35:e5:f1:97: 54:46:86:49:93:6c:d4:96:e4:59:56:3b:c8:cc:b6: 6f:1b:6e:6b:34:95:cd:4c:4f:36:9b:6f:a3:ec:74: 89:52:9b:46:1b:56:35:94:35:d4:1e:d5:43:88:e1: 61:ad:f8:2f:b5:4e:fa:83:5e:50:a4:6a:c2:54:43: 7b:60:3b:c7:fe:93:f5:fc:92:d0:55:2d:c1:81:b2: c1:5b:c3:99:84:84:d8:8e:ac:11:80:87:a9:f9:2c: e2:7d:32:5e:ba:9c:7b:33:4e:5c:ed:e9:5a:ee:d3: aa:13:32:b2:32:df:f8:71:6a:6a:c3:94:e3:81:5b: e3:70:1f:55:67:ee:05:4d:d0:43:33:c2:3b:71:ea: bc:a1:de:2e:74:00:cc:b7:01:b4:2c:23:20:01:ff: 6d:48:c3:2a:a2:c1:2b:4f:84:9b:89:9f:26:3a:f6: 4e:10:ed:8d:88:c5:d5:10:e3:ec:45:66:08:e1:6b: e2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:09:77:B1:47:F8:53:2C:59:4F:DC:23:C5:23:29:93:D2:03:DC:A7 X509v3 Authority Key Identifier: keyid:0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/8AEE4940EAB511ECBBDE3C50C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.91.217.0/24 103.99.208.0-103.99.210.255 Signature Algorithm: sha256WithRSAEncryption 62:80:cc:53:ad:65:e4:28:43:8e:4c:ae:82:38:6d:6a:08:98: 8f:65:a4:24:cf:ae:22:b0:8b:47:60:8e:2e:99:4c:f5:07:16: 88:08:5b:e9:34:3e:ec:9e:47:1f:f8:02:02:8e:26:c9:47:09: ad:20:c5:1d:51:2d:85:20:03:bc:a9:12:54:c3:9d:8a:28:79: 2f:8c:81:f9:78:75:1f:d0:f9:e7:d1:d4:78:35:89:1c:b3:c8: 29:ea:f5:c0:22:cf:cf:cb:b6:97:75:eb:ac:66:88:8a:c2:91: eb:58:7b:fb:f4:2c:17:54:83:85:de:88:1d:7c:39:e7:59:55: 76:fd:74:f9:0b:62:25:ee:12:36:89:e4:a1:e5:e3:1c:a4:72: 50:47:ca:4b:40:7f:12:b6:e6:4c:92:6f:58:e3:84:73:0d:ec: a8:c6:f6:f1:cd:7c:88:2e:5e:d9:ce:51:43:e9:62:fd:c0:62: c6:2e:c2:f6:90:e0:a6:80:d0:c3:41:c7:34:b2:48:d6:62:be: e7:35:53:0a:5a:87:9a:b7:97:a1:7f:b3:49:cf:b2:3f:7b:45: d6:ab:1c:ee:83:ed:2f:af:5a:86:b4:02:87:8a:90:e9:99:a4: cb:73:57:e1:8b:11:bb:dd:51:6f:12:93:0e:e2:df:12:58:a8: 2c:48:07:7b -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICA48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU5QzExMTAvBgNVBAUTKDBBMURFMThERkM5OEU0QUNCM0ZBMjMzMzY4MTA1QTcz RDFENDE5RjMwHhcNMjQxMDExMDEwNDMxWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzA4Nzk5Zi0zMzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBQdWbLynM1E5Tmtiacox5ifLk6FeTEdPFQ66Wb2+c/Y+RHhRkpgKuwWafrb NZ1WN7S4zYhSUmdKF2AY5igfuihbYFJqOjXl8ZdURoZJk2zUluRZVjvIzLZvG25r NJXNTE82m2+j7HSJUptGG1Y1lDXUHtVDiOFhrfgvtU76g15QpGrCVEN7YDvH/pP1 /JLQVS3BgbLBW8OZhITYjqwRgIep+SzifTJeupx7M05c7ela7tOqEzKyMt/4cWpq w5TjgVvjcB9VZ+4FTdBDM8I7ceq8od4udADMtwG0LCMgAf9tSMMqosErT4SbiZ8m OvZOEO2NiMXVEOPsRWYI4WviKQIDAQABo4ICozCCAp8wHQYDVR0OBBYEFDwJd7FH +FMsWU/cI8UjKZPSA9ynMB8GA1UdIwQYMBaAFAod4Y38mOSss/ojM2gQWnPR1Bnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTlDMS9FRTcwMkY0NDdB QzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVLeXotaU16YUJCYWM5SFVH Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoM2hqZnlZNUt5ei1pTXphQkJhYzlIVUdmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEU5QzEvRUU3MDJGNDQ3QUM5MTFFQzlEQTU1QjQ2QzRGOUFFMDIvOEFFRTQ5NDBF QUI1MTFFQ0JCREUzQzUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQDBABnW9kwDAMEBGdj0AMEAGdj0jANBgkqhkiG9w0BAQsFAAOC AQEAYoDMU61l5ChDjkyugjhtagiYj2WkJM+uIrCLR2COLplM9QcWiAhb6TQ+7J5H H/gCAo4myUcJrSDFHVEthSADvKkSVMOdiih5L4yB+Xh1H9D559HUeDWJHLPIKer1 wCLPz8u2l3XrrGaIisKR61h7+/QsF1SDhd6IHXw551lVdv10+QtiJe4SNonkoeXj HKRyUEfKS0B/ErbmTJJvWOOEcw3sqMb28c18iC5e2c5RQ+li/cBixi7C9pDgpoDQ w0HHNLJI1mK+5zVTClqHmreXoX+zSc+yP3tF1qsc7oPtL69ahrQCh4qQ6Zmky3NX 4YsRu91RbxKTDuLfElioLEgHew== -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:22 2024 by rpki-client on console-ams.rpki-client.org