$ rpki-client -vvf rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/F043A0CCC2B411EA9BAFF054C4F9AE02.roa File: F043A0CCC2B411EA9BAFF054C4F9AE02.roa (raw, json) Hash identifier: /w1OuG0sm8OaVGq6ymiMoiSrbtsn+KyBNBfBfSxZOGA= Subject key identifier: 76:CA:DE:46:E6:B6:05:20:AD:04:22:5C:90:D8:A3:AB:70:93:58:C4 Certificate issuer: /CN=A914EED0/serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C Certificate serial: 0796 Authority key identifier: CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/F043A0CCC2B411EA9BAFF054C4F9AE02.roa Signing time: Tue 06 Feb 2024 22:00:12 +0000 ROA not before: Tue 06 Feb 2024 22:00:12 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 45224 IP address blocks: 103.84.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1942 (0x796) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EED0/serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C Validity Not Before: Feb 6 22:00:12 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65c2abec-5a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4b:f1:ec:ac:27:07:29:43:79:cc:21:59:db: 02:7f:be:f5:10:17:a6:93:8d:fc:4d:c4:c5:17:a7: e2:03:81:1c:6c:6f:0e:b5:dd:5d:88:80:31:a3:d1: 2d:01:bd:8e:e0:ba:92:16:61:4c:9e:bc:cf:15:37: d6:f3:7c:f0:e3:e5:02:fb:ae:23:04:a6:03:a4:3f: 8b:5e:4b:f3:d0:e6:96:84:a4:09:82:ee:1f:88:65: 46:55:3d:64:9e:74:1a:96:26:dc:02:f3:77:6b:2b: 61:a3:0c:04:cd:39:36:ab:87:70:0a:8b:ee:9b:d4: e8:50:5b:ac:92:6b:02:81:8e:01:f2:7f:2b:16:6e: f9:5e:46:6a:0f:eb:07:79:ac:07:de:f9:64:ed:42: de:39:72:d5:d3:9b:01:b9:99:3f:bc:b2:11:87:b4: 93:38:da:78:14:ad:64:ee:dc:12:9a:75:47:83:85: 5f:29:d5:9d:ab:9c:2d:04:f4:cf:b3:c9:bb:78:9b: 18:cf:1c:18:ad:e0:04:73:5e:8a:e6:14:87:7f:ff: 14:67:37:9a:71:40:cb:f7:16:89:69:53:8b:35:c7: 89:65:ae:0b:c0:39:85:e4:88:d1:7e:28:e9:d7:4e: 11:3c:d1:93:f6:7a:56:85:2c:ab:07:f5:74:bd:bd: 30:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CA:DE:46:E6:B6:05:20:AD:04:22:5C:90:D8:A3:AB:70:93:58:C4 X509v3 Authority Key Identifier: keyid:CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/F043A0CCC2B411EA9BAFF054C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.84.132.0/24 Signature Algorithm: sha256WithRSAEncryption 62:e9:00:30:a6:c4:7a:2a:87:d2:11:ea:a5:53:74:95:46:cb: d8:f1:13:1e:f2:82:24:fc:d2:19:d5:fd:40:94:92:3b:0d:0a: f7:b0:b4:ab:43:4a:3a:6e:39:9e:98:34:2d:13:ec:2b:5f:7e: 30:69:0a:ca:29:76:fd:dc:9c:44:b6:76:6d:16:7f:ba:6f:69: 14:03:f6:60:41:f8:23:46:8f:34:de:bf:e6:83:1f:2d:53:cc: 9b:b0:40:a8:5e:1d:b4:d4:86:8f:ec:ee:26:64:ac:54:c2:9d: 87:8d:76:e7:79:fe:de:9e:77:c2:89:85:b6:61:8f:5a:01:5b: da:81:61:17:7b:8e:01:3a:fa:24:27:30:ad:f3:58:d3:f3:12: 4c:0d:1a:dd:5b:c9:33:f9:f2:8f:74:70:9f:05:6d:b2:a6:71: 83:da:4c:96:14:42:41:f8:c7:8d:1d:1c:f7:17:7a:b0:08:fa: 59:46:ee:1b:1c:44:32:5a:16:da:44:01:cd:d0:6f:02:17:71: 22:3a:74:39:ec:88:c2:00:a2:1f:6b:ff:10:23:0b:ef:41:20: 26:bc:c4:ca:c9:5c:57:c0:7b:16:6b:17:3a:f3:01:f4:c4:a4: d4:e1:76:fa:20:a8:ce:f3:c9:e9:e1:3f:05:ce:ac:e2:37:69: 08:38:26:d5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVFRDAxMTAvBgNVBAUTKENCRTEzMUEwODNBNDU2M0M3QzQzOURCMDc5QjY0QjZB RDExMDFBN0MwHhcNMjQwMjA2MjIwMDEyWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWMyYWJlYy01YTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkkvx7KwnBylDecwhWdsCf771EBemk438TcTFF6fiA4EcbG8Otd1diIAxo9Et Ab2O4LqSFmFMnrzPFTfW83zw4+UC+64jBKYDpD+LXkvz0OaWhKQJgu4fiGVGVT1k nnQalibcAvN3aythowwEzTk2q4dwCovum9ToUFuskmsCgY4B8n8rFm75XkZqD+sH eawH3vlk7ULeOXLV05sBuZk/vLIRh7STONp4FK1k7twSmnVHg4VfKdWdq5wtBPTP s8m7eJsYzxwYreAEc16K5hSHf/8UZzeacUDL9xaJaVOLNceJZa4LwDmF5IjRfijp 104RPNGT9npWhSyrB/V0vb0wwwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHbK3kbm tgUgrQQiXJDYo6twk1jEMB8GA1UdIwQYMBaAFMvhMaCDpFY8fEOdsHm2S2rREBp8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUVEMC82RUVCMTE1MEMy QjMxMUVBQjQ4MzI3NTBDNEY5QUUwMi95LUV4b0lPa1ZqeDhRNTJ3ZWJaTGF0RVFH bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ktRXhvSU9rVmp4OFE1MndlYlpMYXRFUUdudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVFRDAvNkVFQjExNTBDMkIzMTFFQUI0ODMyNzUwQzRGOUFFMDIvRjA0M0EwQ0ND MkI0MTFFQTlCQUZGMDU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnVIQwDQYJKoZIhvcNAQELBQADggEBAGLpADCmxHoqh9IR 6qVTdJVGy9jxEx7ygiT80hnV/UCUkjsNCvewtKtDSjpuOZ6YNC0T7CtffjBpCsop dv3cnES2dm0Wf7pvaRQD9mBB+CNGjzTev+aDHy1TzJuwQKheHbTUho/s7iZkrFTC nYeNdud5/t6ed8KJhbZhj1oBW9qBYRd7jgE6+iQnMK3zWNPzEkwNGt1byTP58o90 cJ8FbbKmcYPaTJYUQkH4x40dHPcXerAI+llG7hscRDJaFtpEAc3QbwIXcSI6dDns iMIAoh9r/xAjC+9BICa8xMrJXFfAexZrFzrzAfTEpNThdvogqM7zyenhPwXOrOI3 aQg4JtU= -----END CERTIFICATE-----Generated at Sun Nov 24 20:58:11 2024 by rpki-client on console-fra.rpki-client.org