$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/E387F700FBDD11EE8914AD31C4F9AE02.roa File: E387F700FBDD11EE8914AD31C4F9AE02.roa (raw, json) Hash identifier: oQGf8UeNLRAoFQkfiIvmUxfekUFi9chn7l63adDoD3s= Subject key identifier: 68:91:02:EC:80:45:09:E4:C1:37:2B:2C:AD:46:C2:DE:A6:DE:B1:5E Certificate issuer: /CN=A914FE53/serialNumber=4F31990ACFD59DBE36A70C05204B43B9296F536C Certificate serial: 57 Authority key identifier: 4F:31:99:0A:CF:D5:9D:BE:36:A7:0C:05:20:4B:43:B9:29:6F:53:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/E387F700FBDD11EE8914AD31C4F9AE02.roa Signing time: Fri 27 Sep 2024 05:59:28 +0000 ROA not before: Fri 27 Sep 2024 05:59:28 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 135584 IP address blocks: 103.142.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FE53/serialNumber=4F31990ACFD59DBE36A70C05204B43B9296F536C Validity Not Before: Sep 27 05:59:28 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66f649c0-e73c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:39:1e:f5:f4:2d:cb:fe:3b:01:e9:d5:e4:24: 1b:6f:dd:4e:85:2b:88:76:8e:26:e9:a0:e2:42:52: 9b:e9:42:10:d3:4a:9c:0e:b6:01:79:64:d7:b0:b1: ab:44:b4:65:7b:47:ca:2b:ce:b6:8d:22:78:2b:94: 3c:66:be:ab:cd:45:77:33:63:26:05:62:3a:51:f8: e5:4a:0b:9b:2b:7a:b0:05:b5:aa:8b:88:a8:d1:83: 8f:11:cb:03:d1:44:76:51:7f:f1:79:fb:83:68:a2: 3b:13:6a:f9:7e:c9:64:3c:6b:3e:a4:78:3e:1b:c3: 97:2c:cb:43:91:62:87:d4:4c:6a:d5:8f:ba:ac:ae: f0:f9:db:af:80:6c:88:07:80:06:35:69:a5:a9:af: ec:aa:34:65:f5:40:3c:4f:b6:86:8a:13:5d:7c:d4: 59:b2:f6:cd:c3:79:a0:ca:b1:90:06:a1:a3:15:b3: 5e:ef:d5:30:65:1f:d3:c3:8f:ca:08:6b:ce:0c:89: d5:57:de:30:fb:b9:91:3d:a6:18:77:91:9c:6b:bb: 87:76:ff:8b:fb:44:d5:3a:93:96:56:d3:24:1d:11: f3:90:0e:91:e3:86:86:f9:36:1d:a3:ae:e2:39:a9: 9d:dc:f1:8a:80:53:f1:91:c8:c6:5a:da:88:40:f5: a4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:91:02:EC:80:45:09:E4:C1:37:2B:2C:AD:46:C2:DE:A6:DE:B1:5E X509v3 Authority Key Identifier: keyid:4F:31:99:0A:CF:D5:9D:BE:36:A7:0C:05:20:4B:43:B9:29:6F:53:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/E387F700FBDD11EE8914AD31C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.142.48.0/23 Signature Algorithm: sha256WithRSAEncryption 55:9c:6e:5b:3d:1d:81:d4:f5:aa:7b:eb:2d:fa:25:4f:7f:e0: f2:c3:dd:14:45:e0:fb:01:8c:da:91:20:d4:d0:99:51:f5:bd: 54:d5:8c:9f:1a:7a:53:2d:bf:01:d3:21:44:3a:79:70:0e:49: 8a:f3:ab:72:34:c3:4e:a4:ee:dd:cb:da:a3:f8:66:32:cb:fe: 54:62:a6:e7:76:fb:47:d1:04:54:1d:1b:14:1d:60:2d:2b:08: 81:e3:cd:39:7a:36:46:19:bd:08:35:9c:57:64:5e:e4:c7:9f: 54:e5:45:69:a8:75:58:70:67:63:db:e9:9c:6d:04:df:db:b7: ea:19:8e:cb:87:26:d5:03:5b:5d:a6:43:72:be:38:63:67:05: b8:7a:2e:da:f4:6e:d7:6d:9a:d3:ff:bd:b9:ed:44:f2:8b:39: 23:0d:98:05:65:d8:e2:17:0b:58:45:af:f6:3c:2c:5f:37:fb: f6:b3:62:d6:41:d5:82:78:33:5b:e8:3d:7a:fa:98:0a:84:c1: eb:d5:7d:8e:7b:e4:88:91:4a:c5:61:ec:95:e9:75:8e:fb:33: d1:59:bc:73:f9:4b:87:77:ea:f8:98:d7:03:d0:02:0a:16:b8: 0a:a0:27:b6:58:bd:a8:06:c4:e9:46:1f:50:56:f3:6e:ed:a7: 60:2f:7c:47 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RkU1MzExMC8GA1UEBRMoNEYzMTk5MEFDRkQ1OURCRTM2QTcwQzA1MjA0QjQzQjky OTZGNTM2QzAeFw0yNDA5MjcwNTU5MjhaFw0yNTEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZjY0OWMwLWU3M2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVOR719C3L/jsB6dXkJBtv3U6FK4h2jibpoOJCUpvpQhDTSpwOtgF5ZNewsatE tGV7R8orzraNIngrlDxmvqvNRXczYyYFYjpR+OVKC5srerAFtaqLiKjRg48RywPR RHZRf/F5+4NoojsTavl+yWQ8az6keD4bw5csy0ORYofUTGrVj7qsrvD526+AbIgH gAY1aaWpr+yqNGX1QDxPtoaKE1181Fmy9s3DeaDKsZAGoaMVs17v1TBlH9PDj8oI a84MidVX3jD7uZE9phh3kZxru4d2/4v7RNU6k5ZW0yQdEfOQDpHjhob5Nh2jruI5 qZ3c8YqAU/GRyMZa2ohA9aT5AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUaJEC7IBF CeTBNyssrUbC3qbesV4wHwYDVR0jBBgwFoAUTzGZCs/Vnb42pwwFIEtDuSlvU2ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRGRTUzLzgwQjIyOEY4RkJE RDExRUU4OTg0RUQzMEM0RjlBRTAyL1R6R1pDc19WbmI0MnB3d0ZJRXREdVNsdlUy dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVHpHWkNzX1ZuYjQycHd3RklFdER1U2x2VTJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkU1My84MEIyMjhGOEZCREQxMUVFODk4NEVEMzBDNEY5QUUwMi9FMzg3RjcwMEZC REQxMUVFODkxNEFEMzFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWeOMDANBgkqhkiG9w0BAQsFAAOCAQEAVZxuWz0dgdT1qnvr LfolT3/g8sPdFEXg+wGM2pEg1NCZUfW9VNWMnxp6Uy2/AdMhRDp5cA5JivOrcjTD TqTu3cvao/hmMsv+VGKm53b7R9EEVB0bFB1gLSsIgePNOXo2Rhm9CDWcV2Re5Mef VOVFaah1WHBnY9vpnG0E39u36hmOy4cm1QNbXaZDcr44Y2cFuHou2vRu122a0/+9 ue1E8os5Iw2YBWXY4hcLWEWv9jwsXzf79rNi1kHVgngzW+g9evqYCoTB69V9jnvk iJFKxWHslel1jvsz0Vm8c/lLh3fq+JjXA9ACCha4CqAntli9qAbE6UYfUFbzbu2n YC98Rw== -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:07 2024 by rpki-client on console-ams.rpki-client.org