$ rpki-client -vvf rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/39FBB4168B9811EE9C0BA252C4F9AE02.roa File: 39FBB4168B9811EE9C0BA252C4F9AE02.roa (raw, json) Hash identifier: 2iVUtqGygZmmPFfaI6hSltedKhRAuZW7CDGbz6IyeRI= Subject key identifier: F8:98:AF:FE:9F:57:19:BA:13:B0:B3:80:10:89:3C:C1:2D:20:4B:26 Certificate issuer: /CN=A915465A/serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A Certificate serial: 06F4 Authority key identifier: 78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/39FBB4168B9811EE9C0BA252C4F9AE02.roa Signing time: Wed 24 Jul 2024 22:40:59 +0000 ROA not before: Wed 24 Jul 2024 22:40:59 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 55799 IP address blocks: 103.42.212.0/24 maxlen: 24 116.193.157.0/24 maxlen: 24 2404:be00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1780 (0x6f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915465A/serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A Validity Not Before: Jul 24 22:40:59 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66a182fb-cf0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:62:02:13:fc:8d:66:60:e5:42:e9:08:8d:11: 50:78:1c:ab:7c:41:0b:73:7f:bf:32:f4:36:f6:5f: 77:25:89:2a:f5:90:c7:9e:6d:92:de:40:d6:e9:0b: b5:34:1f:39:f5:f3:0f:1b:4c:86:f0:61:9f:9d:57: 05:30:8f:6e:56:7e:7d:cc:23:af:0e:3d:74:19:5f: 44:9c:fb:74:09:7f:cb:33:0c:8d:01:d2:b3:ca:6f: c5:ee:b6:20:5a:b4:8e:af:de:e3:37:f4:db:2d:7c: 6e:d0:81:5c:89:ff:ed:76:50:d8:07:6e:14:d2:b1: 32:ad:b3:40:99:6a:af:fa:4c:54:3a:c2:92:29:ca: e0:b1:ef:ba:fb:09:10:cb:55:57:de:90:ef:11:63: ac:54:ca:89:e2:b3:da:43:97:b7:7c:d8:50:44:87: 8d:a8:a5:a7:e3:fd:61:87:74:7f:47:6a:fb:8a:d8: 03:4b:6e:4b:86:e2:78:4a:67:af:9f:b3:ef:b5:d3: 3d:ec:08:7c:bc:8f:b4:72:1c:74:66:48:d7:72:7f: 08:36:4f:98:90:f9:a1:3a:4f:27:d2:d4:99:d1:ce: 01:2d:b6:49:77:74:5f:a4:3a:b8:b2:fb:fa:72:8e: 3d:36:63:7e:cd:34:ce:06:48:6f:4f:e8:47:40:ac: c5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:98:AF:FE:9F:57:19:BA:13:B0:B3:80:10:89:3C:C1:2D:20:4B:26 X509v3 Authority Key Identifier: keyid:78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/39FBB4168B9811EE9C0BA252C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.42.212.0/24 116.193.157.0/24 IPv6: 2404:be00::/32 Signature Algorithm: sha256WithRSAEncryption 0a:ac:2c:16:5f:14:2c:91:5d:d6:65:02:57:e8:0a:06:65:8a: 33:62:8e:e1:dc:3b:24:45:2c:b0:d8:98:a2:b7:11:f3:71:5d: e2:01:4d:61:06:0c:df:43:dd:16:ac:fb:08:d0:70:bc:bf:4d: 47:be:09:f4:b0:df:97:d0:12:4c:62:49:77:01:a0:86:d0:4b: 9b:a7:4e:fc:b0:40:2a:10:41:20:29:9f:fc:c2:79:33:52:be: 06:e8:5a:40:3a:07:d3:86:57:c2:1b:30:87:15:0c:39:cf:a6: 67:97:61:ef:09:ee:ba:57:3e:40:ac:eb:b5:60:07:2f:28:48: 33:e0:1d:0a:4b:6a:c9:a8:af:e9:cb:55:25:68:be:dc:d9:71: f9:af:d5:be:ff:27:fa:88:a3:44:97:97:f2:2e:66:d6:29:50: b2:b8:db:e4:11:51:cd:16:4c:8e:83:0f:57:f7:88:90:27:82: 5b:6f:00:5d:90:e3:7d:5e:23:0b:3b:e9:17:9c:91:f9:cf:30: 5f:fc:54:a8:52:be:6a:4c:ee:71:f9:0c:2d:98:71:c8:3e:4d: d8:d3:cc:b3:d2:8c:7b:98:71:99:ab:24:5d:78:43:49:70:53: 31:aa:9e:7c:47:64:0e:8c:b5:53:be:88:af:a6:4d:fb:03:88: 9c:89:40:40 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICBvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ2NUExMTAvBgNVBAUTKDc4NUUwQkZGMDdCOTAzN0M2MDMzNEIyREYzMzY5Mjgx QTREQzNGNUEwHhcNMjQwNzI0MjI0MDU5WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmExODJmYi1jZjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumICE/yNZmDlQukIjRFQeByrfEELc3+/MvQ29l93JYkq9ZDHnm2S3kDW6Qu1 NB859fMPG0yG8GGfnVcFMI9uVn59zCOvDj10GV9EnPt0CX/LMwyNAdKzym/F7rYg WrSOr97jN/TbLXxu0IFcif/tdlDYB24U0rEyrbNAmWqv+kxUOsKSKcrgse+6+wkQ y1VX3pDvEWOsVMqJ4rPaQ5e3fNhQRIeNqKWn4/1hh3R/R2r7itgDS25LhuJ4Smev n7PvtdM97Ah8vI+0chx0ZkjXcn8INk+YkPmhOk8n0tSZ0c4BLbZJd3RfpDq4svv6 co49NmN+zTTOBkhvT+hHQKzF8wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFPiYr/6f Vxm6E7CzgBCJPMEtIEsmMB8GA1UdIwQYMBaAFHheC/8HuQN8YDNLLfM2koGk3D9a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDY1QS84ODk0QTcwQTFD NTUxMUVCQUI4OEMxODJDNEY5QUUwMi9lRjRMX3dlNUEzeGdNMHN0OHphU2dhVGNQ MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VGNExfd2U1QTN4Z00wc3Q4emFTZ2FUY1Axby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTQ2NUEvODg5NEE3MEExQzU1MTFFQkFCODhDMTgyQzRGOUFFMDIvMzlGQkI0MTY4 Qjk4MTFFRTlDMEJBMjUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBABnKtQDBAB0wZ0wDQQCAAIwBwMFACQEvgAwDQYJKoZIhvcN AQELBQADggEBAAqsLBZfFCyRXdZlAlfoCgZlijNijuHcOyRFLLDYmKK3EfNxXeIB TWEGDN9D3Ras+wjQcLy/TUe+CfSw35fQEkxiSXcBoIbQS5unTvywQCoQQSApn/zC eTNSvgboWkA6B9OGV8IbMIcVDDnPpmeXYe8J7rpXPkCs67VgBy8oSDPgHQpLasmo r+nLVSVovtzZcfmv1b7/J/qIo0SXl/IuZtYpULK42+QRUc0WTI6DD1f3iJAngltv AF2Q431eIws76ReckfnPMF/8VKhSvmpM7nH5DC2Yccg+TdjTzLPSjHuYcZmrJF14 Q0lwUzGqnnxHZA6MtVO+iK+mTfsDiJyJQEA= -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:40 2024 by rpki-client on console-ams.rpki-client.org