$ rpki-client -vvf rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/DBDAFF6CC99611E9A41BCF75C4F9AE02.roa File: DBDAFF6CC99611E9A41BCF75C4F9AE02.roa (raw, json) Hash identifier: Ff3/yMR0vWErszLBIPlNKjSAb7MzXOTFYgb7mDfdJMY= Subject key identifier: 32:67:5F:9A:AA:34:FF:24:53:14:2B:6F:7D:01:C7:8B:99:65:DF:E6 Certificate issuer: /CN=A915617E/serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Certificate serial: 0CE1 Authority key identifier: D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/DBDAFF6CC99611E9A41BCF75C4F9AE02.roa Signing time: Thu 08 Aug 2024 18:26:25 +0000 ROA not before: Thu 08 Aug 2024 18:26:25 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 24382 IP address blocks: 103.141.66.0/23 maxlen: 24 2001:df0:f380::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:58:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3297 (0xce1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915617E/serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Validity Not Before: Aug 8 18:26:25 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66b50dd1-5858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ef:3e:cd:b1:fc:09:a7:35:dd:58:cb:78:c0: dd:e8:02:48:d4:81:0d:ed:92:54:4e:40:4b:9f:61: b5:f3:2d:4a:85:fb:f3:0b:10:62:20:2f:c5:b6:d1: 5c:fe:1c:de:6e:92:7e:b8:80:20:a7:28:a9:6d:ad: 35:e2:4a:06:f8:c6:b8:44:93:5b:d0:cc:79:d0:79: a1:92:69:5a:09:8c:12:bd:4a:c5:4f:25:0a:bb:83: 4d:5c:08:38:aa:5d:a4:58:be:74:ac:43:26:be:ea: 7f:74:f4:c5:9a:d0:44:bf:c3:d7:32:7f:12:67:d6: 95:61:f6:7e:e0:aa:b8:6f:88:2c:ae:ad:f5:eb:93: 8e:20:28:2d:c4:de:7e:e5:9d:33:7c:0b:a4:93:84: 81:43:76:8c:46:60:f5:65:47:5f:82:65:32:b4:9d: e1:a3:0d:56:3d:51:02:22:9f:36:c9:96:5a:be:26: cc:a9:47:1a:3a:68:6f:82:15:c1:67:11:98:3e:9f: ed:f9:74:3d:e4:5c:ea:ff:7d:59:20:f0:89:8b:f1: da:45:e0:8c:94:10:78:b5:3b:8b:23:02:6f:ca:9d: 6e:82:e1:36:bc:1c:90:27:52:e4:21:65:55:75:1c: 33:14:48:ea:53:1d:1f:02:f5:ba:d5:c3:ba:f2:cf: 63:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:67:5F:9A:AA:34:FF:24:53:14:2B:6F:7D:01:C7:8B:99:65:DF:E6 X509v3 Authority Key Identifier: keyid:D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/DBDAFF6CC99611E9A41BCF75C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.141.66.0/23 IPv6: 2001:df0:f380::/48 Signature Algorithm: sha256WithRSAEncryption 5d:e1:9c:07:1e:44:9b:13:b9:bf:2b:71:f9:01:92:8c:34:7f: 50:07:6c:9c:02:3c:e6:80:ce:67:43:a3:0c:99:b6:fc:c8:43: 4a:0a:3c:ef:c9:de:0f:b9:92:b2:c1:db:19:01:73:61:92:db: 2d:36:1b:0d:e7:2d:2d:cc:75:32:36:ea:94:c4:b5:d1:00:20: 48:cf:21:74:cc:b8:90:d2:5d:fc:a8:ed:ad:e4:a8:c3:a0:65: 0a:05:d1:88:a7:db:f4:d0:4e:73:c0:d3:66:06:7d:df:1d:0b: eb:c3:bd:b4:4c:bc:b5:ce:ad:fe:ef:61:7f:37:84:2e:96:dc: ff:4a:1c:b6:71:aa:6f:1c:c3:84:cc:71:73:dd:1f:a8:05:be: 48:46:70:a0:07:e1:65:21:46:fc:cc:86:2d:6d:ae:ed:fb:08: 8a:f6:fd:06:3c:78:66:28:a4:3a:e4:51:4a:1d:46:49:fe:54: 90:5e:27:5e:83:ef:3a:bb:5f:e0:1a:3e:13:a6:90:36:8b:44: 6f:d4:76:c7:86:08:f5:40:d7:91:1f:ad:be:f2:2d:d4:e9:dd: 44:01:e0:b0:47:2d:10:cb:c6:ff:e0:7a:4d:e0:f5:c7:9b:61: 5b:2f:8f:ab:c0:46:fa:89:3f:7e:88:cd:2c:4d:a7:0c:e0:e8: c5:b0:3a:5d -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxN0UxMTAvBgNVBAUTKEQyOEM1MkVEMDkwQzUzOUMxMEYyMjJERUVDRDlBNzND NDlBMTY4MDQwHhcNMjQwODA4MTgyNjI1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmI1MGRkMS01ODU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoO8+zbH8Cac13VjLeMDd6AJI1IEN7ZJUTkBLn2G18y1KhfvzCxBiIC/FttFc /hzebpJ+uIAgpyipba014koG+Ma4RJNb0Mx50HmhkmlaCYwSvUrFTyUKu4NNXAg4 ql2kWL50rEMmvup/dPTFmtBEv8PXMn8SZ9aVYfZ+4Kq4b4gsrq3165OOICgtxN5+ 5Z0zfAukk4SBQ3aMRmD1ZUdfgmUytJ3how1WPVECIp82yZZavibMqUcaOmhvghXB ZxGYPp/t+XQ95Fzq/31ZIPCJi/HaReCMlBB4tTuLIwJvyp1uguE2vByQJ1LkIWVV dRwzFEjqUx0fAvW61cO68s9j+wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDJnX5qq NP8kUxQrb30Bx4uZZd/mMB8GA1UdIwQYMBaAFNKMUu0JDFOcEPIi3uzZpzxJoWgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjE3RS9FMUFEQjc0NkM5 OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1d1E4aUxlN05tblBFbWhh QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBveFM3UWtNVTV3UThpTGU3Tm1uUEVtaGFBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTYxN0UvRTFBREI3NDZDOTk1MTFFOUJBQUFCMTc0QzRGOUFFMDIvREJEQUZGNkND OTk2MTFFOUE0MUJDRjc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnjUIwDwQCAAIwCQMHACABDfDzgDANBgkqhkiG9w0BAQsF AAOCAQEAXeGcBx5EmxO5vytx+QGSjDR/UAdsnAI85oDOZ0OjDJm2/MhDSgo878ne D7mSssHbGQFzYZLbLTYbDectLcx1MjbqlMS10QAgSM8hdMy4kNJd/KjtreSow6Bl CgXRiKfb9NBOc8DTZgZ93x0L68O9tEy8tc6t/u9hfzeELpbc/0octnGqbxzDhMxx c90fqAW+SEZwoAfhZSFG/MyGLW2u7fsIivb9Bjx4ZiikOuRRSh1GSf5UkF4nXoPv Ortf4Bo+E6aQNotEb9R2x4YI9UDXkR+tvvIt1OndRAHgsEctEMvG/+B6TeD1x5th Wy+Pq8BG+ok/fojNLE2nDODoxbA6XQ== -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:58 2024 by rpki-client on console-fra.rpki-client.org