$ rpki-client -vvf rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/0CDB293E6E3F11ED9DF20483C4F9AE02.roa File: 0CDB293E6E3F11ED9DF20483C4F9AE02.roa (raw, json) Hash identifier: HhHwFRrPmQKTZVgKvpvG7bpVWezUYsnBZKOPfKCB+PM= Subject key identifier: EC:E5:A5:34:6A:17:7C:61:AC:DD:E4:28:42:E7:DE:1D:A9:2C:BC:4A Certificate issuer: /CN=A915802F/serialNumber=ABAB9A58E6D935B7F2B386B273E34FDC3860D299 Certificate serial: 0170 Authority key identifier: AB:AB:9A:58:E6:D9:35:B7:F2:B3:86:B2:73:E3:4F:DC:38:60:D2:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6uaWObZNbfys4ayc-NP3Dhg0pk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/0CDB293E6E3F11ED9DF20483C4F9AE02.roa Signing time: Thu 07 Nov 2024 02:16:05 +0000 ROA not before: Thu 07 Nov 2024 02:16:05 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 136176 IP address blocks: 103.20.228.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.crl rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6uaWObZNbfys4ayc-NP3Dhg0pk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915802F/serialNumber=ABAB9A58E6D935B7F2B386B273E34FDC3860D299 Validity Not Before: Nov 7 02:16:05 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=672c22e4-3422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8d:1d:cf:f1:fc:e2:d7:c6:7a:4d:8b:43:99: 91:4b:41:33:2b:72:45:4e:81:62:9d:9d:e3:fa:0d: f2:dd:c3:49:ca:75:d7:c9:88:7c:15:9c:d6:4d:ba: 98:06:28:89:23:0a:0e:c5:9f:18:29:28:c9:ab:0e: 1a:f4:fb:5e:99:6a:7b:4a:c6:aa:33:8c:7a:bc:9b: 61:60:ce:ee:66:83:3f:67:58:f9:51:ca:4c:55:3e: e1:b1:59:1b:71:c2:ba:6f:38:e8:1b:37:a9:20:69: 13:e2:bb:dd:48:74:62:aa:67:32:fb:32:89:3a:92: 96:40:1b:99:b5:43:b0:ba:ef:bc:52:ac:64:1d:6f: 70:b0:75:c6:ff:60:60:a6:03:df:80:e2:b1:7c:76: b4:79:03:f8:44:be:75:99:1c:91:98:d6:ae:ee:41: 24:ae:99:cf:e0:d7:97:c8:74:f1:74:02:fd:dd:f8: 8c:88:13:2c:8c:bb:a8:85:a1:d0:0d:d4:60:f3:f3: 31:3b:6b:99:38:15:93:fa:bd:2d:c4:e1:86:83:57: ab:98:19:2b:5d:c3:0d:ca:7d:64:b0:50:b7:1f:5e: 53:1e:8a:e8:48:54:79:16:32:39:a8:ca:f6:bd:18: e3:35:b5:d1:59:80:cc:e5:f1:5a:a2:a2:d4:62:aa: 68:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E5:A5:34:6A:17:7C:61:AC:DD:E4:28:42:E7:DE:1D:A9:2C:BC:4A X509v3 Authority Key Identifier: keyid:AB:AB:9A:58:E6:D9:35:B7:F2:B3:86:B2:73:E3:4F:DC:38:60:D2:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6uaWObZNbfys4ayc-NP3Dhg0pk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/0CDB293E6E3F11ED9DF20483C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.20.228.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:33:8b:33:1a:d0:93:9d:ee:56:cd:15:a5:28:7f:63:e2:d6: 78:d0:27:47:ec:5b:2e:4b:f4:36:54:27:c7:d6:08:aa:5a:e3: a3:bb:8b:7f:d0:b9:ce:d5:9e:7f:63:91:42:bf:1f:7c:ff:2b: e5:0b:e2:e2:c1:c2:56:2e:b3:3b:aa:59:1e:c7:dc:2a:23:b6: 53:1b:50:c8:34:f6:c6:61:da:d7:91:e3:18:d3:9a:9e:f4:0f: 63:ca:a9:41:d7:ef:6c:94:ee:0c:6e:4d:f7:94:5a:12:60:88: e3:60:e7:ad:d1:f7:a1:83:75:9d:4f:78:9b:cc:50:0a:f9:9e: 16:99:5b:4a:2a:46:02:08:8a:a1:49:d8:c9:3d:db:59:b3:c4: f1:6d:47:87:7a:a1:be:83:a4:9b:96:46:3c:52:7c:0a:d9:1d: 0c:13:a9:eb:63:42:db:4e:68:1d:27:cb:14:5d:e8:02:49:dc: 7a:c2:34:48:07:3b:a3:5d:9a:65:24:44:24:28:02:ae:0d:94: 42:ce:31:f8:e0:8a:6e:41:38:a7:22:10:31:1d:ae:dd:c9:ad: e3:38:51:b3:98:79:f9:e7:54:28:68:37:81:af:eb:c0:96:ca: d3:23:11:1d:80:c0:af:16:66:ba:fc:b5:3b:b9:dd:11:fd:09: a6:48:a9:21 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwMkYxMTAvBgNVBAUTKEFCQUI5QTU4RTZEOTM1QjdGMkIzODZCMjczRTM0RkRD Mzg2MEQyOTkwHhcNMjQxMTA3MDIxNjA1WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJjMjJlNC0zNDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy40dz/H84tfGek2LQ5mRS0EzK3JFToFinZ3j+g3y3cNJynXXyYh8FZzWTbqY BiiJIwoOxZ8YKSjJqw4a9PtemWp7SsaqM4x6vJthYM7uZoM/Z1j5UcpMVT7hsVkb ccK6bzjoGzepIGkT4rvdSHRiqmcy+zKJOpKWQBuZtUOwuu+8UqxkHW9wsHXG/2Bg pgPfgOKxfHa0eQP4RL51mRyRmNau7kEkrpnP4NeXyHTxdAL93fiMiBMsjLuohaHQ DdRg8/MxO2uZOBWT+r0txOGGg1ermBkrXcMNyn1ksFC3H15THoroSFR5FjI5qMr2 vRjjNbXRWYDM5fFaoqLUYqpoIwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOzlpTRq F3xhrN3kKELn3h2pLLxKMB8GA1UdIwQYMBaAFKurmljm2TW38rOGsnPjT9w4YNKZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODAyRi9FNzRCRUUyMjZF M0IxMUVEQUI4ODZFNTVDNEY5QUUwMi9xNnVhV09iWk5iZnlzNGF5Yy1OUDNEaGcw cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E2dWFXT2JaTmJmeXM0YXljLU5QM0RoZzBway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTgwMkYvRTc0QkVFMjI2RTNCMTFFREFCODg2RTU1QzRGOUFFMDIvMENEQjI5M0U2 RTNGMTFFRDlERjIwNDgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnFOQwDQYJKoZIhvcNAQELBQADggEBAI0zizMa0JOd7lbN FaUof2Pi1njQJ0fsWy5L9DZUJ8fWCKpa46O7i3/Quc7Vnn9jkUK/H3z/K+UL4uLB wlYuszuqWR7H3CojtlMbUMg09sZh2teR4xjTmp70D2PKqUHX72yU7gxuTfeUWhJg iONg563R96GDdZ1PeJvMUAr5nhaZW0oqRgIIiqFJ2Mk921mzxPFtR4d6ob6DpJuW RjxSfArZHQwTqetjQttOaB0nyxRd6AJJ3HrCNEgHO6NdmmUkRCQoAq4NlELOMfjg im5BOKciEDEdrt3JreM4UbOYefnnVChoN4Gv68CWytMjER2AwK8WZrr8tTu53RH9 CaZIqSE= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:39 2024 by rpki-client on console-ams.rpki-client.org