$ rpki-client -vvf rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/4C65E804F68911E98EF88758C4F9AE02.roa File: 4C65E804F68911E98EF88758C4F9AE02.roa (raw, json) Hash identifier: zFrcb85HAJuL6Bhfb2b96V9bEObMT8DTzq80F6Mn5Vo= Subject key identifier: 57:0C:03:66:2B:00:60:44:25:AC:C2:E1:C4:C9:96:91:F1:98:68:3E Certificate issuer: /CN=A915C094/serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB Certificate serial: 0C18 Authority key identifier: 4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/4C65E804F68911E98EF88758C4F9AE02.roa Signing time: Wed 14 Aug 2024 20:43:04 +0000 ROA not before: Wed 14 Aug 2024 20:43:04 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 138509 IP address blocks: 103.127.92.0/24 maxlen: 24 103.127.93.0/24 maxlen: 24 2404:1dc0::/32 maxlen: 32 2404:1dc0:300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3096 (0xc18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C094/serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB Validity Not Before: Aug 14 20:43:04 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=66bd16d7-ec6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:cd:04:7a:63:cc:e3:87:d7:49:cf:78:c4:17: 7d:19:4a:4c:e6:e1:3c:24:b6:84:70:9f:44:a1:dc: e2:b7:97:ad:13:c6:79:4e:cf:90:05:82:e3:6f:6c: ea:6d:3b:7c:8e:cb:ee:26:74:55:92:43:fc:cf:37: d6:a6:a8:1c:06:4e:98:d6:4d:0c:b1:dc:14:92:d4: 24:11:3e:9a:45:d9:64:0b:10:79:96:40:29:09:b4: c2:99:ec:d4:dc:2a:65:62:98:0a:b2:0f:63:7d:24: 79:2d:3a:13:11:1c:33:da:c9:19:b5:88:d1:a0:11: d1:81:81:07:27:3b:7a:1f:95:7b:cd:72:68:9e:44: f8:8f:0b:ee:50:fd:53:b3:d0:66:76:a4:76:d7:c3: 4f:df:56:87:52:20:11:ee:01:7c:5d:7d:62:d1:36: 0e:d8:04:dc:b4:85:2a:34:ca:c5:c8:25:8e:86:76: c1:d8:43:12:55:94:17:96:cf:4f:fa:23:37:c3:de: 42:24:eb:a6:bc:d1:52:4a:f5:31:6d:cc:bd:e7:da: ce:b3:19:a8:90:96:0e:47:7e:b3:41:df:3c:5d:bb: 99:04:1c:1a:61:a0:1a:06:2f:db:aa:ee:c8:c8:90: 67:fe:91:b8:f4:52:3b:47:07:d0:54:0c:4c:1a:8d: 05:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0C:03:66:2B:00:60:44:25:AC:C2:E1:C4:C9:96:91:F1:98:68:3E X509v3 Authority Key Identifier: keyid:4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/4C65E804F68911E98EF88758C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.127.92.0/23 IPv6: 2404:1dc0::/32 Signature Algorithm: sha256WithRSAEncryption 74:2c:f4:b2:b0:27:64:7b:7b:02:8c:f6:21:7f:7f:1c:51:89: 3c:3a:f2:61:b0:19:f5:7b:48:09:f0:b5:49:ff:4b:70:84:10: e8:8e:66:13:75:8d:8b:df:c6:8e:99:cd:8e:84:76:d8:dc:d7: 3a:98:4d:0c:d9:06:a6:45:34:fd:d0:55:e5:d0:cd:af:b1:32: 3b:2b:0d:f7:ae:5b:53:12:4c:6d:1f:d1:58:b8:cc:6e:05:cd: a8:b2:e9:85:72:1a:3b:cd:69:e2:0d:c1:08:80:7b:c6:94:f8: 8d:28:13:59:bf:5b:d0:db:bc:a2:f9:bc:27:46:ec:aa:c6:d4: d4:ff:47:db:e3:bb:86:74:c3:40:9b:72:b2:9a:97:bc:af:47: bc:5b:22:59:34:50:6a:d1:78:d8:40:20:50:3e:6d:22:8d:f8: c2:74:3f:b8:64:ae:3e:7b:6b:f4:37:23:3d:1a:61:0d:b3:1e: 22:8f:f9:d3:39:d0:96:4a:f7:44:fd:2b:fa:a2:36:46:80:21: ba:ab:04:9d:7e:06:ab:12:24:9f:21:77:60:d4:3f:57:e7:10: 36:e1:33:17:ad:c5:d8:ff:74:ac:b4:cf:ac:e1:bd:2b:66:57: db:38:cd:38:cb:72:68:0c:4f:22:8d:e1:79:94:db:70:fc:ad: e7:21:4c:58 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMwOTQxMTAvBgNVBAUTKDRDRjJERDY2RENBNDJGRUFGNjBDMzhFNzY5NUIwM0I0 M0U3RTdBREIwHhcNMjQwODE0MjA0MzA0WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmJkMTZkNy1lYzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4s0EemPM44fXSc94xBd9GUpM5uE8JLaEcJ9Eodzit5etE8Z5Ts+QBYLjb2zq bTt8jsvuJnRVkkP8zzfWpqgcBk6Y1k0MsdwUktQkET6aRdlkCxB5lkApCbTCmezU 3CplYpgKsg9jfSR5LToTERwz2skZtYjRoBHRgYEHJzt6H5V7zXJonkT4jwvuUP1T s9BmdqR218NP31aHUiAR7gF8XX1i0TYO2ATctIUqNMrFyCWOhnbB2EMSVZQXls9P +iM3w95CJOumvNFSSvUxbcy959rOsxmokJYOR36zQd88XbuZBBwaYaAaBi/bqu7I yJBn/pG49FI7RwfQVAxMGo0FiwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFFcMA2Yr AGBEJazC4cTJlpHxmGg+MB8GA1UdIwQYMBaAFEzy3WbcpC/q9gw452lbA7Q+fnrb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzA5NC8wMUY4RUI5MkY2 ODcxMUU5QTlGQjlDNTVDNEY5QUUwMi9UUExkWnR5a0wtcjJERGpuYVZzRHRENS1l dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RQTGRadHlrTC1yMkREam5hVnNEdEQ1LWV0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUMwOTQvMDFGOEVCOTJGNjg3MTFFOUE5RkI5QzU1QzRGOUFFMDIvNEM2NUU4MDRG Njg5MTFFOThFRjg4NzU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnf1wwDQQCAAIwBwMFACQEHcAwDQYJKoZIhvcNAQELBQAD ggEBAHQs9LKwJ2R7ewKM9iF/fxxRiTw68mGwGfV7SAnwtUn/S3CEEOiOZhN1jYvf xo6ZzY6Edtjc1zqYTQzZBqZFNP3QVeXQza+xMjsrDfeuW1MSTG0f0Vi4zG4Fzaiy 6YVyGjvNaeINwQiAe8aU+I0oE1m/W9DbvKL5vCdG7KrG1NT/R9vju4Z0w0CbcrKa l7yvR7xbIlk0UGrReNhAIFA+bSKN+MJ0P7hkrj57a/Q3Iz0aYQ2zHiKP+dM50JZK 90T9K/qiNkaAIbqrBJ1+BqsSJJ8hd2DUP1fnEDbhMxetxdj/dKy0z6zhvStmV9s4 zTjLcmgMTyKN4XmU23D8rechTFg= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:03 2024 by rpki-client on console-ams.rpki-client.org