$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/719728B803EF11EAB301F66FC4F9AE02.roa File: 719728B803EF11EAB301F66FC4F9AE02.roa (raw, json) Hash identifier: //Y9sRim1JuVKbuAKlrRjn3d7mdHR+lghtxL77FdfiM= Subject key identifier: 6F:52:23:69:8D:A0:6D:FE:C6:38:1F:87:5B:CE:2E:83:CB:5C:CB:E4 Certificate issuer: /CN=A915DA5A/serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0 Certificate serial: 0BF2 Authority key identifier: B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/719728B803EF11EAB301F66FC4F9AE02.roa Signing time: Wed 20 Nov 2024 18:27:00 +0000 ROA not before: Wed 20 Nov 2024 18:27:00 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 139716 IP address blocks: 103.143.254.0/23 maxlen: 23 103.143.254.0/24 maxlen: 24 103.143.255.0/24 maxlen: 24 2001:df7:b080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3058 (0xbf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DA5A/serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0 Validity Not Before: Nov 20 18:27:00 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=673e29f3-8930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:42:f2:55:c0:34:eb:98:51:13:15:b4:5d:10: 28:d9:82:88:53:d1:80:b3:9e:eb:99:0b:cf:0a:18: 8f:b1:45:43:ac:21:24:b7:42:fc:1e:e2:3c:57:bf: 26:56:6c:01:c3:b4:96:0a:62:96:c2:66:3e:d1:63: fd:8a:9c:2b:28:16:39:07:d4:64:75:d4:4d:f5:d0: 6b:2a:63:23:93:12:36:10:a9:b4:c0:b5:0a:84:33: 22:d3:66:fc:76:c8:51:aa:dd:df:3b:e1:0b:2c:6f: d5:af:15:1f:35:fd:a5:5e:d5:d7:dd:d0:b9:e5:12: d3:91:7e:6c:24:ce:b7:6f:02:e5:80:e7:42:d9:d1: 76:56:41:47:f2:0d:0a:05:1b:e9:e5:9d:34:6d:06: 03:b2:4a:c0:fb:cb:54:4b:0b:d6:81:47:d1:5b:7a: 42:48:25:00:99:b2:da:17:c0:be:21:cd:3e:88:93: 0c:49:77:64:8d:47:1f:15:4a:be:2c:40:43:93:8d: f2:14:19:9c:c4:8b:bc:a8:b9:c2:7b:e7:25:65:78: 17:b1:46:80:66:38:ee:8b:94:55:c3:c2:76:df:1d: 4c:df:4d:df:cf:eb:5e:d4:ad:46:7b:59:a3:85:e9: f0:e0:8c:d2:81:1b:5d:3e:f3:40:94:92:76:96:dc: 3f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:52:23:69:8D:A0:6D:FE:C6:38:1F:87:5B:CE:2E:83:CB:5C:CB:E4 X509v3 Authority Key Identifier: keyid:B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/719728B803EF11EAB301F66FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.143.254.0/23 IPv6: 2001:df7:b080::/48 Signature Algorithm: sha256WithRSAEncryption 59:e0:4b:ff:b5:bf:96:6c:1e:20:e9:d8:50:90:63:6a:e9:9c: f6:d0:de:e9:02:1c:c4:a0:08:0c:58:49:47:c6:31:d5:fd:df: e3:2e:f2:47:4b:b5:a6:4e:13:56:03:c5:ed:e5:1d:78:49:a3: 9a:07:c5:1e:c2:87:1f:81:12:84:99:7c:27:fe:08:90:ad:74: 56:75:a6:96:07:75:f0:00:1f:22:98:47:cf:67:bd:10:4c:b0: 84:fd:0d:3a:22:b0:cd:e8:71:10:00:33:62:48:03:d4:43:e3: ae:e9:10:6c:23:ca:aa:37:63:fe:9f:23:ed:79:59:ca:b8:be: 87:57:5f:41:58:04:96:aa:4e:e6:24:b6:8b:b9:f1:5c:92:76: 66:62:60:01:fa:ff:29:f9:e0:ef:20:3b:18:c6:d7:1a:50:5e: 95:39:81:c0:38:04:36:cc:f2:18:5e:15:c8:15:4c:aa:ea:e6: 2a:09:9a:9f:fd:a7:f9:80:85:1a:87:9f:70:3c:2b:d9:48:8d: cf:3f:1e:17:61:ef:68:64:56:d6:eb:53:47:a6:ad:e8:4d:3e: 77:3c:85:f1:c3:51:a8:1c:6a:e6:b7:7a:02:70:e9:7c:e3:71: de:81:bf:f4:a1:d5:20:63:30:6c:02:d4:80:6f:22:cb:19:f4: 8d:3b:9d:d4 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICC/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURBNUExMTAvBgNVBAUTKEIxMTc3QjJCNEMyREY4QjMwNkQxNEE2NDMwMDcyODZG ODlENjlDQzAwHhcNMjQxMTIwMTgyNzAwWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzNlMjlmMy04OTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtELyVcA065hRExW0XRAo2YKIU9GAs57rmQvPChiPsUVDrCEkt0L8HuI8V78m VmwBw7SWCmKWwmY+0WP9ipwrKBY5B9RkddRN9dBrKmMjkxI2EKm0wLUKhDMi02b8 dshRqt3fO+ELLG/VrxUfNf2lXtXX3dC55RLTkX5sJM63bwLlgOdC2dF2VkFH8g0K BRvp5Z00bQYDskrA+8tUSwvWgUfRW3pCSCUAmbLaF8C+Ic0+iJMMSXdkjUcfFUq+ LEBDk43yFBmcxIu8qLnCe+clZXgXsUaAZjjui5RVw8J23x1M303fz+te1K1Ge1mj henw4IzSgRtdPvNAlJJ2ltw/VQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFG9SI2mN oG3+xjgfh1vOLoPLXMvkMB8GA1UdIwQYMBaAFLEXeytMLfizBtFKZDAHKG+J1pzA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REE1QS80NEU3NzBCMjAz RUUxMUVBQkNBMUExNkVDNEY5QUUwMi9zUmQ3SzB3dC1MTUcwVXBrTUFjb2I0bldu TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NSZDdLMHd0LUxNRzBVcGtNQWNvYjRuV25NQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NURBNUEvNDRFNzcwQjIwM0VFMTFFQUJDQTFBMTZFQzRGOUFFMDIvNzE5NzI4Qjgw M0VGMTFFQUIzMDFGNjZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnj/4wDwQCAAIwCQMHACABDfewgDANBgkqhkiG9w0BAQsF AAOCAQEAWeBL/7W/lmweIOnYUJBjaumc9tDe6QIcxKAIDFhJR8Yx1f3f4y7yR0u1 pk4TVgPF7eUdeEmjmgfFHsKHH4EShJl8J/4IkK10VnWmlgd18AAfIphHz2e9EEyw hP0NOiKwzehxEAAzYkgD1EPjrukQbCPKqjdj/p8j7XlZyri+h1dfQVgElqpO5iS2 i7nxXJJ2ZmJgAfr/Kfng7yA7GMbXGlBelTmBwDgENszyGF4VyBVMqurmKgman/2n +YCFGoefcDwr2UiNzz8eF2HvaGRW1utTR6at6E0+dzyF8cNRqBxq5rd6AnDpfONx 3oG/9KHVIGMwbALUgG8iyxn0jTud1A== -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:58 2024 by rpki-client on console-fra.rpki-client.org