$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/4B696C52F34311EAB4034710C4F9AE02.roa File: 4B696C52F34311EAB4034710C4F9AE02.roa (raw, json) Hash identifier: WyMJ1jUI8RllCu4tUSg8X7OX8QYWAuhM07CgjE9LNa4= Subject key identifier: 83:C5:28:2C:4A:7B:95:63:1E:8B:6C:EE:D9:D2:66:3B:98:F3:59:F7 Certificate issuer: /CN=A915DB03/serialNumber=60F4CFA966F9E5E20374CB2ED4706412DDA21C4F Certificate serial: 0755 Authority key identifier: 60:F4:CF:A9:66:F9:E5:E2:03:74:CB:2E:D4:70:64:12:DD:A2:1C:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YPTPqWb55eIDdMsu1HBkEt2iHE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/4B696C52F34311EAB4034710C4F9AE02.roa Signing time: Thu 26 Sep 2024 21:20:38 +0000 ROA not before: Thu 26 Sep 2024 21:20:38 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 141156 IP address blocks: 103.155.114.0/24 maxlen: 24 103.155.115.0/24 maxlen: 24 2001:df4:c680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.crl rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YPTPqWb55eIDdMsu1HBkEt2iHE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1877 (0x755) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DB03/serialNumber=60F4CFA966F9E5E20374CB2ED4706412DDA21C4F Validity Not Before: Sep 26 21:20:38 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66f5d025-20ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:60:5a:4f:8a:a2:d4:a0:3e:a2:48:94:3c:1c: ef:d8:26:61:8c:bc:8b:0c:dd:37:cd:7c:19:c7:b2: d6:f7:05:30:c4:2b:6f:90:39:77:e6:7c:03:2d:c4: c9:ba:04:12:5b:e3:bf:73:fe:2a:ee:1e:c3:68:c9: 77:dd:55:3f:7a:51:11:8c:98:21:1d:6a:49:f6:54: b2:72:96:6b:bc:aa:be:98:a2:81:a7:e6:8a:e4:99: db:a6:d2:8d:8d:4d:05:ff:cf:29:f4:01:7e:57:28: e0:50:f2:2b:21:ed:18:0f:d7:d8:00:c8:71:62:d9: 63:81:47:db:57:e1:fa:07:9c:25:7c:69:b3:9f:94: 84:08:43:b6:e3:cc:86:44:22:82:cc:83:03:76:5f: fb:62:c3:07:97:4c:15:15:a5:91:bc:25:bf:f6:74: c9:35:24:09:a1:1d:6b:f1:51:80:62:a8:50:04:56: df:9f:01:a0:f5:17:4e:0d:b0:eb:a6:f4:64:b7:da: 82:b4:72:71:c1:25:f4:79:3b:aa:e7:3c:9d:9b:b1: fc:38:57:09:ad:32:68:99:4b:d4:0f:d3:07:c6:5a: 54:55:41:35:23:80:9c:67:df:d6:2d:3b:d6:17:a7: 78:fa:b4:e5:a3:38:6a:56:92:a9:8a:12:cf:38:0d: 10:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C5:28:2C:4A:7B:95:63:1E:8B:6C:EE:D9:D2:66:3B:98:F3:59:F7 X509v3 Authority Key Identifier: keyid:60:F4:CF:A9:66:F9:E5:E2:03:74:CB:2E:D4:70:64:12:DD:A2:1C:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/YPTPqWb55eIDdMsu1HBkEt2iHE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YPTPqWb55eIDdMsu1HBkEt2iHE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB03/2B0E2738F34111EAABE5C309C4F9AE02/4B696C52F34311EAB4034710C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.155.114.0/23 IPv6: 2001:df4:c680::/48 Signature Algorithm: sha256WithRSAEncryption 0c:bc:38:41:9d:4d:be:1c:ed:46:be:6c:4b:e2:c9:11:96:da: f5:c4:b5:c4:7f:13:96:62:b3:42:3f:e2:20:b6:61:0f:26:e3: 62:1e:69:ba:50:bf:75:a6:82:ea:2a:cc:b8:e4:28:6d:04:3c: d6:0d:e8:c1:52:7c:9f:36:12:c1:77:de:04:2c:f1:57:02:12: e5:bf:df:dd:20:84:9c:7a:02:cf:f3:19:61:25:61:94:8c:de: 59:1f:f4:fd:db:2a:c1:71:40:f7:d6:bd:0e:4f:7e:f9:6a:1d: ef:0c:d8:3b:17:df:89:f6:eb:0f:77:64:d4:8f:a0:f6:e9:95: 20:fb:85:0f:24:14:0f:ec:73:f6:08:ae:ed:5d:f9:77:50:26: bf:9e:6b:8e:34:89:70:c6:d4:ee:e2:53:55:94:85:70:b3:5e: 86:6e:6f:b9:31:58:df:95:fb:cb:37:42:06:59:79:6d:56:75: 26:d5:f3:72:e0:88:a7:01:b6:44:41:69:bd:33:00:2c:90:40: 55:04:a0:c5:78:a0:ae:08:81:cb:67:26:8f:df:fc:ca:3e:63: d7:05:5a:04:23:f1:38:36:1a:22:64:bb:ae:b8:3e:77:5a:bd: d9:11:01:e9:56:61:1e:ee:e7:f0:77:a2:42:d1:60:fb:7f:b2: be:cf:f9:21 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICB1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURCMDMxMTAvBgNVBAUTKDYwRjRDRkE5NjZGOUU1RTIwMzc0Q0IyRUQ0NzA2NDEy RERBMjFDNEYwHhcNMjQwOTI2MjEyMDM4WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmY1ZDAyNS0yMGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWBaT4qi1KA+okiUPBzv2CZhjLyLDN03zXwZx7LW9wUwxCtvkDl35nwDLcTJ ugQSW+O/c/4q7h7DaMl33VU/elERjJghHWpJ9lSycpZrvKq+mKKBp+aK5JnbptKN jU0F/88p9AF+VyjgUPIrIe0YD9fYAMhxYtljgUfbV+H6B5wlfGmzn5SECEO248yG RCKCzIMDdl/7YsMHl0wVFaWRvCW/9nTJNSQJoR1r8VGAYqhQBFbfnwGg9RdODbDr pvRkt9qCtHJxwSX0eTuq5zydm7H8OFcJrTJomUvUD9MHxlpUVUE1I4CcZ9/WLTvW F6d4+rTlozhqVpKpihLPOA0QnwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFIPFKCxK e5VjHots7tnSZjuY81n3MB8GA1UdIwQYMBaAFGD0z6lm+eXiA3TLLtRwZBLdohxP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REIwMy8yQjBFMjczOEYz NDExMUVBQUJFNUMzMDlDNEY5QUUwMi9ZUFRQcVdiNTVlSURkTXN1MUhCa0V0MmlI RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lQVFBxV2I1NWVJRGRNc3UxSEJrRXQyaUhFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NURCMDMvMkIwRTI3MzhGMzQxMTFFQUFCRTVDMzA5QzRGOUFFMDIvNEI2OTZDNTJG MzQzMTFFQUI0MDM0NzEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnm3IwDwQCAAIwCQMHACABDfTGgDANBgkqhkiG9w0BAQsF AAOCAQEADLw4QZ1NvhztRr5sS+LJEZba9cS1xH8TlmKzQj/iILZhDybjYh5pulC/ daaC6irMuOQobQQ81g3owVJ8nzYSwXfeBCzxVwIS5b/f3SCEnHoCz/MZYSVhlIze WR/0/dsqwXFA99a9Dk9++Wod7wzYOxffifbrD3dk1I+g9umVIPuFDyQUD+xz9giu 7V35d1Amv55rjjSJcMbU7uJTVZSFcLNehm5vuTFY35X7yzdCBll5bVZ1JtXzcuCI pwG2REFpvTMALJBAVQSgxXigrgiBy2cmj9/8yj5j1wVaBCPxODYaImS7rrg+d1q9 2REB6VZhHu7n8HeiQtFg+3+yvs/5IQ== -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:28 2024 by rpki-client on console-ams.rpki-client.org