$ rpki-client -vvf rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/D39B04847C4B11EEB4EA3632C4F9AE02.roa File: D39B04847C4B11EEB4EA3632C4F9AE02.roa (raw, json) Hash identifier: VkMCaNU7sXjTR/CQAkH/z8BpEQbO8jbw+1o8r2q8dPA= Subject key identifier: F9:11:B8:1A:30:CE:9B:5A:EE:B0:C8:6E:43:2C:E8:1E:48:D6:D8:EC Certificate issuer: /CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91 Certificate serial: AC Authority key identifier: 00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/D39B04847C4B11EEB4EA3632C4F9AE02.roa Signing time: Tue 03 Sep 2024 06:48:49 +0000 ROA not before: Tue 03 Sep 2024 06:48:49 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 56038 IP address blocks: 103.247.184.0/24 maxlen: 24 103.247.185.0/24 maxlen: 24 103.247.186.0/24 maxlen: 24 103.247.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91 Validity Not Before: Sep 3 06:48:49 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d6b151-95c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ce:ce:8d:ed:d1:f1:57:04:61:27:4c:e9:07: 29:0e:e3:ec:0c:5b:2e:f3:86:07:25:e9:be:2d:31: 84:b7:48:90:2f:ba:94:06:4b:ec:63:94:43:3a:7d: b5:b4:de:c7:43:21:11:bb:63:33:9b:ef:b8:10:43: 95:c5:09:4d:f9:e1:12:c2:ee:b0:6d:7b:ef:06:dd: b8:18:17:70:db:f1:a7:50:61:41:d1:12:27:cd:3d: 25:2a:69:f1:6d:fe:f8:cd:d3:ab:84:a9:23:57:30: 87:23:93:f1:a9:5d:8d:6f:ec:a8:67:df:98:ca:25: c2:70:ee:8a:bc:20:79:f7:e0:9d:b6:7a:c8:82:fe: 75:fa:ec:df:b6:8a:cb:c7:70:1b:e8:08:f0:2b:88: d5:3e:79:2d:2c:23:1d:76:c9:81:1f:45:4e:34:a8: 34:67:c2:bc:60:f9:d5:d6:15:0c:e4:8f:c5:58:62: 15:b7:13:7b:89:ac:66:66:20:3e:2f:a5:46:6a:79: bb:88:8b:ca:66:4d:63:50:b0:de:f2:42:66:bf:ce: 23:f0:a5:36:26:30:eb:8a:93:6b:43:6e:7a:52:7e: fd:8f:9a:5f:39:00:ac:23:db:ad:5c:d1:c0:c2:9d: 96:87:11:04:22:f5:e3:23:99:f6:fe:c3:06:4b:a0: 08:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:11:B8:1A:30:CE:9B:5A:EE:B0:C8:6E:43:2C:E8:1E:48:D6:D8:EC X509v3 Authority Key Identifier: keyid:00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/D39B04847C4B11EEB4EA3632C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.247.184.0/22 Signature Algorithm: sha256WithRSAEncryption a9:c7:78:a7:6f:5c:3b:e0:8f:27:15:aa:2b:17:8a:b3:8f:77: e8:da:82:6c:b9:0c:22:e2:0b:26:74:6c:b5:14:33:14:43:f7: 5e:e1:a9:1d:2d:d5:0d:78:e0:8d:d9:0d:e6:03:06:3e:bd:25: 1b:48:18:69:8f:9c:39:a7:5a:ab:ea:55:bc:a8:b6:2d:d3:e2: 1c:70:94:0f:8a:ae:dc:14:f4:bb:bb:4b:16:28:75:fd:9a:8b: 4e:5e:ba:04:c0:4a:93:99:2a:10:03:73:80:e4:70:95:4f:98: 72:ea:06:83:33:be:09:9e:59:aa:bd:8d:6c:64:ea:fb:b9:6b: b3:02:47:a3:e6:dd:1d:85:53:cf:6f:49:4c:3d:54:d7:d0:39: 54:f4:fc:2e:40:f0:96:c1:cc:8b:9f:07:67:f5:f5:1e:70:80: fb:06:81:6d:5a:67:7a:f1:f0:22:a5:ad:b1:c4:1a:f5:95:d3: 66:5a:62:83:6b:18:ab:fc:f9:b1:e8:9c:98:ef:30:37:c0:d7: a1:43:47:36:27:9b:ba:a0:e8:8e:ac:28:63:c4:42:9e:7d:a0: 0c:76:2d:2a:66:7b:4e:3d:ce:45:62:f8:42:86:0f:39:51:b0: 81:66:d5:7f:9c:a1:8d:77:e9:21:10:b2:fa:b6:70:b6:a2:0e: 40:a8:79:bd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU2NzgxMTAvBgNVBAUTKDAwOEY1RDA2RjBGRUZDNDBGRDgzMEIyNkNENzY2MEEz ODMxMTBDOTEwHhcNMjQwOTAzMDY0ODQ5WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ2YjE1MS05NWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu87Oje3R8VcEYSdM6QcpDuPsDFsu84YHJem+LTGEt0iQL7qUBkvsY5RDOn21 tN7HQyERu2Mzm++4EEOVxQlN+eESwu6wbXvvBt24GBdw2/GnUGFB0RInzT0lKmnx bf74zdOrhKkjVzCHI5PxqV2Nb+yoZ9+YyiXCcO6KvCB59+CdtnrIgv51+uzftorL x3Ab6AjwK4jVPnktLCMddsmBH0VONKg0Z8K8YPnV1hUM5I/FWGIVtxN7iaxmZiA+ L6VGanm7iIvKZk1jULDe8kJmv84j8KU2JjDripNrQ256Un79j5pfOQCsI9utXNHA wp2WhxEEIvXjI5n2/sMGS6AI0wIDAQABo4IClTCCApEwHQYDVR0OBBYEFPkRuBow zpta7rDIbkMs6B5I1tjsMB8GA1UdIwQYMBaAFACPXQbw/vxA/YMLJs12YKODEQyR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTY3OC83QUVFRDg2Mjc5 MUExMUVFQUNBMUFEMkJDNEY5QUUwMi9BSTlkQnZELV9FRDlnd3NtelhaZ280TVJE SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FJOWRCdkQtX0VEOWd3c216WFpnbzRNUkRKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUU2NzgvN0FFRUQ4NjI3OTFBMTFFRUFDQTFBRDJCQzRGOUFFMDIvRDM5QjA0ODQ3 QzRCMTFFRUI0RUEzNjMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn97gwDQYJKoZIhvcNAQELBQADggEBAKnHeKdvXDvgjycV qisXirOPd+jagmy5DCLiCyZ0bLUUMxRD917hqR0t1Q144I3ZDeYDBj69JRtIGGmP nDmnWqvqVbyoti3T4hxwlA+KrtwU9Lu7SxYodf2ai05eugTASpOZKhADc4DkcJVP mHLqBoMzvgmeWaq9jWxk6vu5a7MCR6Pm3R2FU89vSUw9VNfQOVT0/C5A8JbBzIuf B2f19R5wgPsGgW1aZ3rx8CKlrbHEGvWV02ZaYoNrGKv8+bHonJjvMDfA16FDRzYn m7qg6I6sKGPEQp59oAx2LSpme049zkVi+EKGDzlRsIFm1X+coY136SEQsvq2cLai DkCoeb0= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:08 2024 by rpki-client on console-ams.rpki-client.org