$ rpki-client -vvf rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/77A9A556A23611EF9A9BD341C4F9AE02.roa File: 77A9A556A23611EF9A9BD341C4F9AE02.roa (raw, json) Hash identifier: xEyHYSI5oulqOzr6UtKqDhYvcGeLcIQ20I8A6gPVm48= Subject key identifier: 2F:B3:7F:97:DF:E5:92:AB:89:33:50:32:07:0B:E7:61:0F:79:52:3D Certificate issuer: /CN=A915F2CF/serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F Certificate serial: 0743 Authority key identifier: CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/77A9A556A23611EF9A9BD341C4F9AE02.roa Signing time: Thu 14 Nov 2024 03:13:49 +0000 ROA not before: Thu 14 Nov 2024 03:13:49 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 55720 IP address blocks: 45.123.100.0/24 maxlen: 24 103.9.149.0/24 maxlen: 24 103.9.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.crl rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1859 (0x743) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F2CF/serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F Validity Not Before: Nov 14 03:13:49 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=67356aed-4286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:28:6a:84:98:fc:d2:d3:98:dc:40:6b:f4:e5: 3f:05:30:47:ab:9b:60:df:77:e7:c5:4a:47:79:40: 77:aa:57:e4:b4:84:28:a4:48:e1:d2:d8:19:95:6e: 25:ea:a4:08:74:bf:af:93:f9:42:b6:90:21:18:f7: 33:54:86:93:97:f5:2d:40:58:29:73:0c:9e:01:c3: 3e:90:fd:5c:0a:e5:91:3a:e1:68:37:d6:83:c2:62: 6c:76:df:05:5e:64:b8:58:3c:20:4c:14:47:5b:09: a0:d5:e4:78:c1:80:d4:a6:79:4b:77:de:74:ac:b6: 4b:68:4b:43:da:ae:ff:81:11:2c:35:1c:6a:f8:c7: b6:33:3b:b9:ab:ab:b8:13:cc:f8:1f:2f:e9:b7:89: b8:f7:aa:54:af:2d:07:f4:df:ad:ef:3b:47:2a:94: 18:56:19:78:3f:21:69:61:fa:3b:44:45:1e:36:5e: 85:c4:f9:40:2f:1a:b8:c1:a3:f2:99:9c:bf:7f:63: 78:88:b2:54:aa:02:77:1d:2e:8e:64:42:4b:14:cc: c5:ce:87:3f:f4:a1:bd:8f:fc:74:a2:59:a0:26:a7: 06:e2:2a:32:20:65:93:56:d9:ca:8f:87:5a:4a:cb: 9a:33:4f:59:dd:db:6c:a9:f3:85:b6:7a:bb:86:bc: 65:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B3:7F:97:DF:E5:92:AB:89:33:50:32:07:0B:E7:61:0F:79:52:3D X509v3 Authority Key Identifier: keyid:CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/77A9A556A23611EF9A9BD341C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.123.100.0/24 103.9.149.0-103.9.150.255 Signature Algorithm: sha256WithRSAEncryption 66:6f:18:18:8d:7f:ad:55:e6:c0:f1:7c:b3:c7:41:f1:54:a1: a3:50:fc:56:dd:8c:c0:8d:d3:c3:d6:2b:a5:b0:6f:c5:c7:2e: 8c:26:b5:55:82:3f:31:da:ae:e1:b1:f5:f3:37:d3:b4:4c:f3: 20:bc:a4:d9:0f:17:7a:1c:6e:13:15:a5:79:65:d1:16:d6:26: ce:98:01:c7:8d:ce:d2:3d:c5:7f:3c:50:f3:9b:6f:5d:95:f8: 6f:0e:b9:ad:5a:43:4f:d0:21:8d:cd:7f:a2:a1:59:ee:70:e8: 92:20:a8:d1:61:6b:35:5a:dc:21:47:d1:91:8f:e9:8f:c9:fc: 50:96:36:57:04:58:91:bb:d3:97:17:88:90:40:53:66:ed:8d: 7c:4d:0f:84:87:23:55:cb:15:9c:56:77:56:74:60:cf:fb:2b: 63:c0:35:2f:ce:23:95:0b:e5:8d:bb:82:99:e6:93:9b:b5:6b: 2d:8f:dd:42:60:6d:b4:d2:84:d6:ba:0c:e2:6d:54:a5:78:5f: a0:98:23:0a:e8:20:46:fe:40:a5:fd:44:56:ba:1c:ed:cb:2b: 84:fd:a7:0c:1d:bc:55:d2:29:bb:1d:dd:65:05:a8:a7:16:db: 60:34:75:0c:8d:3f:fd:a3:68:88:bb:ef:7d:b4:22:dd:af:e7: 09:59:a7:c5 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICB0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUYyQ0YxMTAvBgNVBAUTKENCMzBEMzVDNzBERkM4NjZBODM3Q0FFREZFRkNFNkZF Q0JGQzVCNUYwHhcNMjQxMTE0MDMxMzQ5WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzM1NmFlZC00Mjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqihqhJj80tOY3EBr9OU/BTBHq5tg33fnxUpHeUB3qlfktIQopEjh0tgZlW4l 6qQIdL+vk/lCtpAhGPczVIaTl/UtQFgpcwyeAcM+kP1cCuWROuFoN9aDwmJsdt8F XmS4WDwgTBRHWwmg1eR4wYDUpnlLd950rLZLaEtD2q7/gREsNRxq+Me2Mzu5q6u4 E8z4Hy/pt4m496pUry0H9N+t7ztHKpQYVhl4PyFpYfo7REUeNl6FxPlALxq4waPy mZy/f2N4iLJUqgJ3HS6OZEJLFMzFzoc/9KG9j/x0olmgJqcG4ioyIGWTVtnKj4da SsuaM09Z3dtsqfOFtnq7hrxlKwIDAQABo4ICozCCAp8wHQYDVR0OBBYEFC+zf5ff 5ZKriTNQMgcL52EPeVI9MB8GA1UdIwQYMBaAFMsw01xw38hmqDfK7f785v7L/Ftf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjJDRi9GNUMxNEVEMjA3 MTAxMUVCOTdGOUY1MzdDNEY5QUUwMi95ekRUWEhEZnlHYW9OOHJ0X3Z6bV9zdjhX MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l6RFRYSERmeUdhb044cnRfdnptX3N2OFcxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUYyQ0YvRjVDMTRFRDIwNzEwMTFFQjk3RjlGNTM3QzRGOUFFMDIvNzdBOUE1NTZB MjM2MTFFRjlBOUJEMzQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQDBAAte2QwDAMEAGcJlQMEAGcJljANBgkqhkiG9w0BAQsFAAOC AQEAZm8YGI1/rVXmwPF8s8dB8VSho1D8Vt2MwI3Tw9YrpbBvxccujCa1VYI/Mdqu 4bH18zfTtEzzILyk2Q8XehxuExWleWXRFtYmzpgBx43O0j3FfzxQ85tvXZX4bw65 rVpDT9Ahjc1/oqFZ7nDokiCo0WFrNVrcIUfRkY/pj8n8UJY2VwRYkbvTlxeIkEBT Zu2NfE0PhIcjVcsVnFZ3VnRgz/srY8A1L84jlQvljbuCmeaTm7VrLY/dQmBttNKE 1roM4m1UpXhfoJgjCuggRv5Apf1EVroc7csrhP2nDB28VdIpux3dZQWopxbbYDR1 DI0//aNoiLvvfbQi3a/nCVmnxQ== -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:39 2024 by rpki-client on console-fra.rpki-client.org