$ rpki-client -vvf rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/F011FBC4CBDF11EAB6162265C4F9AE02.roa File: F011FBC4CBDF11EAB6162265C4F9AE02.roa (raw, json) Hash identifier: Ec43C0Y3q4p+M8MX6lzreXmsuhfKAufm7Yw2BAr8btg= Subject key identifier: 2C:23:E0:E7:B3:CF:ED:44:94:0B:14:7B:93:E7:E6:58:58:3B:05:7B Certificate issuer: /CN=A915F7E7/serialNumber=9B0510DF0672E6CFDB7254A99F5274F90DF0EF54 Certificate serial: 07BC Authority key identifier: 9B:05:10:DF:06:72:E6:CF:DB:72:54:A9:9F:52:74:F9:0D:F0:EF:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/F011FBC4CBDF11EAB6162265C4F9AE02.roa Signing time: Thu 22 Aug 2024 21:39:47 +0000 ROA not before: Thu 22 Aug 2024 21:39:47 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 134555 IP address blocks: 103.97.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.crl rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:39:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1980 (0x7bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F7E7/serialNumber=9B0510DF0672E6CFDB7254A99F5274F90DF0EF54 Validity Not Before: Aug 22 21:39:47 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66c7b023-fa0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f6:9d:29:e4:3d:27:9b:93:e0:be:e0:24:8f: d6:84:57:f0:5d:85:6a:6f:e9:3d:fa:20:2a:42:09: 0b:fa:37:17:3d:8c:8e:b4:b7:fc:7a:9e:88:7f:a5: b9:db:9a:e6:bf:1a:89:8b:97:8e:34:5b:28:15:fa: a5:fe:8f:f7:4b:9b:c3:08:98:38:5d:25:74:dc:7c: 2d:a5:8b:d2:8a:e9:7c:c3:03:f6:91:e6:9c:c9:dc: e6:2b:a8:1e:dc:a1:4a:0d:ef:9b:40:d5:a7:ed:48: d8:11:04:31:32:fe:2e:9e:e5:b0:01:40:14:c4:da: 7e:01:3d:ca:48:3f:64:fb:d6:97:09:53:ab:1d:ec: ee:38:f3:f8:99:5b:e0:3f:74:cc:64:42:44:e0:0a: ef:f3:83:1d:62:50:15:a5:6b:ca:1e:12:4c:87:fb: 31:b1:25:35:fe:59:b8:fc:81:b2:fb:be:3f:7a:36: cf:dc:e5:83:ea:1c:1b:96:b1:7a:b4:65:6d:2d:d9: 92:70:d4:6a:66:af:56:35:f7:db:f6:58:c8:7c:7f: 19:99:61:21:45:be:36:67:85:16:a3:67:5e:14:48: ae:ae:a3:53:a3:ad:c6:5e:dd:60:e5:00:11:55:60: ea:7b:25:38:81:ca:08:35:77:1d:e4:f6:28:4d:f3: 0f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:23:E0:E7:B3:CF:ED:44:94:0B:14:7B:93:E7:E6:58:58:3B:05:7B X509v3 Authority Key Identifier: keyid:9B:05:10:DF:06:72:E6:CF:DB:72:54:A9:9F:52:74:F9:0D:F0:EF:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/F011FBC4CBDF11EAB6162265C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.97.254.0/24 Signature Algorithm: sha256WithRSAEncryption bf:79:fd:82:39:6d:01:2f:6e:05:73:b2:60:6d:7c:b5:7a:f9: b5:01:0e:ea:65:18:45:cb:f6:05:d4:dc:34:bb:3a:79:73:d8: 46:dd:21:8c:87:74:b1:b7:3b:a6:35:bb:c3:d9:14:85:7e:5b: aa:95:f3:8a:4e:32:64:4a:d2:2e:e5:78:9c:ed:a3:89:7e:94: 3c:ce:44:93:5e:68:9b:10:b9:95:6c:4d:04:2e:97:b8:8c:7f: f3:c7:e2:f3:5f:ad:8c:94:63:27:47:b0:7d:23:d6:60:d6:18: f4:0f:65:90:43:e1:63:f1:6f:4f:69:d5:99:67:d8:3b:15:42: 04:d5:13:a5:49:38:c6:ba:92:29:00:ed:20:83:9a:ed:89:05: 51:95:82:19:90:c8:45:10:db:01:cf:ad:45:9e:c6:78:5e:3c: dc:c5:f5:c4:2e:68:f6:ef:9b:b2:14:b7:31:f3:65:15:64:dc: 09:2c:67:4c:14:aa:61:c8:74:3f:27:ce:d2:1b:cb:dc:78:48: b5:5c:fd:10:e0:b6:b4:bf:9a:01:f8:be:30:31:c0:c7:c1:f8: 3b:22:a1:4c:5f:5c:b3:21:fa:d6:8d:02:2e:19:a3:17:34:ad: 35:35:b4:2c:49:89:de:90:96:99:ec:0c:75:f6:e3:b9:fe:02: b3:61:f9:37 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY3RTcxMTAvBgNVBAUTKDlCMDUxMERGMDY3MkU2Q0ZEQjcyNTRBOTlGNTI3NEY5 MERGMEVGNTQwHhcNMjQwODIyMjEzOTQ3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmM3YjAyMy1mYTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPadKeQ9J5uT4L7gJI/WhFfwXYVqb+k9+iAqQgkL+jcXPYyOtLf8ep6If6W5 25rmvxqJi5eONFsoFfql/o/3S5vDCJg4XSV03HwtpYvSiul8wwP2keacydzmK6ge 3KFKDe+bQNWn7UjYEQQxMv4unuWwAUAUxNp+AT3KSD9k+9aXCVOrHezuOPP4mVvg P3TMZEJE4Arv84MdYlAVpWvKHhJMh/sxsSU1/lm4/IGy+74/ejbP3OWD6hwblrF6 tGVtLdmScNRqZq9WNffb9ljIfH8ZmWEhRb42Z4UWo2deFEiurqNTo63GXt1g5QAR VWDqeyU4gcoINXcd5PYoTfMPoQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCwj4Oez z+1ElAsUe5Pn5lhYOwV7MB8GA1UdIwQYMBaAFJsFEN8GcubP23JUqZ9SdPkN8O9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjdFNy9EQ0QwMzc4QUNC REQxMUVBQTYxRjE2NUZDNEY5QUUwMi9td1VRM3daeTVzX2JjbFNwbjFKMC1RM3c3 MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL213VVEzd1p5NXNfYmNsU3BuMUowLVEzdzcxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUY3RTcvRENEMDM3OEFDQkREMTFFQUE2MUYxNjVGQzRGOUFFMDIvRjAxMUZCQzRD QkRGMTFFQUI2MTYyMjY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnYf4wDQYJKoZIhvcNAQELBQADggEBAL95/YI5bQEvbgVz smBtfLV6+bUBDuplGEXL9gXU3DS7Onlz2EbdIYyHdLG3O6Y1u8PZFIV+W6qV84pO MmRK0i7leJzto4l+lDzORJNeaJsQuZVsTQQul7iMf/PH4vNfrYyUYydHsH0j1mDW GPQPZZBD4WPxb09p1Zln2DsVQgTVE6VJOMa6kikA7SCDmu2JBVGVghmQyEUQ2wHP rUWexnhePNzF9cQuaPbvm7IUtzHzZRVk3AksZ0wUqmHIdD8nztIby9x4SLVc/RDg trS/mgH4vjAxwMfB+DsioUxfXLMh+taNAi4Zoxc0rTU1tCxJid6QlpnsDHX247n+ ArNh+Tc= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:28 2024 by rpki-client on console-ams.rpki-client.org