$ rpki-client -vvf rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/936822385BDA11EF98C26511C4F9AE02.roa File: 936822385BDA11EF98C26511C4F9AE02.roa (raw, json) Hash identifier: orcuIVQDXa55MgUEa+uvpleaNB+r/DtukKrLYo38vu4= Subject key identifier: 7E:49:3F:C9:75:02:41:14:86:1F:20:9E:19:B1:47:20:CC:DB:0E:27 Certificate issuer: /CN=A915FB7F/serialNumber=32C42045EA0B516551224D808F0D5550A0473B43 Certificate serial: 18E4 Authority key identifier: 32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/936822385BDA11EF98C26511C4F9AE02.roa Signing time: Fri 16 Aug 2024 14:19:40 +0000 ROA not before: Fri 16 Aug 2024 14:19:40 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 136479 IP address blocks: 103.89.152.0/24 maxlen: 24 103.89.153.0/24 maxlen: 24 103.126.4.0/24 maxlen: 24 103.126.5.0/24 maxlen: 30 2001:df0:d500::/48 maxlen: 51 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6372 (0x18e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FB7F/serialNumber=32C42045EA0B516551224D808F0D5550A0473B43 Validity Not Before: Aug 16 14:19:40 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66bf5ffc-14a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:38:c2:69:20:97:65:e5:5f:6f:d0:a8:db:cd: cb:6e:4c:74:3d:66:b0:dc:40:dd:61:7e:a6:40:ef: 73:5e:27:75:92:39:15:dd:d3:e6:a4:7c:2d:e1:d1: 21:13:40:62:c2:63:ee:4e:f4:9a:9a:2d:0c:23:0f: 3f:f7:e9:82:00:41:6c:6a:c1:d5:d5:36:c5:ff:cf: 6b:86:fd:0d:6f:eb:7c:8a:68:4f:40:a8:a1:da:3b: d9:0b:18:fe:88:38:40:5b:ec:dc:d1:88:da:ef:2a: 6e:3b:0f:c6:83:5a:87:fd:49:d4:cc:e1:d5:9d:2d: ed:82:15:26:08:13:6a:4f:53:ce:5f:b5:fd:a7:ff: 98:11:0e:2d:5e:04:ac:e4:9b:19:b8:9c:8d:79:08: 43:f6:a4:74:f7:ef:22:7d:91:76:b5:4a:1a:8b:5a: a1:b2:b4:54:0c:ad:2d:c5:f4:a7:a4:a7:a6:bd:af: 67:79:85:f2:dc:b7:02:c0:fa:ff:37:bf:03:a8:c6: 6e:0b:f5:03:9d:e8:b7:8c:fb:ba:f8:b8:d6:1f:89: 44:39:6a:05:a9:b5:60:f2:f3:d5:f8:d3:c0:27:12: d7:7f:78:0c:5e:55:35:82:5c:69:0e:51:fb:3e:57: 76:90:0f:ea:86:0d:ca:d6:75:cf:64:d5:65:f8:a0: 02:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:49:3F:C9:75:02:41:14:86:1F:20:9E:19:B1:47:20:CC:DB:0E:27 X509v3 Authority Key Identifier: keyid:32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/936822385BDA11EF98C26511C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.89.152.0/23 103.126.4.0/23 IPv6: 2001:df0:d500::/48 Signature Algorithm: sha256WithRSAEncryption 58:d4:14:2b:0b:f4:be:e2:28:92:36:6e:10:27:45:58:51:9f: 23:55:73:73:d5:f5:d9:9e:42:93:4d:5b:a5:99:61:75:a7:4c: 2e:65:2d:45:d6:f0:de:25:d1:4f:e8:f9:a5:69:6f:06:9c:88: 14:01:9a:d9:e3:d6:28:0a:80:ff:5b:09:28:7b:8b:be:b0:48: 05:78:9e:52:40:ab:63:79:13:d1:57:0e:fe:5f:6c:43:59:94: 78:aa:57:47:f6:51:90:46:96:8c:2b:76:d5:08:af:da:d6:9d: 22:07:6a:66:00:65:1c:22:02:d8:20:70:19:dd:c6:0d:9e:29: 1a:e7:1a:c6:78:0a:3a:6a:85:92:74:15:70:27:16:c6:84:cf: 93:2d:dd:46:ce:81:29:4a:d0:4e:66:5c:78:90:20:d4:da:84: 16:e1:aa:0c:89:e6:8e:e0:55:b6:ed:df:08:2d:9e:9f:6d:7b: 78:1a:67:4b:a6:a3:03:dc:20:11:b9:f6:cf:63:82:44:7a:64: 04:7c:5f:a1:5a:c5:54:31:bf:37:ce:3b:8c:92:12:51:ab:19: 66:9d:56:63:80:4d:a2:a6:ff:2d:ef:68:4c:02:73:ea:b6:76: 89:be:2a:0a:44:15:f8:c3:c4:10:e9:dd:9d:a3:bb:dc:b6:f5: 7f:52:61:d2 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICGOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZCN0YxMTAvBgNVBAUTKDMyQzQyMDQ1RUEwQjUxNjU1MTIyNEQ4MDhGMEQ1NTUw QTA0NzNCNDMwHhcNMjQwODE2MTQxOTQwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmJmNWZmYy0xNGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzjCaSCXZeVfb9Co283Lbkx0PWaw3EDdYX6mQO9zXid1kjkV3dPmpHwt4dEh E0BiwmPuTvSami0MIw8/9+mCAEFsasHV1TbF/89rhv0Nb+t8imhPQKih2jvZCxj+ iDhAW+zc0Yja7ypuOw/Gg1qH/UnUzOHVnS3tghUmCBNqT1POX7X9p/+YEQ4tXgSs 5JsZuJyNeQhD9qR09+8ifZF2tUoai1qhsrRUDK0txfSnpKemva9neYXy3LcCwPr/ N78DqMZuC/UDnei3jPu6+LjWH4lEOWoFqbVg8vPV+NPAJxLXf3gMXlU1glxpDlH7 Pld2kA/qhg3K1nXPZNVl+KACoQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFH5JP8l1 AkEUhh8gnhmxRyDM2w4nMB8GA1UdIwQYMBaAFDLEIEXqC1FlUSJNgI8NVVCgRztD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkI3Ri8xQkFFMjY1NDdD QzkxMUU3OTJDQkE5NDRDNEY5QUUwMi9Nc1FnUmVvTFVXVlJJazJBancxVlVLQkhP ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01zUWdSZW9MVVdWUklrMkFqdzFWVUtCSE8wTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUZCN0YvMUJBRTI2NTQ3Q0M5MTFFNzkyQ0JBOTQ0QzRGOUFFMDIvOTM2ODIyMzg1 QkRBMTFFRjk4QzI2NTExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAFnWZgDBAFnfgQwDwQCAAIwCQMHACABDfDVADANBgkqhkiG 9w0BAQsFAAOCAQEAWNQUKwv0vuIokjZuECdFWFGfI1Vzc9X12Z5Ck01bpZlhdadM LmUtRdbw3iXRT+j5pWlvBpyIFAGa2ePWKAqA/1sJKHuLvrBIBXieUkCrY3kT0VcO /l9sQ1mUeKpXR/ZRkEaWjCt21Qiv2tadIgdqZgBlHCIC2CBwGd3GDZ4pGucaxngK OmqFknQVcCcWxoTPky3dRs6BKUrQTmZceJAg1NqEFuGqDInmjuBVtu3fCC2en217 eBpnS6ajA9wgEbn2z2OCRHpkBHxfoVrFVDG/N847jJISUasZZp1WY4BNoqb/Le9o TAJz6rZ2ib4qCkQV+MPEEOndnaO73Lb1f1Jh0g== -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:03 2024 by rpki-client on console-ams.rpki-client.org