$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/1DBF3F2E69BF11EF9B52775AC4F9AE02.roa File: 1DBF3F2E69BF11EF9B52775AC4F9AE02.roa (raw, json) Hash identifier: nMW6WoyYSR0nN4/emWlcQmJLCGRYi7gr7vp1sPJqai0= Subject key identifier: 36:0E:E1:8A:F2:14:93:58:3A:3F:60:64:E6:F4:EC:73:2F:C1:83:79 Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978 Certificate serial: 0333 Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/1DBF3F2E69BF11EF9B52775AC4F9AE02.roa Signing time: Tue 03 Sep 2024 06:43:12 +0000 ROA not before: Tue 03 Sep 2024 06:43:11 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 21859 IP address blocks: 43.255.116.0/24 maxlen: 24 103.103.246.0/24 maxlen: 24 103.103.247.0/24 maxlen: 24 103.239.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 819 (0x333) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978 Validity Not Before: Sep 3 06:43:11 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66d6afff-82ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:94:b6:9f:00:74:18:57:51:d1:eb:7a:23:39: 8d:26:95:37:5d:94:49:d1:b8:fd:ea:73:30:02:5a: 7f:b6:49:fe:06:e2:65:ae:9d:fa:5a:13:e9:89:eb: 66:58:70:08:fd:6f:e3:7a:f2:28:43:44:f6:f7:53: ea:6a:ec:e0:b4:e8:56:4e:42:ca:09:d2:79:38:41: 1d:19:4d:fa:8d:0a:4e:8a:4d:69:d2:ef:a4:60:2c: 66:74:3a:2c:3e:f8:2a:f5:2c:df:9b:ad:2f:70:04: 23:b9:42:8c:6d:fb:19:e2:82:27:06:76:29:1e:84: 68:ae:f8:b1:7a:95:87:f5:17:0c:e1:25:f0:f9:b6: 78:18:f8:59:46:9b:5e:7b:ed:56:55:90:66:ee:f4: 00:55:b9:7c:3f:dd:3d:ab:fd:f8:d7:f6:41:2f:d2: fc:0a:8d:38:db:2f:1c:be:3a:cd:05:65:66:80:11: c7:c6:dd:a6:63:41:ac:29:66:b5:00:e8:75:81:67: 17:f8:d0:b0:c8:03:b9:5a:ee:80:0a:ac:0d:a0:48: 46:f6:01:60:24:00:ed:68:50:83:97:c0:d9:49:22: 4d:6b:c2:3a:63:ba:ea:17:97:40:3a:97:ee:ad:00: ba:42:a9:1f:11:cb:8e:f8:53:e2:51:d5:a5:c5:5b: 79:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0E:E1:8A:F2:14:93:58:3A:3F:60:64:E6:F4:EC:73:2F:C1:83:79 X509v3 Authority Key Identifier: keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/1DBF3F2E69BF11EF9B52775AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.255.116.0/24 103.103.246.0/23 103.239.103.0/24 Signature Algorithm: sha256WithRSAEncryption 45:ae:68:4a:0a:4f:47:89:7f:31:1e:e8:45:63:9a:ea:f4:96: 5f:f9:5d:49:f6:d8:1a:28:cf:74:00:78:bb:b0:64:8c:86:08: fa:f9:04:18:ee:d8:49:e9:4f:67:4d:c9:a9:a5:b5:23:d6:60: 3e:77:96:e7:9d:c1:32:56:5f:ce:df:f1:e6:c5:79:ed:d6:08: 77:da:c4:a9:c0:bf:8c:8c:83:7e:18:5f:dc:08:79:c3:2b:46: 44:08:a9:7f:3d:70:e9:ce:69:24:24:41:a0:51:6a:5a:13:67: 5d:e7:e1:b8:bc:ba:1f:c1:9c:a5:ec:dd:6f:f1:5f:47:83:55: 8f:e5:1c:f5:dd:1e:bc:92:06:1b:33:25:53:c4:e0:09:b6:12: 6d:f0:9c:7d:30:72:53:6d:ca:fa:91:6b:48:e6:9b:2c:5a:92: aa:75:0d:50:92:35:6a:ab:0a:2b:c9:7e:81:18:73:b6:ea:0c: 0c:0a:75:c1:da:53:a7:42:d7:a6:ae:ea:a3:c5:1c:4d:4f:e9: 64:2b:fa:fc:32:d4:ad:ec:bd:50:7f:cc:20:42:4d:18:3c:df: a9:3a:ee:8d:1a:60:44:ca:4f:45:25:1f:cf:79:04:d2:fd:69: 1a:af:03:1e:7e:70:d2:d1:a9:a7:54:32:91:20:e4:21:21:0e: 95:a1:fb:04 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICAzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1N0IxMTAvBgNVBAUTKDI4NTNCREExNjM4QzU5OUE4NEMzMDk1MzEwRTY5QkZE MjYwQUE5NzgwHhcNMjQwOTAzMDY0MzExWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ2YWZmZi04MmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZS2nwB0GFdR0et6IzmNJpU3XZRJ0bj96nMwAlp/tkn+BuJlrp36WhPpietm WHAI/W/jevIoQ0T291PqauzgtOhWTkLKCdJ5OEEdGU36jQpOik1p0u+kYCxmdDos Pvgq9Szfm60vcAQjuUKMbfsZ4oInBnYpHoRorvixepWH9RcM4SXw+bZ4GPhZRpte e+1WVZBm7vQAVbl8P909q/341/ZBL9L8Co042y8cvjrNBWVmgBHHxt2mY0GsKWa1 AOh1gWcX+NCwyAO5Wu6ACqwNoEhG9gFgJADtaFCDl8DZSSJNa8I6Y7rqF5dAOpfu rQC6QqkfEcuO+FPiUdWlxVt5PQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFDYO4Yry FJNYOj9gZOb07HMvwYN5MB8GA1UdIwQYMBaAFChTvaFjjFmahMMJUxDmm/0mCql4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU3Qi84REE3MjY0MEMx RkExMUVDQjMwRUUyMUFDNEY5QUUwMi9LRk85b1dPTVdacUV3d2xURU9hYl9TWUtx WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tGTzlvV09NV1pxRXd3bFRFT2FiX1NZS3FYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjU1N0IvOERBNzI2NDBDMUZBMTFFQ0IzMEVFMjFBQzRGOUFFMDIvMURCRjNGMkU2 OUJGMTFFRjlCNTI3NzVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAAr/3QDBAFnZ/YDBABn72cwDQYJKoZIhvcNAQELBQADggEB AEWuaEoKT0eJfzEe6EVjmur0ll/5XUn22Booz3QAeLuwZIyGCPr5BBju2EnpT2dN yamltSPWYD53luedwTJWX87f8ebFee3WCHfaxKnAv4yMg34YX9wIecMrRkQIqX89 cOnOaSQkQaBRaloTZ13n4bi8uh/BnKXs3W/xX0eDVY/lHPXdHrySBhszJVPE4Am2 Em3wnH0wclNtyvqRa0jmmyxakqp1DVCSNWqrCivJfoEYc7bqDAwKdcHaU6dC16au 6qPFHE1P6WQr+vwy1K3svVB/zCBCTRg836k67o0aYETKT0UlH895BNL9aRqvAx5+ cNLRqadUMpEg5CEhDpWh+wQ= -----END CERTIFICATE-----Generated at Thu Nov 21 03:11:57 2024 by rpki-client on console-fra.rpki-client.org