$ rpki-client -vvf rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/0DDC2C14776F11ED8E7B8775C4F9AE02.roa File: 0DDC2C14776F11ED8E7B8775C4F9AE02.roa (raw, json) Hash identifier: P4RG3Y6nQyOth1GOf+cUq+m33EkNoZAP7s5DUsSNA08= Subject key identifier: 7E:13:6A:73:2E:6C:EC:61:82:72:5F:94:33:6B:86:00:C6:34:78:66 Certificate issuer: /CN=A916A314/serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24 Certificate serial: 0666 Authority key identifier: 21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/0DDC2C14776F11ED8E7B8775C4F9AE02.roa Signing time: Fri 04 Oct 2024 22:33:07 +0000 ROA not before: Fri 04 Oct 2024 22:33:07 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 10143 IP address blocks: 103.99.101.0/24 maxlen: 24 103.242.49.0/24 maxlen: 24 2001:df3:d000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1638 (0x666) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A314/serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24 Validity Not Before: Oct 4 22:33:07 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=67006d23-93f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cf:09:2d:59:3f:52:64:d4:61:f4:f4:74:22: c6:01:4c:52:2c:c5:f6:be:13:3b:68:ec:7a:25:93: 64:23:1b:4c:01:ff:e4:7e:55:4e:64:07:08:68:3a: 72:73:c2:16:30:e0:2e:f7:ca:2f:9c:aa:47:b3:69: cb:65:8b:da:94:d1:db:55:72:d3:d8:fa:3d:82:1b: be:fd:ae:99:22:78:64:12:c9:82:7b:0a:de:a4:d3: 15:0f:d4:19:81:d2:2e:02:7f:5f:7f:a3:1b:77:42: b5:59:ea:aa:3b:78:57:7b:68:f2:b2:b3:55:67:3d: 7f:5b:0e:e6:fb:d4:41:47:8a:72:64:00:40:ba:4e: c7:4c:67:b7:e7:5c:89:3e:0e:22:03:2b:d1:f9:65: 07:0f:54:63:19:e1:c1:b2:8f:be:52:a4:9f:3e:85: 21:1f:ef:7d:6d:fb:c9:6b:08:02:c2:b5:5b:bd:39: 29:e2:99:6f:14:4b:66:54:b1:71:08:87:a2:fe:ec: 85:d8:bb:f7:a9:07:32:43:12:f4:84:cf:e3:7f:0d: 14:d4:0b:fb:4a:66:a3:5b:5e:25:af:18:cf:c3:fb: 2d:64:0c:f1:7c:dc:73:2d:06:dc:62:6c:e2:c9:f4: 2a:c9:46:b5:a2:e3:54:c8:2b:70:ad:16:08:8d:fd: 04:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:13:6A:73:2E:6C:EC:61:82:72:5F:94:33:6B:86:00:C6:34:78:66 X509v3 Authority Key Identifier: keyid:21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/0DDC2C14776F11ED8E7B8775C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.99.101.0/24 103.242.49.0/24 IPv6: 2001:df3:d000::/48 Signature Algorithm: sha256WithRSAEncryption 21:fa:59:b6:e5:86:23:74:c7:9e:72:fe:eb:10:d6:cb:ab:c8: f4:8e:c6:60:bc:88:c3:d4:a1:cd:10:a2:96:5e:af:6a:f4:72: a8:4b:9e:aa:7d:dd:c1:02:f6:1f:9b:91:00:b4:50:6d:d2:44: 7d:bd:51:f1:4a:4f:e3:4c:d6:c8:8e:ba:97:1b:54:4b:27:03: 1f:40:5c:1b:b6:f5:04:45:d5:0b:9d:63:08:df:bc:3b:18:f5: 7e:43:74:ba:47:82:05:24:a6:58:47:d1:63:c4:ae:60:10:bf: 8e:b0:8e:49:6a:02:ee:e5:bc:30:9e:6f:2b:a4:10:5a:2a:a0: a4:96:3a:8f:6f:33:0d:8c:5d:36:b4:4c:ac:16:d6:b5:18:f7: 5c:f2:fa:c5:db:81:42:12:0f:c3:57:41:77:86:f9:d3:9a:98: 1c:81:08:49:54:bf:dc:7c:60:14:26:d9:86:0f:81:8d:85:1c: 62:79:04:7d:df:32:56:8f:94:85:23:a2:1d:53:85:68:95:8e: a6:7a:b1:67:9d:78:4e:19:1c:60:74:9d:81:58:cb:8d:ca:46: 52:69:57:d9:41:63:78:a0:4f:9c:a6:0d:c7:da:41:72:89:58: 69:7c:74:7b:57:a1:06:e3:74:2e:ca:ff:49:62:e4:11:a1:b6: c1:88:ea:ba -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICBmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzMTQxMTAvBgNVBAUTKDIxNEE1RjIyQUE1MDFCMjE4QjBFNjAxNUQxRTBGQkEx QzhFNDNGMjQwHhcNMjQxMDA0MjIzMzA3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzAwNmQyMy05M2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqs8JLVk/UmTUYfT0dCLGAUxSLMX2vhM7aOx6JZNkIxtMAf/kflVOZAcIaDpy c8IWMOAu98ovnKpHs2nLZYvalNHbVXLT2Po9ghu+/a6ZInhkEsmCewrepNMVD9QZ gdIuAn9ff6Mbd0K1WeqqO3hXe2jysrNVZz1/Ww7m+9RBR4pyZABAuk7HTGe351yJ Pg4iAyvR+WUHD1RjGeHBso++UqSfPoUhH+99bfvJawgCwrVbvTkp4plvFEtmVLFx CIei/uyF2Lv3qQcyQxL0hM/jfw0U1Av7SmajW14lrxjPw/stZAzxfNxzLQbcYmzi yfQqyUa1ouNUyCtwrRYIjf0ENQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFH4TanMu bOxhgnJflDNrhgDGNHhmMB8GA1UdIwQYMBaAFCFKXyKqUBshiw5gFdHg+6HI5D8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTMxNC83MEQzQjM2QTU5 NTIxMUVCQTZENzgwNDhDNEY5QUUwMi9JVXBmSXFwUUd5R0xEbUFWMGVEN29jamtQ eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lVcGZJcXBRR3lHTERtQVYwZUQ3b2Nqa1B5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkEzMTQvNzBEM0IzNkE1OTUyMTFFQkE2RDc4MDQ4QzRGOUFFMDIvMEREQzJDMTQ3 NzZGMTFFRDhFN0I4Nzc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnY2UDBABn8jEwDwQCAAIwCQMHACABDfPQADANBgkqhkiG 9w0BAQsFAAOCAQEAIfpZtuWGI3THnnL+6xDWy6vI9I7GYLyIw9ShzRCill6vavRy qEueqn3dwQL2H5uRALRQbdJEfb1R8UpP40zWyI66lxtUSycDH0BcG7b1BEXVC51j CN+8Oxj1fkN0ukeCBSSmWEfRY8SuYBC/jrCOSWoC7uW8MJ5vK6QQWiqgpJY6j28z DYxdNrRMrBbWtRj3XPL6xduBQhIPw1dBd4b505qYHIEISVS/3HxgFCbZhg+BjYUc YnkEfd8yVo+UhSOiHVOFaJWOpnqxZ514ThkcYHSdgVjLjcpGUmlX2UFjeKBPnKYN x9pBcolYaXx0e1ehBuN0Lsr/SWLkEaG2wYjqug== -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:41 2024 by rpki-client on console-ams.rpki-client.org