$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/C97F7ACE50C711EFA407A973C4F9AE02.roa File: C97F7ACE50C711EFA407A973C4F9AE02.roa (raw, json) Hash identifier: +EmmCB4CH74pui+Ln0y/R7JWsblTND+j6GIfqlde0K4= Subject key identifier: 27:0F:24:79:08:37:CA:A7:04:D5:21:AD:35:88:77:A5:5D:9A:5B:FD Certificate issuer: /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B Certificate serial: 057F Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/C97F7ACE50C711EFA407A973C4F9AE02.roa Signing time: Fri 02 Aug 2024 12:07:29 +0000 ROA not before: Fri 02 Aug 2024 12:07:29 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 9387 IP address blocks: 103.79.17.0/24 maxlen: 24 122.50.0.0/24 maxlen: 24 122.50.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1407 (0x57f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B Validity Not Before: Aug 2 12:07:29 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66accc00-bbbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d5:a0:68:5d:ea:6e:1a:c7:54:61:7d:0b:fc: 73:ba:f3:33:c0:8d:e1:61:08:67:c9:7c:47:9c:e4: 81:a0:1d:89:b3:74:7e:c2:44:d6:15:8a:4f:96:37: ce:bd:c0:99:07:b8:27:ca:96:1c:0f:e3:43:49:07: 62:4f:ef:2d:3c:32:d1:45:97:27:24:64:84:3a:80: ab:6a:54:83:74:e3:33:ba:2d:8a:a6:c8:b6:1e:44: 7a:86:6b:e8:da:c5:da:24:7a:f7:ad:64:81:11:15: 77:e0:65:12:05:c9:07:ed:79:e6:9c:6a:d6:4c:de: b8:23:6f:96:4b:f3:48:ab:ec:f5:29:2d:57:e1:16: b8:3c:bd:2b:6e:f6:ae:a7:71:96:f2:37:a3:a7:e9: 15:e6:c7:ed:57:41:d3:7d:90:a4:35:02:af:78:ba: d9:81:cf:7c:e5:54:b8:d7:e6:cb:38:50:e0:9d:63: e0:c5:4e:78:dd:79:68:b8:82:ed:f6:6a:a0:d7:a1: a1:79:87:c7:87:e6:2e:fe:33:92:d7:eb:a5:ce:ae: 6f:d7:60:91:e0:5c:14:58:a5:44:77:b3:17:a3:92: 19:e1:62:93:a1:e6:e5:b1:04:1e:b1:cf:7c:81:ef: 8a:0c:05:d2:21:c0:c4:53:94:c9:3a:50:ac:29:c2: fb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0F:24:79:08:37:CA:A7:04:D5:21:AD:35:88:77:A5:5D:9A:5B:FD X509v3 Authority Key Identifier: keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/C97F7ACE50C711EFA407A973C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.79.17.0/24 122.50.0.0/24 122.50.2.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:5f:35:26:de:5f:3f:00:19:d9:8f:8a:f1:1e:f9:1c:36:22: 38:8d:d9:f2:2c:fa:da:54:6e:c9:63:2b:ea:46:7e:12:5b:eb: 65:0b:88:a3:1c:e9:30:df:25:14:0b:07:4b:48:d8:7d:00:aa: 0e:ff:81:4f:6c:b5:fc:b0:75:bb:4a:fc:98:c2:6d:27:2f:7c: 3d:5f:3b:86:70:ce:75:08:a9:c0:70:bd:6d:fd:ee:5f:59:96: d4:82:5b:bd:87:b1:6e:aa:ee:e8:c7:aa:fa:75:ad:e0:92:e3: bf:c1:b9:d3:19:b1:38:bd:5b:b9:07:6f:25:7b:7e:7a:2a:b1: cf:34:99:f8:48:87:82:e5:c0:ee:bb:e0:5a:b1:d1:eb:92:ad: c1:f5:a0:a2:aa:a7:74:76:d2:41:36:b5:ac:1c:03:22:5f:39: 5b:82:a6:f6:5e:ca:18:64:f8:d7:ef:03:13:33:66:95:7e:24: b1:48:b2:3f:b7:1d:03:b1:6d:9a:40:64:fb:cc:fb:b5:f6:22: 0b:32:0c:d2:06:dd:ee:02:43:21:0a:02:98:b1:d3:02:9e:2c: ef:f7:46:cc:ba:b1:48:7f:f5:d5:a1:a3:92:27:58:0c:d1:a9: f5:6f:3c:ba:ee:c1:7a:81:b9:e3:89:cc:a8:22:1d:6c:73:5c: f1:eb:14:4f -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ4RDkxMTAvBgNVBAUTKDAzMUM5QzI2RTVCQUIxQjAxQUYxOEEwQkIxQjk3MEFC NTc3MzQ1NkIwHhcNMjQwODAyMTIwNzI5WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NmFjY2MwMC1iYmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9WgaF3qbhrHVGF9C/xzuvMzwI3hYQhnyXxHnOSBoB2Js3R+wkTWFYpPljfO vcCZB7gnypYcD+NDSQdiT+8tPDLRRZcnJGSEOoCralSDdOMzui2Kpsi2HkR6hmvo 2sXaJHr3rWSBERV34GUSBckH7XnmnGrWTN64I2+WS/NIq+z1KS1X4Ra4PL0rbvau p3GW8jejp+kV5sftV0HTfZCkNQKveLrZgc985VS41+bLOFDgnWPgxU543XlouILt 9mqg16GheYfHh+Yu/jOS1+ulzq5v12CR4FwUWKVEd7MXo5IZ4WKToeblsQQesc98 ge+KDAXSIcDEU5TJOlCsKcL7eQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFCcPJHkI N8qnBNUhrTWId6Vdmlv9MB8GA1UdIwQYMBaAFAMcnCblurGwGvGKC7G5cKtXc0Vr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDhEOS81NDgzQkZCNkM4 RkIxMUVCQkE1QkFFNTFDNEY5QUUwMi9BeHljSnVXNnNiQWE4WW9Mc2Jsd3ExZHpS V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F4eWNKdVc2c2JBYThZb0xzYmx3cTFkelJXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkQ4RDkvNTQ4M0JGQjZDOEZCMTFFQkJBNUJBRTUxQzRGOUFFMDIvQzk3RjdBQ0U1 MEM3MTFFRkE0MDdBOTczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABnTxEDBAB6MgADBAB6MgIwDQYJKoZIhvcNAQELBQADggEB ADxfNSbeXz8AGdmPivEe+Rw2IjiN2fIs+tpUbsljK+pGfhJb62ULiKMc6TDfJRQL B0tI2H0Aqg7/gU9stfywdbtK/JjCbScvfD1fO4ZwznUIqcBwvW397l9ZltSCW72H sW6q7ujHqvp1reCS47/BudMZsTi9W7kHbyV7fnoqsc80mfhIh4LlwO674Fqx0euS rcH1oKKqp3R20kE2tawcAyJfOVuCpvZeyhhk+NfvAxMzZpV+JLFIsj+3HQOxbZpA ZPvM+7X2IgsyDNIG3e4CQyEKApix0wKeLO/3Rsy6sUh/9dWho5InWAzRqfVvPLru wXqBueOJzKgiHWxzXPHrFE8= -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:28 2024 by rpki-client on console-fra.rpki-client.org