$ rpki-client -vvf rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/66387A6C087211EF9EDFC673C4F9AE02.roa File: 66387A6C087211EF9EDFC673C4F9AE02.roa (raw, json) Hash identifier: HS/fldQZ4RrI6nmzaLMIdIrXDhqFavfV6tsG7wDJ0JM= Subject key identifier: FE:0A:9B:55:62:14:01:F3:2F:65:B8:1E:A0:2B:EC:9F:F6:C6:DD:6C Certificate issuer: /CN=A916E39F/serialNumber=11E73F52BF0F586F2B9FA69EE2CA15F2185F66C2 Certificate serial: 57 Authority key identifier: 11:E7:3F:52:BF:0F:58:6F:2B:9F:A6:9E:E2:CA:15:F2:18:5F:66:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/66387A6C087211EF9EDFC673C4F9AE02.roa Signing time: Fri 11 Oct 2024 06:09:39 +0000 ROA not before: Fri 11 Oct 2024 06:09:39 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 4657 IP address blocks: 103.76.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.crl rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E39F/serialNumber=11E73F52BF0F586F2B9FA69EE2CA15F2185F66C2 Validity Not Before: Oct 11 06:09:39 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6708c123-bb80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:42:e6:9b:d3:fd:f1:8f:dd:c1:4f:b3:c6:fa: 89:fa:e9:0d:26:90:df:50:fc:7e:e7:73:cc:39:56: 95:90:68:6a:f3:c5:42:cd:9f:43:34:73:15:57:31: a4:e2:69:5d:91:c0:9a:9c:a2:73:12:54:89:3d:51: 7e:15:3f:2b:12:58:a4:ae:ac:d3:76:ca:bf:3c:53: 55:53:f2:f5:87:ea:26:2a:01:20:8a:e0:27:63:f6: b3:b8:5e:32:74:26:79:47:85:07:a6:34:b3:43:43: 99:ab:ed:bf:a8:98:67:5a:26:9f:69:bf:d7:c6:d5: e3:ed:d4:6c:4d:7b:a7:19:e4:1b:6e:53:78:b3:a3: e5:4a:c6:ed:a8:4c:3d:25:d0:a3:56:f8:e9:dd:13: e5:4d:a7:10:b2:03:bd:45:06:6f:3a:48:b0:92:e4: 6c:bd:f4:15:bd:86:c9:2d:8f:fb:bf:59:e0:e1:ba: 9b:fa:d8:9f:65:e1:f4:cf:40:76:5a:95:8b:11:70: 1f:78:e1:6d:e6:2b:c0:fa:0c:10:2c:20:07:b5:0d: 66:3a:29:ab:61:69:91:b1:63:f3:05:41:dd:28:1f: 5e:7e:24:c2:01:bd:05:d3:b0:9e:f4:dd:8b:e6:5a: 96:89:4f:70:35:7c:45:53:b8:0a:8f:b1:66:13:24: f1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:0A:9B:55:62:14:01:F3:2F:65:B8:1E:A0:2B:EC:9F:F6:C6:DD:6C X509v3 Authority Key Identifier: keyid:11:E7:3F:52:BF:0F:58:6F:2B:9F:A6:9E:E2:CA:15:F2:18:5F:66:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/66387A6C087211EF9EDFC673C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.76.38.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:8e:54:d8:bc:2c:6f:9e:32:28:0d:89:07:c7:cc:1a:0a:d7: 6f:7a:1e:f7:75:9a:7b:67:06:3f:8c:c3:03:dd:f1:97:79:fe: 9e:a7:08:63:83:73:26:23:92:69:6e:24:7a:62:53:40:6c:ac: 46:68:d2:3a:28:6a:e5:22:5c:c3:de:32:2e:c2:30:52:51:1c: 28:e1:c2:24:3e:35:c2:6a:9f:42:c5:7c:70:1f:34:76:c7:33: 29:5f:2f:4f:57:f7:39:c7:76:6e:44:21:7a:9a:8e:31:37:4f: 8c:90:d0:43:14:32:b6:3d:36:06:f4:64:e2:59:1c:41:6e:d6: 9b:39:dd:3d:5e:cf:a3:ea:75:c1:0c:18:38:92:dc:40:e9:79: 81:43:8c:ff:b8:5a:95:94:41:06:5c:86:d9:81:81:de:1b:09: 5a:a0:74:83:67:80:76:6a:26:9a:40:c1:ae:07:10:e2:97:c8: d8:d6:fc:e1:54:4f:5a:04:b7:7d:4a:b4:2d:06:e2:37:38:5d: c8:5b:77:f3:25:ed:02:89:c6:84:00:6b:4f:80:09:6d:7d:24: ea:bb:d3:83:d5:0a:f5:c7:8c:a9:ba:ed:b8:ea:3d:41:4f:09: 4d:c3:d7:e7:39:d7:a2:45:f3:8f:5d:13:96:a1:5b:c3:10:16: d2:7b:b0:4c -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RTM5RjExMC8GA1UEBRMoMTFFNzNGNTJCRjBGNTg2RjJCOUZBNjlFRTJDQTE1RjIx ODVGNjZDMjAeFw0yNDEwMTEwNjA5MzlaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MDhjMTIzLWJiODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpQuab0/3xj93BT7PG+on66Q0mkN9Q/H7nc8w5VpWQaGrzxULNn0M0cxVXMaTi aV2RwJqconMSVIk9UX4VPysSWKSurNN2yr88U1VT8vWH6iYqASCK4Cdj9rO4XjJ0 JnlHhQemNLNDQ5mr7b+omGdaJp9pv9fG1ePt1GxNe6cZ5BtuU3izo+VKxu2oTD0l 0KNW+OndE+VNpxCyA71FBm86SLCS5Gy99BW9hsktj/u/WeDhupv62J9l4fTPQHZa lYsRcB944W3mK8D6DBAsIAe1DWY6KathaZGxY/MFQd0oH15+JMIBvQXTsJ703Yvm WpaJT3A1fEVTuAqPsWYTJPFNAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU/gqbVWIU AfMvZbgeoCvsn/bG3WwwHwYDVR0jBBgwFoAUEec/Ur8PWG8rn6ae4soV8hhfZsIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZFMzlGL0I1MDk1QTIyMDg2 QzExRUZBMDg1MkUxNkM0RjlBRTAyL0VlY19VcjhQV0c4cm42YWU0c29WOGhoZlpz SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRWVjX1VyOFBXRzhybjZhZTRzb1Y4aGhmWnNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTM5Ri9CNTA5NUEyMjA4NkMxMUVGQTA4NTJFMTZDNEY5QUUwMi82NjM4N0E2QzA4 NzIxMUVGOUVERkM2NzNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWdMJjANBgkqhkiG9w0BAQsFAAOCAQEAfo5U2Lwsb54yKA2J B8fMGgrXb3oe93Wae2cGP4zDA93xl3n+nqcIY4NzJiOSaW4kemJTQGysRmjSOihq 5SJcw94yLsIwUlEcKOHCJD41wmqfQsV8cB80dsczKV8vT1f3Ocd2bkQhepqOMTdP jJDQQxQytj02BvRk4lkcQW7WmzndPV7Po+p1wQwYOJLcQOl5gUOM/7halZRBBlyG 2YGB3hsJWqB0g2eAdmommkDBrgcQ4pfI2Nb84VRPWgS3fUq0LQbiNzhdyFt38yXt AonGhABrT4AJbX0k6rvTg9UK9ceMqbrtuOo9QU8JTcPX5znXokXzj10TlqFbwxAW 0nuwTA== -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:17 2024 by rpki-client on console-fra.rpki-client.org