$ rpki-client -vvf rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/CF4D7C70DADE11EABE8DD41DC4F9AE02.roa File: CF4D7C70DADE11EABE8DD41DC4F9AE02.roa (raw, json) Hash identifier: bnHHifqyfmIvk8onUg2t/SyKb3Qse0OgPOBOI1YqMW8= Subject key identifier: 09:B8:A9:F3:7E:E1:D5:B1:9B:D7:F4:D2:2A:43:99:8C:9E:82:A5:DE Certificate issuer: /CN=A917126B/serialNumber=596CA733CE1DD16F8EEF32319EA5D3A8B22F90C9 Certificate serial: 0793 Authority key identifier: 59:6C:A7:33:CE:1D:D1:6F:8E:EF:32:31:9E:A5:D3:A8:B2:2F:90:C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWynM84d0W-O7zIxnqXTqLIvkMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/CF4D7C70DADE11EABE8DD41DC4F9AE02.roa Signing time: Sat 28 Sep 2024 21:10:49 +0000 ROA not before: Sat 28 Sep 2024 21:10:49 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 140963 IP address blocks: 103.153.212.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.crl rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWynM84d0W-O7zIxnqXTqLIvkMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1939 (0x793) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917126B/serialNumber=596CA733CE1DD16F8EEF32319EA5D3A8B22F90C9 Validity Not Before: Sep 28 21:10:49 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66f870d9-73ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5e:b3:47:41:f4:fc:63:23:76:1d:15:01:3c: dd:f0:36:fc:a7:e2:84:1c:b7:64:8b:2d:93:0d:35: 87:b7:62:dd:95:bb:da:98:63:7e:a1:0a:2f:85:a3: 52:16:5f:ab:79:61:a3:34:7c:0a:11:84:b4:b4:53: 9d:dd:bf:bd:66:d4:46:94:a3:66:ae:76:3e:c2:fc: ab:19:1f:d0:fa:3e:c0:0a:5d:4e:0d:1a:4e:2a:00: 61:0a:c2:6f:17:71:98:a7:33:52:31:54:b9:ef:44: e7:91:e4:a6:6e:c9:b0:fe:21:41:52:80:73:34:87: 51:fd:2c:9a:b1:0d:df:b7:cc:33:24:c4:1d:88:14: 4a:fa:d1:27:a2:46:f6:fb:58:ac:f7:1e:9f:6a:f1: ab:58:83:4b:c7:20:e0:fc:dd:b2:8c:ea:27:2e:06: a2:9e:1a:8b:f5:2f:e3:df:11:16:51:05:dc:7f:5e: 1d:e2:a4:9f:c5:36:7e:b9:34:2d:10:df:5e:6b:02: bd:86:61:0d:98:65:e8:b8:4b:70:85:23:95:d8:3c: 64:ff:53:2c:f9:33:b7:d8:79:e6:be:48:b1:45:12: 1d:eb:8f:1c:0d:ab:3d:42:64:fa:83:d5:8e:c5:13: 78:40:17:99:73:14:a1:47:db:58:17:ee:e9:42:f9: 7e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B8:A9:F3:7E:E1:D5:B1:9B:D7:F4:D2:2A:43:99:8C:9E:82:A5:DE X509v3 Authority Key Identifier: keyid:59:6C:A7:33:CE:1D:D1:6F:8E:EF:32:31:9E:A5:D3:A8:B2:2F:90:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWynM84d0W-O7zIxnqXTqLIvkMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/CF4D7C70DADE11EABE8DD41DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.212.0/23 Signature Algorithm: sha256WithRSAEncryption bd:9c:61:44:33:13:90:db:84:a5:3a:ef:28:af:c8:6a:f3:0a: d6:92:0f:7e:5f:a5:46:b8:30:03:4e:df:4c:5d:c8:10:c1:94: 28:b4:64:cc:c0:e8:75:60:bc:1e:a7:d5:df:5f:bd:c9:c4:e3: 19:55:70:e6:7b:cc:48:79:5d:e5:c8:8d:19:e5:26:de:5d:b7: d6:9a:8f:49:d2:fe:49:70:4a:28:a6:1d:67:78:87:cc:0a:ee: 78:50:39:7c:d0:b0:45:d3:74:0c:25:e4:b8:ff:56:bc:a7:fa: 85:c0:df:14:ba:34:7f:f4:2f:6e:86:e8:2f:93:bb:b1:b6:a6: a7:ce:2a:2d:21:39:91:15:51:4f:79:d4:09:2e:cb:62:47:ea: 1e:f2:08:3b:c3:eb:98:d2:f0:ca:2f:9c:3d:9d:b8:25:db:10: 52:b6:22:59:f7:71:f7:2f:0b:d3:b1:83:6c:ec:49:dc:36:ad: 8d:c3:06:42:61:c9:f2:62:b2:b9:1e:9e:57:f9:3a:4b:a6:02: f9:f8:47:12:48:0c:70:a8:1d:ef:00:67:64:ac:7a:aa:b9:ee: 21:5b:1b:45:9a:24:3b:71:ed:6d:f8:2b:27:a6:fe:1b:24:02: cb:87:90:38:90:63:16:a8:f6:e6:85:b7:e0:ce:81:a2:bc:07: b3:03:d3:94 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEyNkIxMTAvBgNVBAUTKDU5NkNBNzMzQ0UxREQxNkY4RUVGMzIzMTlFQTVEM0E4 QjIyRjkwQzkwHhcNMjQwOTI4MjExMDQ5WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmY4NzBkOS03M2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0V6zR0H0/GMjdh0VATzd8Db8p+KEHLdkiy2TDTWHt2LdlbvamGN+oQovhaNS Fl+reWGjNHwKEYS0tFOd3b+9ZtRGlKNmrnY+wvyrGR/Q+j7ACl1ODRpOKgBhCsJv F3GYpzNSMVS570TnkeSmbsmw/iFBUoBzNIdR/SyasQ3ft8wzJMQdiBRK+tEnokb2 +1is9x6favGrWINLxyDg/N2yjOonLgainhqL9S/j3xEWUQXcf14d4qSfxTZ+uTQt EN9eawK9hmENmGXouEtwhSOV2Dxk/1Ms+TO32HnmvkixRRId648cDas9QmT6g9WO xRN4QBeZcxShR9tYF+7pQvl+BwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAm4qfN+ 4dWxm9f00ipDmYyegqXeMB8GA1UdIwQYMBaAFFlspzPOHdFvju8yMZ6l06iyL5DJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTI2Qi83Rjk2NUQ3NERB REQxMUVBQUYwRjRCMUNDNEY5QUUwMi9XV3luTTg0ZDBXLU83ekl4bnFYVHFMSXZr TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dXeW5NODRkMFctTzd6SXhucVhUcUxJdmtNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzEyNkIvN0Y5NjVENzREQUREMTFFQUFGMEY0QjFDQzRGOUFFMDIvQ0Y0RDdDNzBE QURFMTFFQUJFOERENDFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmdQwDQYJKoZIhvcNAQELBQADggEBAL2cYUQzE5DbhKU6 7yivyGrzCtaSD35fpUa4MANO30xdyBDBlCi0ZMzA6HVgvB6n1d9fvcnE4xlVcOZ7 zEh5XeXIjRnlJt5dt9aaj0nS/klwSiimHWd4h8wK7nhQOXzQsEXTdAwl5Lj/Vryn +oXA3xS6NH/0L26G6C+Tu7G2pqfOKi0hOZEVUU951Akuy2JH6h7yCDvD65jS8Mov nD2duCXbEFK2Iln3cfcvC9Oxg2zsSdw2rY3DBkJhyfJisrkenlf5OkumAvn4RxJI DHCoHe8AZ2Sseqq57iFbG0WaJDtx7W34Kyem/hskAsuHkDiQYxao9uaFt+DOgaK8 B7MD05Q= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:30 2024 by rpki-client on console-ams.rpki-client.org