$ rpki-client -vvf rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/B4A76FC8B5EC11EF9287020CC4F9AE02.roa File: B4A76FC8B5EC11EF9287020CC4F9AE02.roa (raw, json) Hash identifier: QjVymMQkhSRXc5iAPDed7b6jCqBrI7id3/8XlN7uo+c= Subject key identifier: 29:7D:28:E5:96:4A:C6:BB:3F:0F:11:EA:18:0F:F0:78:03:AD:C2:63 Certificate issuer: /CN=A917A0C0/serialNumber=A266167A04FAFEE5AE1A50E04570AD5FD44ED692 Certificate serial: 04 Authority key identifier: A2:66:16:7A:04:FA:FE:E5:AE:1A:50:E0:45:70:AD:5F:D4:4E:D6:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/B4A76FC8B5EC11EF9287020CC4F9AE02.roa Signing time: Mon 09 Dec 2024 05:16:12 +0000 ROA not before: Mon 09 Dec 2024 05:16:12 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 132839 IP address blocks: 103.211.124.0/22 maxlen: 24 160.238.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.crl rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Jan 2025 05:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A0C0/serialNumber=A266167A04FAFEE5AE1A50E04570AD5FD44ED692 Validity Not Before: Dec 9 05:16:12 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67567d1c-6d5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:92:e7:d3:d2:c8:74:e3:81:70:34:63:27:53: 2d:ba:56:9c:f5:8d:4a:d6:72:bf:3f:19:e9:67:0f: 91:00:93:24:5f:e6:b6:bf:c0:8a:ac:de:2d:af:61: f7:fa:e2:ac:9f:f5:c4:0e:eb:30:ce:10:6d:30:e9: 1e:09:16:63:a7:f2:6f:9f:60:06:69:47:26:a5:16: 3b:f3:96:4f:05:4a:2e:fa:b0:84:20:dd:65:9d:cb: 85:64:9a:25:c3:d4:63:e1:fa:9a:12:c3:98:a8:f8: 5e:23:b7:a7:60:1e:ae:a1:20:89:29:cb:ee:cc:4a: 45:a0:07:1b:74:f1:b1:ae:c7:52:68:c1:e0:70:b8: 92:01:d8:f4:46:a8:d7:1f:20:ab:84:58:a9:7e:4c: df:0a:00:20:8b:59:6f:3e:79:01:d0:2d:cd:76:f9: c4:c5:c9:7e:87:a8:f0:ea:5a:23:92:67:26:47:8d: 18:8b:d0:67:72:a6:8d:9b:91:54:71:b1:9d:b5:16: bd:dd:43:c8:c0:c9:84:fd:e2:6e:a4:8c:1c:bf:36: 91:3d:63:7d:77:f1:c6:5a:cd:7e:27:fc:56:87:7d: 82:6d:9c:71:a6:78:32:d2:bb:b2:17:1c:8f:63:06: 7d:87:ad:1c:a1:d3:90:84:fd:7d:16:84:c3:48:80: 74:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7D:28:E5:96:4A:C6:BB:3F:0F:11:EA:18:0F:F0:78:03:AD:C2:63 X509v3 Authority Key Identifier: keyid:A2:66:16:7A:04:FA:FE:E5:AE:1A:50:E0:45:70:AD:5F:D4:4E:D6:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/B4A76FC8B5EC11EF9287020CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.211.124.0/22 160.238.84.0/22 Signature Algorithm: sha256WithRSAEncryption 06:69:b1:76:07:ad:bd:12:99:6a:6d:f7:f9:f5:9d:e3:e2:54: 54:0a:29:15:79:17:b4:5b:db:49:87:db:df:3b:a5:6f:f7:a6: 38:b1:40:50:6d:d4:9f:1b:1b:21:df:17:b8:67:94:5a:83:e7: b0:c2:2c:0c:32:a4:3a:07:8d:15:ed:c2:c1:c5:4b:0c:95:08: a4:9d:e4:42:39:b7:f7:de:51:87:3a:0d:28:64:30:e6:d4:29: 0a:e6:a7:ed:47:c1:37:15:30:16:17:ef:c7:c3:ae:d3:4b:88: 96:40:f5:f8:9e:49:0e:31:6c:a2:e1:fe:34:7e:b4:b6:0e:e3: 6e:6b:84:1a:6f:dd:4b:cb:f0:ec:f1:39:53:4b:02:8a:69:cc: fe:2c:6b:7c:8d:35:e4:bd:58:3d:45:52:54:f2:5a:25:75:fd: 18:75:f4:e0:9a:14:96:c5:5c:84:c8:62:14:45:c1:3c:21:aa: 99:b1:4b:a5:06:b0:09:55:36:01:4a:8d:8c:4e:43:a4:f1:0f: cb:b6:37:39:3b:cb:f5:d2:2b:59:17:fe:b4:5c:cd:05:68:9a: b2:c8:7a:71:97:15:b7:1e:75:d4:69:de:6c:e9:c6:e8:6c:ae: 06:0e:0c:22:f8:34:22:3b:9f:56:73:65:b3:a0:cf:a7:89:69: 93:90:38:47 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTBDMDExMC8GA1UEBRMoQTI2NjE2N0EwNEZBRkVFNUFFMUE1MEUwNDU3MEFENUZE NDRFRDY5MjAeFw0yNDEyMDkwNTE2MTJaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NTY3ZDFjLTZkNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9kufT0sh044FwNGMnUy26Vpz1jUrWcr8/GelnD5EAkyRf5ra/wIqs3i2vYff6 4qyf9cQO6zDOEG0w6R4JFmOn8m+fYAZpRyalFjvzlk8FSi76sIQg3WWdy4VkmiXD 1GPh+poSw5io+F4jt6dgHq6hIIkpy+7MSkWgBxt08bGux1JoweBwuJIB2PRGqNcf IKuEWKl+TN8KACCLWW8+eQHQLc12+cTFyX6HqPDqWiOSZyZHjRiL0Gdypo2bkVRx sZ21Fr3dQ8jAyYT94m6kjBy/NpE9Y3138cZazX4n/FaHfYJtnHGmeDLSu7IXHI9j Bn2HrRyh05CE/X0WhMNIgHSRAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUKX0o5ZZK xrs/DxHqGA/weAOtwmMwHwYDVR0jBBgwFoAUomYWegT6/uWuGlDgRXCtX9RO1pIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBMEMwLzRBMkVEQzgwQjVF QzExRUZCMDJFQzEwQUM0RjlBRTAyL29tWVdlZ1Q2X3VXdUdsRGdSWEN0WDlSTzFw SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb21ZV2VnVDZfdVd1R2xEZ1JYQ3RYOVJPMXBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTBDMC80QTJFREM4MEI1RUMxMUVGQjAyRUMxMEFDNEY5QUUwMi9CNEE3NkZDOEI1 RUMxMUVGOTI4NzAyMENDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAmfTfAMEAqDuVDANBgkqhkiG9w0BAQsFAAOCAQEABmmxdget vRKZam33+fWd4+JUVAopFXkXtFvbSYfb3zulb/emOLFAUG3UnxsbId8XuGeUWoPn sMIsDDKkOgeNFe3CwcVLDJUIpJ3kQjm3995RhzoNKGQw5tQpCuan7UfBNxUwFhfv x8Ou00uIlkD1+J5JDjFsouH+NH60tg7jbmuEGm/dS8vw7PE5U0sCimnM/ixrfI01 5L1YPUVSVPJaJXX9GHX04JoUlsVchMhiFEXBPCGqmbFLpQawCVU2AUqNjE5DpPEP y7Y3OTvL9dIrWRf+tFzNBWiassh6cZcVtx511GnebOnG6GyuBg4MIvg0IjufVnNl s6DPp4lpk5A4Rw== -----END CERTIFICATE-----Generated at Fri Dec 27 07:43:24 2024 by rpki-client on console-ams.rpki-client.org