$ rpki-client -vvf rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/C0AF4C2ED01A11ECAEEE987EC4F9AE02.roa File: C0AF4C2ED01A11ECAEEE987EC4F9AE02.roa (raw, json) Hash identifier: 0uCjW0GPDpZBOo9X1hFG0KRIzIvMOnBTLzlDMrS+8IA= Subject key identifier: D8:C2:45:03:59:43:AD:DD:74:2C:3D:F2:F3:A1:F4:56:7E:0F:36:76 Certificate issuer: /CN=A917A4C7/serialNumber=0D5594855310D916064B7991370CC964C3D2F384 Certificate serial: 02B3 Authority key identifier: 0D:55:94:85:53:10:D9:16:06:4B:79:91:37:0C:C9:64:C3:D2:F3:84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/C0AF4C2ED01A11ECAEEE987EC4F9AE02.roa Signing time: Thu 07 Nov 2024 01:14:28 +0000 ROA not before: Thu 07 Nov 2024 01:14:28 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 133884 IP address blocks: 103.44.222.0/24 maxlen: 24 103.115.234.0/23 maxlen: 23 103.115.234.0/24 maxlen: 24 103.115.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.crl rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 691 (0x2b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A4C7/serialNumber=0D5594855310D916064B7991370CC964C3D2F384 Validity Not Before: Nov 7 01:14:28 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=672c1474-5499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:24:76:2a:f2:53:16:d2:39:a1:51:48:20:47: 8b:e2:2d:34:ef:16:0d:9f:cd:2a:18:04:8c:f5:54: ba:7a:b8:9d:79:95:32:8e:e1:a9:a1:81:65:36:52: 9a:2f:3a:41:41:f3:63:d6:af:2a:b0:75:a6:f6:49: 1d:ad:27:8d:f3:24:5a:22:80:8c:6e:c8:cf:f8:77: 7f:c0:a2:d9:9c:77:9f:05:1c:0e:8a:3f:68:13:fb: c9:54:d0:a6:91:c7:6f:64:64:3f:1b:7e:d5:dc:97: 6e:04:61:33:c2:5e:bf:cd:c7:ec:5a:26:55:d1:a4: 1c:cb:19:5b:39:11:b6:80:59:22:41:49:7f:ea:f0: 89:97:d2:ee:d7:8e:ff:f6:31:6c:49:ea:94:55:22: 39:f6:95:f3:fd:10:23:3d:c4:63:82:eb:dd:9d:bd: 49:0b:1e:37:11:16:e3:35:a3:b3:af:15:4f:bf:ea: 26:da:08:d2:c9:ed:55:53:f4:7d:c6:ea:9e:13:72: 59:7e:94:92:25:89:99:47:4b:36:20:46:2c:69:f2: fc:c7:e1:9e:e0:28:ce:3f:7c:5e:1f:9a:f1:0a:32: 9b:05:18:79:67:05:d2:72:ec:25:61:14:49:6a:93: fa:14:3c:4f:7b:a1:f3:70:37:12:40:86:65:12:cc: 01:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C2:45:03:59:43:AD:DD:74:2C:3D:F2:F3:A1:F4:56:7E:0F:36:76 X509v3 Authority Key Identifier: keyid:0D:55:94:85:53:10:D9:16:06:4B:79:91:37:0C:C9:64:C3:D2:F3:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/C0AF4C2ED01A11ECAEEE987EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.44.222.0/24 103.115.234.0/23 Signature Algorithm: sha256WithRSAEncryption 35:68:48:88:28:9a:2a:74:f2:c1:20:45:8c:35:ac:6b:ab:3e: 2c:0b:f5:7e:2f:13:d0:e3:68:a5:7c:81:18:72:f8:6b:a2:47: 4a:a7:cc:48:ce:6d:c6:74:8e:84:77:66:72:e4:5f:91:fd:bd: 58:9e:88:b6:95:91:5e:b3:54:be:a2:3c:79:90:1e:e0:e2:ab: f2:f9:fe:6c:28:5c:99:13:56:27:6b:56:3b:2b:9b:9c:56:b7: 39:e5:17:58:44:03:bc:d0:20:20:49:01:46:b8:1e:94:12:5b: 56:b7:3d:53:25:ae:29:86:b7:73:36:a1:b3:4f:7e:b3:01:5a: 3a:ee:b7:39:83:65:b6:1f:08:86:61:f3:a4:7c:eb:82:28:28: 49:e5:72:21:fd:b8:b0:63:9d:a8:7a:50:c4:86:ce:8f:ba:35: c2:b0:e8:12:1f:8c:73:4c:e4:6a:71:ee:46:75:7e:35:f7:7e: 72:72:f7:b4:a3:23:1b:d6:89:0a:02:22:65:d9:d7:d9:4a:71: 5c:c0:c0:fa:f4:af:3c:f2:35:75:6a:10:ed:4d:f5:aa:09:65: e2:e0:79:e1:42:d2:fd:bb:5d:6c:81:58:04:eb:1b:2f:41:4a: d7:bc:62:6b:9b:f7:14:2f:68:43:41:c7:27:1c:82:01:61:8c: 28:73:ce:ff -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICArMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0QzcxMTAvBgNVBAUTKDBENTU5NDg1NTMxMEQ5MTYwNjRCNzk5MTM3MENDOTY0 QzNEMkYzODQwHhcNMjQxMTA3MDExNDI4WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJjMTQ3NC01NDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5CR2KvJTFtI5oVFIIEeL4i007xYNn80qGASM9VS6erideZUyjuGpoYFlNlKa LzpBQfNj1q8qsHWm9kkdrSeN8yRaIoCMbsjP+Hd/wKLZnHefBRwOij9oE/vJVNCm kcdvZGQ/G37V3JduBGEzwl6/zcfsWiZV0aQcyxlbORG2gFkiQUl/6vCJl9Lu147/ 9jFsSeqUVSI59pXz/RAjPcRjguvdnb1JCx43ERbjNaOzrxVPv+om2gjSye1VU/R9 xuqeE3JZfpSSJYmZR0s2IEYsafL8x+Ge4CjOP3xeH5rxCjKbBRh5ZwXScuwlYRRJ apP6FDxPe6HzcDcSQIZlEswB7QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNjCRQNZ Q63ddCw98vOh9FZ+DzZ2MB8GA1UdIwQYMBaAFA1VlIVTENkWBkt5kTcMyWTD0vOE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTRDNy9DRjZFQzA0NEQw MTcxMUVDOEUzNjEzNTdDNEY5QUUwMi9EVldVaFZNUTJSWUdTM21STnd6SlpNUFM4 NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RWV1VoVk1RMlJZR1MzbVJOd3pKWk1QUzg0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E0QzcvQ0Y2RUMwNDREMDE3MTFFQzhFMzYxMzU3QzRGOUFFMDIvQzBBRjRDMkVE MDFBMTFFQ0FFRUU5ODdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnLN4DBAFnc+owDQYJKoZIhvcNAQELBQADggEBADVoSIgo mip08sEgRYw1rGurPiwL9X4vE9DjaKV8gRhy+GuiR0qnzEjObcZ0joR3ZnLkX5H9 vVieiLaVkV6zVL6iPHmQHuDiq/L5/mwoXJkTVidrVjsrm5xWtznlF1hEA7zQICBJ AUa4HpQSW1a3PVMlrimGt3M2obNPfrMBWjrutzmDZbYfCIZh86R864IoKEnlciH9 uLBjnah6UMSGzo+6NcKw6BIfjHNM5Gpx7kZ1fjX3fnJy97SjIxvWiQoCImXZ19lK cVzAwPr0rzzyNXVqEO1N9aoJZeLgeeFC0v27XWyBWATrGy9BSte8Ymub9xQvaENB xyccggFhjChzzv8= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:43 2024 by rpki-client on console-ams.rpki-client.org