$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/C6AB3818EDD211EEB5875527C4F9AE02.roa File: C6AB3818EDD211EEB5875527C4F9AE02.roa (raw, json) Hash identifier: oaUh0fbEUMsjPh/pU6go3+rO6X22ZK4YJJK2zrHExd0= Subject key identifier: C5:E9:17:C6:F6:16:98:E3:C6:84:27:BB:E3:06:9D:DB:9D:EC:EB:3F Certificate issuer: /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Certificate serial: AA Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/C6AB3818EDD211EEB5875527C4F9AE02.roa Signing time: Tue 29 Oct 2024 14:21:47 +0000 ROA not before: Tue 29 Oct 2024 14:21:47 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 976 IP address blocks: 103.118.40.0/22 maxlen: 22 103.118.40.0/23 maxlen: 23 103.118.40.0/24 maxlen: 24 103.118.41.0/24 maxlen: 24 103.118.42.0/23 maxlen: 23 103.118.42.0/24 maxlen: 24 103.118.43.0/24 maxlen: 24 2403:27c0::/32 maxlen: 32 2403:27c0:1000::/48 maxlen: 48 2403:27c0:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Validity Not Before: Oct 29 14:21:47 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=6720ef7b-dbca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ff:47:ea:eb:54:8e:df:89:f6:58:4b:18:7c: d2:c9:69:e4:b6:99:ae:6b:ee:54:5b:8c:6d:2a:08: 62:2c:54:1c:2d:f3:07:91:2d:2b:aa:cc:2c:b7:97: b8:84:30:ea:d8:18:21:18:7b:28:f9:0e:2c:57:f6: 86:0a:5c:fd:a4:43:18:df:5d:56:2d:15:ef:a6:60: e8:0e:c6:3b:5c:4e:93:c4:84:19:00:16:d2:73:7c: 40:bc:25:ad:92:dd:f0:78:ef:05:ee:32:64:e8:86: ef:3a:07:12:de:24:b7:e2:62:b5:c0:19:c8:bc:15: 37:6f:96:44:4b:f7:59:ac:1a:b8:c6:cb:91:d6:cd: ed:89:89:16:17:ad:51:54:ab:ea:56:eb:70:ef:d4: ac:3a:09:1b:9b:48:3d:03:8f:98:28:f2:4b:4e:bb: 09:01:a7:06:99:7e:4f:a8:75:46:5b:44:40:09:2a: d5:2e:80:b9:ee:8f:f9:79:7a:93:31:9d:75:7a:b0: 66:50:09:e2:36:89:e4:3b:fc:7b:81:2c:17:eb:3e: e8:aa:ed:4b:40:78:98:86:d1:27:87:fd:be:c3:7c: e0:30:0d:64:2e:c1:2d:25:a7:08:a0:11:c6:59:a1: 9b:61:2e:66:77:b9:a2:e9:ac:13:fc:9d:d6:f0:6a: 86:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E9:17:C6:F6:16:98:E3:C6:84:27:BB:E3:06:9D:DB:9D:EC:EB:3F X509v3 Authority Key Identifier: keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/C6AB3818EDD211EEB5875527C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.118.40.0/22 IPv6: 2403:27c0::/32 Signature Algorithm: sha256WithRSAEncryption 2f:b9:7b:a2:89:44:1d:89:8f:60:a3:a1:b6:f5:fc:b8:66:0a: 11:e3:87:89:5b:b3:ae:f3:e3:dd:c1:f8:a5:4b:a9:fb:06:5b: 0a:57:07:68:80:4e:54:fa:77:a7:a2:a4:f2:54:d5:b2:f0:af: bc:42:68:aa:cf:70:15:8c:6d:0d:35:33:f8:9a:d0:4d:5b:76: f5:be:68:34:47:a9:17:61:4d:0a:e9:a3:4d:80:3c:1a:5f:5a: c8:89:14:49:d0:b1:95:47:10:fa:05:65:92:56:2b:7e:d5:22: 33:b5:47:a0:53:d7:7e:ea:b6:40:66:7a:07:36:73:75:68:01: fd:38:69:e6:84:c0:a5:b4:29:ab:c7:40:5e:84:92:e2:f4:e6: de:f3:1a:76:73:17:c9:b3:a0:cc:04:2f:d8:02:ba:26:e3:c7: 92:74:4a:e1:07:e2:86:a5:68:fa:59:6c:04:bd:3d:24:54:1f: ec:fb:01:e1:26:81:e4:a9:19:51:23:1c:79:51:4c:70:6d:0c: 03:4f:76:99:02:a1:71:e6:2b:73:9c:cc:bd:e0:37:5f:64:87: 85:ba:44:39:0a:7b:2c:5a:5f:ca:75:5e:ee:b2:50:b1:26:1a: 9a:93:71:ff:56:b3:c4:8b:b3:f8:2b:84:51:e6:35:a8:80:b3: b8:b9:fb:eb -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2NkYxMTAvBgNVBAUTKEIyMkMzRDBBQkNEMzkxOTQ4NkEzRTYxRThENzg4OTIz OTIyQkY2QTUwHhcNMjQxMDI5MTQyMTQ3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzIwZWY3Yi1kYmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/9H6utUjt+J9lhLGHzSyWnktpmua+5UW4xtKghiLFQcLfMHkS0rqswst5e4 hDDq2BghGHso+Q4sV/aGClz9pEMY311WLRXvpmDoDsY7XE6TxIQZABbSc3xAvCWt kt3weO8F7jJk6IbvOgcS3iS34mK1wBnIvBU3b5ZES/dZrBq4xsuR1s3tiYkWF61R VKvqVutw79SsOgkbm0g9A4+YKPJLTrsJAacGmX5PqHVGW0RACSrVLoC57o/5eXqT MZ11erBmUAniNonkO/x7gSwX6z7oqu1LQHiYhtEnh/2+w3zgMA1kLsEtJacIoBHG WaGbYS5md7mi6awT/J3W8GqGeQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFMXpF8b2 FpjjxoQnu+MGndud7Os/MB8GA1UdIwQYMBaAFLIsPQq805GUhqPmHo14iSOSK/al MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY2Ri84RkNDOUQyOEM2 RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGtaU0dvLVllalhpSkk1SXI5 cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NpdzlDcnpUa1pTR28tWWVqWGlKSTVJcjlxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E2NkYvOEZDQzlEMjhDNkY5MTFFRTk3RTZGQjFEQzRGOUFFMDIvQzZBQjM4MThF REQyMTFFRUI1ODc1NTI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJndigwDQQCAAIwBwMFACQDJ8AwDQYJKoZIhvcNAQELBQAD ggEBAC+5e6KJRB2Jj2Cjobb1/LhmChHjh4lbs67z493B+KVLqfsGWwpXB2iATlT6 d6eipPJU1bLwr7xCaKrPcBWMbQ01M/ia0E1bdvW+aDRHqRdhTQrpo02APBpfWsiJ FEnQsZVHEPoFZZJWK37VIjO1R6BT137qtkBmegc2c3VoAf04aeaEwKW0KavHQF6E kuL05t7zGnZzF8mzoMwEL9gCuibjx5J0SuEH4oalaPpZbAS9PSRUH+z7AeEmgeSp GVEjHHlRTHBtDANPdpkCoXHmK3OczL3gN19kh4W6RDkKeyxaX8p1Xu6yULEmGpqT cf9Ws8SLs/grhFHmNaiAs7i5++s= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:18 2024 by rpki-client on console-fra.rpki-client.org