$ rpki-client -vvf rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/A8F4AE389D7E11EF91A24C73C4F9AE02.roa File: A8F4AE389D7E11EF91A24C73C4F9AE02.roa (raw, json) Hash identifier: vmnzZgJnt+b/L6c8qgw+DSQ8jwFFglsidxJ8BHdXZNA= Subject key identifier: F8:32:C1:09:25:9B:DC:7A:CC:36:39:BE:DA:2A:81:C8:7E:EA:48:D9 Certificate issuer: /CN=A917B736/serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17 Certificate serial: 19 Authority key identifier: 30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/A8F4AE389D7E11EF91A24C73C4F9AE02.roa Signing time: Fri 08 Nov 2024 03:08:00 +0000 ROA not before: Fri 08 Nov 2024 03:08:00 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 8075 IP address blocks: 103.103.46.0/23 maxlen: 23 2401:ef40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B736/serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17 Validity Not Before: Nov 8 03:08:00 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=672d8090-a1eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1e:b0:96:81:47:16:af:da:a7:2f:59:67:72: fa:75:28:6f:81:7c:35:27:94:b7:27:78:64:eb:24: d4:a7:e8:e2:7f:7e:cf:ff:85:ce:b9:98:d8:2d:ce: 95:5d:8a:54:17:da:b9:b9:69:1b:65:eb:3e:ec:32: 9c:df:01:70:20:0c:2d:ab:0c:7a:1f:c4:3b:10:d0: a1:79:43:0f:9a:d5:73:97:0c:55:88:03:14:98:6d: 50:4e:04:32:5a:0a:38:65:09:55:e4:18:20:c6:c2: ac:08:e1:2f:b8:83:d5:94:3b:1b:5e:79:ed:05:17: 69:ce:c9:68:ae:bf:34:20:5e:fc:2f:e9:5c:52:22: a2:50:bb:06:6f:3f:ae:53:ce:7b:4e:f6:02:c6:30: 63:43:6c:fe:a3:2a:e5:77:f7:4b:ff:71:8e:f9:68: 7f:3d:64:3d:96:42:d0:b2:9f:ae:c1:8a:71:98:0e: 86:2b:fc:05:a1:8a:88:ae:f0:13:4c:47:67:62:68: 86:b0:f4:2c:87:ae:cc:85:97:5a:a0:80:90:8b:88: 9b:f2:91:82:4b:d2:dd:52:9d:0a:b2:c0:ed:ef:1f: d7:18:8e:f6:70:c9:05:85:a4:7a:21:4e:24:43:60: 23:8a:04:db:43:bc:c0:32:6b:fc:43:4e:e2:57:c2: 41:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:32:C1:09:25:9B:DC:7A:CC:36:39:BE:DA:2A:81:C8:7E:EA:48:D9 X509v3 Authority Key Identifier: keyid:30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/A8F4AE389D7E11EF91A24C73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.103.46.0/23 IPv6: 2401:ef40::/48 Signature Algorithm: sha256WithRSAEncryption 57:bb:4e:89:f5:6e:fa:e3:66:98:d6:2e:9f:ca:0d:5f:3f:71: b1:36:70:97:e0:77:a9:5a:a0:73:73:c9:34:7e:75:88:c6:b1: fe:96:06:2d:06:24:8d:0c:9a:79:f6:d9:5a:95:b4:cc:1b:4a: b6:bc:1d:8f:15:00:99:20:7a:c0:e3:e2:4c:ff:bd:75:3f:18: 71:16:08:ce:41:0b:e2:af:b9:46:59:33:a9:2f:1b:e8:7e:71: db:f4:23:f6:b4:0d:9c:be:9d:b4:c7:68:7c:52:5e:94:cc:0e: e8:72:a2:9d:40:05:f1:e6:28:be:ab:80:07:43:9f:da:f0:3a: 5b:02:e1:89:64:a3:b6:59:27:2f:da:11:fc:00:53:2b:78:40: b2:68:07:15:be:e1:e6:76:24:a0:7e:09:03:37:1e:60:c3:27: c4:76:e8:92:1f:2e:a0:40:a1:69:fd:6d:92:22:51:72:83:e4: ea:09:67:38:0a:5b:f7:d5:b6:13:bd:40:32:48:5b:46:34:6a: a3:9d:53:49:7b:6c:c2:c7:d0:8e:ac:e7:c8:e5:c9:73:35:5d: d5:7a:f0:1e:05:b0:cf:d3:f7:4b:52:c4:22:07:19:f8:f7:bd: b7:b0:46:02:e1:7f:8d:14:ba:f0:15:65:54:52:0c:92:37:fd: 34:84:3f:22 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QjczNjExMC8GA1UEBRMoMzBCRTFFQjlEM0FDNDlEMEFGRUUxMzUzQzNGOUQxMTY3 QTAwN0IxNzAeFw0yNDExMDgwMzA4MDBaFw0yNTAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MmQ4MDkwLWExZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzHrCWgUcWr9qnL1lncvp1KG+BfDUnlLcneGTrJNSn6OJ/fs//hc65mNgtzpVd ilQX2rm5aRtl6z7sMpzfAXAgDC2rDHofxDsQ0KF5Qw+a1XOXDFWIAxSYbVBOBDJa CjhlCVXkGCDGwqwI4S+4g9WUOxteee0FF2nOyWiuvzQgXvwv6VxSIqJQuwZvP65T zntO9gLGMGNDbP6jKuV390v/cY75aH89ZD2WQtCyn67BinGYDoYr/AWhioiu8BNM R2diaIaw9CyHrsyFl1qggJCLiJvykYJL0t1SnQqywO3vH9cYjvZwyQWFpHohTiRD YCOKBNtDvMAya/xDTuJXwkEZAgMBAAGjggKmMIICojAdBgNVHQ4EFgQU+DLBCSWb 3HrMNjm+2iqByH7qSNkwHwYDVR0jBBgwFoAUML4eudOsSdCv7hNTw/nRFnoAexcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCNzM2L0YxMzNFRjBDODQy RDExRUY5OUU4M0Q4NEM0RjlBRTAyL01MNGV1ZE9zU2RDdjdoTlR3X25SRm5vQWV4 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTUw0ZXVkT3NTZEN2N2hOVHdfblJGbm9BZXhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjczNi9GMTMzRUYwQzg0MkQxMUVGOTlFODNEODRDNEY5QUUwMi9BOEY0QUUzODlE N0UxMUVGOTFBMjRDNzNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAWdnLjAPBAIAAjAJAwcAJAHvQAAAMA0GCSqGSIb3DQEBCwUA A4IBAQBXu06J9W7642aY1i6fyg1fP3GxNnCX4HepWqBzc8k0fnWIxrH+lgYtBiSN DJp59tlalbTMG0q2vB2PFQCZIHrA4+JM/711PxhxFgjOQQvir7lGWTOpLxvofnHb 9CP2tA2cvp20x2h8Ul6UzA7ocqKdQAXx5ii+q4AHQ5/a8DpbAuGJZKO2WScv2hH8 AFMreECyaAcVvuHmdiSgfgkDNx5gwyfEduiSHy6gQKFp/W2SIlFyg+TqCWc4Clv3 1bYTvUAySFtGNGqjnVNJe2zCx9COrOfI5clzNV3VevAeBbDP0/dLUsQiBxn49723 sEYC4X+NFLrwFWVUUgySN/00hD8i -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:18 2024 by rpki-client on console-fra.rpki-client.org