$ rpki-client -vvf rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/D75EF2ACFB6D11EC8F56D760C4F9AE02.roa File: D75EF2ACFB6D11EC8F56D760C4F9AE02.roa (raw, json) Hash identifier: 2JXMW+fr45VK5sWZ5vPmZ3HpKXF1OtYxpAwUvK0JoOo= Subject key identifier: 68:97:8C:52:29:11:F3:A0:E7:CE:C3:5B:3D:39:14:45:04:C6:C9:8A Certificate issuer: /CN=A917C23C/serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E Certificate serial: 06C2 Authority key identifier: AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/D75EF2ACFB6D11EC8F56D760C4F9AE02.roa Signing time: Tue 08 Oct 2024 22:31:34 +0000 ROA not before: Tue 08 Oct 2024 22:31:34 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 59315 IP address blocks: 103.243.76.0/22 maxlen: 22 103.243.76.0/24 maxlen: 24 103.243.77.0/24 maxlen: 24 103.243.78.0/24 maxlen: 24 103.243.79.0/24 maxlen: 24 116.206.46.0/23 maxlen: 23 116.206.46.0/24 maxlen: 24 116.206.47.0/24 maxlen: 24 2400:4c40::/32 maxlen: 32 2400:4c40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1730 (0x6c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C23C/serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E Validity Not Before: Oct 8 22:31:34 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6705b2c5-c793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bc:76:9a:cb:c9:c6:0a:f9:4a:e8:19:b2:f4: ef:31:b0:ec:41:67:cf:c1:3f:ac:ec:4a:fa:18:df: 17:e7:7d:61:40:63:0e:56:ea:de:a8:5a:4a:65:53: de:be:f4:e6:a3:05:dc:47:2d:b5:8e:f1:a7:b0:4f: 95:fc:88:91:7e:c5:2c:18:a4:5f:4e:a7:18:86:2e: 77:e7:82:6d:e3:f2:4a:98:2e:57:2a:e7:ed:3c:22: b1:3f:24:ec:30:c4:26:62:88:27:bd:a9:a3:44:a8: 1c:a7:a2:b0:ea:89:cf:b0:16:11:75:b1:ec:c4:c7: ba:8b:2e:21:35:c6:b4:c3:5f:b7:5e:cf:ce:7d:5d: 9c:d5:73:5c:9c:b8:bb:2c:68:e4:2a:bf:25:29:81: 97:a4:75:d1:12:95:05:49:b4:fa:7c:e3:b6:c7:c2: e5:ae:b1:a1:9b:fc:7f:8e:fa:d7:90:25:a1:45:9a: ce:92:ba:1c:dd:90:06:26:94:06:1d:23:a6:9a:73: 25:a7:f4:5e:a0:83:57:b5:d5:b1:4f:9c:29:7c:44: 88:01:26:6d:0d:d5:6c:23:7c:19:9d:3c:e3:bc:91: f0:1e:86:0f:d4:a6:03:1f:d4:d0:f7:98:a9:20:d8: 0c:69:a9:b7:ec:64:ae:5d:11:08:95:81:62:73:c9: db:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:97:8C:52:29:11:F3:A0:E7:CE:C3:5B:3D:39:14:45:04:C6:C9:8A X509v3 Authority Key Identifier: keyid:AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/D75EF2ACFB6D11EC8F56D760C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.243.76.0/22 116.206.46.0/23 IPv6: 2400:4c40::/32 Signature Algorithm: sha256WithRSAEncryption 98:79:13:a4:c7:64:36:8b:11:30:c2:14:90:e2:7a:52:e9:96: 03:1b:32:76:90:78:61:bd:f7:05:49:9a:fc:a2:41:1a:85:ce: 3d:30:03:54:cb:26:26:db:52:02:7e:18:8c:19:a0:c3:51:d1: c2:ee:62:6d:3e:f5:60:34:ef:d2:e9:a8:ac:3d:33:aa:ba:9f: 52:d6:72:5a:9d:51:ea:34:f8:ac:12:a9:9a:e5:4b:ba:6b:07: a8:ab:49:76:04:94:7d:83:0f:43:89:d9:d1:94:e3:0a:60:4f: 9a:92:97:b5:e1:35:82:f8:44:a2:ab:6c:a1:78:54:52:c4:6d: 6e:eb:fc:32:d0:1a:ec:94:b9:5c:7c:da:0f:e1:0f:11:1d:a6: e4:a2:08:19:46:3a:6c:6d:85:b0:2f:45:14:61:c1:0d:48:cc: 80:97:8b:f7:da:b8:c5:02:71:c3:66:81:35:1f:3c:c0:51:8a: cb:5a:85:7b:bd:73:25:44:14:10:d2:5c:ca:5b:ad:09:1a:91: ba:0b:67:74:47:77:c3:60:01:af:61:9e:f3:f5:f0:55:ea:5e: c4:68:3c:2c:6c:e7:a4:a5:81:93:10:fb:c3:d3:f0:b3:75:0d: 7c:69:86:73:f2:07:95:5f:1d:95:23:dd:bc:50:b1:a0:21:b1: c6:bc:a6:31 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICBsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyM0MxMTAvBgNVBAUTKEFDMzJFOTlDQjA5MkU2MkUzQUNBMTg3NDYzREE5OUU3 M0Q1QUFGM0UwHhcNMjQxMDA4MjIzMTM0WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzA1YjJjNS1jNzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLx2msvJxgr5SugZsvTvMbDsQWfPwT+s7Er6GN8X531hQGMOVureqFpKZVPe vvTmowXcRy21jvGnsE+V/IiRfsUsGKRfTqcYhi5354Jt4/JKmC5XKuftPCKxPyTs MMQmYognvamjRKgcp6Kw6onPsBYRdbHsxMe6iy4hNca0w1+3Xs/OfV2c1XNcnLi7 LGjkKr8lKYGXpHXREpUFSbT6fOO2x8LlrrGhm/x/jvrXkCWhRZrOkroc3ZAGJpQG HSOmmnMlp/ReoINXtdWxT5wpfESIASZtDdVsI3wZnTzjvJHwHoYP1KYDH9TQ95ip INgMaam37GSuXREIlYFic8nbSQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFGiXjFIp EfOg587DWz05FEUExsmKMB8GA1UdIwQYMBaAFKwy6ZywkuYuOsoYdGPamec9Wq8+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzIzQy8wOTA3NDRDMjNB M0YxMUVCQjYzQjc1NTFDNEY5QUUwMi9yRExwbkxDUzVpNDZ5aGgwWTlxWjV6MWFy ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JETHBuTENTNWk0NnloaDBZOXFaNXoxYXJ6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0MyM0MvMDkwNzQ0QzIzQTNGMTFFQkI2M0I3NTUxQzRGOUFFMDIvRDc1RUYyQUNG QjZEMTFFQzhGNTZENzYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJn80wDBAF0zi4wDQQCAAIwBwMFACQATEAwDQYJKoZIhvcN AQELBQADggEBAJh5E6THZDaLETDCFJDielLplgMbMnaQeGG99wVJmvyiQRqFzj0w A1TLJibbUgJ+GIwZoMNR0cLuYm0+9WA079LpqKw9M6q6n1LWclqdUeo0+KwSqZrl S7prB6irSXYElH2DD0OJ2dGU4wpgT5qSl7XhNYL4RKKrbKF4VFLEbW7r/DLQGuyU uVx82g/hDxEdpuSiCBlGOmxthbAvRRRhwQ1IzICXi/fauMUCccNmgTUfPMBRista hXu9cyVEFBDSXMpbrQkakboLZ3RHd8NgAa9hnvP18FXqXsRoPCxs56SlgZMQ+8PT 8LN1DXxphnPyB5VfHZUj3bxQsaAhsca8pjE= -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:43 2024 by rpki-client on console-ams.rpki-client.org