$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/4707F6CCB10F11E5A010921EC4F9AE02.roa File: 4707F6CCB10F11E5A010921EC4F9AE02.roa (raw, json) Hash identifier: +r4aMQM4Dy6HeFZGJPAMgBCQMQ+aLaqXV/nCCrcK1AY= Subject key identifier: A7:5F:4A:43:92:22:FB:BB:85:97:89:39:33:39:D2:95:08:9F:B9:23 Certificate issuer: /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Certificate serial: 22EA Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/4707F6CCB10F11E5A010921EC4F9AE02.roa Signing time: Tue 10 Sep 2024 16:23:20 +0000 ROA not before: Tue 10 Sep 2024 16:23:20 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 55532 IP address blocks: 103.15.168.0/24 maxlen: 24 103.15.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:50:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8938 (0x22ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Validity Not Before: Sep 10 16:23:20 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66e07278-a222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ef:a6:db:44:73:7a:fe:6c:f6:ee:e8:04:0f: 49:f7:72:8d:e1:13:f1:02:c7:4f:0e:cb:16:bd:55: f1:89:0c:df:34:4f:b4:88:09:8a:83:f1:f6:4b:b8: 13:11:cc:94:ce:16:95:86:03:f7:ee:ce:b9:94:01: 8d:5f:10:f9:4a:dd:9a:7f:22:cb:19:82:fd:4e:ef: 80:b6:d2:36:80:5c:72:6c:96:45:8d:f0:6b:97:63: 92:8e:5e:bc:b0:8d:d6:13:fd:cf:7d:bc:2b:6b:e5: bf:3c:5f:09:4e:2b:e7:c7:be:79:68:5a:7a:26:0a: f9:ae:ce:e9:48:b3:c6:b0:63:d7:ec:c4:78:02:8d: f3:1a:80:66:f9:42:f0:69:2d:31:da:a3:9a:4d:26: 7c:f4:d4:89:1f:4a:d5:88:51:ef:5b:34:1f:66:85: b5:9f:74:b2:0c:68:40:e5:0a:e4:3d:7e:44:2b:99: ae:21:d5:0d:95:97:33:d5:6e:dc:3c:34:44:6f:a8: 00:23:3b:c4:fd:66:df:6c:9d:05:54:24:33:94:62: 9b:03:54:50:fe:20:ac:d4:04:f5:c4:28:66:3a:b5: a5:68:43:f7:c1:6f:0e:92:97:56:37:bf:03:b2:b2: 5c:69:a8:2a:f7:c4:8c:48:f1:6f:f8:3f:a9:c7:16: 95:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5F:4A:43:92:22:FB:BB:85:97:89:39:33:39:D2:95:08:9F:B9:23 X509v3 Authority Key Identifier: keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/4707F6CCB10F11E5A010921EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.15.168.0/23 Signature Algorithm: sha256WithRSAEncryption 25:4e:85:98:4f:64:44:68:7b:b5:92:a6:a1:c8:d8:f5:1c:d5: c0:ec:d8:8a:33:0f:1a:d7:81:3a:94:08:8d:8e:65:99:0d:93: 79:13:25:f7:8e:97:b0:87:3c:7f:a3:59:fd:45:bb:e7:dc:a2: 6a:91:5f:6a:63:60:2e:e7:a2:35:0f:89:58:64:19:b8:cf:37: 13:34:7b:8f:08:63:09:fc:69:59:ac:46:c6:32:a5:40:ca:5a: b5:2b:29:ce:43:f5:76:51:32:cb:3a:01:4d:8e:0d:50:36:0b: da:e2:80:77:45:da:86:66:b0:b3:3b:89:67:86:97:3a:90:d0: 3c:03:6d:a4:74:52:64:23:7c:31:f2:5f:ba:15:7f:d8:95:5f: 9f:bf:9e:e4:47:62:b6:f1:03:c3:c5:84:b4:c1:b0:86:6d:32: b7:80:bc:08:fd:7d:2d:39:23:d8:e9:68:96:2f:9a:a7:69:86: f1:4f:52:89:3d:f1:2d:f7:3d:d6:11:92:e9:f6:7a:7b:f7:96: 90:0e:d0:5a:66:14:80:67:eb:d2:ef:d3:1f:2e:83:ed:fc:61: 9a:d5:77:b3:92:06:20:05:70:45:62:3f:38:6a:c5:9a:eb:4e: 65:33:80:81:96:f6:17:e1:2d:87:3c:b8:38:29:6a:de:ff:67: 88:32:9b:5d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICIuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZBOTMxMTAvBgNVBAUTKDMyNUIyQTZGRDRCN0JENDA4OTU1NjI3MTlGRkQ4RDlB QTFBODc2NkQwHhcNMjQwOTEwMTYyMzIwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmUwNzI3OC1hMjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu++m20Rzev5s9u7oBA9J93KN4RPxAsdPDssWvVXxiQzfNE+0iAmKg/H2S7gT EcyUzhaVhgP37s65lAGNXxD5St2afyLLGYL9Tu+AttI2gFxybJZFjfBrl2OSjl68 sI3WE/3Pfbwra+W/PF8JTivnx755aFp6Jgr5rs7pSLPGsGPX7MR4Ao3zGoBm+ULw aS0x2qOaTSZ89NSJH0rViFHvWzQfZoW1n3SyDGhA5QrkPX5EK5muIdUNlZcz1W7c PDREb6gAIzvE/WbfbJ0FVCQzlGKbA1RQ/iCs1AT1xChmOrWlaEP3wW8OkpdWN78D srJcaagq98SMSPFv+D+pxxaVwQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKdfSkOS Ivu7hZeJOTM50pUIn7kjMB8GA1UdIwQYMBaAFDJbKm/Ut71AiVVicZ/9jZqhqHZt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkE5My9FOTAxM0I3Njg0 MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZVQ0pWV0p4bl8yTm1xR29k bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sc3FiOVMzdlVDSlZXSnhuXzJObXFHb2RtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0ZBOTMvRTkwMTNCNzY4NDA3MTFFNTkyRTk0NzJEQzRGOUFFMDIvNDcwN0Y2Q0NC MTBGMTFFNUEwMTA5MjFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnD6gwDQYJKoZIhvcNAQELBQADggEBACVOhZhPZERoe7WS pqHI2PUc1cDs2IozDxrXgTqUCI2OZZkNk3kTJfeOl7CHPH+jWf1Fu+fcomqRX2pj YC7nojUPiVhkGbjPNxM0e48IYwn8aVmsRsYypUDKWrUrKc5D9XZRMss6AU2ODVA2 C9rigHdF2oZmsLM7iWeGlzqQ0DwDbaR0UmQjfDHyX7oVf9iVX5+/nuRHYrbxA8PF hLTBsIZtMreAvAj9fS05I9jpaJYvmqdphvFPUok98S33PdYRkun2env3lpAO0Fpm FIBn69Lv0x8ug+38YZrVd7OSBiAFcEViPzhqxZrrTmUzgIGW9hfhLYc8uDgpat7/ Z4gym10= -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:50 2024 by rpki-client on console-fra.rpki-client.org