$ rpki-client -vvf rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/48E696FE9ED611ECAC3B1777C4F9AE02.roa File: 48E696FE9ED611ECAC3B1777C4F9AE02.roa (raw, json) Hash identifier: wh4KvNLBK6XFgoR8FRnF/jwZCf/huqxHy9C0SYykY04= Subject key identifier: 96:11:B7:66:BA:56:DC:AE:B7:D8:A1:1D:35:41:F0:01:2B:1D:FD:5D Certificate issuer: /CN=A918235E/serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6 Certificate serial: 02EE Authority key identifier: AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/48E696FE9ED611ECAC3B1777C4F9AE02.roa Signing time: Sat 29 Jun 2024 02:56:06 +0000 ROA not before: Sat 29 Jun 2024 02:56:06 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 63984 IP address blocks: 103.57.151.0/24 maxlen: 24 103.68.104.0/24 maxlen: 24 103.204.82.0/23 maxlen: 23 103.204.82.0/24 maxlen: 24 103.204.83.0/24 maxlen: 24 2400:6120::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 750 (0x2ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918235E/serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6 Validity Not Before: Jun 29 02:56:06 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=667f77c6-3243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:69:34:da:81:11:29:11:98:3e:fd:ae:ae:86: f4:65:17:49:08:20:9a:67:a5:d3:36:06:86:37:4d: 89:12:61:a3:bf:cd:3b:96:2c:df:83:e4:de:a4:ac: 2d:6a:25:7c:15:bc:0f:41:0a:d6:4e:72:5c:2d:20: 15:98:dc:dd:35:34:9d:de:8c:82:3a:d5:fd:a3:ae: f6:95:f2:db:8c:7a:04:0d:35:2a:de:5b:05:d8:b4: c7:f9:02:ee:b9:c6:d3:50:b3:58:62:2d:94:74:25: 05:9a:4a:d7:c0:20:2f:d6:fd:fb:25:b6:55:49:0a: 69:b4:08:75:e1:76:69:df:af:36:b5:a0:99:cd:e2: 50:e7:d3:c0:0a:b4:10:f7:fd:5b:49:92:e8:ec:d2: 2e:6a:86:12:bb:e8:c3:cd:c7:5e:4a:85:42:22:04: 53:df:08:42:82:1e:2e:f6:12:fb:b9:bf:6b:9f:30: 8d:52:c6:fc:13:f9:b0:52:10:55:a9:27:d9:db:a7: c6:99:dc:38:a6:a1:6b:36:4b:7d:44:b5:b6:50:7c: e1:43:01:57:37:8e:6c:f8:c2:0b:7d:55:ec:ff:e9: 43:da:a1:95:86:c1:8f:12:e3:b0:7c:69:1c:7f:ec: e7:5e:41:df:12:38:b9:12:25:b0:8c:0e:bf:69:7a: 2f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:11:B7:66:BA:56:DC:AE:B7:D8:A1:1D:35:41:F0:01:2B:1D:FD:5D X509v3 Authority Key Identifier: keyid:AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/48E696FE9ED611ECAC3B1777C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.57.151.0/24 103.68.104.0/24 103.204.82.0/23 IPv6: 2400:6120::/32 Signature Algorithm: sha256WithRSAEncryption 8d:92:83:5c:40:9e:85:70:03:4d:14:36:15:fc:6a:49:36:fa: 38:6f:7a:66:64:2e:f3:e3:15:49:64:71:7e:c9:9a:8d:4e:d8: fc:1d:86:97:2f:76:49:5d:25:1a:4f:72:a2:9d:9b:23:9e:6f: da:d5:0c:ea:4c:d0:09:4a:a2:03:be:15:48:62:56:3a:fd:c5: a7:2a:7c:cc:aa:40:37:05:e8:7d:59:e6:a3:aa:60:e5:62:19: 62:38:c9:c3:5a:af:4b:da:15:96:a1:94:2f:92:8c:ca:62:5d: c5:54:e0:74:09:3e:7a:ce:8e:5f:e1:d8:51:5d:88:ec:7b:23: 50:1c:14:8e:53:4f:42:4d:08:b8:56:35:e3:c9:6c:0d:fe:84: cb:99:35:b2:c9:09:2b:98:41:6b:f4:18:df:63:82:22:94:23: ea:5c:0f:ba:b9:05:d4:f6:59:ef:13:81:8f:c7:b8:44:4d:62: 42:f5:74:24:3c:7e:34:66:91:2e:f6:68:d0:b2:e6:8b:bf:bc: fc:07:91:69:0d:4e:cf:12:a5:e1:83:e3:15:0d:90:5b:8d:86: 2a:0d:7a:8a:6c:b5:2c:56:f7:f6:34:28:72:5a:1d:47:7b:0e: fc:83:6b:94:62:55:64:b4:b5:d7:10:1f:7d:da:df:8a:06:35: 78:94:b2:60 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICAu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIzNUUxMTAvBgNVBAUTKEFBRUZEQ0E5MjVEQUM5OEZEQUQxOEM4NTdGOUYxREU1 ODZBMDUxQjYwHhcNMjQwNjI5MDI1NjA2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjdmNzdjNi0zMjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mk02oERKRGYPv2urob0ZRdJCCCaZ6XTNgaGN02JEmGjv807lizfg+TepKwt aiV8FbwPQQrWTnJcLSAVmNzdNTSd3oyCOtX9o672lfLbjHoEDTUq3lsF2LTH+QLu ucbTULNYYi2UdCUFmkrXwCAv1v37JbZVSQpptAh14XZp3682taCZzeJQ59PACrQQ 9/1bSZLo7NIuaoYSu+jDzcdeSoVCIgRT3whCgh4u9hL7ub9rnzCNUsb8E/mwUhBV qSfZ26fGmdw4pqFrNkt9RLW2UHzhQwFXN45s+MILfVXs/+lD2qGVhsGPEuOwfGkc f+znXkHfEji5EiWwjA6/aXovvQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFJYRt2a6 Vtyut9ihHTVB8AErHf1dMB8GA1UdIwQYMBaAFKrv3Kkl2smP2tGMhX+fHeWGoFG2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjM1RS85NjkwRUUwQzlF RDMxMUVDOEY0OEI5NzRDNEY5QUUwMi9xdV9jcVNYYXlZX2EwWXlGZjU4ZDVZYWdV YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F1X2NxU1hheVlfYTBZeUZmNThkNVlhZ1ViWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODIzNUUvOTY5MEVFMEM5RUQzMTFFQzhGNDhCOTc0QzRGOUFFMDIvNDhFNjk2RkU5 RUQ2MTFFQ0FDM0IxNzc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBABnOZcDBABnRGgDBAFnzFIwDQQCAAIwBwMFACQAYSAwDQYJ KoZIhvcNAQELBQADggEBAI2Sg1xAnoVwA00UNhX8akk2+jhvemZkLvPjFUlkcX7J mo1O2PwdhpcvdkldJRpPcqKdmyOeb9rVDOpM0AlKogO+FUhiVjr9xacqfMyqQDcF 6H1Z5qOqYOViGWI4ycNar0vaFZahlC+SjMpiXcVU4HQJPnrOjl/h2FFdiOx7I1Ac FI5TT0JNCLhWNePJbA3+hMuZNbLJCSuYQWv0GN9jgiKUI+pcD7q5BdT2We8TgY/H uERNYkL1dCQ8fjRmkS72aNCy5ou/vPwHkWkNTs8SpeGD4xUNkFuNhioNeopstSxW 9/Y0KHJaHUd7DvyDa5RiVWS0tdcQH33a34oGNXiUsmA= -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:40 2024 by rpki-client on console-fra.rpki-client.org