$ rpki-client -vvf rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/C3A5D7A482EC11EAB62A4C48C4F9AE02.roa File: C3A5D7A482EC11EAB62A4C48C4F9AE02.roa (raw, json) Hash identifier: hblfjzPWasNtpADbdsOw1dGYyCGY0w4Yc79CNFuqVAM= Subject key identifier: 5F:24:DC:35:7D:32:75:E4:7C:E9:A8:D7:E1:82:FD:25:B3:46:C3:C5 Certificate issuer: /CN=A918AF08/serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614 Certificate serial: 0BF8 Authority key identifier: 7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/C3A5D7A482EC11EAB62A4C48C4F9AE02.roa Signing time: Tue 30 Jul 2024 18:56:45 +0000 ROA not before: Tue 30 Jul 2024 18:56:45 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 137885 IP address blocks: 103.66.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3064 (0xbf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AF08/serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614 Validity Not Before: Jul 30 18:56:45 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66a9376d-0f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4f:67:ec:91:95:c6:d9:a5:5e:cf:46:b1:ed: c3:83:a8:05:00:0c:83:d5:5d:e3:c6:fe:66:7c:77: a8:1e:3e:da:a5:e7:34:64:ef:f1:50:5f:42:37:b2: 82:b0:b7:5d:21:8f:f7:55:a7:43:88:9d:36:86:fd: ac:8f:81:70:e4:f2:39:69:c5:0d:82:1b:dc:a4:24: eb:47:d2:6b:f9:8e:2d:79:6c:97:c0:fc:91:ef:76: e3:da:18:2b:3a:71:81:47:e5:39:82:64:61:ca:bf: f5:74:58:bd:c7:50:80:7b:ef:c4:cc:12:8d:1f:c9: 47:e3:18:1d:ff:9a:53:0f:13:4b:51:24:8f:7a:d2: b9:36:c5:3b:8d:e0:f6:92:c2:9a:04:87:d3:51:7c: 07:bf:49:ec:ef:96:cd:78:5a:20:50:7e:51:31:77: 03:a2:c1:7b:b8:70:4b:4e:9f:e6:88:42:e8:d2:dd: 7c:b2:96:f0:ab:fc:06:54:38:8b:3a:76:f8:78:f0: 7d:c3:d1:2a:57:d1:15:fe:6c:fd:98:a3:a7:67:fd: 19:6d:c5:5c:fb:43:bd:ec:bc:9f:34:17:fe:7a:7c: 39:79:be:11:18:36:31:bf:54:76:7d:fe:57:10:d9: ab:b3:90:e1:8d:40:1c:0e:7d:51:b9:0c:b5:30:2c: 13:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:24:DC:35:7D:32:75:E4:7C:E9:A8:D7:E1:82:FD:25:B3:46:C3:C5 X509v3 Authority Key Identifier: keyid:7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/C3A5D7A482EC11EAB62A4C48C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.66.131.0/24 Signature Algorithm: sha256WithRSAEncryption b3:2c:7a:a9:f0:51:4e:c9:2a:d6:31:fd:48:f7:70:b7:fb:ee: 4c:62:8a:14:0e:c3:3a:20:97:2e:ee:9b:3c:44:95:fa:37:bc: df:6b:15:da:37:f0:cb:74:53:ff:e6:60:77:19:e2:24:8b:09: 1c:f9:04:d0:86:5d:eb:8c:7d:7c:db:4e:a2:86:28:f5:7b:d0: a1:dd:f6:69:af:50:eb:68:9f:51:b3:31:92:63:aa:b2:84:b1: 27:4b:b1:c5:b3:0f:04:7b:bc:fe:1d:a9:00:1c:de:44:32:76: 44:71:40:27:4f:b3:9f:f5:dd:d9:0c:5b:ce:b1:c3:78:00:b6: 7d:b5:e9:ea:86:cf:84:e0:26:69:68:d8:24:65:ef:f0:d5:86: 94:a5:00:b9:61:4a:1b:5d:89:32:40:bf:8c:03:7c:6b:dc:a3: c3:df:d3:27:aa:9a:0a:4b:c2:38:ca:c9:6e:ea:a2:2e:09:f1: 18:85:8a:69:62:1f:9b:9d:85:08:3e:80:2c:bd:05:2b:57:8e: 13:f8:28:de:6d:56:d0:8b:bf:d2:ca:3f:b1:f1:c1:91:f7:51: 59:6e:d2:64:47:7d:14:55:b9:73:92:53:1e:69:77:68:e3:19: 36:22:09:30:de:cc:f4:c3:f9:ee:08:2a:db:16:4e:2b:d1:8a: 67:21:00:bc -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFGMDgxMTAvBgNVBAUTKDdFRTBDNkEyOEI3NTlGNzJENURDOUE1ODk1MDM4QkJB Qjk0QTg2MTQwHhcNMjQwNzMwMTg1NjQ1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmE5Mzc2ZC0wZjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuE9n7JGVxtmlXs9Gse3Dg6gFAAyD1V3jxv5mfHeoHj7apec0ZO/xUF9CN7KC sLddIY/3VadDiJ02hv2sj4Fw5PI5acUNghvcpCTrR9Jr+Y4teWyXwPyR73bj2hgr OnGBR+U5gmRhyr/1dFi9x1CAe+/EzBKNH8lH4xgd/5pTDxNLUSSPetK5NsU7jeD2 ksKaBIfTUXwHv0ns75bNeFogUH5RMXcDosF7uHBLTp/miELo0t18spbwq/wGVDiL Onb4ePB9w9EqV9EV/mz9mKOnZ/0ZbcVc+0O97LyfNBf+enw5eb4RGDYxv1R2ff5X ENmrs5DhjUAcDn1RuQy1MCwTIwIDAQABo4IClTCCApEwHQYDVR0OBBYEFF8k3DV9 MnXkfOmo1+GC/SWzRsPFMB8GA1UdIwQYMBaAFH7gxqKLdZ9y1dyaWJUDi7q5SoYU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUYwOC9CMEY1Mzc2Q0ZB QzAxMUU5OTREOTIwNjVDNEY5QUUwMi9mdURHb290MW4zTFYzSnBZbFFPTHVybEto aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1REdvb3QxbjNMVjNKcFlsUU9MdXJsS2hoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEFGMDgvQjBGNTM3NkNGQUMwMTFFOTk0RDkyMDY1QzRGOUFFMDIvQzNBNUQ3QTQ4 MkVDMTFFQUI2MkE0QzQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnQoMwDQYJKoZIhvcNAQELBQADggEBALMseqnwUU7JKtYx /Uj3cLf77kxiihQOwzogly7umzxElfo3vN9rFdo38Mt0U//mYHcZ4iSLCRz5BNCG XeuMfXzbTqKGKPV70KHd9mmvUOton1GzMZJjqrKEsSdLscWzDwR7vP4dqQAc3kQy dkRxQCdPs5/13dkMW86xw3gAtn216eqGz4TgJmlo2CRl7/DVhpSlALlhShtdiTJA v4wDfGvco8Pf0yeqmgpLwjjKyW7qoi4J8RiFimliH5udhQg+gCy9BStXjhP4KN5t VtCLv9LKP7HxwZH3UVlu0mRHfRRVuXOSUx5pd2jjGTYiCTDezPTD+e4IKtsWTivR imchALw= -----END CERTIFICATE-----Generated at Sun Nov 24 19:46:57 2024 by rpki-client on console-fra.rpki-client.org