$ rpki-client -vvf rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/C564E80017E911EF9D471E18C4F9AE02.roa File: C564E80017E911EF9D471E18C4F9AE02.roa (raw, json) Hash identifier: bHWlYJultpd4141lSOHtlDGQNuKfjn0r+UBsEdeuoEk= Subject key identifier: BC:F8:66:AB:2B:AF:85:45:88:2C:A9:C8:4C:61:D9:61:D2:49:71:40 Certificate issuer: /CN=A918D699/serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609 Certificate serial: 65 Authority key identifier: A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/C564E80017E911EF9D471E18C4F9AE02.roa Signing time: Sun 03 Nov 2024 05:08:39 +0000 ROA not before: Sun 03 Nov 2024 05:08:39 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 134688 IP address blocks: 103.10.72.0/22 maxlen: 24 103.195.52.0/23 maxlen: 24 103.207.154.0/23 maxlen: 23 121.46.120.0/22 maxlen: 24 203.128.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D699/serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609 Validity Not Before: Nov 3 05:08:39 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67270557-e1c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a3:56:f3:13:ce:7c:40:01:24:ba:37:ec:92: f0:da:7b:f0:65:8e:e5:a3:95:ca:dc:71:40:34:d1: 45:9a:5a:e6:9b:20:d2:21:40:d6:ca:49:50:13:65: 6c:15:9b:24:06:a3:6d:a3:d4:c9:b8:dc:cf:5b:d1: 6f:28:c9:b3:c4:f0:fd:3b:e2:11:ae:3f:19:00:ae: c8:4b:a7:61:69:b1:59:de:e2:c3:5e:7d:03:f7:99: eb:fb:e2:e9:50:2e:e1:43:97:c2:3e:cf:b9:ee:c2: fa:19:fa:e6:c4:3f:4b:5b:4e:7a:e7:2d:cc:c3:3e: ed:b4:e7:5d:28:ed:3a:ff:5c:80:87:a8:41:e6:65: a1:b7:c4:91:f6:f4:52:d4:02:83:97:e8:97:e6:4c: 15:ff:a8:4c:d2:f9:6f:81:cf:7e:a8:30:72:01:3a: 2e:40:91:ed:ee:7d:49:84:04:6d:12:a8:ce:a7:b9: 3d:5b:9d:94:f7:70:e3:24:62:68:98:9d:7f:0b:40: c4:4f:e7:a2:0d:cf:9d:b4:c1:01:a8:bb:82:83:4e: 87:b2:b7:23:0f:23:5c:b2:45:52:9b:6e:61:fa:ca: fc:21:84:0b:b6:77:57:ca:2e:50:80:6a:f9:65:94: 1f:ff:be:90:13:80:df:c3:11:21:0d:f8:f1:dc:63: 9e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F8:66:AB:2B:AF:85:45:88:2C:A9:C8:4C:61:D9:61:D2:49:71:40 X509v3 Authority Key Identifier: keyid:A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/C564E80017E911EF9D471E18C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.10.72.0/22 103.195.52.0/23 103.207.154.0/23 121.46.120.0/22 203.128.232.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:8a:51:30:76:fe:e4:65:1c:7c:18:4b:45:c9:d0:03:1f:25: 4c:eb:de:0d:c2:a1:16:55:18:f5:83:3e:7d:26:e8:33:b1:cc: 0a:bc:75:f8:30:7d:c8:03:ab:0b:84:67:0e:8d:69:79:83:b4: fc:9f:72:1d:f0:40:89:de:ea:cd:56:ea:bd:c2:68:0d:6c:64: 58:83:7d:ba:45:aa:e5:1f:00:58:bc:9a:79:f2:bf:fa:31:80: 93:46:a7:bf:e4:71:58:f1:74:72:82:7b:46:5e:c8:c8:dc:58: 16:14:49:25:aa:45:bc:6d:8f:e3:d8:78:1e:95:54:df:23:4e: f6:35:ed:7f:87:37:fa:81:6f:5e:3a:da:31:32:ac:d5:a3:03: 93:9c:e3:2a:3d:2d:87:4b:40:74:16:46:2c:1b:2a:80:6a:d1: 17:50:9c:2b:84:98:b4:eb:4f:a1:53:c3:65:59:89:3c:c7:dd: 3e:b0:c7:d5:be:3d:90:62:f0:db:b4:fd:46:f9:3d:d1:9d:cc: 94:53:20:c3:65:af:6b:bc:41:ee:d6:d9:15:12:95:f5:21:f6: 09:0d:dd:4c:69:10:5e:e7:37:90:66:02:90:00:8a:2b:1d:21: ba:8d:80:df:e9:0f:a6:ab:ce:4e:03:97:dd:f9:13:ff:46:c8: d4:ac:62:b1 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDY5OTExMC8GA1UEBRMoQTc0Q0U3REFENUZCNTA0REIxNkJCRTcwQzJGOURGMEFB OUYwMDYwOTAeFw0yNDExMDMwNTA4MzlaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MjcwNTU3LWUxYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuo1bzE858QAEkujfskvDae/BljuWjlcrccUA00UWaWuabINIhQNbKSVATZWwV myQGo22j1Mm43M9b0W8oybPE8P074hGuPxkArshLp2FpsVne4sNefQP3mev74ulQ LuFDl8I+z7nuwvoZ+ubEP0tbTnrnLczDPu20510o7Tr/XICHqEHmZaG3xJH29FLU AoOX6JfmTBX/qEzS+W+Bz36oMHIBOi5Ake3ufUmEBG0SqM6nuT1bnZT3cOMkYmiY nX8LQMRP56INz520wQGou4KDToeytyMPI1yyRVKbbmH6yvwhhAu2d1fKLlCAavll lB//vpATgN/DESEN+PHcY54fAgMBAAGjggKtMIICqTAdBgNVHQ4EFgQUvPhmqyuv hUWILKnITGHZYdJJcUAwHwYDVR0jBBgwFoAUp0zn2tX7UE2xa75wwvnfCqnwBgkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThENjk5LzU1ODZFRjZBMTdF OTExRUZBMkNENTAxN0M0RjlBRTAyL3Awem4ydFg3VUUyeGE3NXd3dm5mQ3Fud0Jn ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcDB6bjJ0WDdVRTJ4YTc1d3d2bmZDcW53QmdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDY5OS81NTg2RUY2QTE3RTkxMUVGQTJDRDUwMTdDNEY5QUUwMi9DNTY0RTgwMDE3 RTkxMUVGOUQ0NzFFMThDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA3BggrBgEFBQcBBwEB/wQo MCYwJAQCAAEwHgMEAmcKSAMEAWfDNAMEAWfPmgMEAnkueAMEAsuA6DANBgkqhkiG 9w0BAQsFAAOCAQEAHopRMHb+5GUcfBhLRcnQAx8lTOveDcKhFlUY9YM+fSboM7HM Crx1+DB9yAOrC4RnDo1peYO0/J9yHfBAid7qzVbqvcJoDWxkWIN9ukWq5R8AWLya efK/+jGAk0anv+RxWPF0coJ7Rl7IyNxYFhRJJapFvG2P49h4HpVU3yNO9jXtf4c3 +oFvXjraMTKs1aMDk5zjKj0th0tAdBZGLBsqgGrRF1CcK4SYtOtPoVPDZVmJPMfd PrDH1b49kGLw27T9Rvk90Z3MlFMgw2Wva7xB7tbZFRKV9SH2CQ3dTGkQXuc3kGYC kACKKx0huo2A3+kPpqvOTgOX3fkT/0bI1KxisQ== -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:27 2024 by rpki-client on console-fra.rpki-client.org