$ rpki-client -vvf rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/B1471960C69F11EEA49B0321C4F9AE02.roa File: B1471960C69F11EEA49B0321C4F9AE02.roa (raw, json) Hash identifier: efQyEJ0PSvPnKB7dDppoyZhGuzoiLAkyZXNjFW2dtjQ= Subject key identifier: CC:F0:17:55:19:4F:D0:B3:F8:CB:03:F3:A0:87:93:5F:A1:E1:CC:C7 Certificate issuer: /CN=A918D808/serialNumber=0725F2491801505185C9069A4013635C38B56B72 Certificate serial: 06E2 Authority key identifier: 07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/B1471960C69F11EEA49B0321C4F9AE02.roa Signing time: Wed 06 Nov 2024 18:26:27 +0000 ROA not before: Wed 06 Nov 2024 18:26:27 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 58061 IP address blocks: 103.104.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 18:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1762 (0x6e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D808/serialNumber=0725F2491801505185C9069A4013635C38B56B72 Validity Not Before: Nov 6 18:26:27 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=672bb4d3-2ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:38:cf:c8:78:14:b2:0f:c5:ba:6b:85:1b:57: a5:57:d7:90:01:01:c3:a1:73:43:16:2c:84:ba:72: fc:56:3d:8b:94:81:f2:1c:f5:ba:b9:9f:82:6b:8f: 0f:77:ae:5e:b4:71:d5:79:43:4f:0a:79:4e:ae:7e: f1:39:56:98:58:94:d0:8f:db:c2:ce:d7:c2:47:7c: 81:ab:4a:cf:9a:5b:1f:2a:ab:38:80:8f:ad:a2:df: 13:f4:d7:09:7c:c0:33:d3:e1:e4:4b:c3:b2:99:9e: dd:98:33:1c:f9:b9:af:7f:71:79:c3:01:db:09:6a: c8:0b:df:53:4a:5f:93:d0:a0:fe:1c:6d:17:ca:06: 30:4b:c4:9c:a2:a4:f7:d4:bd:66:1b:93:50:4b:ec: 3d:95:01:35:b6:76:33:15:1d:49:64:a2:b5:b9:57: 8d:7a:3c:14:ec:80:8b:c5:c9:9c:3e:7c:fd:f4:c4: 8b:db:4b:04:2e:a5:7d:99:10:3e:d5:43:b8:ce:fb: cf:41:95:2f:03:4e:26:d3:26:4f:c7:1f:63:a1:f2: 56:f5:6a:12:08:91:0a:10:f3:32:b9:9c:86:6b:55: 78:bd:4f:1e:5a:e9:86:d7:32:86:8c:ff:4f:ef:cf: a7:96:7b:f8:0f:91:a9:0e:36:75:03:e2:10:c8:d1: 03:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F0:17:55:19:4F:D0:B3:F8:CB:03:F3:A0:87:93:5F:A1:E1:CC:C7 X509v3 Authority Key Identifier: keyid:07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/B1471960C69F11EEA49B0321C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.104.141.0/24 Signature Algorithm: sha256WithRSAEncryption 70:92:b1:f4:d6:ab:91:16:25:f1:09:db:c2:72:68:a8:4b:9c: 59:69:b1:de:b0:be:e9:8c:d9:b0:59:35:4e:d2:26:62:14:8f: 6f:10:e1:b7:6c:df:61:5d:98:7d:6d:fd:e4:cd:4a:21:c5:4a: 1b:21:11:95:03:e0:f8:7f:94:eb:e7:48:1c:e3:61:ad:81:62: b4:9d:26:44:9d:d0:94:ef:30:2c:ce:93:c0:67:a1:4d:a4:84: 58:55:3e:27:1a:59:be:3e:a4:db:75:b8:89:49:ef:b7:15:5f: 44:d7:99:3a:54:93:f4:49:c4:b3:4d:12:52:50:6c:b7:f7:3a: bc:3c:c2:2b:ef:ba:45:f6:fc:45:28:7f:9a:c0:1e:1d:d3:92: fe:bc:9e:2d:06:fc:30:7b:19:88:69:4d:3e:0f:3e:2d:51:0c: 3a:b1:f1:e5:ec:9e:74:9b:51:fc:2d:a6:10:39:ad:3a:e8:fc: 92:cb:9a:00:97:dd:b8:5a:0a:71:e1:96:a2:02:cb:63:61:1c: 47:ce:79:8d:bf:78:51:a2:5a:36:00:72:78:b0:28:ae:7d:af: 28:0c:af:37:90:14:26:2f:a5:e0:f6:bf:af:30:5f:56:5a:c9: 46:13:5b:51:11:e6:05:32:b0:2d:b8:21:6e:d1:87:57:67:f5: 3f:b9:1d:cc -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ4MDgxMTAvBgNVBAUTKDA3MjVGMjQ5MTgwMTUwNTE4NUM5MDY5QTQwMTM2MzVD MzhCNTZCNzIwHhcNMjQxMTA2MTgyNjI3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJiYjRkMy0yY2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDjPyHgUsg/FumuFG1elV9eQAQHDoXNDFiyEunL8Vj2LlIHyHPW6uZ+Ca48P d65etHHVeUNPCnlOrn7xOVaYWJTQj9vCztfCR3yBq0rPmlsfKqs4gI+tot8T9NcJ fMAz0+HkS8OymZ7dmDMc+bmvf3F5wwHbCWrIC99TSl+T0KD+HG0XygYwS8ScoqT3 1L1mG5NQS+w9lQE1tnYzFR1JZKK1uVeNejwU7ICLxcmcPnz99MSL20sELqV9mRA+ 1UO4zvvPQZUvA04m0yZPxx9jofJW9WoSCJEKEPMyuZyGa1V4vU8eWumG1zKGjP9P 78+nlnv4D5GpDjZ1A+IQyNED2QIDAQABo4IClTCCApEwHQYDVR0OBBYEFMzwF1UZ T9Cz+MsD86CHk1+h4czHMB8GA1UdIwQYMBaAFAcl8kkYAVBRhckGmkATY1w4tWty MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDgwOC9FMjZCNDY0MkY0 QjIxMUU5QkYzQ0U1NjNDNEY5QUUwMi9CeVh5U1JnQlVGR0Z5UWFhUUJOalhEaTFh M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J5WHlTUmdCVUZHRnlRYWFRQk5qWERpMWEzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEQ4MDgvRTI2QjQ2NDJGNEIyMTFFOUJGM0NFNTYzQzRGOUFFMDIvQjE0NzE5NjBD NjlGMTFFRUE0OUIwMzIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnaI0wDQYJKoZIhvcNAQELBQADggEBAHCSsfTWq5EWJfEJ 28JyaKhLnFlpsd6wvumM2bBZNU7SJmIUj28Q4bds32FdmH1t/eTNSiHFShshEZUD 4Ph/lOvnSBzjYa2BYrSdJkSd0JTvMCzOk8BnoU2khFhVPicaWb4+pNt1uIlJ77cV X0TXmTpUk/RJxLNNElJQbLf3Orw8wivvukX2/EUof5rAHh3Tkv68ni0G/DB7GYhp TT4PPi1RDDqx8eXsnnSbUfwtphA5rTro/JLLmgCX3bhaCnHhlqICy2NhHEfOeY2/ eFGiWjYAcniwKK59rygMrzeQFCYvpeD2v68wX1ZayUYTW1ER5gUysC24IW7Rh1dn 9T+5Hcw= -----END CERTIFICATE-----Generated at Wed Nov 20 20:07:25 2024 by rpki-client on console-fra.rpki-client.org