$ rpki-client -vvf rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/F908A568CD1711EB84E11B24C4F9AE02.roa File: F908A568CD1711EB84E11B24C4F9AE02.roa (raw, json) Hash identifier: RN+WuKj4+pEbBe+8XBpVSE8Eibjnma2NtmAKtaqSc2M= Subject key identifier: 23:DF:74:F7:3B:25:55:39:DA:0A:1A:64:5A:CB:09:6F:02:A4:5F:0D Certificate issuer: /CN=A918E881/serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB Certificate serial: 04F5 Authority key identifier: F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/F908A568CD1711EB84E11B24C4F9AE02.roa Signing time: Fri 07 Jun 2024 02:27:17 +0000 ROA not before: Fri 07 Jun 2024 02:27:17 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 55847 IP address blocks: 203.110.240.0/21 maxlen: 21 203.110.240.0/24 maxlen: 24 203.110.241.0/24 maxlen: 24 203.110.242.0/24 maxlen: 24 203.110.243.0/24 maxlen: 24 203.110.244.0/24 maxlen: 24 203.110.245.0/24 maxlen: 24 203.110.246.0/24 maxlen: 24 203.110.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1269 (0x4f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E881/serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB Validity Not Before: Jun 7 02:27:17 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66627005-7e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c0:3a:7d:af:2d:c4:03:1f:64:8f:56:1e:d7: 55:4d:89:36:92:e3:8b:60:37:ba:24:94:a9:14:da: 38:05:31:d6:6a:46:e0:94:17:48:03:7c:25:2a:b8: 72:4a:3a:69:74:43:59:fa:88:01:36:10:de:79:81: 6c:d6:9f:0c:02:5c:ce:c6:e5:f1:b4:3c:36:70:23: 0c:29:00:ac:51:46:04:7d:dd:52:7b:81:99:33:6b: 5e:db:cb:0d:8b:dd:30:50:73:a9:87:b7:19:9d:58: bf:ff:e5:6d:2a:71:3b:e8:d6:e7:1b:95:3d:9a:e0: 5f:de:98:f3:99:c8:38:77:40:2b:14:0b:c0:39:b3: a8:19:92:fa:75:28:b7:96:70:00:d2:8e:8e:71:76: 27:66:88:64:11:46:ed:0b:7c:96:0c:df:45:b7:1d: cf:26:68:d0:a8:de:f8:07:7c:e1:1b:e9:8b:33:46: 8d:0c:53:b5:5a:3c:f0:53:e2:e1:64:5c:f1:1d:30: ac:1f:ab:cd:3e:e6:74:3c:c9:47:87:b8:d4:5e:97: b7:00:a6:14:27:15:2a:84:0c:51:06:21:a4:cd:54: 65:e1:2c:ce:1e:33:d1:79:be:6e:7b:d3:37:bb:98: 89:50:1f:a0:c8:ab:93:7e:1d:2b:d2:92:5a:fd:94: 05:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DF:74:F7:3B:25:55:39:DA:0A:1A:64:5A:CB:09:6F:02:A4:5F:0D X509v3 Authority Key Identifier: keyid:F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/F908A568CD1711EB84E11B24C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.110.240.0/21 Signature Algorithm: sha256WithRSAEncryption 5a:80:ce:be:1f:a9:2f:b7:6b:d1:2d:60:bb:af:b2:19:89:41: 79:75:7a:08:45:e0:00:64:bc:5a:78:0a:f0:b7:2b:73:25:82: 06:f1:cd:72:46:88:6b:94:a8:c3:8a:da:5e:bf:60:6a:a7:df: b5:7e:5e:1d:06:86:54:8a:b9:ba:26:58:73:e2:4d:69:29:73: c7:a9:09:4f:e1:26:42:ae:63:04:85:3b:a2:25:71:2c:81:ae: 52:b3:0a:ad:43:ca:5e:71:0e:ca:46:67:d2:76:f5:b5:b2:e5: e8:3c:d6:de:46:ee:9e:9a:a8:8d:b0:15:cb:bf:58:29:0e:cb: 60:e0:6e:2e:be:57:ff:7c:f9:76:19:38:6a:7e:4f:6f:30:5a: 74:b3:50:1d:f9:76:9b:bc:b0:c8:cd:4a:5c:ea:05:f4:8c:ea: a8:b6:f4:4e:50:c6:be:7c:bb:f1:7c:e0:ed:83:d8:d2:3b:a6: e7:37:ce:f7:ae:80:88:80:6a:22:cd:ad:a8:c7:2a:c0:58:74: 65:20:0f:60:6e:2b:27:eb:c7:3f:84:de:83:31:a3:0a:74:11: bd:59:71:11:c1:16:55:33:5c:f4:a9:67:f2:93:1f:c8:c9:51: b3:cb:38:d1:af:82:8a:50:95:c2:32:51:d0:09:c1:24:45:0a: 13:51:09:8e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4ODExMTAvBgNVBAUTKEYxQjAzQkM1ODc3RkUyREE0RjQ0NkEwNjMzREE2QjhF MUY3N0M3REIwHhcNMjQwNjA3MDIyNzE3WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjYyNzAwNS03ZTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8A6fa8txAMfZI9WHtdVTYk2kuOLYDe6JJSpFNo4BTHWakbglBdIA3wlKrhy SjppdENZ+ogBNhDeeYFs1p8MAlzOxuXxtDw2cCMMKQCsUUYEfd1Se4GZM2te28sN i90wUHOph7cZnVi//+VtKnE76NbnG5U9muBf3pjzmcg4d0ArFAvAObOoGZL6dSi3 lnAA0o6OcXYnZohkEUbtC3yWDN9Ftx3PJmjQqN74B3zhG+mLM0aNDFO1WjzwU+Lh ZFzxHTCsH6vNPuZ0PMlHh7jUXpe3AKYUJxUqhAxRBiGkzVRl4SzOHjPReb5ue9M3 u5iJUB+gyKuTfh0r0pJa/ZQFGwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCPfdPc7 JVU52goaZFrLCW8CpF8NMB8GA1UdIwQYMBaAFPGwO8WHf+LaT0RqBjPaa44fd8fb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg4MS9DREQ2MEFFQUNE MTUxMUVCQjNGNzhFMjNDNEY5QUUwMi84YkE3eFlkXzR0cFBSR29HTTlwcmpoOTN4 OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhiQTd4WWRfNHRwUFJHb0dNOXByamg5M3g5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU4ODEvQ0RENjBBRUFDRDE1MTFFQkIzRjc4RTIzQzRGOUFFMDIvRjkwOEE1NjhD RDE3MTFFQjg0RTExQjI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAPLbvAwDQYJKoZIhvcNAQELBQADggEBAFqAzr4fqS+3a9Et YLuvshmJQXl1eghF4ABkvFp4CvC3K3MlggbxzXJGiGuUqMOK2l6/YGqn37V+Xh0G hlSKubomWHPiTWkpc8epCU/hJkKuYwSFO6IlcSyBrlKzCq1Dyl5xDspGZ9J29bWy 5eg81t5G7p6aqI2wFcu/WCkOy2Dgbi6+V/98+XYZOGp+T28wWnSzUB35dpu8sMjN SlzqBfSM6qi29E5Qxr58u/F84O2D2NI7puc3zveugIiAaiLNrajHKsBYdGUgD2Bu Kyfrxz+E3oMxowp0Eb1ZcRHBFlUzXPSpZ/KTH8jJUbPLONGvgopQlcIyUdAJwSRF ChNRCY4= -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:45 2024 by rpki-client on console-ams.rpki-client.org