$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/FAAC7098424911EFABBC7D78C4F9AE02.roa File: FAAC7098424911EFABBC7D78C4F9AE02.roa (raw, json) Hash identifier: 3NPXcNsi26X2NuLDFnrNuZlOxEwbtdhE/ZNaHoNQNAw= Subject key identifier: 13:7B:2D:DB:91:5C:0C:C7:0F:1B:F3:0B:8C:60:BB:65:5F:16:85:C7 Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Certificate serial: 0D73 Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/FAAC7098424911EFABBC7D78C4F9AE02.roa Signing time: Tue 10 Sep 2024 08:06:12 +0000 ROA not before: Tue 10 Sep 2024 08:06:12 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 138624 IP address blocks: 103.134.225.0/24 maxlen: 24 2001:df7:d500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3443 (0xd73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Validity Not Before: Sep 10 08:06:12 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=66dffdf3-c90b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5f:40:b3:60:1c:c8:80:d9:5a:76:c4:86:ad: 73:af:4c:e9:cf:ba:a8:1e:50:8c:b9:69:80:d7:bb: eb:2d:b6:5e:ea:23:3f:e3:26:98:c7:9f:63:ea:07: 86:df:30:2a:82:fb:38:80:8a:4a:ce:ce:d1:79:a3: 0d:6f:49:b8:36:32:5b:e3:0c:95:3c:e4:01:65:f8: f1:76:47:30:73:2e:83:ec:27:da:88:71:04:e1:95: ef:10:1f:e9:7a:e9:26:a8:b4:fc:c2:db:4b:ff:23: e0:a1:8e:6c:4b:b3:a6:e0:d1:21:05:bd:9a:2d:99: de:ea:93:6d:45:b5:bd:e8:e5:ef:22:25:87:ed:09: 25:03:fb:35:3a:7d:7f:8f:66:52:03:a3:55:76:cc: 5e:09:d3:c1:89:b9:2b:e6:33:c4:c2:79:bd:93:63: b2:72:fd:40:75:23:71:ad:e3:82:aa:26:8a:bb:63: 43:01:51:05:06:ca:08:6b:df:32:81:10:6c:84:09: 84:44:c8:53:2f:4a:4c:7d:94:eb:5a:21:ae:04:e4: c7:8e:f4:a8:ab:35:49:63:9a:fe:ef:36:17:57:a1: bd:e9:78:63:e5:f8:f2:05:3d:7d:87:40:b2:23:bb: d5:7f:ec:7e:02:8a:3b:f2:f5:58:9f:3e:e3:f2:1b: 92:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:7B:2D:DB:91:5C:0C:C7:0F:1B:F3:0B:8C:60:BB:65:5F:16:85:C7 X509v3 Authority Key Identifier: keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/FAAC7098424911EFABBC7D78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.134.225.0/24 IPv6: 2001:df7:d500::/48 Signature Algorithm: sha256WithRSAEncryption 98:a8:a3:54:a9:6e:e7:e8:86:44:79:8e:86:ab:da:05:2e:9e: 95:35:fa:d5:f0:be:8b:69:66:1e:66:50:05:3a:f9:10:a8:35: dd:e3:c6:65:fb:e9:ae:b0:1c:eb:34:26:5e:95:6e:ec:da:0f: bf:0c:d7:79:9c:8f:ff:c0:b8:4b:1e:6b:10:42:42:c7:70:51: d6:5b:72:1f:26:20:3a:6e:8d:1d:4b:8f:56:6c:c6:65:d4:10: 0b:bf:57:29:69:92:6f:5f:a8:dc:4a:e9:f8:f3:d2:44:ab:be: 45:ac:69:3c:2f:49:d8:9f:1b:c8:60:61:63:05:85:55:24:74: d9:19:b0:40:79:1d:83:f6:eb:3b:a5:b5:13:d9:4a:66:22:69: 3e:88:b0:0c:be:fb:e6:c8:f1:34:2e:3a:53:fc:23:47:98:c9: 46:1f:2a:65:1e:b9:52:27:84:65:03:53:a5:c0:55:d8:b6:16: bc:ff:ad:43:9c:97:3d:27:73:9b:d4:11:55:46:e5:e3:e0:4c: 52:1e:d6:c9:05:70:91:1d:44:35:0c:2c:6c:23:c6:3c:1e:eb: 32:0b:c5:f4:92:06:1e:82:70:8a:d2:29:b3:67:37:30:47:03: d7:e1:02:82:5a:59:eb:a5:37:0f:95:cb:95:9f:7e:b8:18:ce: bd:4d:26:c2 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4QjExMTAvBgNVBAUTKEI1QjNGQzNFNzYwODc3RUY0RjhEOEU4NDNCREQ2OENF MEY0MDU1MzAwHhcNMjQwOTEwMDgwNjEyWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NmRmZmRmMy1jOTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxl9As2AcyIDZWnbEhq1zr0zpz7qoHlCMuWmA17vrLbZe6iM/4yaYx59j6geG 3zAqgvs4gIpKzs7ReaMNb0m4NjJb4wyVPOQBZfjxdkcwcy6D7CfaiHEE4ZXvEB/p eukmqLT8wttL/yPgoY5sS7Om4NEhBb2aLZne6pNtRbW96OXvIiWH7QklA/s1On1/ j2ZSA6NVdsxeCdPBibkr5jPEwnm9k2Oycv1AdSNxreOCqiaKu2NDAVEFBsoIa98y gRBshAmERMhTL0pMfZTrWiGuBOTHjvSoqzVJY5r+7zYXV6G96Xhj5fjyBT19h0Cy I7vVf+x+Aoo78vVYnz7j8huSUwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBN7LduR XAzHDxvzC4xgu2VfFoXHMB8GA1UdIwQYMBaAFLWz/D52CHfvT42OhDvdaM4PQFUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjhCMS83RDU0QTBDQUI1 ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQtOVBqWTZFTzkxb3pnOUFW VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RiUDhQbllJZC05UGpZNkVPOTFvemc5QVZUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEY4QjEvN0Q1NEEwQ0FCNTg2MTFFOUFBNUY0RDY1QzRGOUFFMDIvRkFBQzcwOTg0 MjQ5MTFFRkFCQkM3RDc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnhuEwDwQCAAIwCQMHACABDffVADANBgkqhkiG9w0BAQsF AAOCAQEAmKijVKlu5+iGRHmOhqvaBS6elTX61fC+i2lmHmZQBTr5EKg13ePGZfvp rrAc6zQmXpVu7NoPvwzXeZyP/8C4Sx5rEEJCx3BR1ltyHyYgOm6NHUuPVmzGZdQQ C79XKWmSb1+o3Erp+PPSRKu+RaxpPC9J2J8byGBhYwWFVSR02RmwQHkdg/brO6W1 E9lKZiJpPoiwDL775sjxNC46U/wjR5jJRh8qZR65UieEZQNTpcBV2LYWvP+tQ5yX PSdzm9QRVUbl4+BMUh7WyQVwkR1ENQwsbCPGPB7rMgvF9JIGHoJwitIps2c3MEcD 1+ECglpZ66U3D5XLlZ9+uBjOvU0mwg== -----END CERTIFICATE-----Generated at Sun Nov 24 18:36:23 2024 by rpki-client on console-fra.rpki-client.org