$ rpki-client -vvf rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/C4928820F06C11EC91459B5CC4F9AE02.roa File: C4928820F06C11EC91459B5CC4F9AE02.roa (raw, json) Hash identifier: WQFtk3qXnJIT7imtWpujgi7DyXBepTQ3l980J2HR9zk= Subject key identifier: FA:D6:41:95:77:4E:4E:B6:37:F3:D7:3E:E9:6E:39:BC:91:76:53:E7 Certificate issuer: /CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1 Certificate serial: 0224 Authority key identifier: FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/C4928820F06C11EC91459B5CC4F9AE02.roa Signing time: Fri 21 Jun 2024 03:14:14 +0000 ROA not before: Fri 21 Jun 2024 03:14:14 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 140646 IP address blocks: 103.189.212.0/23 maxlen: 23 103.189.212.0/24 maxlen: 24 103.189.213.0/24 maxlen: 24 2400:88e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 548 (0x224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1 Validity Not Before: Jun 21 03:14:14 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6674f006-e948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:00:47:75:8b:fd:76:a0:a9:55:36:57:14:fb: 70:95:f1:67:e1:c7:4f:53:0d:ff:26:fa:31:44:7c: 9c:d5:e4:b4:b9:de:df:c2:ce:9a:91:7c:43:ee:aa: ea:2a:e2:e0:90:78:52:72:5c:3d:0d:2e:a2:35:70: 79:21:94:98:df:48:15:e9:1a:81:b1:04:98:92:02: 15:e8:95:18:04:61:25:da:20:c1:7d:68:d2:fc:0f: 8d:65:2d:cc:80:d8:93:3d:49:6d:51:0b:0e:3c:ab: b9:da:65:4a:30:70:16:c5:e3:1f:2e:7c:cb:ed:69: 82:35:12:d5:09:02:b2:46:cd:e5:5e:f8:25:2f:9a: 50:50:72:b9:58:37:15:2c:6b:ef:de:bc:cb:be:dd: 42:65:a9:ff:e5:d1:34:c4:a4:39:55:1b:93:91:1c: 21:e7:63:33:ac:30:c8:e5:f3:af:4f:81:c6:55:77: 3a:8d:7b:c0:98:24:08:86:a0:ce:e3:b2:e2:31:86: 89:85:10:6e:2f:ab:ff:6c:e0:f3:e7:d8:bd:1e:2e: 63:53:c5:85:71:28:3b:ca:dd:5e:e3:81:42:25:d6: bb:86:cf:8f:9c:11:1a:2c:9a:29:88:a9:fc:86:b9: d5:4d:cc:13:d1:14:73:d3:29:bd:56:e7:c7:9d:90: cc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D6:41:95:77:4E:4E:B6:37:F3:D7:3E:E9:6E:39:BC:91:76:53:E7 X509v3 Authority Key Identifier: keyid:FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/C4928820F06C11EC91459B5CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.189.212.0/23 IPv6: 2400:88e0::/32 Signature Algorithm: sha256WithRSAEncryption 0f:5a:0b:c3:c9:27:7a:a4:20:9f:ed:86:8a:62:8f:2c:c3:03: 2c:23:d0:93:9c:33:2f:1f:06:5d:de:62:38:3c:fd:26:df:1c: d0:b1:da:7c:18:f2:a9:47:13:a2:68:84:ba:bd:bb:a8:76:ba: bd:a3:24:63:85:7b:b2:3a:31:84:0d:7e:80:8c:1b:c1:04:b9: 5d:78:4d:5c:c7:6e:dd:1b:d0:ad:b4:fb:ab:98:53:02:a8:cd: 8f:ce:84:af:8d:9f:b8:4a:64:94:61:e7:10:53:c2:5e:93:62: dd:a7:3d:92:37:f8:e7:db:1d:18:fb:b9:b6:af:bc:20:ac:02: 54:25:dd:68:69:20:96:15:18:f3:b4:2d:90:fa:b1:94:76:6a: 6c:fe:a6:ac:98:6f:9b:7a:34:50:4a:c1:1a:19:ba:91:b0:93: 18:ac:55:4a:a2:57:ce:d1:e8:9f:cd:5c:c1:df:c2:13:e4:7e: e6:0b:6c:8e:7b:e6:54:4c:7f:65:5f:84:04:77:b7:7a:f1:3b: 4d:88:96:25:15:e8:5e:6a:36:d9:35:59:6c:e5:59:4f:e7:29: 3c:2f:42:82:5d:5a:eb:15:88:c6:7b:6a:7e:47:96:e2:65:21: 22:fe:eb:b3:85:c1:9a:68:f8:d8:e7:94:23:b6:1b:bd:cb:25: 3a:a9:ec:ea -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwM0YxMTAvBgNVBAUTKEZBRTlDMkY0RkUyMDQ1M0JFOTJGQ0FCMTgyQzA5NTgx QzgxMzJERjEwHhcNMjQwNjIxMDMxNDE0WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njc0ZjAwNi1lOTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgBHdYv9dqCpVTZXFPtwlfFn4cdPUw3/JvoxRHyc1eS0ud7fws6akXxD7qrq KuLgkHhSclw9DS6iNXB5IZSY30gV6RqBsQSYkgIV6JUYBGEl2iDBfWjS/A+NZS3M gNiTPUltUQsOPKu52mVKMHAWxeMfLnzL7WmCNRLVCQKyRs3lXvglL5pQUHK5WDcV LGvv3rzLvt1CZan/5dE0xKQ5VRuTkRwh52MzrDDI5fOvT4HGVXc6jXvAmCQIhqDO 47LiMYaJhRBuL6v/bODz59i9Hi5jU8WFcSg7yt1e44FCJda7hs+PnBEaLJopiKn8 hrnVTcwT0RRz0ym9VufHnZDM9wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFPrWQZV3 Tk62N/PXPuluObyRdlPnMB8GA1UdIwQYMBaAFPrpwvT+IEU76S/KsYLAlYHIEy3x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTAzRi9GOEI0QkNEQ0Yw NjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JUdnBMOHF4Z3NDVmdjZ1RM ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11bkM5UDRnUlR2cEw4cXhnc0NWZ2NnVExmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTEwM0YvRjhCNEJDRENGMDY2MTFFQ0E1NEMzNzQyQzRGOUFFMDIvQzQ5Mjg4MjBG MDZDMTFFQzkxNDU5QjVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnvdQwDQQCAAIwBwMFACQAiOAwDQYJKoZIhvcNAQELBQAD ggEBAA9aC8PJJ3qkIJ/thopijyzDAywj0JOcMy8fBl3eYjg8/SbfHNCx2nwY8qlH E6JohLq9u6h2ur2jJGOFe7I6MYQNfoCMG8EEuV14TVzHbt0b0K20+6uYUwKozY/O hK+Nn7hKZJRh5xBTwl6TYt2nPZI3+OfbHRj7ubavvCCsAlQl3WhpIJYVGPO0LZD6 sZR2amz+pqyYb5t6NFBKwRoZupGwkxisVUqiV87R6J/NXMHfwhPkfuYLbI575lRM f2VfhAR3t3rxO02IliUV6F5qNtk1WWzlWU/nKTwvQoJdWusViMZ7an5HluJlISL+ 67OFwZpo+NjnlCO2G73LJTqp7Oo= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:45 2024 by rpki-client on console-ams.rpki-client.org