$ rpki-client -vvf rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/3D83702E66CB11EFA2A66984C4F9AE02.roa File: 3D83702E66CB11EFA2A66984C4F9AE02.roa (raw, json) Hash identifier: lUgZ45NhNVzRaDmFfEX8lN0zDz9HpfoRqK2qSylb5c0= Subject key identifier: F3:82:2C:96:EF:B4:F6:9A:4C:94:07:0B:3A:D0:D9:77:21:1B:A1:45 Certificate issuer: /CN=A919400C/serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636 Certificate serial: 0588 Authority key identifier: 19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/3D83702E66CB11EFA2A66984C4F9AE02.roa Signing time: Fri 30 Aug 2024 12:27:37 +0000 ROA not before: Fri 30 Aug 2024 12:27:37 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 142028 IP address blocks: 103.166.89.0/24 maxlen: 24 2001:df6:8580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1416 (0x588) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919400C/serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636 Validity Not Before: Aug 30 12:27:37 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66d1bab9-35ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7b:b2:6b:95:4f:e9:c7:da:95:91:cc:0b:f6: 4c:bb:d9:1e:26:ff:0d:96:22:4d:29:5e:71:73:59: da:36:20:a6:36:57:40:14:81:c1:7e:f4:81:d2:90: e0:c0:74:af:fc:03:cb:97:71:52:6d:2b:51:01:ff: 77:5e:63:a6:0e:5d:52:a8:59:78:38:ca:7a:ed:44: 9e:80:4e:e3:eb:cf:76:11:92:92:e4:aa:5d:80:51: 21:98:d8:80:49:10:1c:36:35:cf:12:ba:5b:b6:d8: c0:2d:47:bd:ff:98:c8:f2:e8:53:10:93:1a:2d:f0: 1d:fa:e1:bb:cb:97:81:19:0e:ee:3e:4e:ba:06:10: 41:0b:bd:66:4b:6e:a3:b9:63:b0:1f:aa:98:7b:36: 79:00:69:1f:a9:eb:34:68:68:a4:d2:e5:dc:25:4e: 58:7d:d7:66:f5:3c:6d:51:0d:ea:92:09:56:61:7f: 2e:a1:a2:d1:97:cc:dc:83:f3:70:84:b6:fb:5f:aa: e5:a5:a5:bd:42:56:1b:26:a2:99:a5:10:88:e7:ca: 96:9a:74:c3:3c:df:33:c1:c7:79:0c:68:73:72:27: 85:d5:cc:ee:3d:81:96:be:6f:e6:97:b8:dc:a7:85: 39:7a:32:4b:94:d9:c0:79:22:79:0d:cc:13:81:14: e9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:82:2C:96:EF:B4:F6:9A:4C:94:07:0B:3A:D0:D9:77:21:1B:A1:45 X509v3 Authority Key Identifier: keyid:19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/3D83702E66CB11EFA2A66984C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.166.89.0/24 IPv6: 2001:df6:8580::/48 Signature Algorithm: sha256WithRSAEncryption c0:a2:06:19:7d:ac:fd:56:f5:03:f8:c1:05:16:d7:5e:9b:cc: 1c:44:37:3f:20:61:95:0c:9e:c7:61:0c:56:ff:40:79:99:55: 56:a1:c4:97:a3:23:81:f2:3e:7c:ad:4c:05:48:fa:2b:5c:c4: 5d:45:c7:38:0f:3b:57:c1:60:05:ec:69:5d:d1:1b:b3:41:4c: ee:85:57:8d:87:d5:e7:8e:8c:f7:f9:fa:4d:e0:78:0b:0f:d3: ce:77:80:01:77:b6:84:65:bd:cf:49:b4:d9:cb:60:f0:c4:3e: 32:a6:01:49:3f:f8:1e:03:f2:df:d0:fb:dd:55:2c:92:7e:b0: 42:4d:63:26:34:45:e4:37:26:24:cb:7e:16:eb:fd:71:39:31: 16:c6:c2:bb:62:68:77:51:62:60:57:0d:76:cf:35:01:13:23: 9f:49:ee:68:75:b4:bf:e9:58:63:61:b0:62:54:c2:1b:ee:9d: 1e:82:b9:bf:3e:eb:32:47:92:8a:ef:d8:42:53:f9:5d:73:24: c1:47:04:ea:a4:15:60:78:a3:78:0d:f5:30:73:bd:c9:1d:a0: 80:b2:d6:61:41:de:b5:79:e6:1e:6b:30:f5:50:3c:ce:25:ac: 63:df:60:82:56:c1:02:33:1c:64:70:30:db:54:34:f8:cd:00: b7:28:68:72 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQwMEMxMTAvBgNVBAUTKDE5NUIyNjdENkQxNTNBRjdEMDJCNkJFQjIyQ0UxNTkz RDkyNUI2MzYwHhcNMjQwODMwMTIyNzM3WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQxYmFiOS0zNWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHuya5VP6cfalZHMC/ZMu9keJv8NliJNKV5xc1naNiCmNldAFIHBfvSB0pDg wHSv/APLl3FSbStRAf93XmOmDl1SqFl4OMp67USegE7j6892EZKS5KpdgFEhmNiA SRAcNjXPErpbttjALUe9/5jI8uhTEJMaLfAd+uG7y5eBGQ7uPk66BhBBC71mS26j uWOwH6qYezZ5AGkfqes0aGik0uXcJU5Yfddm9TxtUQ3qkglWYX8uoaLRl8zcg/Nw hLb7X6rlpaW9QlYbJqKZpRCI58qWmnTDPN8zwcd5DGhzcieF1czuPYGWvm/ml7jc p4U5ejJLlNnAeSJ5DcwTgRTp2wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPOCLJbv tPaaTJQHCzrQ2XchG6FFMB8GA1UdIwQYMBaAFBlbJn1tFTr30Ctr6yLOFZPZJbY2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDAwQy9DM0VDRDk2OEE2 NzQxMUVCOEM0MzIyNkZDNEY5QUUwMi9HVnNtZlcwVk92ZlFLMnZySXM0Vms5a2x0 alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dWc21mVzBWT3ZmUUsydnJJczRWazlrbHRqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTQwMEMvQzNFQ0Q5NjhBNjc0MTFFQjhDNDMyMjZGQzRGOUFFMDIvM0Q4MzcwMkU2 NkNCMTFFRkEyQTY2OTg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnplkwDwQCAAIwCQMHACABDfaFgDANBgkqhkiG9w0BAQsF AAOCAQEAwKIGGX2s/Vb1A/jBBRbXXpvMHEQ3PyBhlQyex2EMVv9AeZlVVqHEl6Mj gfI+fK1MBUj6K1zEXUXHOA87V8FgBexpXdEbs0FM7oVXjYfV546M9/n6TeB4Cw/T zneAAXe2hGW9z0m02ctg8MQ+MqYBST/4HgPy39D73VUskn6wQk1jJjRF5DcmJMt+ Fuv9cTkxFsbCu2Jod1FiYFcNds81ARMjn0nuaHW0v+lYY2GwYlTCG+6dHoK5vz7r MkeSiu/YQlP5XXMkwUcE6qQVYHijeA31MHO9yR2ggLLWYUHetXnmHmsw9VA8ziWs Y99gglbBAjMcZHAw21Q0+M0Atyhocg== -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:45 2024 by rpki-client on console-ams.rpki-client.org