$ rpki-client -vvf rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/F47ED252878B11EEA8C62644C4F9AE02.roa File: F47ED252878B11EEA8C62644C4F9AE02.roa (raw, json) Hash identifier: qTXBNw7mfhaErKZnovnNFuD402t8u0aLC3Cx70bCvCg= Subject key identifier: 32:23:D3:88:90:47:17:52:52:D4:80:F0:CC:41:35:A6:E4:6B:D2:B1 Certificate issuer: /CN=A919710C/serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Certificate serial: 03DD Authority key identifier: 21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/F47ED252878B11EEA8C62644C4F9AE02.roa Signing time: Sat 17 Aug 2024 01:33:37 +0000 ROA not before: Sat 17 Aug 2024 01:33:37 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 140736 IP address blocks: 103.152.64.0/23 maxlen: 24 2406:2ac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 989 (0x3dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919710C/serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Validity Not Before: Aug 17 01:33:37 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66bffdf1-f422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:2d:e1:ed:fa:9c:d8:de:a9:67:6f:c3:8f:6d: f9:19:3f:96:b2:ac:3e:4b:71:74:d0:a6:2f:b9:4b: 9d:d9:ee:28:4e:2d:72:be:27:9b:86:7f:25:2c:64: 71:8e:0a:5f:99:c6:c8:4d:c2:5b:b7:99:81:24:8b: d2:40:bf:a9:b5:79:c7:c8:32:9a:c7:f8:53:54:2e: f8:40:83:38:f7:81:45:ea:5b:51:81:1d:df:89:eb: 73:b2:7d:68:8f:60:75:08:4f:d5:db:ec:e1:37:e9: 13:7d:e3:04:11:09:43:bc:dc:1f:22:df:be:59:eb: 47:6d:b9:cb:2d:9e:b8:fe:a9:24:52:50:39:38:1e: 21:06:37:7b:09:ef:68:e9:0a:f3:13:de:bd:ea:eb: 77:08:96:97:3d:6a:dd:05:e9:e3:57:fc:97:84:a6: b9:1f:5a:7a:ac:e9:21:f1:e7:ee:77:8d:74:d5:bf: b3:be:e4:d9:ce:39:92:a8:20:b9:1e:8e:6e:b2:bb: 4a:91:4f:df:b6:6c:6d:cb:73:5f:ae:6d:56:27:33: 11:a9:ea:3c:84:00:96:8b:cc:01:3d:04:cb:46:46: da:a0:1c:7c:ff:1c:a6:c4:62:69:c7:3f:72:f6:ba: c4:32:85:a9:f8:1e:1c:58:02:d3:9a:d0:a7:d2:36: 4b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:23:D3:88:90:47:17:52:52:D4:80:F0:CC:41:35:A6:E4:6B:D2:B1 X509v3 Authority Key Identifier: keyid:21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/F47ED252878B11EEA8C62644C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.64.0/23 IPv6: 2406:2ac0::/32 Signature Algorithm: sha256WithRSAEncryption 87:09:93:8a:1c:58:07:88:2c:be:ab:21:d7:c1:9a:12:3b:b7: 37:c4:48:a6:5a:11:f3:a0:13:fa:3b:71:a3:cf:8d:56:8d:c7: 12:72:c5:87:98:e5:47:e0:cd:b2:cb:47:27:85:99:0b:67:ea: bf:d3:dc:6f:f2:6d:a1:18:a9:77:07:f5:f4:ec:aa:d1:1a:35: 36:38:f8:5c:3e:db:05:dd:c0:4b:43:b8:e3:9c:ca:6b:df:f8: 67:54:2d:18:c8:a9:4b:78:33:32:9f:a0:36:c5:77:03:f0:72: 6e:f5:1f:c7:36:f7:04:f1:52:8e:44:2f:6a:e5:09:97:4d:38: 94:1b:ef:29:0a:5a:3e:74:c9:a8:dc:b9:8a:a3:9a:14:fe:90: 72:4d:6e:8c:93:a7:f1:bb:3d:ff:e8:0d:62:7a:75:6d:99:d9: ca:df:35:f1:4e:1f:11:38:c0:7c:93:a7:64:6b:c6:3c:62:89: d8:2e:2a:23:cb:e5:e6:bb:59:f0:1c:3a:cc:47:86:b6:6b:ed: 44:be:09:91:9a:f7:65:48:a3:3b:f3:3c:35:5f:a3:44:20:e9: 0a:bb:22:35:ef:5c:a0:eb:74:b8:a8:cd:c8:9b:fe:75:7b:b3: 7c:fe:0a:3d:1f:90:53:11:e8:74:c4:4f:0c:79:c8:71:cf:c3: 07:49:47:1f -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICA90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxMEMxMTAvBgNVBAUTKDIxRjdDRDBBQTAxNjg0MzU1Mjk4NzQ2M0U2NDIyOTcy RUYwMzlDRTgwHhcNMjQwODE3MDEzMzM3WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmJmZmRmMS1mNDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5y3h7fqc2N6pZ2/Dj235GT+Wsqw+S3F00KYvuUud2e4oTi1yviebhn8lLGRx jgpfmcbITcJbt5mBJIvSQL+ptXnHyDKax/hTVC74QIM494FF6ltRgR3fietzsn1o j2B1CE/V2+zhN+kTfeMEEQlDvNwfIt++WetHbbnLLZ64/qkkUlA5OB4hBjd7Ce9o 6QrzE9696ut3CJaXPWrdBenjV/yXhKa5H1p6rOkh8efud4101b+zvuTZzjmSqCC5 Ho5usrtKkU/ftmxty3Nfrm1WJzMRqeo8hACWi8wBPQTLRkbaoBx8/xymxGJpxz9y 9rrEMoWp+B4cWALTmtCn0jZLSQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFDIj04iQ RxdSUtSA8MxBNabka9KxMB8GA1UdIwQYMBaAFCH3zQqgFoQ1Uph0Y+ZCKXLvA5zo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzEwQy8yRjM2NzYxMjRC NjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hEVlNtSFJqNWtJcGN1OERu T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmZk5DcUFXaERWU21IUmo1a0lwY3U4RG5PZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTcxMEMvMkYzNjc2MTI0QjYwMTFFQzk1NTREQzUwQzRGOUFFMDIvRjQ3RUQyNTI4 NzhCMTFFRUE4QzYyNjQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnmEAwDQQCAAIwBwMFACQGKsAwDQYJKoZIhvcNAQELBQAD ggEBAIcJk4ocWAeILL6rIdfBmhI7tzfESKZaEfOgE/o7caPPjVaNxxJyxYeY5Ufg zbLLRyeFmQtn6r/T3G/ybaEYqXcH9fTsqtEaNTY4+Fw+2wXdwEtDuOOcymvf+GdU LRjIqUt4MzKfoDbFdwPwcm71H8c29wTxUo5EL2rlCZdNOJQb7ykKWj50yajcuYqj mhT+kHJNboyTp/G7Pf/oDWJ6dW2Z2crfNfFOHxE4wHyTp2RrxjxiidguKiPL5ea7 WfAcOsxHhrZr7US+CZGa92VIozvzPDVfo0Qg6Qq7IjXvXKDrdLiozcib/nV7s3z+ Cj0fkFMR6HTETwx5yHHPwwdJRx8= -----END CERTIFICATE-----Generated at Thu Nov 21 01:31:56 2024 by rpki-client on console-fra.rpki-client.org