$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/3FE1B696271011EFA1B8D00EC4F9AE02.roa File: 3FE1B696271011EFA1B8D00EC4F9AE02.roa (raw, json) Hash identifier: 8CP371nOHvu9dYxHG2ApZR9uMe/lywhobBs7Iao4wCY= Subject key identifier: 22:D8:99:BE:44:22:77:17:34:9C:8E:FF:E5:FA:F2:83:82:C5:B2:7F Certificate issuer: /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Certificate serial: 0CC0 Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/3FE1B696271011EFA1B8D00EC4F9AE02.roa Signing time: Mon 10 Jun 2024 10:00:22 +0000 ROA not before: Mon 10 Jun 2024 10:00:22 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 137449 IP address blocks: 43.246.202.0/23 maxlen: 24 103.111.12.0/24 maxlen: 24 2402:76c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3264 (0xcc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Validity Not Before: Jun 10 10:00:22 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=6666ceb5-2b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c7:68:0f:ed:12:c1:2f:ca:d3:18:78:b2:68: ea:15:aa:c1:a1:e6:83:09:4a:9f:a1:9c:8b:2b:60: 67:44:a2:10:cd:d8:75:cc:4e:b1:a5:d9:17:f8:fe: 37:36:c0:9d:33:47:8d:92:9d:cb:08:09:ed:70:fe: 22:74:ab:a8:39:5e:f4:7a:b9:61:77:fe:95:e3:9a: e9:21:7f:1c:88:7b:68:26:b2:fe:cb:c3:19:d6:63: bb:d6:e6:a3:9f:fb:37:d4:c2:96:11:36:87:2f:d4: 2f:bc:6a:f5:8c:7c:f8:46:58:8c:5e:e6:cc:65:03: ea:93:a0:46:57:f7:14:17:85:0a:3c:55:38:92:31: cb:c0:9a:85:17:61:c0:36:90:be:47:1d:44:d4:f9: 4b:16:9c:47:c5:3a:ba:8e:5f:ec:39:1a:bd:0e:f3: b7:09:cb:18:c1:aa:c8:8e:68:97:61:48:43:ec:a8: a1:15:99:63:8c:e0:26:3f:c2:02:62:8b:43:68:c6: 7d:31:67:28:0f:21:38:ca:5e:6d:95:33:7c:6c:7f: 21:e5:dd:e8:b2:a4:00:02:16:a7:7e:af:aa:0a:ba: 01:9a:07:30:bd:72:33:17:1b:3c:b7:a9:d5:16:90: 32:1a:b4:55:e0:44:a6:ca:27:86:15:6c:6e:76:03: 7f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D8:99:BE:44:22:77:17:34:9C:8E:FF:E5:FA:F2:83:82:C5:B2:7F X509v3 Authority Key Identifier: keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/3FE1B696271011EFA1B8D00EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.246.202.0/23 103.111.12.0/24 IPv6: 2402:76c0::/32 Signature Algorithm: sha256WithRSAEncryption 9e:ac:44:a4:d7:47:4e:3f:3a:21:8d:d8:f5:ae:21:0b:49:92: 35:46:c6:c3:67:93:ad:ff:f6:78:53:2e:7a:13:a4:6c:a6:aa: 36:a3:39:1f:68:0c:9a:b9:42:cf:fc:49:00:cb:9b:02:c7:01: 4d:89:5c:62:b3:5a:19:e2:61:ef:44:a1:60:f2:13:31:f6:4c: 68:f1:53:79:7d:71:1e:1b:a0:15:f0:a9:93:d3:34:2b:fd:22: 55:c8:b7:86:89:67:75:c5:2e:89:e0:08:a6:60:75:54:1c:fa: 89:4f:c3:36:61:57:3a:98:67:db:76:a7:5b:43:43:65:0d:7d: 37:02:15:ac:3e:78:d4:78:38:99:7b:86:ec:51:bd:18:b7:aa: 48:6f:50:dd:37:5a:03:f4:7c:cf:9d:ec:d5:f5:d2:10:7e:cd: 57:87:34:12:63:97:27:39:c7:be:44:b4:ba:48:94:5b:19:89: 5a:35:43:3a:0f:f6:2f:64:d3:5c:e1:39:c4:76:e8:97:53:75: c9:34:f7:66:f7:5d:4e:87:e6:13:7c:47:12:c8:d3:2f:4b:fb: b7:00:81:39:43:47:52:ae:29:b0:ee:05:11:c1:bb:6b:fb:0e: 71:a6:d0:e0:c3:12:fc:dd:97:b3:77:52:13:6a:30:1c:31:db: 0e:36:1f:ce -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICDMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg4NDcxMTAvBgNVBAUTKEE2RUYwNkI2ODk1ODE4MjFDNzhDODgyOTFCQkRGNUM1 MTJBMzNGNDEwHhcNMjQwNjEwMTAwMDIyWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjY2Y2ViNS0yYjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMdoD+0SwS/K0xh4smjqFarBoeaDCUqfoZyLK2BnRKIQzdh1zE6xpdkX+P43 NsCdM0eNkp3LCAntcP4idKuoOV70erlhd/6V45rpIX8ciHtoJrL+y8MZ1mO71uaj n/s31MKWETaHL9QvvGr1jHz4RliMXubMZQPqk6BGV/cUF4UKPFU4kjHLwJqFF2HA NpC+Rx1E1PlLFpxHxTq6jl/sORq9DvO3CcsYwarIjmiXYUhD7KihFZljjOAmP8IC YotDaMZ9MWcoDyE4yl5tlTN8bH8h5d3osqQAAhanfq+qCroBmgcwvXIzFxs8t6nV FpAyGrRV4ESmyieGFWxudgN/UwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFCLYmb5E IncXNJyO/+X68oOCxbJ/MB8GA1UdIwQYMBaAFKbvBraJWBghx4yIKRu99cUSoz9B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODg0Ny9EREZCQjBCOEQ3 ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdDSEhqSWdwRzczMXhSS2pQ MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B1OEd0b2xZR0NISGpJZ3BHNzMxeFJLalAwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTg4NDcvRERGQkIwQjhENzgxMTFFOUI0MjNBQzRCQzRGOUFFMDIvM0ZFMUI2OTYy NzEwMTFFRkExQjhEMDBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAEr9soDBABnbwwwDQQCAAIwBwMFACQCdsAwDQYJKoZIhvcN AQELBQADggEBAJ6sRKTXR04/OiGN2PWuIQtJkjVGxsNnk63/9nhTLnoTpGymqjaj OR9oDJq5Qs/8SQDLmwLHAU2JXGKzWhniYe9EoWDyEzH2TGjxU3l9cR4boBXwqZPT NCv9IlXIt4aJZ3XFLongCKZgdVQc+olPwzZhVzqYZ9t2p1tDQ2UNfTcCFaw+eNR4 OJl7huxRvRi3qkhvUN03WgP0fM+d7NX10hB+zVeHNBJjlyc5x75EtLpIlFsZiVo1 QzoP9i9k01zhOcR26JdTdck092b3XU6H5hN8RxLI0y9L+7cAgTlDR1KuKbDuBRHB u2v7DnGm0ODDEvzdl7N3UhNqMBwx2w42H84= -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org