$ rpki-client -vvf rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/CD8C0430F99011EAB54DF63CC4F9AE02.roa File: CD8C0430F99011EAB54DF63CC4F9AE02.roa (raw, json) Hash identifier: KyOkY9VA3J/3sBokvUHuRFKP5fmOGmjv1+iHz+yAeU0= Subject key identifier: 96:9F:AF:72:F2:DD:AF:4C:19:86:19:04:FC:45:46:33:11:69:DC:40 Certificate issuer: /CN=A91994D1/serialNumber=ACA12FD7DBB283F32CDD73CFCECF05D3CB9A88A1 Certificate serial: 0747 Authority key identifier: AC:A1:2F:D7:DB:B2:83:F3:2C:DD:73:CF:CE:CF:05:D3:CB:9A:88:A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/CD8C0430F99011EAB54DF63CC4F9AE02.roa Signing time: Wed 02 Oct 2024 21:30:21 +0000 ROA not before: Wed 02 Oct 2024 21:30:21 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 141042 IP address blocks: 103.155.43.0/24 maxlen: 24 2001:df4:b180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.crl rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1863 (0x747) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91994D1/serialNumber=ACA12FD7DBB283F32CDD73CFCECF05D3CB9A88A1 Validity Not Before: Oct 2 21:30:21 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66fdbb6d-0f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2b:5e:39:2d:95:3d:18:a1:0f:4b:0c:ef:53: 32:12:2b:fb:32:95:3b:f8:21:90:03:d7:fb:42:10: da:07:a4:1c:4a:44:f5:8a:f9:73:e2:f7:02:07:bb: 81:11:75:05:18:1e:b9:ae:e7:cd:27:42:6e:47:c9: cf:3e:56:0a:ea:5c:cb:9e:ac:56:df:c9:72:14:16: 97:1e:6e:61:d1:f8:b3:25:49:cd:d2:16:d4:aa:bf: f7:a2:f4:44:ac:ad:ea:ba:e9:7d:83:5d:3f:fd:44: 17:c2:1c:fa:90:a6:26:b6:af:e6:50:90:1e:4f:6d: 84:be:8f:ad:16:6d:9c:12:61:91:95:9e:8e:eb:03: f5:a3:ab:7b:aa:dd:89:b8:27:47:7c:bb:d5:5e:08: 3f:8a:bc:e1:d6:6f:2c:07:33:c0:a3:77:b6:d5:d1: 4a:42:ac:cc:fa:49:03:3f:dc:5e:55:c1:c6:a6:78: 2b:68:21:7a:40:ff:1f:f3:ac:97:bc:87:12:eb:9e: 13:a5:a6:38:65:5d:82:97:07:c9:fb:1f:0e:65:47: 4b:78:50:80:98:fd:ad:f7:cc:e6:c5:27:70:b8:4e: a0:c9:bb:9a:b1:89:1e:fb:11:f7:cc:65:cc:d9:d2: 5a:f5:1f:2c:b1:68:60:86:64:70:7f:31:6f:1a:52: 1c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9F:AF:72:F2:DD:AF:4C:19:86:19:04:FC:45:46:33:11:69:DC:40 X509v3 Authority Key Identifier: keyid:AC:A1:2F:D7:DB:B2:83:F3:2C:DD:73:CF:CE:CF:05:D3:CB:9A:88:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/CD8C0430F99011EAB54DF63CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.155.43.0/24 IPv6: 2001:df4:b180::/48 Signature Algorithm: sha256WithRSAEncryption b0:b6:d1:19:b3:f5:98:81:5e:9a:f7:66:f5:24:da:f7:b0:98: 6d:db:f4:34:75:42:0b:e6:63:e5:33:4e:f2:98:75:ce:a1:e6: 73:51:ad:31:56:fb:ea:85:16:64:e0:e9:a9:b9:90:98:05:f9: 51:08:6d:4a:d9:71:92:fb:09:d0:2a:21:33:6c:d9:ca:bc:f4: 49:ed:2f:49:36:cd:a1:dd:b4:68:e8:92:08:11:ac:2f:cf:65: 47:19:eb:ef:9b:3f:8a:4a:03:b5:f3:fb:86:ed:cb:28:7e:89: f5:cf:a9:10:97:0d:ce:11:fc:d3:55:51:c7:08:67:dd:5b:56: ed:c1:02:95:5f:06:f5:03:c2:1b:2e:12:68:65:cf:a4:a4:e1: 94:60:b2:5e:d3:22:10:78:15:36:c5:82:01:7b:f2:51:6b:4f: e0:88:25:03:04:19:fc:0e:af:3d:ea:53:a4:b0:c6:f6:da:bc: 2f:fe:1b:70:4d:02:cd:d4:39:eb:8a:c8:13:33:7c:95:dd:34: 72:e0:96:9c:e0:7e:5f:22:f9:ab:d5:48:ee:95:0a:75:e3:71: c9:21:c6:0c:91:ee:71:47:e5:c4:73:ba:4e:1c:04:7a:5b:f2: c1:41:83:03:ae:6e:ac:2d:80:7e:f2:a9:cd:7f:ab:62:76:cb: d2:02:e0:5b -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICB0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk0RDExMTAvBgNVBAUTKEFDQTEyRkQ3REJCMjgzRjMyQ0RENzNDRkNFQ0YwNUQz Q0I5QTg4QTEwHhcNMjQxMDAyMjEzMDIxWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZkYmI2ZC0wZjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1SteOS2VPRihD0sM71MyEiv7MpU7+CGQA9f7QhDaB6QcSkT1ivlz4vcCB7uB EXUFGB65rufNJ0JuR8nPPlYK6lzLnqxW38lyFBaXHm5h0fizJUnN0hbUqr/3ovRE rK3quul9g10//UQXwhz6kKYmtq/mUJAeT22Evo+tFm2cEmGRlZ6O6wP1o6t7qt2J uCdHfLvVXgg/irzh1m8sBzPAo3e21dFKQqzM+kkDP9xeVcHGpngraCF6QP8f86yX vIcS654TpaY4ZV2ClwfJ+x8OZUdLeFCAmP2t98zmxSdwuE6gybuasYke+xH3zGXM 2dJa9R8ssWhghmRwfzFvGlIcDQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJafr3Ly 3a9MGYYZBPxFRjMRadxAMB8GA1UdIwQYMBaAFKyhL9fbsoPzLN1zz87PBdPLmoih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTREMS83QkQyMUFGRUY5 N0IxMUVBQUM5MDVFNjJDNEY5QUUwMi9yS0V2MTl1eWdfTXMzWFBQenM4RjA4dWFp S0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JLRXYxOXV5Z19NczNYUFB6czhGMDh1YWlLRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTk0RDEvN0JEMjFBRkVGOTdCMTFFQUFDOTA1RTYyQzRGOUFFMDIvQ0Q4QzA0MzBG OTkwMTFFQUI1NERGNjNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnmyswDwQCAAIwCQMHACABDfSxgDANBgkqhkiG9w0BAQsF AAOCAQEAsLbRGbP1mIFemvdm9STa97CYbdv0NHVCC+Zj5TNO8ph1zqHmc1GtMVb7 6oUWZODpqbmQmAX5UQhtStlxkvsJ0CohM2zZyrz0Se0vSTbNod20aOiSCBGsL89l Rxnr75s/ikoDtfP7hu3LKH6J9c+pEJcNzhH801VRxwhn3VtW7cEClV8G9QPCGy4S aGXPpKThlGCyXtMiEHgVNsWCAXvyUWtP4IglAwQZ/A6vPepTpLDG9tq8L/4bcE0C zdQ564rIEzN8ld00cuCWnOB+XyL5q9VI7pUKdeNxySHGDJHucUflxHO6ThwEelvy wUGDA65urC2AfvKpzX+rYnbL0gLgWw== -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:35 2024 by rpki-client on console-ams.rpki-client.org