$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/CF272560413111ECB71E086AC4F9AE02.roa File: CF272560413111ECB71E086AC4F9AE02.roa (raw, json) Hash identifier: xZ/5xBHbsPYmy5fKXzWMNz/s+f7VPa3yOiPF6PNDgEU= Subject key identifier: 9B:B9:48:C6:7B:0F:BF:4E:0A:6C:28:1E:77:39:78:8E:40:5C:B8:EA Certificate issuer: /CN=A9199B24/serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0 Certificate serial: 036F Authority key identifier: 31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/CF272560413111ECB71E086AC4F9AE02.roa Signing time: Sun 03 Dec 2023 02:13:33 +0000 ROA not before: Sun 03 Dec 2023 02:13:33 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 23747 IP address blocks: 103.103.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 879 (0x36f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B24/serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0 Validity Not Before: Dec 3 02:13:33 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=656be44d-954e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f5:04:7e:63:91:95:06:af:3c:a1:86:cd:93: fa:8e:93:02:9c:ce:55:70:05:32:dc:75:6e:91:dd: 59:ae:32:d2:c8:48:7b:16:8b:e4:e1:41:8d:1d:1f: 55:56:64:78:dd:78:ba:71:64:27:07:2d:61:88:a6: 6f:28:41:59:5c:96:d6:75:a3:3f:59:92:28:48:41: 69:ae:0d:6d:c3:e6:7b:17:85:d6:9a:c8:7f:08:fa: b2:d6:02:f4:d2:6d:75:0f:76:fb:2b:e9:aa:6a:60: 0b:13:31:b5:a3:4b:43:10:b4:55:59:08:70:01:cc: 94:44:ae:8d:a7:a2:96:58:33:a3:2f:41:ac:c0:c0: 04:e4:dc:f7:32:52:40:43:19:c6:2b:07:b1:ad:b8: 5d:45:b4:ca:62:6c:3e:52:68:fe:d6:e5:ea:f1:7a: e7:1c:76:66:a5:48:06:bd:d7:c6:a8:8c:af:be:7c: ca:62:b2:57:cb:c4:c1:b0:23:68:12:97:53:08:80: 9f:43:f2:0e:3b:43:57:d9:d2:4b:f3:4f:38:ff:b4: ac:75:9c:fa:3a:88:c1:71:4b:8c:78:d9:95:7e:77: 74:20:f2:00:d2:63:bd:5b:41:38:c5:c8:b1:98:bc: e2:31:da:2c:5e:58:4f:c4:b5:79:e1:20:17:07:73: c5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B9:48:C6:7B:0F:BF:4E:0A:6C:28:1E:77:39:78:8E:40:5C:B8:EA X509v3 Authority Key Identifier: keyid:31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/CF272560413111ECB71E086AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.103.148.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:38:1f:9a:a0:76:81:6b:f8:2b:85:03:25:2c:3f:76:81:9d: b5:ff:72:73:28:6d:a1:bf:56:35:7f:3a:ff:18:01:99:3b:9c: b9:09:ae:63:c2:a8:ae:48:99:ce:cd:82:40:a0:06:1a:c5:a9: 5e:4f:65:89:7f:a7:3d:b1:d6:50:70:8f:01:75:52:02:e1:c3: 9b:d4:3d:ff:8a:ea:41:f2:bf:3e:27:29:2a:0d:13:9d:48:b1: 70:c1:57:63:85:a4:7e:1e:2a:4e:7c:ec:5c:5b:3b:65:06:fd: 71:a1:b0:a9:c9:fa:fc:a1:02:c6:27:07:64:5a:b5:22:09:0f: 51:f5:bc:39:26:63:cb:99:e4:75:ec:90:22:3d:fe:b7:bf:c7: 0c:7b:9a:9d:e0:f1:63:59:30:91:bb:5e:cb:13:03:5c:61:85: 9d:94:5c:13:62:c5:9f:0e:30:ef:01:d0:c3:c5:3b:e8:cc:e4: 14:7c:97:41:d9:65:0e:c1:6c:f5:37:29:71:1a:37:6d:69:6a: 55:22:c8:4d:36:05:ab:11:34:1d:32:8b:ef:41:6f:ad:5b:28: 85:8a:1a:7d:af:f2:ce:59:c0:18:b2:c8:72:19:b6:42:c6:59: 29:c5:89:0a:ac:4d:7c:45:c4:24:1c:59:de:be:a0:20:b4:02: 34:51:9d:8d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCMjQxMTAvBgNVBAUTKDMxRjM3ODNDN0ExRUQ3ODNGQzFGREE3NDFGNkE3NTI5 RDVBNUU2QTAwHhcNMjMxMjAzMDIxMzMzWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZiZTQ0ZC05NTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PUEfmORlQavPKGGzZP6jpMCnM5VcAUy3HVukd1ZrjLSyEh7Fovk4UGNHR9V VmR43Xi6cWQnBy1hiKZvKEFZXJbWdaM/WZIoSEFprg1tw+Z7F4XWmsh/CPqy1gL0 0m11D3b7K+mqamALEzG1o0tDELRVWQhwAcyURK6Np6KWWDOjL0GswMAE5Nz3MlJA QxnGKwexrbhdRbTKYmw+Umj+1uXq8XrnHHZmpUgGvdfGqIyvvnzKYrJXy8TBsCNo EpdTCICfQ/IOO0NX2dJL8084/7SsdZz6OojBcUuMeNmVfnd0IPIA0mO9W0E4xcix mLziMdosXlhPxLV54SAXB3PFXQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJu5SMZ7 D79OCmwoHnc5eI5AXLjqMB8GA1UdIwQYMBaAFDHzeDx6HteD/B/adB9qdSnVpeag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUIyNC81RkZDOUVGNjQx MjUxMUVDQjdERjQ3N0VDNEY5QUUwMi9NZk40UEhvZTE0UDhIOXAwSDJwMUtkV2w1 cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01mTjRQSG9lMTRQOEg5cDBIMnAxS2RXbDVxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTlCMjQvNUZGQzlFRjY0MTI1MTFFQ0I3REY0NzdFQzRGOUFFMDIvQ0YyNzI1NjA0 MTMxMTFFQ0I3MUUwODZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnZ5QwDQYJKoZIhvcNAQELBQADggEBAI44H5qgdoFr+CuF AyUsP3aBnbX/cnMobaG/VjV/Ov8YAZk7nLkJrmPCqK5Imc7NgkCgBhrFqV5PZYl/ pz2x1lBwjwF1UgLhw5vUPf+K6kHyvz4nKSoNE51IsXDBV2OFpH4eKk587FxbO2UG /XGhsKnJ+vyhAsYnB2RatSIJD1H1vDkmY8uZ5HXskCI9/re/xwx7mp3g8WNZMJG7 XssTA1xhhZ2UXBNixZ8OMO8B0MPFO+jM5BR8l0HZZQ7BbPU3KXEaN21palUiyE02 BasRNB0yi+9Bb61bKIWKGn2v8s5ZwBiyyHIZtkLGWSnFiQqsTXxFxCQcWd6+oCC0 AjRRnY0= -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:36 2024 by rpki-client on console-fra.rpki-client.org