$ rpki-client -vvf rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/2C5F8752A10D11EFB9BE8476C4F9AE02.roa File: 2C5F8752A10D11EFB9BE8476C4F9AE02.roa (raw, json) Hash identifier: Iv390Bd/MJyqbzwOB0bqCA/PrLBJuVtYX/m4XRUDX5k= Subject key identifier: 82:8A:6C:95:EF:5E:77:C0:EB:23:00:B1:E4:13:F5:79:56:DE:76:00 Certificate issuer: /CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Certificate serial: 344D Authority key identifier: C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/2C5F8752A10D11EFB9BE8476C4F9AE02.roa Signing time: Tue 12 Nov 2024 15:45:42 +0000 ROA not before: Tue 12 Nov 2024 15:45:42 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 138985 IP address blocks: 103.255.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:18:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13389 (0x344d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Validity Not Before: Nov 12 15:45:42 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=67337826-3ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:12:13:8b:85:d8:da:6b:1c:53:38:c8:e7:7c: 84:07:8d:31:1a:2a:ec:d0:f1:00:fa:5b:30:7d:dc: 25:b7:18:b1:ca:92:0c:68:69:7e:57:d4:79:21:4e: 0a:0e:8b:8a:98:8b:28:49:bd:04:d0:6f:26:78:ad: 79:d5:c6:91:14:15:10:69:ca:ec:56:6c:04:e4:ea: 1a:0c:42:06:8f:2c:dc:49:11:d5:1f:62:ce:b3:48: d6:15:69:ac:aa:97:d0:b8:64:4e:3a:cb:7b:3c:2e: bb:e5:71:7a:9a:91:b9:e3:68:05:68:fc:fd:5f:b5: 6c:ad:6f:df:df:5c:13:15:b4:98:69:68:aa:e5:93: bc:41:99:00:2c:a2:d7:41:f1:bd:f6:e7:d1:b7:15: c1:7b:43:a8:b3:88:12:10:26:aa:3f:b9:21:78:a0: 9e:58:ad:75:07:57:96:e5:c7:61:fe:17:e9:b0:6c: 10:c9:e0:89:03:84:0f:37:08:d8:ea:7b:0e:52:c9: 84:f2:76:86:48:b0:4b:f6:c9:a4:1e:7e:4c:81:7b: e8:58:83:32:de:cc:74:34:11:16:84:86:bb:87:cb: a2:6d:0f:a5:e4:af:66:0d:d4:66:c4:84:dd:ad:33: 8b:73:cf:32:89:8f:5b:53:a9:cd:de:5a:be:b5:bb: 4d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:8A:6C:95:EF:5E:77:C0:EB:23:00:B1:E4:13:F5:79:56:DE:76:00 X509v3 Authority Key Identifier: keyid:C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/2C5F8752A10D11EFB9BE8476C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.255.151.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:8e:78:29:b4:8c:da:05:c4:76:ef:d2:ea:da:ef:33:67:b4: d4:e4:6a:af:b3:73:dd:61:ba:53:2b:fd:73:09:bd:ef:7c:7a: b1:88:b6:ee:b0:22:93:02:ab:32:51:0f:2b:7f:76:c4:2d:5b: 3d:66:72:a9:4d:ce:92:a9:d1:60:9f:ee:90:c0:66:7f:10:23: 60:93:7b:75:47:b9:8d:6e:b4:43:db:1c:01:c8:0e:6b:0c:31: b2:05:47:1a:65:96:e6:db:d1:e5:e2:2e:25:37:6b:29:66:eb: 99:c0:75:bb:bf:db:f1:8c:88:55:7c:ed:5a:ac:70:b1:30:5b: 46:8b:d9:23:df:38:e0:b3:16:77:36:f8:76:0b:66:aa:f9:79: 7e:ec:05:53:af:13:b1:3d:9b:52:3a:10:27:f7:59:52:92:d3: 0e:fb:1f:87:32:46:9b:a8:fe:cb:60:4c:41:d1:9c:dc:ce:2c: 59:82:be:57:67:a7:68:46:ec:a7:51:f9:94:d3:0f:31:02:00: cb:ad:33:98:34:6a:10:29:a2:2a:7b:af:34:0e:ff:9e:5f:f1: 6e:5a:6f:85:48:59:b1:3c:de:f0:d7:e0:97:08:6e:79:2b:fb: b5:5c:ed:f3:15:df:92:ab:2d:11:bb:fd:89:d5:39:e4:6e:00: f2:a7:b4:81 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2NEQxMTAvBgNVBAUTKEM0MjIwRjUwMzU1NjQ3QjdDODBCMkNFOEJDNzEyNkFB QzJFMjJEMzcwHhcNMjQxMTEyMTU0NTQyWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzMzNzgyNi0zZmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBITi4XY2mscUzjI53yEB40xGirs0PEA+lswfdwltxixypIMaGl+V9R5IU4K DouKmIsoSb0E0G8meK151caRFBUQacrsVmwE5OoaDEIGjyzcSRHVH2LOs0jWFWms qpfQuGROOst7PC675XF6mpG542gFaPz9X7VsrW/f31wTFbSYaWiq5ZO8QZkALKLX QfG99ufRtxXBe0Oos4gSECaqP7kheKCeWK11B1eW5cdh/hfpsGwQyeCJA4QPNwjY 6nsOUsmE8naGSLBL9smkHn5MgXvoWIMy3sx0NBEWhIa7h8uibQ+l5K9mDdRmxITd rTOLc88yiY9bU6nN3lq+tbtN4wIDAQABo4IClTCCApEwHQYDVR0OBBYEFIKKbJXv XnfA6yMAseQT9XlW3nYAMB8GA1UdIwQYMBaAFMQiD1A1Vke3yAss6LxxJqrC4i03 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY0RC9EOTMzM0ZFNDFE NkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3ZklDeXpvdkhFbXFzTGlM VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDSVBVRFZXUjdmSUN5em92SEVtcXNMaUxUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUQ2NEQvRDkzMzNGRTQxRDZFMTFFMkE4NTA4MEIwMDhCMDJDRDIvMkM1Rjg3NTJB MTBEMTFFRkI5QkU4NDc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn/5cwDQYJKoZIhvcNAQELBQADggEBADqOeCm0jNoFxHbv 0ura7zNntNTkaq+zc91hulMr/XMJve98erGItu6wIpMCqzJRDyt/dsQtWz1mcqlN zpKp0WCf7pDAZn8QI2CTe3VHuY1utEPbHAHIDmsMMbIFRxpllubb0eXiLiU3aylm 65nAdbu/2/GMiFV87VqscLEwW0aL2SPfOOCzFnc2+HYLZqr5eX7sBVOvE7E9m1I6 ECf3WVKS0w77H4cyRpuo/stgTEHRnNzOLFmCvldnp2hG7KdR+ZTTDzECAMutM5g0 ahApoip7rzQO/55f8W5ab4VIWbE83vDX4JcIbnkr+7Vc7fMV35KrLRG7/YnVOeRu APKntIE= -----END CERTIFICATE-----Generated at Wed Nov 20 16:12:00 2024 by rpki-client on console-fra.rpki-client.org