$ rpki-client -vvf rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/A4DF63AA9E1B11E9AE66905DC4F9AE02.roa File: A4DF63AA9E1B11E9AE66905DC4F9AE02.roa (raw, json) Hash identifier: 4WHPjB+m4yRCXMy3983Y9jSkNEd4vDiMQ+e+khb3JCk= Subject key identifier: 40:49:2E:CD:DE:5B:D1:1D:07:81:2E:DC:66:F5:9B:D9:CD:59:32:44 Certificate issuer: /CN=A919F83E/serialNumber=F70A60155E7715433F254496E27B808A63C8C974 Certificate serial: 0DFD Authority key identifier: F7:0A:60:15:5E:77:15:43:3F:25:44:96:E2:7B:80:8A:63:C8:C9:74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9wpgFV53FUM_JUSW4nuAimPIyXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/A4DF63AA9E1B11E9AE66905DC4F9AE02.roa Signing time: Tue 26 Nov 2024 17:55:55 +0000 ROA not before: Tue 26 Nov 2024 17:55:54 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 24514 IP address blocks: 103.127.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.crl rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9wpgFV53FUM_JUSW4nuAimPIyXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Dec 2024 17:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3581 (0xdfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F83E/serialNumber=F70A60155E7715433F254496E27B808A63C8C974 Validity Not Before: Nov 26 17:55:54 2024 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67460baa-a6cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7b:e4:c1:d0:f0:12:84:6f:37:e8:79:d6:e3: 85:0e:c7:b4:fb:24:73:53:6e:f3:d4:a5:dd:88:02: ec:2f:96:9e:30:d8:23:db:a4:85:37:b2:ec:c5:4c: 0b:f2:0d:a0:da:52:cb:da:a4:52:09:de:bd:67:2b: d1:7d:d2:46:dd:a0:0d:86:27:c2:40:3d:c2:9a:f1: 36:86:93:74:35:b9:4e:a2:3e:00:9c:e9:2b:7f:19: 6f:29:89:87:46:33:1c:91:52:ce:cf:4a:39:d7:84: fd:56:19:b7:2b:aa:8e:97:1f:80:25:dc:ff:30:5d: d2:f7:0c:12:7d:46:8f:aa:3e:ba:0a:6d:35:e5:95: d3:a7:cd:c4:99:c1:61:ff:23:9e:7d:3b:fb:3a:f1: 31:ba:c0:63:8e:2c:bb:a2:27:5d:50:d4:17:bd:cd: 3a:bb:57:f9:3a:5b:b3:1b:4f:f1:eb:70:b8:c5:58: dd:30:98:b2:57:d8:e8:c0:24:3d:cc:21:fd:4e:8c: 75:a2:bc:e3:6f:af:6b:51:f9:c7:01:76:d0:c3:a5: 44:43:7f:a1:78:64:81:52:29:77:9a:55:36:38:c7: e4:44:78:5c:a4:21:b3:4f:0d:c1:79:c2:36:ce:71: 95:a2:a2:ac:59:a3:1f:2e:1c:8d:06:10:50:a3:8d: 7b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:49:2E:CD:DE:5B:D1:1D:07:81:2E:DC:66:F5:9B:D9:CD:59:32:44 X509v3 Authority Key Identifier: keyid:F7:0A:60:15:5E:77:15:43:3F:25:44:96:E2:7B:80:8A:63:C8:C9:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/9wpgFV53FUM_JUSW4nuAimPIyXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9wpgFV53FUM_JUSW4nuAimPIyXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F83E/53738FE29E1A11E9AECE0358C4F9AE02/A4DF63AA9E1B11E9AE66905DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.127.51.0/24 Signature Algorithm: sha256WithRSAEncryption 09:cf:58:d4:1e:28:c5:e7:17:24:35:a6:6b:1a:e7:4e:00:99: 89:c5:e7:8e:7e:a5:af:b2:70:b9:0e:29:06:92:b6:62:5e:60: fe:55:27:ef:cc:f3:31:e9:6b:50:b3:16:5d:7c:96:9a:f2:03: fc:36:2c:c7:da:44:54:92:61:79:75:9f:f6:c8:63:0c:0b:2c: 56:85:07:11:49:47:64:93:37:9e:fa:c7:7e:c3:44:3a:e8:8f: de:d0:b7:3c:6d:95:e7:15:ad:aa:44:33:74:b3:72:70:cb:23: 5e:1d:1d:f5:ef:f8:47:ea:c5:a2:f9:22:0d:37:e8:6b:fd:2a: 19:3d:62:15:27:72:79:3a:d8:4f:4e:d9:cd:de:e6:94:0c:84: e9:10:5a:59:45:ba:8c:5d:b0:ff:2f:58:bb:be:a7:49:bc:69: dd:d6:06:b6:52:8a:88:c7:42:7c:34:e4:13:c0:a8:f6:44:67: 83:65:b4:19:50:a3:d0:ee:15:e3:99:48:46:4d:e5:c3:20:f8: c0:88:8e:b2:59:f3:ba:72:63:7f:64:dc:8a:c5:02:54:d4:fb: 26:66:9e:6e:09:52:15:13:5e:a7:43:0c:4d:63:f6:12:89:31: bc:87:cc:1d:40:52:97:55:0b:cd:32:de:0d:64:0a:75:ce:d7: 7b:dd:c3:60 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY4M0UxMTAvBgNVBAUTKEY3MEE2MDE1NUU3NzE1NDMzRjI1NDQ5NkUyN0I4MDhB NjNDOEM5NzQwHhcNMjQxMTI2MTc1NTU0WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ2MGJhYS1hNmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3vkwdDwEoRvN+h51uOFDse0+yRzU27z1KXdiALsL5aeMNgj26SFN7LsxUwL 8g2g2lLL2qRSCd69ZyvRfdJG3aANhifCQD3CmvE2hpN0NblOoj4AnOkrfxlvKYmH RjMckVLOz0o514T9Vhm3K6qOlx+AJdz/MF3S9wwSfUaPqj66Cm015ZXTp83EmcFh /yOefTv7OvExusBjjiy7oiddUNQXvc06u1f5OluzG0/x63C4xVjdMJiyV9jowCQ9 zCH9Tox1orzjb69rUfnHAXbQw6VEQ3+heGSBUil3mlU2OMfkRHhcpCGzTw3BecI2 znGVoqKsWaMfLhyNBhBQo417VwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEBJLs3e W9EdB4Eu3Gb1m9nNWTJEMB8GA1UdIwQYMBaAFPcKYBVedxVDPyVEluJ7gIpjyMl0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjgzRS81MzczOEZFMjlF MUExMUU5QUVDRTAzNThDNEY5QUUwMi85d3BnRlY1M0ZVTV9KVVNXNG51QWltUEl5 WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl3cGdGVjUzRlVNX0pVU1c0bnVBaW1QSXlYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUY4M0UvNTM3MzhGRTI5RTFBMTFFOUFFQ0UwMzU4QzRGOUFFMDIvQTRERjYzQUE5 RTFCMTFFOUFFNjY5MDVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnfzMwDQYJKoZIhvcNAQELBQADggEBAAnPWNQeKMXnFyQ1 pmsa504AmYnF545+pa+ycLkOKQaStmJeYP5VJ+/M8zHpa1CzFl18lpryA/w2LMfa RFSSYXl1n/bIYwwLLFaFBxFJR2STN576x37DRDroj97QtzxtlecVrapEM3SzcnDL I14dHfXv+EfqxaL5Ig036Gv9Khk9YhUncnk62E9O2c3e5pQMhOkQWllFuoxdsP8v WLu+p0m8ad3WBrZSiojHQnw05BPAqPZEZ4NltBlQo9DuFeOZSEZN5cMg+MCIjrJZ 87pyY39k3IrFAlTU+yZmnm4JUhUTXqdDDE1j9hKJMbyHzB1AUpdVC80y3g1kCnXO 13vdw2A= -----END CERTIFICATE-----Generated at Tue Nov 26 19:07:13 2024 by rpki-client on console-fra.rpki-client.org