$ rpki-client -vvf rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/FA6E4ECC755B11EAA7D9532EC4F9AE02.roa File: FA6E4ECC755B11EAA7D9532EC4F9AE02.roa (raw, json) Hash identifier: 8FzeKBFXv99yFqvBAS0u3OPnou1QCr+Lbmbr/8Rb56w= Subject key identifier: 5C:26:9D:AA:B0:26:B1:FD:3D:30:36:0C:96:1A:25:71:9D:8B:FA:5B Certificate issuer: /CN=A91154E1/serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491 Certificate serial: 0953 Authority key identifier: 92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/FA6E4ECC755B11EAA7D9532EC4F9AE02.roa Signing time: Sat 08 Jun 2024 22:07:31 +0000 ROA not before: Sat 08 Jun 2024 22:07:31 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 18378 IP address blocks: 103.229.249.0/24 maxlen: 24 202.36.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2387 (0x953) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91154E1/serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491 Validity Not Before: Jun 8 22:07:31 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6664d623-1a75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:37:64:44:7f:d8:6a:ff:68:f0:72:e8:ac:8d: f5:38:8b:43:ef:53:8f:56:70:56:05:79:07:e9:b7: a2:3d:6c:22:42:15:49:f7:f5:1e:22:ea:69:b1:0d: 5a:c7:a0:0b:68:41:5c:cd:84:c6:20:64:83:13:80: 94:68:fd:1a:65:43:2f:96:fb:af:ee:9d:3f:f6:da: cf:04:08:17:61:53:41:85:99:10:73:cd:21:57:4a: 99:9c:69:5b:32:0b:7d:f0:9e:39:1f:d2:89:f8:65: 89:71:69:0b:f9:ca:69:7b:b1:5a:2d:44:ad:cf:c4: f8:94:dc:9e:40:d2:7a:9b:19:34:6c:08:33:30:80: cc:4c:06:1a:25:78:6c:90:3c:ab:6f:d9:00:bd:4d: 75:11:ec:ca:b1:f0:3c:b0:f8:7b:57:21:ff:63:e9: 98:c1:3f:a1:92:fa:db:26:78:78:cc:00:7f:f9:58: a3:35:b6:31:c6:ae:77:d3:f0:ce:d4:04:9d:09:94: 38:f3:ac:93:dc:db:73:71:4b:ec:ee:5c:ac:ac:ae: 53:ed:ae:dc:0c:aa:7e:82:04:fb:ad:32:d5:52:b4: 05:34:c8:f5:8d:f5:07:99:77:48:42:12:49:00:05: a6:8a:cc:7c:e4:ea:b2:35:45:f6:5d:7e:d6:aa:cd: c8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:26:9D:AA:B0:26:B1:FD:3D:30:36:0C:96:1A:25:71:9D:8B:FA:5B X509v3 Authority Key Identifier: keyid:92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/FA6E4ECC755B11EAA7D9532EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.229.249.0/24 202.36.29.0/24 Signature Algorithm: sha256WithRSAEncryption 33:70:c3:fc:55:f1:04:30:16:ac:70:37:30:e2:3e:bf:ae:dc: 16:48:44:9f:ef:d6:6b:4d:b8:1d:21:1a:f3:ab:57:89:a6:d8: 3e:ac:67:8e:74:5b:5a:eb:bf:69:0f:bb:e8:f7:d4:74:17:3f: 6a:88:24:53:44:a6:f0:7b:64:aa:df:10:35:47:3e:d7:d1:26: 98:31:48:0a:87:cf:0a:e7:27:22:55:10:b5:87:6f:c5:99:7f: d7:b4:89:9a:68:72:cb:db:c1:28:0c:8e:4f:da:19:1b:67:77: d5:0d:1e:fd:30:55:54:d6:ee:20:06:06:25:12:10:dc:ec:48: 35:e8:80:f4:ea:cf:68:aa:ed:fb:94:4e:f2:19:d2:30:4d:94: ee:ab:54:71:d7:23:50:ba:cd:05:3f:98:7b:c1:43:7f:07:a8: 8a:39:ad:95:fa:94:7a:33:4c:11:87:31:b7:41:49:cd:bc:0d: 4b:ac:9e:9b:e5:8a:71:aa:2b:a0:2d:40:8f:54:51:9a:82:bc: 2f:9d:9f:2f:cb:3c:64:e8:b3:f7:57:ca:e6:a7:c7:5c:b8:df: 0d:72:c6:a1:b7:4b:eb:ed:f2:e7:c4:1e:f6:29:aa:2c:85:b8: 39:5a:3e:8a:85:8d:59:ce:49:54:d2:98:06:5c:1f:ef:e9:e5: a6:4c:c6:58 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU0RTExMTAvBgNVBAUTKDkyOTVCRkEyNjJFMDU3Q0M5QkM4MjE3NURDQUUzNDdB Qzk2Q0E0OTEwHhcNMjQwNjA4MjIwNzMxWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjY0ZDYyMy0xYTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAojdkRH/Yav9o8HLorI31OItD71OPVnBWBXkH6beiPWwiQhVJ9/UeIuppsQ1a x6ALaEFczYTGIGSDE4CUaP0aZUMvlvuv7p0/9trPBAgXYVNBhZkQc80hV0qZnGlb Mgt98J45H9KJ+GWJcWkL+cppe7FaLUStz8T4lNyeQNJ6mxk0bAgzMIDMTAYaJXhs kDyrb9kAvU11EezKsfA8sPh7VyH/Y+mYwT+hkvrbJnh4zAB/+VijNbYxxq530/DO 1ASdCZQ486yT3NtzcUvs7lysrK5T7a7cDKp+ggT7rTLVUrQFNMj1jfUHmXdIQhJJ AAWmisx85OqyNUX2XX7Wqs3IgwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFwmnaqw JrH9PTA2DJYaJXGdi/pbMB8GA1UdIwQYMBaAFJKVv6Ji4FfMm8ghddyuNHrJbKSR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTRFMS80QTBDQjZGODc1 NDMxMUVBQTc1NzExNjBDNEY5QUUwMi9rcFdfb21MZ1Y4eWJ5Q0YxM0s0MGVzbHNw SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twV19vbUxnVjh5YnlDRjEzSzQwZXNsc3BKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTU0RTEvNEEwQ0I2Rjg3NTQzMTFFQUE3NTcxMTYwQzRGOUFFMDIvRkE2RTRFQ0M3 NTVCMTFFQUE3RDk1MzJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABn5fkDBADKJB0wDQYJKoZIhvcNAQELBQADggEBADNww/xV 8QQwFqxwNzDiPr+u3BZIRJ/v1mtNuB0hGvOrV4mm2D6sZ450W1rrv2kPu+j31HQX P2qIJFNEpvB7ZKrfEDVHPtfRJpgxSAqHzwrnJyJVELWHb8WZf9e0iZpocsvbwSgM jk/aGRtnd9UNHv0wVVTW7iAGBiUSENzsSDXogPTqz2iq7fuUTvIZ0jBNlO6rVHHX I1C6zQU/mHvBQ38HqIo5rZX6lHozTBGHMbdBSc28DUusnpvlinGqK6AtQI9UUZqC vC+dny/LPGTos/dXyuanx1y43w1yxqG3S+vt8ufEHvYpqiyFuDlaPoqFjVnOSVTS mAZcH+/p5aZMxlg= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:21 2024 by rpki-client on console-ams.rpki-client.org