$ rpki-client -vvf rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/F276575AA81411EFACD1214BC4F9AE02.roa File: F276575AA81411EFACD1214BC4F9AE02.roa (raw, json) Hash identifier: 5oPL/pkFeyOrD9A6R9wcavD9s/1LK23lr8cKAUTaF4c= Subject key identifier: 8C:FA:76:00:4A:79:11:67:47:03:E8:3D:E9:0E:E2:41:BC:9F:D6:9A Certificate issuer: /CN=A91432F2/serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF Certificate serial: 011B Authority key identifier: 0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/F276575AA81411EFACD1214BC4F9AE02.roa Signing time: Thu 21 Nov 2024 14:33:26 +0000 ROA not before: Thu 21 Nov 2024 14:33:26 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 151358 IP address blocks: 103.117.116.0/24 maxlen: 24 103.210.226.0/23 maxlen: 24 2401:4a0::/32 maxlen: 32 2401:4a0:1::/48 maxlen: 48 2401:4a0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91432F2/serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF Validity Not Before: Nov 21 14:33:26 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=673f44b6-eca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:07:08:39:b1:e7:26:b2:e2:64:4f:b1:87:c9: 6e:13:c8:7a:5c:75:2e:d3:c8:8b:63:8d:d0:aa:a6: 83:cb:7e:2f:6a:eb:18:55:19:47:c0:2a:c8:b3:4e: 81:48:1f:a8:f7:dd:a7:39:2b:d9:09:37:90:c3:80: e2:90:0a:12:97:dc:fc:62:b4:7a:d0:f5:a6:0a:09: c6:a3:ee:68:bc:51:79:e5:0e:7d:c6:28:d3:a3:d0: 04:47:ff:c0:2c:32:bc:d7:cc:9a:a6:7d:99:fa:57: 2d:33:85:d0:3d:b1:e6:15:20:f0:1c:5e:09:ae:76: 6a:9d:b6:ac:89:bf:2d:d2:f2:ab:23:b4:6a:c2:50: 9f:b6:78:b1:14:34:72:7e:e7:fa:dc:f1:0b:10:16: d8:c1:fc:0c:73:af:5c:39:07:4c:db:99:49:db:3d: 4c:4a:77:9d:e8:fd:ab:d2:34:fe:33:61:b4:c9:7c: de:be:ca:74:cd:f8:18:9b:89:15:80:8e:9a:b5:54: 9f:bb:f0:dc:34:b1:89:4f:b7:a3:6c:1b:29:3f:79: 06:62:95:ee:35:de:2e:b8:96:c6:86:45:83:c7:5f: 5c:fa:4b:1b:17:aa:73:12:0f:ca:c0:a2:06:d4:33: 29:73:27:b4:35:f0:b7:e2:82:a1:21:5e:7d:da:03: 0b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:FA:76:00:4A:79:11:67:47:03:E8:3D:E9:0E:E2:41:BC:9F:D6:9A X509v3 Authority Key Identifier: keyid:0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/F276575AA81411EFACD1214BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.117.116.0/24 103.210.226.0/23 IPv6: 2401:4a0::/32 Signature Algorithm: sha256WithRSAEncryption 1f:21:df:60:c9:a6:ad:02:27:7b:e6:b9:5c:31:61:20:51:28: f7:80:7d:20:fa:6b:44:eb:2a:47:99:d4:bd:61:0e:ed:f3:29: d4:5d:90:75:89:a8:2f:a4:27:2f:b3:e4:c8:09:6d:fa:27:2f: 3a:22:9e:42:62:bf:86:e2:f3:10:3a:a0:31:dc:bf:d8:67:2f: 03:a0:c9:7d:72:bc:9d:aa:ee:0c:dc:fd:a4:b2:d1:a4:7a:ef: bd:48:5d:9b:b2:52:e5:32:c4:49:f5:03:4f:9e:b7:72:74:6c: 69:46:67:2c:65:3c:97:e7:02:f2:12:e7:25:cd:43:a6:07:9f: cd:93:c5:f4:a3:46:93:75:54:f9:0b:00:ca:8f:89:7d:29:7c: 3c:82:cd:c0:0c:67:a3:e0:3a:d0:dc:cb:7f:7c:0e:1c:f1:0b: 8c:25:46:47:e6:b9:1e:fb:ac:dd:48:1c:fa:f0:d3:a0:81:1f: 8e:9d:c1:12:1d:d4:9b:19:ad:11:b9:5d:ec:4c:63:da:dd:9c: c8:b5:7f:85:85:d7:4e:0e:88:cc:20:af:3c:0c:cb:32:7a:2d: 2b:e1:96:df:14:b0:b8:83:9c:8d:95:61:35:ff:ef:e9:dc:7b: 8b:19:2b:7b:76:22:31:72:14:c8:a0:d6:8a:e0:ed:cb:d4:8f: 22:cf:20:1c -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMyRjIxMTAvBgNVBAUTKDBCNjFBMDc0Rjg0MkE0NzE4QkFCMUQ4NDUyQTZDQjY4 MkU2RkVEREYwHhcNMjQxMTIxMTQzMzI2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzNmNDRiNi1lY2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4AcIObHnJrLiZE+xh8luE8h6XHUu08iLY43QqqaDy34vausYVRlHwCrIs06B SB+o992nOSvZCTeQw4DikAoSl9z8YrR60PWmCgnGo+5ovFF55Q59xijTo9AER//A LDK818yapn2Z+lctM4XQPbHmFSDwHF4JrnZqnbasib8t0vKrI7RqwlCftnixFDRy fuf63PELEBbYwfwMc69cOQdM25lJ2z1MSned6P2r0jT+M2G0yXzevsp0zfgYm4kV gI6atVSfu/DcNLGJT7ejbBspP3kGYpXuNd4uuJbGhkWDx19c+ksbF6pzEg/KwKIG 1DMpcye0NfC34oKhIV592gML/wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFIz6dgBK eRFnRwPoPekO4kG8n9aaMB8GA1UdIwQYMBaAFAthoHT4QqRxi6sdhFKmy2gub+3f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzJGMi80MjFFMDVGMkZF Q0QxMUVEQUY4MDc4NTJDNEY5QUUwMi9DMkdnZFBoQ3BIR0xxeDJFVXFiTGFDNXY3 ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyR2dkUGhDcEhHTHF4MkVVcWJMYUM1djdkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDMyRjIvNDIxRTA1RjJGRUNEMTFFREFGODA3ODUyQzRGOUFFMDIvRjI3NjU3NUFB ODE0MTFFRkFDRDEyMTRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBABndXQDBAFn0uIwDQQCAAIwBwMFACQBBKAwDQYJKoZIhvcN AQELBQADggEBAB8h32DJpq0CJ3vmuVwxYSBRKPeAfSD6a0TrKkeZ1L1hDu3zKdRd kHWJqC+kJy+z5MgJbfonLzoinkJiv4bi8xA6oDHcv9hnLwOgyX1yvJ2q7gzc/aSy 0aR6771IXZuyUuUyxEn1A0+et3J0bGlGZyxlPJfnAvIS5yXNQ6YHn82TxfSjRpN1 VPkLAMqPiX0pfDyCzcAMZ6PgOtDcy398DhzxC4wlRkfmuR77rN1IHPrw06CBH46d wRId1JsZrRG5XexMY9rdnMi1f4WF104OiMwgrzwMyzJ6LSvhlt8UsLiDnI2VYTX/ 7+nce4sZK3t2IjFyFMig1org7cvUjyLPIBw= -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:47 2024 by rpki-client on console-fra.rpki-client.org