$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/14E68648B42D11E9A44FF25BC4F9AE02.roa File: 14E68648B42D11E9A44FF25BC4F9AE02.roa (raw, json) Hash identifier: +BalFw2CiL7uapLNj20tx3YBjmyA4tVc26LM7UMELNs= Subject key identifier: 55:F1:19:39:43:5B:D3:11:BA:D2:FB:1F:56:B3:EE:DA:C2:60:34:AE Certificate issuer: /CN=A91991D9/serialNumber=14838DD8D4E1FE0317142667176E16E0A5B68651 Certificate serial: 0D44 Authority key identifier: 14:83:8D:D8:D4:E1:FE:03:17:14:26:67:17:6E:16:E0:A5:B6:86:51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/14E68648B42D11E9A44FF25BC4F9AE02.roa Signing time: Thu 18 Jul 2024 18:35:59 +0000 ROA not before: Thu 18 Jul 2024 18:35:59 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 139255 IP address blocks: 103.140.112.0/24 maxlen: 24 103.140.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.crl rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3396 (0xd44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D9/serialNumber=14838DD8D4E1FE0317142667176E16E0A5B68651 Validity Not Before: Jul 18 18:35:59 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6699608e-82c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9f:e2:57:73:70:72:23:10:8c:43:94:e1:bb: 7b:f3:50:19:1b:8e:76:a9:73:59:c1:13:d9:09:67: a5:8c:ea:cb:88:c8:25:4e:28:fe:8b:02:59:80:99: ec:d3:16:eb:36:3c:47:f0:d4:05:68:62:ec:fe:1a: c8:24:a8:b1:8c:d0:60:44:1f:c3:b6:7e:9f:33:c2: 08:c4:af:3c:3a:18:68:33:88:46:b3:71:44:8c:40: a4:51:dd:5d:c9:62:6a:98:ba:dc:e1:88:6c:7a:79: c4:0a:3f:09:7d:80:98:a8:0e:24:e5:fd:e1:f8:4f: 1a:95:db:30:7a:cc:08:4c:5f:fa:1d:2f:4d:29:ac: 8a:5a:25:85:6e:21:a0:40:f0:c5:67:a4:f6:18:19: 0e:30:7e:8d:a9:0b:4e:11:26:65:b1:14:38:9a:bb: 9f:45:02:a9:19:d9:a1:15:44:da:c5:01:18:5d:4e: 16:76:ad:de:73:41:83:7d:c9:32:d2:ef:fe:a2:bd: fc:1f:f7:13:62:95:a2:e7:43:5f:f7:e4:1e:94:78: 23:c9:fc:7d:51:9b:ea:2f:b4:21:7d:09:ee:5a:52: 75:cf:09:0d:0d:36:97:f7:c4:32:6e:18:ec:68:00: 11:ae:0b:d9:01:b6:5f:4b:77:70:57:79:33:fe:16: 1f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F1:19:39:43:5B:D3:11:BA:D2:FB:1F:56:B3:EE:DA:C2:60:34:AE X509v3 Authority Key Identifier: keyid:14:83:8D:D8:D4:E1:FE:03:17:14:26:67:17:6E:16:E0:A5:B6:86:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/14E68648B42D11E9A44FF25BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.112.0/23 Signature Algorithm: sha256WithRSAEncryption a0:8c:8a:a2:d6:bf:93:22:a2:90:b5:a6:35:56:19:a9:fa:6f: 76:f7:d3:35:df:28:66:41:e5:07:a4:f1:e8:7b:fe:bc:40:76: f6:5e:a6:81:3d:c6:5d:8a:36:72:c6:f0:70:2e:6a:2e:fd:dc: f8:08:d9:91:d2:b7:6d:83:e3:20:82:95:c2:ba:45:cd:75:ea: 0d:51:2e:db:ea:12:b5:d3:9b:79:4e:c2:21:e0:6f:9d:29:0d: 6e:e7:14:0d:ed:cf:4b:9d:f3:b2:ed:3d:dc:1f:ba:5c:c4:85: ac:ce:6e:56:a0:72:d8:26:e6:90:50:35:e7:d9:58:3f:11:08: 25:72:5f:33:25:46:97:9c:95:69:60:b7:b3:96:16:97:c0:48: eb:a2:ee:4e:8b:4e:1b:6b:f7:d3:bb:26:c6:81:fb:53:2c:1c: 8d:6f:42:98:a1:f4:50:64:4a:54:eb:24:79:b4:7a:43:ea:3b: 03:71:27:f4:eb:ec:39:2d:75:42:27:ca:33:07:ab:bc:49:3e: 4b:dc:41:d7:9b:1a:c0:ca:e8:6b:a5:72:7c:5d:1c:b0:7f:78: 7f:a8:e7:9f:cd:c6:fe:b6:fb:e9:b2:a2:c7:d9:41:71:a1:e9: f7:73:35:e5:73:14:d2:c2:73:40:71:03:4f:17:f8:b8:76:d7: 65:7e:c2:ba -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDkxMTAvBgNVBAUTKDE0ODM4REQ4RDRFMUZFMDMxNzE0MjY2NzE3NkUxNkUw QTVCNjg2NTEwHhcNMjQwNzE4MTgzNTU5WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njk5NjA4ZS04MmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZ/iV3NwciMQjEOU4bt781AZG452qXNZwRPZCWeljOrLiMglTij+iwJZgJns 0xbrNjxH8NQFaGLs/hrIJKixjNBgRB/Dtn6fM8IIxK88OhhoM4hGs3FEjECkUd1d yWJqmLrc4YhsennECj8JfYCYqA4k5f3h+E8aldsweswITF/6HS9NKayKWiWFbiGg QPDFZ6T2GBkOMH6NqQtOESZlsRQ4mrufRQKpGdmhFUTaxQEYXU4Wdq3ec0GDfcky 0u/+or38H/cTYpWi50Nf9+QelHgjyfx9UZvqL7QhfQnuWlJ1zwkNDTaX98Qybhjs aAARrgvZAbZfS3dwV3kz/hYfvQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFXxGTlD W9MRutL7H1az7trCYDSuMB8GA1UdIwQYMBaAFBSDjdjU4f4DFxQmZxduFuCltoZR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEOS8xQzNERDk2NkI0 MjYxMUU5OERFMDg4NEFDNEY5QUUwMi9GSU9OMk5UaF9nTVhGQ1puRjI0VzRLVzJo bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZJT04yTlRoX2dNWEZDWm5GMjRXNEtXMmhsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTkxRDkvMUMzREQ5NjZCNDI2MTFFOThERTA4ODRBQzRGOUFFMDIvMTRFNjg2NDhC NDJEMTFFOUE0NEZGMjVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnjHAwDQYJKoZIhvcNAQELBQADggEBAKCMiqLWv5MiopC1 pjVWGan6b3b30zXfKGZB5Qek8eh7/rxAdvZepoE9xl2KNnLG8HAuai793PgI2ZHS t22D4yCClcK6Rc116g1RLtvqErXTm3lOwiHgb50pDW7nFA3tz0ud87LtPdwfulzE hazOblagctgm5pBQNefZWD8RCCVyXzMlRpeclWlgt7OWFpfASOui7k6LThtr99O7 JsaB+1MsHI1vQpih9FBkSlTrJHm0ekPqOwNxJ/Tr7DktdUInyjMHq7xJPkvcQdeb GsDK6GulcnxdHLB/eH+o55/Nxv62++myosfZQXGh6fdzNeVzFNLCc0BxA08X+Lh2 12V+wro= -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org