$ rpki-client -vvf rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8A7C342604FE11EAB778E81CC4F9AE02.roa File: 8A7C342604FE11EAB778E81CC4F9AE02.roa (raw, json) Hash identifier: ZOGumPt0pB9AbK2uRuPCw40qDj5EBhWflSGcy7nElfQ= Subject key identifier: CE:73:B9:B5:28:92:05:B0:69:6E:BD:36:A7:73:93:24:EA:59:35:4E Certificate issuer: /CN=A91D087E/serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Certificate serial: 0B8B Authority key identifier: F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8A7C342604FE11EAB778E81CC4F9AE02.roa Signing time: Sat 04 May 2024 19:58:06 +0000 ROA not before: Sat 04 May 2024 19:58:06 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 24516 IP address blocks: 43.247.124.0/22 maxlen: 24 43.247.128.0/22 maxlen: 24 103.227.200.0/22 maxlen: 24 103.230.172.0/22 maxlen: 24 103.245.216.0/22 maxlen: 24 125.254.48.0/23 maxlen: 24 203.23.139.0/24 maxlen: 24 2402:fa80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 19:57:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2955 (0xb8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D087E/serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Validity Not Before: May 4 19:58:06 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6636934d-d9eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f7:9f:dc:a1:fc:86:99:54:50:66:66:13:5e: 54:35:a8:75:43:59:42:4a:71:de:52:fe:2b:8c:0b: 4b:bd:42:73:a7:44:05:65:c0:61:75:25:f8:93:75: ad:52:87:8c:cb:cf:30:71:f3:92:ef:37:57:7f:5d: 39:91:4d:b1:00:45:4c:98:42:db:16:4d:5d:d3:c9: 77:26:3d:3c:cc:07:c2:43:03:42:e3:c3:7e:75:06: a2:c7:c4:7b:a4:55:ed:dc:da:7f:8d:6a:d4:ee:71: 98:f2:3a:c0:4a:41:51:91:35:7b:33:e6:77:56:ac: a5:af:d7:5b:65:bb:11:a0:ab:aa:3c:58:55:6a:a6: 1e:f6:45:f5:b8:a0:24:7f:f7:77:87:6e:89:0d:88: 96:c7:6b:8f:ab:a6:20:5e:65:35:84:e7:9b:22:5a: f6:bf:12:50:ea:f1:05:89:31:6e:b2:61:f2:1f:83: 16:17:95:f3:d0:53:cf:7f:86:97:9e:16:38:54:34: fc:16:39:b8:c6:b9:eb:30:88:37:00:88:9a:2b:08: 06:be:80:4a:25:7a:af:14:51:76:0f:c1:6b:c6:72: 51:18:a3:81:b9:f6:8c:ee:4a:5e:90:ed:95:d2:44: a0:e4:84:00:c2:b3:03:92:ee:19:b0:d1:ac:e5:62: f5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:73:B9:B5:28:92:05:B0:69:6E:BD:36:A7:73:93:24:EA:59:35:4E X509v3 Authority Key Identifier: keyid:F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8A7C342604FE11EAB778E81CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.247.124.0-43.247.131.255 103.227.200.0/22 103.230.172.0/22 103.245.216.0/22 125.254.48.0/23 203.23.139.0/24 IPv6: 2402:fa80::/32 Signature Algorithm: sha256WithRSAEncryption 41:dd:56:53:ec:c8:c5:46:92:2f:82:06:ad:08:db:61:59:dc: 51:16:e2:49:91:09:f3:3c:7b:b3:f8:5d:ed:eb:cd:9b:7b:d4: 66:ed:aa:4e:e2:ef:1c:8a:d5:94:54:48:9a:bb:93:6b:56:32: 46:ad:68:78:f0:21:91:31:6a:c7:27:cf:a0:65:77:4e:59:7d: da:5b:c9:b8:06:5e:b0:6f:2a:1b:63:f4:7d:cc:da:54:af:aa: 51:25:4b:cd:8a:85:b7:8b:53:1a:7e:38:bb:fe:6e:d4:e8:f9: c3:78:5e:bf:24:dd:6c:fe:67:f1:ee:51:45:f4:d2:a9:2f:3a: 38:56:57:99:3d:11:f8:5a:b2:88:4e:ed:6e:34:0d:98:3b:8c: f9:ba:e3:ce:10:f4:2f:cd:06:28:ec:22:41:cd:97:ea:64:fb: ed:97:e8:36:30:c8:30:d9:a9:f1:fd:ef:04:c8:80:b7:a7:9f: 9a:24:f7:ad:48:02:63:4e:31:6f:3b:39:8e:73:e0:4b:fa:a9: 45:3b:c1:53:7b:f9:33:a9:6e:96:b4:11:cd:8a:02:71:49:2c: 77:50:f0:2b:f7:33:fb:00:1c:2c:a6:ef:7d:82:24:43:9c:5b: 25:bc:e0:95:2c:4e:47:11:ad:57:9a:62:e8:3a:6a:30:04:28: 0e:c5:37:38 -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgICC4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA4N0UxMTAvBgNVBAUTKEYwN0ZCMTNFRjkxRTIyMTFCMEZFQkM4NTVBRERBRjMw MUIwNjcxQTQwHhcNMjQwNTA0MTk1ODA2WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjM2OTM0ZC1kOWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvef3KH8hplUUGZmE15UNah1Q1lCSnHeUv4rjAtLvUJzp0QFZcBhdSX4k3Wt UoeMy88wcfOS7zdXf105kU2xAEVMmELbFk1d08l3Jj08zAfCQwNC48N+dQaix8R7 pFXt3Np/jWrU7nGY8jrASkFRkTV7M+Z3Vqylr9dbZbsRoKuqPFhVaqYe9kX1uKAk f/d3h26JDYiWx2uPq6YgXmU1hOebIlr2vxJQ6vEFiTFusmHyH4MWF5Xz0FPPf4aX nhY4VDT8Fjm4xrnrMIg3AIiaKwgGvoBKJXqvFFF2D8FrxnJRGKOBufaM7kpekO2V 0kSg5IQAwrMDku4ZsNGs5WL1nQIDAQABo4ICyjCCAsYwHQYDVR0OBBYEFM5zubUo kgWwaW69NqdzkyTqWTVOMB8GA1UdIwQYMBaAFPB/sT75HiIRsP68hVrdrzAbBnGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDg3RS9CMDE5RjFDQTA0 RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUloR3dfcnlGV3Qydk1Cc0dj YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhILXhQdmtlSWhHd19yeUZXdDJ2TUJzR2NhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDA4N0UvQjAxOUYxQ0EwNEZDMTFFQThDQUVENDE1QzRGOUFFMDIvOEE3QzM0MjYw NEZFMTFFQUI3NzhFODFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVAYIKwYBBQUHAQcBAf8E RTBDMDIEAgABMCwwDAMEAiv3fAMEAiv3gAMEAmfjyAMEAmfmrAMEAmf12AMEAX3+ MAMEAMsXizANBAIAAjAHAwUAJAL6gDANBgkqhkiG9w0BAQsFAAOCAQEAQd1WU+zI xUaSL4IGrQjbYVncURbiSZEJ8zx7s/hd7evNm3vUZu2qTuLvHIrVlFRImruTa1Yy Rq1oePAhkTFqxyfPoGV3Tll92lvJuAZesG8qG2P0fczaVK+qUSVLzYqFt4tTGn44 u/5u1Oj5w3hevyTdbP5n8e5RRfTSqS86OFZXmT0R+FqyiE7tbjQNmDuM+brjzhD0 L80GKOwiQc2X6mT77ZfoNjDIMNmp8f3vBMiAt6efmiT3rUgCY04xbzs5jnPgS/qp RTvBU3v5M6lulrQRzYoCcUksd1DwK/cz+wAcLKbvfYIkQ5xbJbzglSxORxGtV5pi 6DpqMAQoDsU3OA== -----END CERTIFICATE-----Generated at Fri May 31 22:13:11 2024 by rpki-client on console-fra.rpki-client.org