$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/C908B72A696F11EFA4DA475FC4F9AE02.roa File: C908B72A696F11EFA4DA475FC4F9AE02.roa (raw, json) Hash identifier: Or2YnqS7m5TNVdIQDyqKfDxNCZPXw2uBZdfnmUb/Gcc= Subject key identifier: 10:E7:58:40:53:4D:A3:93:85:A3:87:F5:E9:81:02:FC:D5:1A:C1:5F Certificate issuer: /CN=A91D3307/serialNumber=53C94817EB1365F1DE8C3C2B4402239881C1943D Certificate serial: 041F Authority key identifier: 53:C9:48:17:EB:13:65:F1:DE:8C:3C:2B:44:02:23:98:81:C1:94:3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/C908B72A696F11EFA4DA475FC4F9AE02.roa Signing time: Mon 02 Sep 2024 21:11:07 +0000 ROA not before: Mon 02 Sep 2024 21:11:07 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 132834 IP address blocks: 103.135.84.0/22 maxlen: 24 103.248.188.0/24 maxlen: 24 180.94.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.crl rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1055 (0x41f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3307/serialNumber=53C94817EB1365F1DE8C3C2B4402239881C1943D Validity Not Before: Sep 2 21:11:07 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=66d629eb-8cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fd:00:90:61:02:f9:67:45:30:cf:89:dc:d3: 42:56:55:21:47:74:b7:05:b0:90:c1:8c:ed:86:39: e7:e8:51:d2:d7:d2:0e:64:22:87:23:47:17:89:2e: e6:3f:c0:7a:c4:08:f7:c7:b8:6f:3f:88:87:28:46: 18:f2:dc:ee:f7:7c:c3:c1:b1:8f:83:b6:2c:68:63: ad:c1:e6:7d:d1:6a:7d:13:d8:72:90:4c:5c:68:99: 62:d6:4c:5b:8a:94:5f:33:54:84:e3:18:81:3a:e2: ed:d1:74:2e:f1:a0:f8:cc:fe:d7:da:e6:67:dc:87: 50:e3:2c:09:c5:5e:5c:99:1c:a5:0b:36:3a:27:ff: 94:7a:90:ac:c6:61:85:a3:c8:44:1f:9f:cb:01:ac: d7:b9:cb:ff:69:c3:7e:3b:0e:49:22:9d:50:ea:75: 0b:d5:e8:c0:b6:8e:72:cf:e5:a0:a2:76:2b:8c:10: bf:70:cd:76:c8:74:b3:0c:96:4d:2f:89:e4:05:6c: 35:29:c6:54:0a:3e:7e:e5:c7:3e:53:25:ca:36:08: bc:67:db:45:0f:a9:60:a6:64:d6:2b:7f:47:a9:1b: 08:42:92:cd:27:1c:90:0e:77:d2:03:51:31:c4:b0: fc:4a:cd:dc:43:14:07:e1:60:5a:33:48:47:39:4a: c5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E7:58:40:53:4D:A3:93:85:A3:87:F5:E9:81:02:FC:D5:1A:C1:5F X509v3 Authority Key Identifier: keyid:53:C9:48:17:EB:13:65:F1:DE:8C:3C:2B:44:02:23:98:81:C1:94:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/C908B72A696F11EFA4DA475FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.135.84.0/22 103.248.188.0/24 180.94.238.0/23 Signature Algorithm: sha256WithRSAEncryption 41:8c:4c:d3:bc:eb:6a:d9:a7:5a:4f:2f:96:d1:1c:f1:8c:3e: ac:f2:d4:3a:51:5b:65:1d:db:12:26:fe:67:a7:8b:ff:3e:d5: c2:c7:51:5a:2b:39:a5:19:28:62:89:7d:58:41:97:34:77:87: 3a:2a:89:bb:ca:ce:20:03:a1:52:9d:be:26:c7:1f:07:65:30: 83:0b:b2:10:80:55:36:2c:96:9b:a2:f8:b0:e8:46:e1:05:9e: f5:25:c2:53:b5:b0:1a:3b:37:2d:64:d0:27:56:4e:f8:8d:a0: 22:68:e0:4a:11:ad:68:fa:a3:87:ad:13:d4:05:cb:41:a2:05: 3e:30:a5:be:51:53:a9:85:e0:20:9e:9f:cc:47:ea:6c:7a:96: ad:56:da:47:dd:c9:df:18:76:7c:7d:84:07:c2:fc:09:57:56: 28:85:f7:ac:a2:ee:7a:1e:a6:06:57:e0:ba:d4:84:e5:ee:67: 08:6d:35:90:b5:40:65:fa:7f:b8:0d:4b:b5:1e:a1:7b:b9:d4: 4b:7a:c6:ff:8c:f3:7a:2b:c2:37:c8:c8:62:b8:a0:60:11:40: da:41:61:34:4e:9d:24:e7:20:3c:51:78:69:c3:73:54:88:fd: 6a:c6:34:ca:64:a6:eb:17:eb:0d:48:6b:13:56:a5:a8:5c:f8: 53:f3:56:fc -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMzMDcxMTAvBgNVBAUTKDUzQzk0ODE3RUIxMzY1RjFERThDM0MyQjQ0MDIyMzk4 ODFDMTk0M0QwHhcNMjQwOTAyMjExMTA3WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ2MjllYi04Y2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3v0AkGEC+WdFMM+J3NNCVlUhR3S3BbCQwYzthjnn6FHS19IOZCKHI0cXiS7m P8B6xAj3x7hvP4iHKEYY8tzu93zDwbGPg7YsaGOtweZ90Wp9E9hykExcaJli1kxb ipRfM1SE4xiBOuLt0XQu8aD4zP7X2uZn3IdQ4ywJxV5cmRylCzY6J/+UepCsxmGF o8hEH5/LAazXucv/acN+Ow5JIp1Q6nUL1ejAto5yz+WgonYrjBC/cM12yHSzDJZN L4nkBWw1KcZUCj5+5cc+UyXKNgi8Z9tFD6lgpmTWK39HqRsIQpLNJxyQDnfSA1Ex xLD8Ss3cQxQH4WBaM0hHOUrF/QIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFBDnWEBT TaOThaOH9emBAvzVGsFfMB8GA1UdIwQYMBaAFFPJSBfrE2Xx3ow8K0QCI5iBwZQ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzMwNy8zNDJEODMyODQy Q0MxMUVDOEYxMzMyMERDNEY5QUUwMi9VOGxJRi1zVFpmSGVqRHdyUkFJam1JSEJs RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U4bElGLXNUWmZIZWpEd3JSQUlqbUlIQmxEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDMzMDcvMzQyRDgzMjg0MkNDMTFFQzhGMTMzMjBEQzRGOUFFMDIvQzkwOEI3MkE2 OTZGMTFFRkE0REE0NzVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAJnh1QDBABn+LwDBAG0Xu4wDQYJKoZIhvcNAQELBQADggEB AEGMTNO862rZp1pPL5bRHPGMPqzy1DpRW2Ud2xIm/meni/8+1cLHUVorOaUZKGKJ fVhBlzR3hzoqibvKziADoVKdvibHHwdlMIMLshCAVTYslpui+LDoRuEFnvUlwlO1 sBo7Ny1k0CdWTviNoCJo4EoRrWj6o4etE9QFy0GiBT4wpb5RU6mF4CCen8xH6mx6 lq1W2kfdyd8Ydnx9hAfC/AlXViiF96yi7noepgZX4LrUhOXuZwhtNZC1QGX6f7gN S7UeoXu51Et6xv+M83orwjfIyGK4oGARQNpBYTROnSTnIDxReGnDc1SI/WrGNMpk pusX6w1IaxNWpahc+FPzVvw= -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:38 2024 by rpki-client on console-fra.rpki-client.org