$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/A292E3529E9711EEB6899B1CC4F9AE02.roa File: A292E3529E9711EEB6899B1CC4F9AE02.roa (raw, json) Hash identifier: tLBsV4g2bMzhVFiX/6V4C27n2kArFIEOkUcBuZutWVg= Subject key identifier: CA:3C:B0:2B:6F:B4:20:6D:E9:51:3D:50:B6:70:12:BC:A9:A3:11:76 Certificate issuer: /CN=A91D7C1D/serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43 Certificate serial: 08F5 Authority key identifier: A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/A292E3529E9711EEB6899B1CC4F9AE02.roa Signing time: Sat 08 Jun 2024 22:08:29 +0000 ROA not before: Sat 08 Jun 2024 22:08:29 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 140607 IP address blocks: 103.150.242.0/24 maxlen: 24 103.150.243.0/24 maxlen: 24 2400:d860::/32 maxlen: 32 2400:d860::/43 maxlen: 43 2400:d860:20::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Jun 2024 21:44:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2293 (0x8f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7C1D/serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43 Validity Not Before: Jun 8 22:08:29 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6664d65c-81e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ab:3d:c2:17:c9:04:ba:10:43:66:49:36:ab: 20:ce:98:5a:4e:35:95:eb:3f:28:77:3a:88:37:e3: b0:c8:e8:cb:59:12:de:9d:7c:66:8f:04:9f:f9:0e: 96:b7:c9:a5:a6:96:66:16:af:8b:0f:7c:b7:79:fc: d8:56:58:12:09:2b:24:9f:f1:c0:b1:51:17:b7:93: 63:b1:16:34:8f:d9:eb:2e:df:20:80:46:09:89:45: fb:b2:80:12:93:81:0b:f6:1d:ef:8b:b8:57:88:d9: 5d:a2:fe:e6:8d:28:27:8c:0b:0c:93:5e:94:9a:b9: 39:a4:7a:2f:e4:e0:8d:33:e9:0a:58:08:ec:c7:f3: 7c:e9:b0:0e:fa:84:b8:f3:69:cb:1c:33:bb:ea:48: b8:00:7d:db:94:e6:13:35:1b:b0:65:93:e3:09:03: 30:a0:16:4c:c7:e7:17:1e:dd:3c:a9:7b:5f:8d:65: 35:76:1b:da:10:2e:5f:74:1c:6d:5d:ab:7a:5c:51: 48:71:70:26:c9:63:eb:6e:28:27:c7:dc:b9:a8:8f: d4:3b:8a:e5:1d:33:52:83:f7:74:57:30:16:57:59: 71:65:65:94:dc:f9:17:cc:99:66:1a:ff:58:b1:5f: a7:26:ee:5f:01:c9:53:a0:b5:9d:f5:8f:86:87:f4: b8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3C:B0:2B:6F:B4:20:6D:E9:51:3D:50:B6:70:12:BC:A9:A3:11:76 X509v3 Authority Key Identifier: keyid:A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/A292E3529E9711EEB6899B1CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.150.242.0/23 IPv6: 2400:d860::/32 Signature Algorithm: sha256WithRSAEncryption 52:fd:44:ae:81:2c:3a:02:81:3d:26:e7:89:5d:7a:73:12:4e: e7:8c:25:84:f9:b0:9f:8c:f7:73:04:8f:b6:51:f7:47:fe:32: 7e:ba:3a:69:96:3b:5c:cd:fa:72:6c:03:52:60:a0:c9:a8:fb: c5:21:6b:48:fd:3b:c3:16:c1:1e:92:34:06:8d:c5:e7:f9:b7: 8b:bd:7d:32:cf:50:5b:ba:1d:b8:c7:0f:80:91:a6:96:00:ac: bb:59:eb:3a:22:c3:73:f1:23:c8:7c:f8:13:42:cd:30:f4:f4: 9d:05:3a:51:fc:3a:0f:6e:9b:6e:41:aa:7d:35:b3:4d:47:0b: 1a:2c:31:ee:76:57:e5:07:2e:ab:de:21:a0:7c:98:6c:b4:5b: 80:79:a3:29:e6:bc:0b:45:3c:a1:3c:cf:04:8d:91:5f:eb:66: 81:5f:1c:de:0c:a5:c2:2e:29:a9:01:5e:fd:48:39:70:45:ad: 61:74:be:fe:fa:0c:ce:37:8a:8d:8e:b3:2c:d1:e6:42:34:e9: 87:95:64:12:1f:3a:f4:d9:56:64:09:be:1b:5d:86:af:7b:07: bc:cd:c2:18:6d:f1:49:00:2d:b3:85:b8:e4:f6:b3:2b:bf:02: ae:a2:78:62:d1:4b:c0:d2:be:1b:d8:7f:c9:07:f3:73:fc:0e: 49:99:6f:f2 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDdDMUQxMTAvBgNVBAUTKEE4QUVBOUIyOTMwQTYxNEQ1Q0EzMUFCOUY3RTg0Mzc5 MzYxQTJGNDMwHhcNMjQwNjA4MjIwODI5WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjY0ZDY1Yy04MWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzqs9whfJBLoQQ2ZJNqsgzphaTjWV6z8odzqIN+OwyOjLWRLenXxmjwSf+Q6W t8mlppZmFq+LD3y3efzYVlgSCSskn/HAsVEXt5NjsRY0j9nrLt8ggEYJiUX7soAS k4EL9h3vi7hXiNldov7mjSgnjAsMk16Umrk5pHov5OCNM+kKWAjsx/N86bAO+oS4 82nLHDO76ki4AH3blOYTNRuwZZPjCQMwoBZMx+cXHt08qXtfjWU1dhvaEC5fdBxt Xat6XFFIcXAmyWPrbignx9y5qI/UO4rlHTNSg/d0VzAWV1lxZWWU3PkXzJlmGv9Y sV+nJu5fAclToLWd9Y+Gh/S4vwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFMo8sCtv tCBt6VE9ULZwErypoxF2MB8GA1UdIwQYMBaAFKiuqbKTCmFNXKMauffoQ3k2Gi9D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0MxRC9BODA3MEFGMjhB RjAxMUVBQTk1MjgzMDlDNEY5QUUwMi9xSzZwc3BNS1lVMWNveHE1OS1oRGVUWWFM ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FLNnBzcE1LWVUxY294cTU5LWhEZVRZYUwwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDdDMUQvQTgwNzBBRjI4QUYwMTFFQUE5NTI4MzA5QzRGOUFFMDIvQTI5MkUzNTI5 RTk3MTFFRUI2ODk5QjFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnlvIwDQQCAAIwBwMFACQA2GAwDQYJKoZIhvcNAQELBQAD ggEBAFL9RK6BLDoCgT0m54ldenMSTueMJYT5sJ+M93MEj7ZR90f+Mn66OmmWO1zN +nJsA1JgoMmo+8Uha0j9O8MWwR6SNAaNxef5t4u9fTLPUFu6HbjHD4CRppYArLtZ 6zoiw3PxI8h8+BNCzTD09J0FOlH8Og9um25Bqn01s01HCxosMe52V+UHLqveIaB8 mGy0W4B5oynmvAtFPKE8zwSNkV/rZoFfHN4MpcIuKakBXv1IOXBFrWF0vv76DM43 io2OsyzR5kI06YeVZBIfOvTZVmQJvhtdhq97B7zNwhht8UkALbOFuOT2syu/Aq6i eGLRS8DSvhvYf8kH83P8DkmZb/I= -----END CERTIFICATE-----Generated at Fri Jun 14 22:37:18 2024 by rpki-client on console-fra.rpki-client.org