$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/F3484DBA34CE11EEBBA9D046C4F9AE02.roa File: F3484DBA34CE11EEBBA9D046C4F9AE02.roa (raw, json) Hash identifier: KN097sj8tp2qdOXl0WodsTPOwpV2GR7rS/3ve5t47xI= Subject key identifier: DF:EF:59:85:7B:5A:C7:5B:EE:C6:25:F2:56:B1:5A:F8:B4:53:E6:04 Certificate issuer: /CN=A91DF9B9/serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22 Certificate serial: 92 Authority key identifier: 42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/F3484DBA34CE11EEBBA9D046C4F9AE02.roa Signing time: Tue 07 May 2024 07:09:29 +0000 ROA not before: Tue 07 May 2024 07:09:29 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 141766 IP address blocks: 103.163.156.0/24 maxlen: 24 103.184.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF9B9/serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22 Validity Not Before: May 7 07:09:29 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6639d3a9-14e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:74:cb:4d:ed:a4:9a:41:f4:d0:02:92:34:97: 29:21:56:ca:ae:94:5e:8a:d0:54:9d:ac:1c:3b:a8: 8c:26:54:1e:00:a2:35:1e:56:cc:f2:21:61:dc:9c: df:30:1f:89:ed:f6:b8:db:df:df:0d:33:0a:dd:34: 7a:72:ab:47:d2:65:c4:c7:b6:00:90:72:76:1b:21: 03:f3:21:95:17:14:2a:15:ae:e0:43:4e:6d:aa:63: b7:27:61:2f:fd:96:77:28:bc:02:74:a9:9b:98:fa: 5c:c6:96:12:6b:bd:89:36:07:0b:d3:2b:25:96:bc: 9a:d6:eb:89:fb:92:fe:a7:da:17:12:0c:58:5c:19: ca:90:c3:aa:1f:59:2f:64:4a:e8:90:a7:21:97:81: aa:14:94:5f:00:ff:6e:19:49:dd:87:5d:ea:44:ee: 49:ce:d7:92:d8:60:dd:31:b7:97:54:db:57:63:40: f5:9a:e6:81:9e:b5:53:ab:44:7e:c6:ca:33:64:02: c4:4d:fe:13:0d:9c:d0:74:20:8b:3c:0c:02:e0:fb: d9:27:dc:39:0a:60:68:9f:34:53:f9:41:12:48:7d: bc:28:2b:1a:b7:a3:f4:70:fd:e8:79:99:c3:7a:ba: 2d:ba:8a:fd:01:d9:a2:54:0b:95:14:21:91:a8:5e: df:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EF:59:85:7B:5A:C7:5B:EE:C6:25:F2:56:B1:5A:F8:B4:53:E6:04 X509v3 Authority Key Identifier: keyid:42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/F3484DBA34CE11EEBBA9D046C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.163.156.0/24 103.184.129.0/24 Signature Algorithm: sha256WithRSAEncryption 48:5c:7a:fa:bc:a3:29:13:d8:67:29:6b:52:94:2d:91:9c:94: a8:fd:90:c4:47:a8:a0:da:aa:03:5f:67:df:90:49:aa:b8:0e: 00:ac:75:9e:4c:0e:04:46:88:cc:f9:e5:06:62:17:1e:8f:b5: 2a:b1:d3:fa:cd:b5:bd:09:27:c8:94:55:69:d0:c2:a0:f3:79: cd:3a:58:39:2c:9b:3e:65:84:0f:b6:e5:bc:b2:e4:f4:9e:a2: 04:54:7e:34:03:52:af:7c:3f:6e:60:a2:fd:7b:28:2b:e7:19: 9c:31:09:a3:4d:35:84:8a:d0:84:c6:25:1b:72:57:9b:fc:38: 4b:d5:30:d6:ae:87:23:8c:35:27:67:75:4d:e8:f6:b1:58:83: 06:80:56:aa:f8:0f:f5:17:ca:60:67:ba:6d:46:d3:de:79:b1: 57:c1:d0:dc:f8:68:aa:6d:17:01:2e:c0:6a:9f:eb:d4:04:27: 00:5e:4f:7f:59:64:32:0d:09:7b:7d:62:2f:02:5f:43:1f:b0: b3:fd:dd:4f:64:45:ea:cf:f9:97:e8:e3:e1:f4:fd:10:31:c2: 1e:57:f7:d9:1b:25:84:38:70:28:46:cf:3e:1d:d2:75:cb:79: 20:07:ce:b0:5b:fc:a7:b4:07:34:5a:67:cc:30:60:32:59:f7: e6:1b:7a:af -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5QjkxMTAvBgNVBAUTKDQyQ0U1MEUxQUM3MzNENUExNjZCNTQyQzNDNDkzMDlG MzY1NkJGMjIwHhcNMjQwNTA3MDcwOTI5WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjM5ZDNhOS0xNGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXTLTe2kmkH00AKSNJcpIVbKrpReitBUnawcO6iMJlQeAKI1HlbM8iFh3Jzf MB+J7fa429/fDTMK3TR6cqtH0mXEx7YAkHJ2GyED8yGVFxQqFa7gQ05tqmO3J2Ev /ZZ3KLwCdKmbmPpcxpYSa72JNgcL0ysllrya1uuJ+5L+p9oXEgxYXBnKkMOqH1kv ZErokKchl4GqFJRfAP9uGUndh13qRO5JzteS2GDdMbeXVNtXY0D1muaBnrVTq0R+ xsozZALETf4TDZzQdCCLPAwC4PvZJ9w5CmBonzRT+UESSH28KCsat6P0cP3oeZnD erotuor9AdmiVAuVFCGRqF7fEQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFN/vWYV7 Wsdb7sYl8laxWvi0U+YEMB8GA1UdIwQYMBaAFELOUOGscz1aFmtULDxJMJ82Vr8i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjlCOS85NTFGOThFQTMy RDIxMUVFODY5RkRCNzFDNEY5QUUwMi9RczVRNGF4elBWb1dhMVFzUEVrd256Wld2 eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FzNVE0YXh6UFZvV2ExUXNQRWt3bnpaV3Z5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REY5QjkvOTUxRjk4RUEzMkQyMTFFRTg2OUZEQjcxQzRGOUFFMDIvRjM0ODREQkEz NENFMTFFRUJCQTlEMDQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABno5wDBABnuIEwDQYJKoZIhvcNAQELBQADggEBAEhcevq8 oykT2Gcpa1KULZGclKj9kMRHqKDaqgNfZ9+QSaq4DgCsdZ5MDgRGiMz55QZiFx6P tSqx0/rNtb0JJ8iUVWnQwqDzec06WDksmz5lhA+25byy5PSeogRUfjQDUq98P25g ov17KCvnGZwxCaNNNYSK0ITGJRtyV5v8OEvVMNauhyOMNSdndU3o9rFYgwaAVqr4 D/UXymBnum1G0955sVfB0Nz4aKptFwEuwGqf69QEJwBeT39ZZDINCXt9Yi8CX0Mf sLP93U9kRerP+Zfo4+H0/RAxwh5X99kbJYQ4cChGzz4d0nXLeSAHzrBb/Ke0BzRa Z8wwYDJZ9+Ybeq8= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:25 2024 by rpki-client on console-ams.rpki-client.org