$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/EF0EFF5833F511EDA5C4F37DC4F9AE02.roa File: EF0EFF5833F511EDA5C4F37DC4F9AE02.roa (raw, json) Hash identifier: LAWmMRc8daUtEB7NaiA0m2Tl41sqEulVfrA7do1Thps= Subject key identifier: 71:FD:40:98:18:0A:F6:BD:66:83:2F:BA:5A:24:0E:DC:3A:28:29:09 Certificate issuer: /CN=A91EAEAF/serialNumber=F2084F7A0F3C0A91F825FEFD9F1035F33541584C Certificate serial: 01A4 Authority key identifier: F2:08:4F:7A:0F:3C:0A:91:F8:25:FE:FD:9F:10:35:F3:35:41:58:4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ghPeg88CpH4Jf79nxA18zVBWEw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/EF0EFF5833F511EDA5C4F37DC4F9AE02.roa Signing time: Tue 15 Oct 2024 02:26:18 +0000 ROA not before: Tue 15 Oct 2024 02:26:18 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 150308 IP address blocks: 103.232.142.0/24 maxlen: 24 103.232.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.crl rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ghPeg88CpH4Jf79nxA18zVBWEw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 420 (0x1a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAEAF/serialNumber=F2084F7A0F3C0A91F825FEFD9F1035F33541584C Validity Not Before: Oct 15 02:26:18 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=670dd2ca-6d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ab:14:c2:ad:25:3d:ac:8c:e0:8d:37:ee:42: ca:c8:db:d1:f2:77:29:29:92:7a:c5:2f:50:62:d1: e8:71:1f:28:7f:4f:2b:f5:09:a1:ca:aa:02:5b:4f: 86:e4:40:65:1e:c6:f9:34:27:21:55:6a:af:c7:5f: f4:3e:75:0a:92:b0:c8:39:8e:7e:01:86:92:d1:30: 81:d3:c9:c4:9b:6e:ec:5a:6a:98:34:df:61:9c:8c: 3f:60:b0:8e:2c:ca:31:70:b9:9a:6f:1b:f3:56:0a: a5:41:60:a3:30:9e:1f:a9:c9:39:3f:b5:57:7f:9a: c1:1a:04:e0:f1:e9:3f:78:6d:9a:f0:5f:16:b8:b8: 28:67:55:83:b7:b0:31:46:9c:98:26:60:72:53:4a: 95:84:6d:f5:ac:af:2e:96:30:72:d6:07:45:8a:8e: d4:32:89:7f:2d:1f:0c:4a:45:37:73:9d:a0:55:79: 93:de:ef:1a:9a:11:a4:e4:cd:1b:46:d9:a7:b6:40: ea:df:81:6e:5d:8c:7b:3d:ef:c4:c4:5b:45:88:78: 3e:a8:55:ad:5e:c0:7e:2f:aa:57:ee:cf:2b:0e:90: 7c:6f:8a:80:05:ad:61:b5:2f:c8:3a:ad:7d:51:b5: 9f:a1:4e:d5:e0:63:72:1d:c0:e6:7e:09:5c:e3:04: 58:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:FD:40:98:18:0A:F6:BD:66:83:2F:BA:5A:24:0E:DC:3A:28:29:09 X509v3 Authority Key Identifier: keyid:F2:08:4F:7A:0F:3C:0A:91:F8:25:FE:FD:9F:10:35:F3:35:41:58:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ghPeg88CpH4Jf79nxA18zVBWEw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/EF0EFF5833F511EDA5C4F37DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.232.142.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:42:19:38:cf:0a:b0:9e:12:94:7e:fc:ba:77:30:c3:35:a2: 4c:46:dd:50:25:a6:bb:ef:c0:62:fb:d1:6e:42:0e:b4:16:69: b2:bf:1d:d5:d6:e9:62:1f:56:5a:b2:5c:8f:f3:8c:c3:3d:e0: 10:55:14:7b:68:a3:b1:b7:5a:5b:e7:83:c4:5f:a1:4e:da:ee: b4:e8:dc:d4:0b:c6:e9:65:27:aa:82:98:f2:d7:fb:f7:f6:7b: 05:6e:51:27:17:05:98:03:9f:36:e2:e3:7a:45:66:b6:27:91: 67:07:d4:a2:35:52:21:3f:9d:0e:82:10:39:a7:8f:e6:a7:de: c4:bf:d4:24:66:8a:29:fa:16:57:a8:e1:cf:0b:8b:1c:fd:b2: 5e:20:1f:f6:6d:b5:7c:a0:e0:17:91:3d:82:0c:a6:51:be:f6: 4f:9f:9b:4d:8c:c2:d3:1a:38:42:1a:b0:7f:2a:40:30:f5:0f: 42:63:ca:fe:ea:73:2e:18:bf:23:f0:c0:be:ae:e2:19:52:77: 12:16:c9:92:fe:1e:e4:92:6a:fc:11:35:9f:2e:b3:26:46:29: 32:a3:1d:e4:2e:87:e2:cb:32:87:c4:f7:00:ba:5d:3b:13:04: b1:6e:86:18:c1:5d:45:de:85:4a:07:eb:fa:36:db:73:2c:2c: 93:1f:63:9c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFQUYxMTAvBgNVBAUTKEYyMDg0RjdBMEYzQzBBOTFGODI1RkVGRDlGMTAzNUYz MzU0MTU4NEMwHhcNMjQxMDE1MDIyNjE4WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzBkZDJjYS02ZDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqsUwq0lPayM4I037kLKyNvR8ncpKZJ6xS9QYtHocR8of08r9QmhyqoCW0+G 5EBlHsb5NCchVWqvx1/0PnUKkrDIOY5+AYaS0TCB08nEm27sWmqYNN9hnIw/YLCO LMoxcLmabxvzVgqlQWCjMJ4fqck5P7VXf5rBGgTg8ek/eG2a8F8WuLgoZ1WDt7Ax RpyYJmByU0qVhG31rK8uljBy1gdFio7UMol/LR8MSkU3c52gVXmT3u8amhGk5M0b RtmntkDq34FuXYx7Pe/ExFtFiHg+qFWtXsB+L6pX7s8rDpB8b4qABa1htS/IOq19 UbWfoU7V4GNyHcDmfglc4wRYbQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHH9QJgY Cva9ZoMvulokDtw6KCkJMB8GA1UdIwQYMBaAFPIIT3oPPAqR+CX+/Z8QNfM1QVhM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUVBRi9CRTM1MjFCODMz RjExMUVEQjgzNjEwODZDNEY5QUUwMi84Z2hQZWc4OENwSDRKZjc5bnhBMTh6VkJX RXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhnaFBlZzg4Q3BINEpmNzlueEExOHpWQldFdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUFFQUYvQkUzNTIxQjgzM0YxMTFFREI4MzYxMDg2QzRGOUFFMDIvRUYwRUZGNTgz M0Y1MTFFREE1QzRGMzdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn6I4wDQYJKoZIhvcNAQELBQADggEBAH5CGTjPCrCeEpR+ /Lp3MMM1okxG3VAlprvvwGL70W5CDrQWabK/HdXW6WIfVlqyXI/zjMM94BBVFHto o7G3Wlvng8RfoU7a7rTo3NQLxullJ6qCmPLX+/f2ewVuUScXBZgDnzbi43pFZrYn kWcH1KI1UiE/nQ6CEDmnj+an3sS/1CRmiin6Fleo4c8Lixz9sl4gH/ZttXyg4BeR PYIMplG+9k+fm02MwtMaOEIasH8qQDD1D0Jjyv7qcy4YvyPwwL6u4hlSdxIWyZL+ HuSSavwRNZ8usyZGKTKjHeQuh+LLMofE9wC6XTsTBLFuhhjBXUXehUoH6/o223Ms LJMfY5w= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:57 2024 by rpki-client on console-ams.rpki-client.org