$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/FA870AFA94E011EDB701A974C4F9AE02.roa File: FA870AFA94E011EDB701A974C4F9AE02.roa (raw, json) Hash identifier: GfKJIrjmB/IQqGBbWvEsxSHUiEi5qreV/8BX3Exlv6E= Subject key identifier: 8A:5F:E1:35:DE:01:11:38:FD:F2:E0:99:EB:8C:DA:74:D3:66:80:F7 Certificate issuer: /CN=A91F1C8C/serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256 Certificate serial: 0779 Authority key identifier: 13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/FA870AFA94E011EDB701A974C4F9AE02.roa Signing time: Tue 20 Aug 2024 21:49:56 +0000 ROA not before: Tue 20 Aug 2024 21:49:56 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 140992 IP address blocks: 103.154.160.0/24 maxlen: 24 2001:df4:9080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1913 (0x779) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1C8C/serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256 Validity Not Before: Aug 20 21:49:56 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66c50f84-a978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9d:d2:3e:a2:b7:f9:e8:af:eb:a9:66:85:4a: 3b:5e:95:fd:d2:e8:6e:6d:f9:9f:5c:76:0c:d8:ef: ee:7c:2a:2e:32:a6:63:46:e7:e1:81:be:da:c8:3a: 20:26:a5:2a:2d:db:7f:1c:9f:20:07:1a:5f:c0:21: 55:29:b1:14:62:9f:34:a3:be:51:3c:c5:6d:5f:0a: 8c:4e:0a:c1:27:65:74:62:44:da:ac:df:e3:a9:6c: d0:38:2a:7c:06:4b:a7:9c:bb:0f:39:f0:c4:ca:a7: e8:70:82:3e:57:28:ed:1f:4a:fa:65:8c:75:19:d1: 1d:77:cc:95:8c:d6:fb:0a:28:bf:e0:32:d6:eb:69: 83:6c:f4:0c:69:c0:36:99:53:76:45:20:5c:cb:b1: ee:b4:f5:2f:a8:f9:07:e9:74:0e:02:7c:94:4a:80: ec:f7:e6:07:9b:d5:8f:28:df:71:76:60:2a:79:e0: 65:58:5c:75:1d:7b:af:83:53:03:63:a4:b8:29:88: 2c:b0:57:80:81:34:6f:75:2d:33:8c:ad:d7:c5:f1: 12:3b:67:65:d6:67:33:da:bd:b5:e0:77:f0:5b:6f: 63:00:cb:e3:4b:3c:b0:c0:24:92:bb:13:51:3c:02: 6d:21:5e:29:d5:b4:e1:a4:a9:06:cf:9d:c7:24:9e: d1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:5F:E1:35:DE:01:11:38:FD:F2:E0:99:EB:8C:DA:74:D3:66:80:F7 X509v3 Authority Key Identifier: keyid:13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/FA870AFA94E011EDB701A974C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.154.160.0/24 IPv6: 2001:df4:9080::/48 Signature Algorithm: sha256WithRSAEncryption 13:ef:1e:46:f2:98:40:da:0a:5d:28:1c:47:ea:65:b6:87:66: 23:db:13:d8:c2:c8:d1:e6:58:05:91:34:78:da:1f:b8:7b:0d: b3:ce:99:df:34:04:64:41:07:bb:1f:55:61:00:f8:f5:9a:36: 77:fc:61:14:5e:92:fb:63:dc:94:53:ae:93:3d:92:59:d5:fe: ec:cf:eb:f0:79:c6:cc:59:36:a0:15:0d:11:06:01:ac:6d:b0: a6:a6:6b:e4:b5:26:32:37:1d:df:dd:be:3a:70:40:52:16:8c: f7:1d:08:5f:f7:4b:de:26:44:df:97:5c:c3:c3:0b:1d:14:d2: 9d:d4:11:05:bc:0e:bf:5b:6c:92:b4:19:69:b2:08:01:18:db: 9f:41:33:49:50:e0:37:cb:06:66:0f:65:a4:92:56:be:e6:bb: e0:47:3f:b9:58:d4:85:a7:34:45:29:fb:ff:22:03:c8:57:c8: 11:0e:a6:87:d5:6c:62:eb:88:24:a7:5d:a2:08:b2:35:3c:8e: 56:db:4d:45:1c:a1:1f:a2:06:01:8a:98:57:87:d4:41:d2:5f: c1:85:6b:0b:12:49:2c:ec:4c:31:7a:0c:6c:a4:34:5d:ce:ca: 8d:82:6f:41:1e:aa:53:c5:78:94:c0:93:db:ce:57:66:bc:4b: 08:40:f7:3c -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICB3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFDOEMxMTAvBgNVBAUTKDEzQkRBNjRDNkYxQjVBMkMzMzM5NDczNjM1NEU5RThF NkJDQUUyNTYwHhcNMjQwODIwMjE0OTU2WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmM1MGY4NC1hOTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm53SPqK3+eiv66lmhUo7XpX90uhubfmfXHYM2O/ufCouMqZjRufhgb7ayDog JqUqLdt/HJ8gBxpfwCFVKbEUYp80o75RPMVtXwqMTgrBJ2V0YkTarN/jqWzQOCp8 BkunnLsPOfDEyqfocII+VyjtH0r6ZYx1GdEdd8yVjNb7Cii/4DLW62mDbPQMacA2 mVN2RSBcy7HutPUvqPkH6XQOAnyUSoDs9+YHm9WPKN9xdmAqeeBlWFx1HXuvg1MD Y6S4KYgssFeAgTRvdS0zjK3XxfESO2dl1mcz2r214HfwW29jAMvjSzywwCSSuxNR PAJtIV4p1bThpKkGz53HJJ7RkQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFIpf4TXe ARE4/fLgmeuM2nTTZoD3MB8GA1UdIwQYMBaAFBO9pkxvG1osMzlHNjVOno5ryuJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUM4Qy8yM0U1RDVERURG OTkxMUVBOUY4NUQ5ODJDNEY5QUUwMi9FNzJtVEc4Yldpd3pPVWMyTlU2ZWptdks0 bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U3Mm1URzhiV2l3ek9VYzJOVTZlam12SzRsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjFDOEMvMjNFNUQ1REVERjk5MTFFQTlGODVEOTgyQzRGOUFFMDIvRkE4NzBBRkE5 NEUwMTFFREI3MDFBOTc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnmqAwDwQCAAIwCQMHACABDfSQgDANBgkqhkiG9w0BAQsF AAOCAQEAE+8eRvKYQNoKXSgcR+pltodmI9sT2MLI0eZYBZE0eNofuHsNs86Z3zQE ZEEHux9VYQD49Zo2d/xhFF6S+2PclFOukz2SWdX+7M/r8HnGzFk2oBUNEQYBrG2w pqZr5LUmMjcd392+OnBAUhaM9x0IX/dL3iZE35dcw8MLHRTSndQRBbwOv1tskrQZ abIIARjbn0EzSVDgN8sGZg9lpJJWvua74Ec/uVjUhac0RSn7/yIDyFfIEQ6mh9Vs YuuIJKddogiyNTyOVttNRRyhH6IGAYqYV4fUQdJfwYVrCxJJLOxMMXoMbKQ0Xc7K jYJvQR6qU8V4lMCT285XZrxLCED3PA== -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:14 2024 by rpki-client on console-fra.rpki-client.org