$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/171130AE15F011EC805A0A2FC4F9AE02.roa File: 171130AE15F011EC805A0A2FC4F9AE02.roa (raw, json) Hash identifier: pVWyhrhr52dDPOhFrnd0oPU2DOTP+1UBjUuKhhhwO0U= Subject key identifier: D1:CD:FF:F7:7E:84:C0:21:12:85:9D:48:99:2D:2E:95:15:44:29:E9 Certificate issuer: /CN=A91F8119/serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62 Certificate serial: 2518 Authority key identifier: 5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/171130AE15F011EC805A0A2FC4F9AE02.roa Signing time: Thu 22 Aug 2024 16:12:43 +0000 ROA not before: Thu 22 Aug 2024 16:12:43 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 56099 IP address blocks: 103.89.236.0/22 maxlen: 24 223.25.0.0/22 maxlen: 24 223.25.4.0/22 maxlen: 24 223.25.8.0/22 maxlen: 24 223.25.12.0/22 maxlen: 24 223.25.16.0/22 maxlen: 24 223.25.20.0/22 maxlen: 24 223.25.24.0/22 maxlen: 24 223.25.28.0/22 maxlen: 24 223.25.32.0/22 maxlen: 24 223.25.36.0/22 maxlen: 24 223.25.40.0/22 maxlen: 24 223.25.44.0/22 maxlen: 24 223.25.48.0/22 maxlen: 24 223.25.52.0/22 maxlen: 24 223.25.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9496 (0x2518) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8119/serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62 Validity Not Before: Aug 22 16:12:43 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66c7637b-9c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:76:e1:d3:bc:ec:23:6b:eb:42:81:5f:75:66: ec:06:62:9d:a9:31:8c:65:af:f4:1b:27:85:c4:e3: 76:41:de:66:2b:65:0b:8d:3d:25:5d:ff:29:f9:45: 87:f3:28:af:cf:91:4e:2f:60:67:93:13:cd:05:13: d1:ec:f4:56:1d:6e:ff:fc:a9:a8:eb:41:4e:ab:a6: ac:7e:05:02:3b:07:4b:48:9a:ce:49:5d:12:bd:c2: 5a:24:91:83:23:f9:f1:bb:12:96:91:67:b0:ed:9d: a6:2e:11:72:67:53:7a:03:d1:8f:f3:a5:7c:f1:2c: 97:6c:e4:66:1f:39:11:aa:78:54:99:aa:01:b7:82: 2b:88:90:ab:a1:eb:46:40:27:cd:41:78:e0:3e:f7: cb:0b:d4:3b:86:c7:15:a1:b0:41:36:a4:98:6d:a8: 71:1c:26:43:dd:c8:3b:05:12:fa:c8:b2:da:4a:1b: 23:b2:af:d4:30:ed:c3:d7:d2:02:b4:82:12:e8:ee: 2e:29:02:59:6a:89:59:a0:f0:03:58:aa:ef:b9:ef: 65:76:e4:12:ed:42:72:3a:bb:3b:f1:6f:cd:a6:a5: aa:79:7a:1b:c1:ca:ed:2d:94:e6:9f:18:65:f7:bd: ea:bd:bc:01:ba:87:c0:5c:02:14:22:a4:fe:b9:c9: 29:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CD:FF:F7:7E:84:C0:21:12:85:9D:48:99:2D:2E:95:15:44:29:E9 X509v3 Authority Key Identifier: keyid:5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/171130AE15F011EC805A0A2FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.89.236.0/22 223.25.0.0-223.25.59.255 Signature Algorithm: sha256WithRSAEncryption 1f:b4:00:7d:03:20:fe:0d:a1:96:bd:bc:81:4a:5c:3f:77:5a: 3d:63:ca:ba:9a:75:b4:72:0f:36:48:b4:0e:39:77:f4:e4:29: 29:14:56:2e:0a:1f:7a:1d:2c:b7:88:5d:01:40:e7:56:b6:8d: c1:f2:b7:6f:87:9f:66:09:07:4e:c7:5c:d5:ed:f2:15:dd:d0: 18:ff:03:b5:a7:f7:66:31:0a:2f:ea:8a:7c:b5:19:fa:d0:2a: 50:9b:ab:2b:2c:7b:f3:00:9b:bb:bd:95:da:a7:07:9c:4d:9d: e3:6c:25:58:6f:25:ca:3d:b3:2d:62:e4:67:b5:3d:61:9e:4b: bd:8a:9f:8f:40:79:38:c7:07:4d:27:12:c2:99:ba:37:cc:c7: 59:a3:7f:10:71:2e:ad:3d:ce:5b:ca:45:a2:fb:aa:6e:3a:cd: 81:8a:22:ba:30:d8:ea:d9:7d:cb:ce:4f:ae:e9:de:c7:ff:27: 7d:ab:46:8b:ac:68:14:09:0c:ea:84:10:3d:ee:7b:6a:02:e4: 66:f9:2a:1d:93:96:30:bb:45:3c:b5:8f:c2:ac:1c:2c:f6:99: c7:54:a2:4b:a9:0e:0d:06:6b:d4:ac:2b:a2:77:eb:1e:56:95: 23:93:57:22:16:ab:27:66:39:17:1d:75:ea:7e:40:af:df:86: 0b:cd:95:4b -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgICJRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxMTkxMTAvBgNVBAUTKDVGMzhGNDE5NTE2MTYyQkQ4ODZFNDBCREE5MjdGNTVE QzZGRjNFNjIwHhcNMjQwODIyMTYxMjQzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmM3NjM3Yi05YzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3bh07zsI2vrQoFfdWbsBmKdqTGMZa/0GyeFxON2Qd5mK2ULjT0lXf8p+UWH 8yivz5FOL2BnkxPNBRPR7PRWHW7//Kmo60FOq6asfgUCOwdLSJrOSV0SvcJaJJGD I/nxuxKWkWew7Z2mLhFyZ1N6A9GP86V88SyXbORmHzkRqnhUmaoBt4IriJCroetG QCfNQXjgPvfLC9Q7hscVobBBNqSYbahxHCZD3cg7BRL6yLLaShsjsq/UMO3D19IC tIIS6O4uKQJZaolZoPADWKrvue9lduQS7UJyOrs78W/NpqWqeXobwcrtLZTmnxhl 973qvbwBuofAXAIUIqT+uckpUwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNHN//d+ hMAhEoWdSJktLpUVRCnpMB8GA1UdIwQYMBaAFF849BlRYWK9iG5Avakn9V3G/z5i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODExOS9BN0VDNTk2QzEz MzMxMUU1QjgzRDBGN0JDNEY5QUUwMi9YemowR1ZGaFlyMklia0M5cVNmMVhjYl9Q bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h6ajBHVkZoWXIySWJrQzlxU2YxWGNiX1BtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjgxMTkvQTdFQzU5NkMxMzMzMTFFNUI4M0QwRjdCQzRGOUFFMDIvMTcxMTMwQUUx NUYwMTFFQzgwNUEwQTJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLAYIKwYBBQUHAQcBAf8E HTAbMBkEAgABMBMDBAJnWewwCwMDAN8ZAwQC3xk4MA0GCSqGSIb3DQEBCwUAA4IB AQAftAB9AyD+DaGWvbyBSlw/d1o9Y8q6mnW0cg82SLQOOXf05CkpFFYuCh96HSy3 iF0BQOdWto3B8rdvh59mCQdOx1zV7fIV3dAY/wO1p/dmMQov6op8tRn60CpQm6sr LHvzAJu7vZXapwecTZ3jbCVYbyXKPbMtYuRntT1hnku9ip+PQHk4xwdNJxLCmbo3 zMdZo38QcS6tPc5bykWi+6puOs2BiiK6MNjq2X3Lzk+u6d7H/yd9q0aLrGgUCQzq hBA97ntqAuRm+Sodk5Ywu0U8tY/CrBws9pnHVKJLqQ4NBmvUrCuid+seVpUjk1ci FqsnZjkXHXXqfkCv34YLzZVL -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:54 2024 by rpki-client on console-fra.rpki-client.org