$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/DF502EECD44511E984021644C4F9AE02.roa File: DF502EECD44511E984021644C4F9AE02.roa (raw, json) Hash identifier: 9kdDUw6oW9iI/NZ2MZPl9Rem/p107M/MyYGUBqh5GNI= Subject key identifier: 4C:CE:30:AF:78:89:02:F1:CB:18:48:87:BE:4B:7A:FC:CD:12:97:B2 Certificate issuer: /CN=A91FB924/serialNumber=B2AA3E3A5B29E0F41CDD5A617F7FB6A37A1B9011 Certificate serial: 338B Authority key identifier: B2:AA:3E:3A:5B:29:E0:F4:1C:DD:5A:61:7F:7F:B6:A3:7A:1B:90:11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/DF502EECD44511E984021644C4F9AE02.roa Signing time: Thu 04 Jan 2024 14:50:57 +0000 ROA not before: Thu 04 Jan 2024 14:50:57 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 56055 IP address blocks: 103.17.44.0/22 maxlen: 22 118.179.224.0/19 maxlen: 19 163.47.248.0/22 maxlen: 22 202.22.224.0/20 maxlen: 20 203.80.48.0/21 maxlen: 21 2407:4a00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.crl rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 14:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13195 (0x338b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB924/serialNumber=B2AA3E3A5B29E0F41CDD5A617F7FB6A37A1B9011 Validity Not Before: Jan 4 14:50:57 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=6596c5d1-42d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:79:13:bf:05:01:f2:18:49:b0:4d:94:2f:58: 55:58:f4:5f:d9:c2:33:5f:f2:98:3f:d4:30:01:e9: ca:53:45:31:c8:cd:3e:51:e8:2a:70:3b:41:8e:b0: 6f:7a:43:06:ba:8a:80:d5:59:b9:b4:25:75:11:6d: 87:8c:38:98:ab:31:2f:a0:de:a6:5a:95:e1:91:59: 8f:2f:f3:d0:89:d4:d0:0e:de:d3:f5:6d:43:ad:b5: 97:f9:ed:2b:1c:af:53:f2:d2:1d:32:12:c1:9d:0f: 18:1f:21:34:fc:c6:f1:21:cc:92:c9:3a:82:3e:13: 97:6f:ae:b0:15:a9:8a:97:65:32:48:c0:3a:78:b0: 83:c3:b5:f6:4f:73:23:c1:b6:01:27:fb:f2:76:ea: aa:ab:dd:b0:15:92:b6:0d:cf:84:ee:67:83:9d:b1: a6:1f:8c:3e:4d:fd:e6:ca:9e:d2:ef:82:20:e3:dd: 72:78:c2:be:d9:1e:43:6c:6e:d4:84:4a:6c:de:fd: fe:d5:64:6b:85:d9:1e:8b:eb:bf:7b:de:c0:46:64: 0b:89:c3:59:ee:6c:78:08:f5:c1:c2:df:3e:97:58: 1f:23:c8:1c:bc:db:58:70:4b:c9:63:8b:ad:31:81: ba:b4:24:b2:db:d3:85:a3:4c:68:fb:3c:cf:b6:ee: da:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:CE:30:AF:78:89:02:F1:CB:18:48:87:BE:4B:7A:FC:CD:12:97:B2 X509v3 Authority Key Identifier: keyid:B2:AA:3E:3A:5B:29:E0:F4:1C:DD:5A:61:7F:7F:B6:A3:7A:1B:90:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/DF502EECD44511E984021644C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.17.44.0/22 118.179.224.0/19 163.47.248.0/22 202.22.224.0/20 203.80.48.0/21 IPv6: 2407:4a00::/32 Signature Algorithm: sha256WithRSAEncryption 92:64:f6:11:63:97:ac:a5:8f:15:fc:a5:34:43:5e:4a:5d:53: 1e:cc:cf:1c:66:78:c6:4d:6f:36:2e:33:ec:79:9f:5e:4f:ae: d6:3a:4e:96:8c:9a:8e:f0:af:18:6d:d5:67:c9:1f:a6:c3:01: 8a:9e:9f:44:ab:a5:db:7c:f3:29:7c:4a:46:72:4a:88:b5:94: af:51:68:12:ed:c7:a9:bc:1e:06:58:ee:15:3d:71:d1:ab:a3: 05:4e:d2:65:95:dd:ef:5d:1a:15:cb:ba:29:b8:a2:f8:2b:77: 47:fc:6e:d9:fa:54:80:a2:ae:03:bc:07:87:3f:33:d2:b0:1b: 2d:80:05:d9:23:e8:d0:c7:95:7a:2e:d6:e9:e4:94:92:2d:f3: 89:32:41:77:b8:b4:35:e2:fb:f1:df:fe:a7:bb:99:12:bf:b6: b1:e2:4f:be:eb:c0:12:b8:7f:3c:68:4a:fc:87:a6:8c:08:54: ac:0c:71:26:25:25:ae:23:eb:50:ac:2f:93:65:0a:4c:eb:72: 6f:35:2f:36:2e:99:b4:7f:c7:ca:1e:b0:71:1f:74:52:ed:dd: fa:6e:85:b9:23:d9:57:78:40:8e:14:f4:01:27:0d:da:24:33: c5:a5:04:2a:1a:70:f6:ad:55:72:e8:9e:4f:fc:f3:34:04:53: 46:58:e5:6f -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICM4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI5MjQxMTAvBgNVBAUTKEIyQUEzRTNBNUIyOUUwRjQxQ0RENUE2MTdGN0ZCNkEz N0ExQjkwMTEwHhcNMjQwMTA0MTQ1MDU3WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTk2YzVkMS00MmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1XkTvwUB8hhJsE2UL1hVWPRf2cIzX/KYP9QwAenKU0UxyM0+UegqcDtBjrBv ekMGuoqA1Vm5tCV1EW2HjDiYqzEvoN6mWpXhkVmPL/PQidTQDt7T9W1DrbWX+e0r HK9T8tIdMhLBnQ8YHyE0/MbxIcySyTqCPhOXb66wFamKl2UySMA6eLCDw7X2T3Mj wbYBJ/vyduqqq92wFZK2Dc+E7meDnbGmH4w+Tf3myp7S74Ig491yeMK+2R5DbG7U hEps3v3+1WRrhdkei+u/e97ARmQLicNZ7mx4CPXBwt8+l1gfI8gcvNtYcEvJY4ut MYG6tCSy29OFo0xo+zzPtu7aKwIDAQABo4ICvDCCArgwHQYDVR0OBBYEFEzOMK94 iQLxyxhIh75LevzNEpeyMB8GA1UdIwQYMBaAFLKqPjpbKeD0HN1aYX9/tqN6G5AR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjkyNC9GRUQyM0Q4MjFE OEIxMUUyODZBMkU1RTYwOEIwMkNEMi9zcW8tT2xzcDRQUWMzVnBoZjMtMm8zb2Jr QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Nxby1PbHNwNFBRYzNWcGhmMy0ybzNvYmtCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkI5MjQvRkVEMjNEODIxRDhCMTFFMjg2QTJFNUU2MDhCMDJDRDIvREY1MDJFRUNE NDQ1MTFFOTg0MDIxNjQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E NzA1MCQEAgABMB4DBAJnESwDBAV2s+ADBAKjL/gDBATKFuADBAPLUDAwDQQCAAIw BwMFACQHSgAwDQYJKoZIhvcNAQELBQADggEBAJJk9hFjl6yljxX8pTRDXkpdUx7M zxxmeMZNbzYuM+x5n15PrtY6TpaMmo7wrxht1WfJH6bDAYqen0Srpdt88yl8SkZy Soi1lK9RaBLtx6m8HgZY7hU9cdGrowVO0mWV3e9dGhXLuim4ovgrd0f8btn6VICi rgO8B4c/M9KwGy2ABdkj6NDHlXou1unklJIt84kyQXe4tDXi+/Hf/qe7mRK/trHi T77rwBK4fzxoSvyHpowIVKwMcSYlJa4j61CsL5NlCkzrcm81LzYumbR/x8oesHEf dFLt3fpuhbkj2Vd4QI4U9AEnDdokM8WlBCoacPatVXLonk/88zQEU0ZY5W8= -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:54 2024 by rpki-client on console-fra.rpki-client.org