$ rpki-client -vvf rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/D4F8B4B407D511EF86AD0733C4F9AE02.roa File: D4F8B4B407D511EF86AD0733C4F9AE02.roa (raw, json) Hash identifier: NccEMCqAY6Q4s87TmJw+IxbzpvybsP6p9O44DoX+2ok= Subject key identifier: A0:DC:6B:E7:A3:FC:6A:D0:69:98:8A:D3:5B:24:8E:7E:57:84:7B:2A Certificate issuer: /CN=A91115D5/serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C Certificate serial: 11BA Authority key identifier: 47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/D4F8B4B407D511EF86AD0733C4F9AE02.roa Signing time: Wed 01 May 2024 16:14:05 +0000 ROA not before: Wed 01 May 2024 16:14:05 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 55714 IP address blocks: 103.86.36.0/24 maxlen: 24 103.86.37.0/24 maxlen: 24 116.204.164.0/24 maxlen: 24 116.204.165.0/24 maxlen: 24 116.204.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4538 (0x11ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91115D5/serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C Validity Not Before: May 1 16:14:05 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=66326a4d-218a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0f:00:ec:c8:8c:d0:14:ca:a9:23:5c:f8:94: e2:c8:0a:4d:6a:7f:f5:98:4b:a8:bc:99:4d:ef:01: e9:27:54:bd:72:b7:6e:e6:1e:0d:44:e9:54:ee:5a: 81:b5:99:9c:4f:f5:33:44:27:bd:b2:16:23:4a:cd: 16:47:b5:42:25:5c:6f:72:4b:be:bb:99:db:8c:82: 26:22:e4:46:e5:24:14:c3:e3:4b:93:9c:13:71:e6: f7:7b:c6:f3:56:26:3c:1c:0c:7d:52:1c:c2:2b:be: 04:a2:31:5d:65:f9:96:c1:e9:d2:2d:07:11:c3:68: 89:b5:1a:ba:a7:31:0c:aa:0d:d6:9c:36:35:4c:46: 71:f3:fe:ed:a1:f0:0b:80:89:9d:c9:e4:58:a4:8a: 24:6a:0b:96:c7:d6:74:be:ef:40:64:e4:d3:d3:46: be:2f:50:c9:90:c4:14:9e:6e:9f:d3:57:50:27:0c: ea:72:63:09:b6:6e:b1:e2:0e:8a:1e:42:14:7c:ef: 5a:f8:26:8e:3e:61:79:9f:c5:31:28:82:ae:bb:4f: 48:62:71:7d:aa:cc:64:9c:33:9f:07:f6:a2:69:fb: 40:7d:9b:39:a3:d1:ec:75:0b:4d:5d:8b:7f:03:f8: a3:cb:5b:b1:d7:b8:94:60:b4:a8:a5:5e:38:50:e6: 97:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DC:6B:E7:A3:FC:6A:D0:69:98:8A:D3:5B:24:8E:7E:57:84:7B:2A X509v3 Authority Key Identifier: keyid:47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/D4F8B4B407D511EF86AD0733C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.86.36.0/23 116.204.164.0-116.204.166.255 Signature Algorithm: sha256WithRSAEncryption 76:31:3c:f6:70:05:be:d8:33:e6:36:bb:f3:aa:5f:21:79:c5: 18:e7:32:c8:ff:75:65:c5:7a:86:73:38:9d:16:ce:57:bc:1b: c1:08:fe:42:74:73:ec:79:af:2c:ab:53:da:5a:f5:e5:fb:7c: c8:25:df:5c:6c:ca:5a:2a:b3:d9:4a:4e:2a:21:bc:d3:6a:63: 20:9f:ef:9f:01:8b:78:aa:83:5f:05:a8:a4:32:a1:d2:83:7f: 29:d1:16:67:29:1e:d1:0d:85:07:83:fa:9f:a6:e1:5a:9b:ef: e0:ae:5f:ee:4a:e9:8b:ed:00:49:44:12:ef:f9:52:40:2a:f3: d9:6a:59:09:4d:93:35:b6:79:63:0b:0b:45:75:4e:52:ff:7d: 3e:18:b2:fa:7d:b0:65:fb:03:ef:29:00:5d:c6:c6:84:7d:ca: 36:3f:66:ba:33:9c:4d:18:14:6a:c7:a7:32:82:e0:1a:a5:05: ac:9e:77:3a:bb:6d:a8:f2:2b:17:f7:af:6c:c1:49:21:36:93: 31:0b:81:d8:65:36:9e:fc:7f:1d:fa:1c:41:60:e8:32:1b:cc: 5a:f8:46:03:b7:e3:5e:f3:87:e7:fc:a9:73:e8:26:f5:7c:75: 56:59:6d:af:36:b2:94:d6:2b:c4:3d:1b:0d:a8:f7:ab:68:d2: 2c:a9:18:52 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICEbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE1RDUxMTAvBgNVBAUTKDQ3NkY1NzJBMzgwMjM2QUYzM0Y2MkQ4MkE1QkEyNjRE MkZCQkFEN0MwHhcNMjQwNTAxMTYxNDA1WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjMyNmE0ZC0yMThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Q8A7MiM0BTKqSNc+JTiyApNan/1mEuovJlN7wHpJ1S9crdu5h4NROlU7lqB tZmcT/UzRCe9shYjSs0WR7VCJVxvcku+u5nbjIImIuRG5SQUw+NLk5wTceb3e8bz ViY8HAx9UhzCK74EojFdZfmWwenSLQcRw2iJtRq6pzEMqg3WnDY1TEZx8/7tofAL gImdyeRYpIokaguWx9Z0vu9AZOTT00a+L1DJkMQUnm6f01dQJwzqcmMJtm6x4g6K HkIUfO9a+CaOPmF5n8UxKIKuu09IYnF9qsxknDOfB/aiaftAfZs5o9HsdQtNXYt/ A/ijy1ux17iUYLSopV44UOaXwQIDAQABo4ICozCCAp8wHQYDVR0OBBYEFKDca+ej /GrQaZiK01skjn5XhHsqMB8GA1UdIwQYMBaAFEdvVyo4AjavM/YtgqW6Jk0vu618 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTVENS80RUJDQUYyNkQw QUYxMUU4QUFFQjA3NTZDNEY5QUUwMi9SMjlYS2pnQ05xOHo5aTJDcGJvbVRTLTdy WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IyOVhLamdDTnE4ejlpMkNwYm9tVFMtN3JYdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTE1RDUvNEVCQ0FGMjZEMEFGMTFFOEFBRUIwNzU2QzRGOUFFMDIvRDRGOEI0QjQw N0Q1MTFFRjg2QUQwNzMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQDBAFnViQwDAMEAnTMpAMEAHTMpjANBgkqhkiG9w0BAQsFAAOC AQEAdjE89nAFvtgz5ja786pfIXnFGOcyyP91ZcV6hnM4nRbOV7wbwQj+QnRz7Hmv LKtT2lr15ft8yCXfXGzKWiqz2UpOKiG802pjIJ/vnwGLeKqDXwWopDKh0oN/KdEW Zyke0Q2FB4P6n6bhWpvv4K5f7krpi+0ASUQS7/lSQCrz2WpZCU2TNbZ5YwsLRXVO Uv99Phiy+n2wZfsD7ykAXcbGhH3KNj9mujOcTRgUasenMoLgGqUFrJ53OrttqPIr F/evbMFJITaTMQuB2GU2nvx/HfocQWDoMhvMWvhGA7fjXvOH5/ypc+gm9Xx1Vllt rzaylNYrxD0bDaj3q2jSLKkYUg== -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:37 2024 by rpki-client on console-fra.rpki-client.org