$ rpki-client -vvf rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/CA290E34341311EFA3C99F09C4F9AE02.roa File: CA290E34341311EFA3C99F09C4F9AE02.roa (raw, json) Hash identifier: i/g/3tYg+cOFFmeFmf1wzVIm1860HHoYX7kFrZIFYhc= Subject key identifier: CD:04:A7:39:2E:C1:F0:B7:10:03:F7:FE:A1:11:85:6D:51:26:1E:FC Certificate issuer: /CN=A91173B6/serialNumber=545887D7719748B469D053FF316A6A57AB996233 Certificate serial: 0786 Authority key identifier: 54:58:87:D7:71:97:48:B4:69:D0:53:FF:31:6A:6A:57:AB:99:62:33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/CA290E34341311EFA3C99F09C4F9AE02.roa Signing time: Fri 30 Aug 2024 22:31:39 +0000 ROA not before: Fri 30 Aug 2024 22:31:39 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 132113 IP address blocks: 103.70.192.0/22 maxlen: 22 103.76.158.0/23 maxlen: 23 2401:5840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.crl rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1926 (0x786) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91173B6/serialNumber=545887D7719748B469D053FF316A6A57AB996233 Validity Not Before: Aug 30 22:31:39 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d2484b-7bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:a1:ed:b1:1f:67:40:32:89:6a:86:d8:e5:9a: 7e:99:ba:81:c0:4e:ab:b3:e2:e2:58:a0:30:0f:a6: ec:ca:95:90:e9:6d:14:26:45:da:61:c7:77:50:68: 4a:80:19:94:65:a6:ff:5d:fe:d4:9f:37:38:65:f4: 4a:d3:40:3a:ce:04:ed:3f:c8:7a:4c:b7:9a:14:2e: 45:8f:5d:69:94:ec:8a:41:d1:10:4f:50:bf:34:ee: a2:00:41:2b:cc:f7:db:d1:53:70:74:a7:e0:4b:1e: 74:b6:b4:b7:e8:f1:ce:db:cf:6e:c2:c7:35:a3:2f: 08:d1:cc:87:ad:a2:1a:b2:92:e0:f7:d4:3d:8b:12: 00:a9:32:19:3f:46:e8:80:c3:7e:36:d0:49:81:93: eb:19:e8:ae:5c:a6:0a:38:dd:c0:1a:b6:ad:82:4b: 98:ef:c9:00:b0:ad:86:8a:f7:89:01:d4:26:76:3d: aa:b8:87:d1:41:9f:3c:f1:d9:f1:eb:f4:9d:d8:72: 00:62:fb:34:15:6a:d3:52:47:5d:5b:e7:89:e9:7f: 19:86:97:44:73:fe:56:0f:6f:69:42:a1:41:06:8e: bb:b9:59:6f:0b:c6:96:7e:40:76:91:6d:92:2d:18: 65:98:46:23:dc:9b:67:53:f7:e2:d9:81:3f:1f:a1: 3a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:04:A7:39:2E:C1:F0:B7:10:03:F7:FE:A1:11:85:6D:51:26:1E:FC X509v3 Authority Key Identifier: keyid:54:58:87:D7:71:97:48:B4:69:D0:53:FF:31:6A:6A:57:AB:99:62:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/CA290E34341311EFA3C99F09C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.70.192.0/22 103.76.158.0/23 IPv6: 2401:5840::/32 Signature Algorithm: sha256WithRSAEncryption 8c:99:9e:79:f7:58:c4:bf:4b:e7:34:04:9c:67:1f:36:6d:d8: f3:bc:5e:df:05:cc:a9:52:73:92:bf:f7:aa:3b:ce:31:d3:4f: 0d:20:f6:2e:1d:78:bb:fb:c0:16:f5:84:ad:67:6f:8c:80:b3: 51:26:f8:df:5e:db:93:b1:26:9d:4d:47:c2:51:7a:d7:dd:0f: b4:92:6b:ea:e1:41:dc:78:74:71:de:e9:a3:4a:95:f5:c5:b2: a8:0c:49:4f:1b:09:38:54:d2:81:2b:33:69:a8:9b:5c:3b:31: 51:16:4d:4b:77:e6:99:58:b5:08:b4:94:8b:e8:ee:73:26:6c: 7b:3e:a5:ee:ba:60:2c:71:3c:cb:a5:a1:5f:4b:50:f1:56:bc: 43:f3:a2:49:0a:0b:b6:2b:46:4c:6f:15:86:a6:cf:9d:70:7f: 9b:f8:86:3d:40:0d:a2:f6:df:4d:03:05:23:9f:e2:05:8a:2f: e3:f6:24:09:fa:66:70:64:80:92:ba:46:62:44:11:eb:bb:5a: 10:8b:32:74:99:e2:35:4b:df:dc:c1:3e:79:82:44:d8:3d:fe: 3c:22:99:77:43:a0:0a:26:b9:74:f0:53:3f:dc:ae:0b:a8:b3: 73:ee:48:93:42:af:35:a5:cf:54:37:d2:64:ac:28:e9:d8:4c: 4a:3b:39:4f -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICB4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTczQjYxMTAvBgNVBAUTKDU0NTg4N0Q3NzE5NzQ4QjQ2OUQwNTNGRjMxNkE2QTU3 QUI5OTYyMzMwHhcNMjQwODMwMjIzMTM5WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQyNDg0Yi03YmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA96HtsR9nQDKJaobY5Zp+mbqBwE6rs+LiWKAwD6bsypWQ6W0UJkXaYcd3UGhK gBmUZab/Xf7Unzc4ZfRK00A6zgTtP8h6TLeaFC5Fj11plOyKQdEQT1C/NO6iAEEr zPfb0VNwdKfgSx50trS36PHO289uwsc1oy8I0cyHraIaspLg99Q9ixIAqTIZP0bo gMN+NtBJgZPrGeiuXKYKON3AGratgkuY78kAsK2GiveJAdQmdj2quIfRQZ888dnx 6/Sd2HIAYvs0FWrTUkddW+eJ6X8ZhpdEc/5WD29pQqFBBo67uVlvC8aWfkB2kW2S LRhlmEYj3JtnU/fi2YE/H6E6aQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFM0Epzku wfC3EAP3/qERhW1RJh78MB8GA1UdIwQYMBaAFFRYh9dxl0i0adBT/zFqalermWIz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzNCNi8xMEY0ODQ4NkUx OUYxMUVBQkQ0QTIzMTNDNEY5QUUwMi9WRmlIMTNHWFNMUnAwRlBfTVdwcVY2dVpZ ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGaUgxM0dYU0xScDBGUF9NV3BxVjZ1WllqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTczQjYvMTBGNDg0ODZFMTlGMTFFQUJENEEyMzEzQzRGOUFFMDIvQ0EyOTBFMzQz NDEzMTFFRkEzQzk5RjA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnRsADBAFnTJ4wDQQCAAIwBwMFACQBWEAwDQYJKoZIhvcN AQELBQADggEBAIyZnnn3WMS/S+c0BJxnHzZt2PO8Xt8FzKlSc5K/96o7zjHTTw0g 9i4deLv7wBb1hK1nb4yAs1Em+N9e25OxJp1NR8JRetfdD7SSa+rhQdx4dHHe6aNK lfXFsqgMSU8bCThU0oErM2mom1w7MVEWTUt35plYtQi0lIvo7nMmbHs+pe66YCxx PMuloV9LUPFWvEPzokkKC7YrRkxvFYamz51wf5v4hj1ADaL2300DBSOf4gWKL+P2 JAn6ZnBkgJK6RmJEEeu7WhCLMnSZ4jVL39zBPnmCRNg9/jwimXdDoAomuXTwUz/c rguos3PuSJNCrzWlz1Q30mSsKOnYTEo7OU8= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:05 2024 by rpki-client on console-fra.rpki-client.org