$ rpki-client -vvf rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/14C77BFA28C611EFA33ED95FC4F9AE02.roa File: 14C77BFA28C611EFA33ED95FC4F9AE02.roa (raw, json) Hash identifier: kiepz3d3PXC78matqhezJSK/iL+kv++r/FbCbnosOR4= Subject key identifier: 15:F3:1A:55:D8:B3:96:DA:C2:F9:0A:90:EC:75:F9:72:79:AB:64:52 Certificate issuer: /CN=A91383F0/serialNumber=1036C1E0FFE1CFC37D655D89FA65D65FE22E1F7A Certificate serial: 0105 Authority key identifier: 10:36:C1:E0:FF:E1:CF:C3:7D:65:5D:89:FA:65:D6:5F:E2:2E:1F:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/14C77BFA28C611EFA33ED95FC4F9AE02.roa Signing time: Wed 31 Jul 2024 05:36:43 +0000 ROA not before: Wed 31 Jul 2024 05:36:43 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 138362 IP address blocks: 103.221.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.crl rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Dec 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383F0/serialNumber=1036C1E0FFE1CFC37D655D89FA65D65FE22E1F7A Validity Not Before: Jul 31 05:36:43 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66a9cd6a-ca9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:61:49:ce:4e:cd:4c:ea:ea:85:25:6e:ae:05: aa:f4:98:54:07:f1:ec:ef:61:72:04:e1:7c:02:77: 68:df:7c:fb:ba:40:0b:2a:e9:bd:16:c7:17:ce:78: 79:79:0b:32:d9:ad:3e:90:ed:18:2e:4b:e2:27:e7: b1:5b:1d:f1:dc:b0:82:74:4c:bb:18:a0:32:ba:6b: 46:ad:7b:f4:9e:00:e4:3c:d3:cc:d8:2c:54:78:5c: 19:c8:ee:3e:8b:d3:36:0f:ab:4a:c6:f0:68:a0:81: 8a:df:b3:75:4f:ff:f6:f2:8c:42:93:ce:42:43:f7: da:ef:fe:8c:34:19:cf:90:82:16:33:0f:00:2a:e2: 83:86:fa:b7:81:a1:be:b3:8c:de:6e:ac:68:68:94: b6:28:04:d1:b7:28:48:b1:dc:fd:23:9c:e6:6f:ee: ac:d4:ec:ba:e3:6a:21:f3:b7:ea:a6:f4:25:49:e7: 98:d1:aa:c8:d5:18:27:2f:b4:22:c7:5d:f8:b0:c2: f8:f9:c6:ea:c4:67:49:f9:a7:6a:51:4c:e5:98:cf: 9c:4c:45:e7:10:ce:81:0f:53:88:42:c6:be:06:f9: 44:d5:56:dd:47:a1:ba:c3:37:63:b5:79:a0:fd:36: 73:8d:f7:37:a7:47:53:64:f5:3d:21:61:77:39:d7: f4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F3:1A:55:D8:B3:96:DA:C2:F9:0A:90:EC:75:F9:72:79:AB:64:52 X509v3 Authority Key Identifier: keyid:10:36:C1:E0:FF:E1:CF:C3:7D:65:5D:89:FA:65:D6:5F:E2:2E:1F:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/14C77BFA28C611EFA33ED95FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.221.66.0/23 Signature Algorithm: sha256WithRSAEncryption 71:d5:18:1c:26:0f:20:a7:04:15:b4:a3:99:ba:d5:11:fe:7a: 72:fc:31:b2:1a:73:12:33:31:d6:86:26:a4:cc:52:ac:0d:8a: bc:f2:bc:8e:42:bd:46:e2:be:8c:90:29:3e:e9:e2:a7:95:2e: c5:4d:73:7f:c9:6b:cc:b9:c8:d4:01:cb:bd:55:0e:1a:59:74: 60:9b:1d:dd:51:12:08:36:bc:c1:01:03:9a:45:33:fe:1c:d5: bb:1f:ca:d8:8b:98:af:06:a6:44:48:b6:23:c7:e0:08:f6:11: 76:2b:6f:ea:1f:f1:4a:dc:2a:55:00:af:bc:b1:44:23:db:59: f8:b7:3d:a5:ed:71:bb:db:7f:ca:dd:cc:54:94:d3:82:47:e5: 1b:7b:5a:74:19:04:53:4a:1e:9d:f0:f9:d4:3a:4f:1e:c8:e2: 7e:b2:08:9f:e2:26:3b:d7:39:e0:c9:76:67:ff:6c:6a:38:8a: bc:67:45:8e:ef:cd:47:87:8a:85:cd:5c:b9:2c:da:95:e2:8b: f7:29:d1:6a:ab:70:cb:ca:95:71:5e:b2:d9:57:f6:7b:3b:3f: fc:c3:5f:00:a3:70:ef:73:4a:c6:6a:cc:9b:24:1a:98:fc:22: ea:ca:f4:2b:63:f4:38:8e:a4:67:e5:03:a3:06:57:6f:e1:d4: 3f:af:08:e4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzRjAxMTAvBgNVBAUTKDEwMzZDMUUwRkZFMUNGQzM3RDY1NUQ4OUZBNjVENjVG RTIyRTFGN0EwHhcNMjQwNzMxMDUzNjQzWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmE5Y2Q2YS1jYTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmWFJzk7NTOrqhSVurgWq9JhUB/Hs72FyBOF8Ando33z7ukALKum9FscXznh5 eQsy2a0+kO0YLkviJ+exWx3x3LCCdEy7GKAyumtGrXv0ngDkPNPM2CxUeFwZyO4+ i9M2D6tKxvBooIGK37N1T//28oxCk85CQ/fa7/6MNBnPkIIWMw8AKuKDhvq3gaG+ s4zebqxoaJS2KATRtyhIsdz9I5zmb+6s1Oy642oh87fqpvQlSeeY0arI1RgnL7Qi x134sML4+cbqxGdJ+adqUUzlmM+cTEXnEM6BD1OIQsa+BvlE1VbdR6G6wzdjtXmg /TZzjfc3p0dTZPU9IWF3Odf08wIDAQABo4IClTCCApEwHQYDVR0OBBYEFBXzGlXY s5bawvkKkOx1+XJ5q2RSMB8GA1UdIwQYMBaAFBA2weD/4c/DfWVdifpl1l/iLh96 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNGMC9EQ0ZDQTZBMjBB ODMxMUVFOUU2QTkyNTBDNEY5QUUwMi9FRGJCNFBfaHo4TjlaVjJKLW1YV1gtSXVI M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VEYkI0UF9oejhOOVpWMkotbVhXWC1JdUgzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzgzRjAvRENGQ0E2QTIwQTgzMTFFRTlFNkE5MjUwQzRGOUFFMDIvMTRDNzdCRkEy OEM2MTFFRkEzM0VEOTVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn3UIwDQYJKoZIhvcNAQELBQADggEBAHHVGBwmDyCnBBW0 o5m61RH+enL8MbIacxIzMdaGJqTMUqwNirzyvI5CvUbivoyQKT7p4qeVLsVNc3/J a8y5yNQBy71VDhpZdGCbHd1REgg2vMEBA5pFM/4c1bsfytiLmK8GpkRItiPH4Aj2 EXYrb+of8UrcKlUAr7yxRCPbWfi3PaXtcbvbf8rdzFSU04JH5Rt7WnQZBFNKHp3w +dQ6Tx7I4n6yCJ/iJjvXOeDJdmf/bGo4irxnRY7vzUeHioXNXLks2pXii/cp0Wqr cMvKlXFestlX9ns7P/zDXwCjcO9zSsZqzJskGpj8IurK9Ctj9DiOpGflA6MGV2/h 1D+vCOQ= -----END CERTIFICATE-----Generated at Wed Nov 27 04:06:52 2024 by rpki-client on console-ams.rpki-client.org