$ rpki-client -vvf rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/CA08C348098D11EDAB30E934C4F9AE02.roa File: CA08C348098D11EDAB30E934C4F9AE02.roa (raw, json) Hash identifier: aPI8mVL7Dstx7y3IRo2S4CN1FA4wN8FwOnV7yts7LdY= Subject key identifier: BD:8B:B9:23:51:F8:B8:01:38:DB:BC:71:40:9B:EA:55:8A:9B:43:98 Certificate issuer: /CN=A9141586/serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656 Certificate serial: 01F5 Authority key identifier: AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/CA08C348098D11EDAB30E934C4F9AE02.roa Signing time: Sun 25 Aug 2024 03:05:28 +0000 ROA not before: Sun 25 Aug 2024 03:05:28 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 137817 IP address blocks: 103.191.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141586/serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656 Validity Not Before: Aug 25 03:05:28 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66ca9f77-fe8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:17:ea:e5:1a:70:48:bb:ea:b6:b8:07:5f:2b: 8d:d6:91:44:de:38:bf:9e:43:7b:d9:94:67:1a:32: 8a:7f:47:4c:6f:91:dd:95:4e:d4:45:04:17:b4:e2: 4b:30:d6:b8:ab:60:cf:dd:dc:a2:aa:61:6e:d3:00: 01:1b:ad:e4:45:15:d9:54:ad:f0:ca:2a:bf:59:9a: 20:3f:63:09:29:ff:1c:84:6b:05:cb:45:c1:6f:31: 65:99:53:56:73:33:cf:26:db:e3:9d:c1:55:2c:83: 07:af:be:ef:4d:93:84:81:c1:24:70:4c:98:62:80: c0:ee:d7:3f:69:6b:4e:06:cf:45:e7:70:01:9e:b1: 52:a0:24:f5:8c:35:8e:03:d3:7d:29:56:0a:85:fd: 6b:52:ad:5c:68:93:ca:c7:5b:40:48:e7:7e:20:7a: 60:81:92:2a:54:f0:08:25:7c:6e:2d:35:fe:b4:2a: 88:eb:93:44:20:45:73:77:f6:3c:05:0c:4a:d3:27: f9:e2:25:c5:1a:c2:4d:da:be:23:d6:26:51:47:d8: 01:9c:9e:22:ff:87:10:3d:84:0d:36:93:ae:08:6a: 89:8b:61:26:8a:c5:47:9c:e2:3c:29:7b:f6:be:e1: 08:4f:73:75:1d:0d:ee:33:f3:88:2c:a4:88:d7:aa: 0f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:8B:B9:23:51:F8:B8:01:38:DB:BC:71:40:9B:EA:55:8A:9B:43:98 X509v3 Authority Key Identifier: keyid:AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/CA08C348098D11EDAB30E934C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.191.140.0/24 Signature Algorithm: sha256WithRSAEncryption 72:3e:28:3c:26:90:38:63:28:9f:75:d4:14:a7:47:55:d8:06: ac:97:8d:11:bc:3d:4b:ce:74:9c:a5:8b:0c:6c:a9:f0:b7:e0: bc:a8:3a:3f:c3:c6:3a:f3:79:98:a6:02:5e:2a:b6:6c:e5:dc: 5b:57:76:76:dc:c8:89:41:d3:bf:7e:58:b4:f3:41:c5:59:23: ef:7e:19:72:7f:5f:91:6b:a7:5a:51:0c:00:13:86:d3:57:5e: 10:f1:70:da:59:85:aa:a0:3e:41:89:c6:db:45:94:fa:4c:b7: 17:4f:88:00:86:5c:ec:97:c9:80:8a:34:c6:1a:1b:26:85:43: 2b:bc:34:5c:ba:68:e4:bd:d4:5b:26:e8:32:33:4f:11:8d:36: 0d:92:b1:5b:51:f1:49:67:48:92:f4:4b:85:42:03:4b:17:b3: 8d:aa:d4:d5:04:a5:a4:ab:07:6a:4d:e7:b8:49:c0:b6:e4:55: 51:b6:a4:ef:4a:40:4d:69:f5:66:62:b4:8c:a4:88:6d:2c:be: d8:63:5b:1e:08:d0:9b:70:21:46:31:db:17:74:45:6e:1a:90: 7a:f2:77:ba:fa:93:ce:83:b0:03:27:a2:f3:4f:1a:81:99:41: 91:96:dd:88:2b:37:93:a2:fd:9d:ce:05:22:af:27:b3:81:c2: 0f:c2:a5:1a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1ODYxMTAvBgNVBAUTKEFDMjNGNTREMzAxNTBCNDYwMDlDMUEwMjlFNUVFQ0RC NkUwNTU2NTYwHhcNMjQwODI1MDMwNTI4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmNhOWY3Ny1mZThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRfq5RpwSLvqtrgHXyuN1pFE3ji/nkN72ZRnGjKKf0dMb5HdlU7URQQXtOJL MNa4q2DP3dyiqmFu0wABG63kRRXZVK3wyiq/WZogP2MJKf8chGsFy0XBbzFlmVNW czPPJtvjncFVLIMHr77vTZOEgcEkcEyYYoDA7tc/aWtOBs9F53ABnrFSoCT1jDWO A9N9KVYKhf1rUq1caJPKx1tASOd+IHpggZIqVPAIJXxuLTX+tCqI65NEIEVzd/Y8 BQxK0yf54iXFGsJN2r4j1iZRR9gBnJ4i/4cQPYQNNpOuCGqJi2EmisVHnOI8KXv2 vuEIT3N1HQ3uM/OILKSI16oPGwIDAQABo4IClTCCApEwHQYDVR0OBBYEFL2LuSNR +LgBONu8cUCb6lWKm0OYMB8GA1UdIwQYMBaAFKwj9U0wFQtGAJwaAp5e7NtuBVZW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTU4Ni8wRDYxOTE2ODA5 OEIxMUVEQUM4RkNGMkZDNEY5QUUwMi9yQ1AxVFRBVkMwWUFuQm9Dbmw3czIyNEZW bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JDUDFUVEFWQzBZQW5Cb0NubDdzMjI0RlZsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDE1ODYvMEQ2MTkxNjgwOThCMTFFREFDOEZDRjJGQzRGOUFFMDIvQ0EwOEMzNDgw OThEMTFFREFCMzBFOTM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnv4wwDQYJKoZIhvcNAQELBQADggEBAHI+KDwmkDhjKJ91 1BSnR1XYBqyXjRG8PUvOdJyliwxsqfC34LyoOj/DxjrzeZimAl4qtmzl3FtXdnbc yIlB079+WLTzQcVZI+9+GXJ/X5Frp1pRDAAThtNXXhDxcNpZhaqgPkGJxttFlPpM txdPiACGXOyXyYCKNMYaGyaFQyu8NFy6aOS91Fsm6DIzTxGNNg2SsVtR8UlnSJL0 S4VCA0sXs42q1NUEpaSrB2pN57hJwLbkVVG2pO9KQE1p9WZitIykiG0svthjWx4I 0JtwIUYx2xd0RW4akHryd7r6k86DsAMnovNPGoGZQZGW3YgrN5Oi/Z3OBSKvJ7OB wg/CpRo= -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:35 2024 by rpki-client on console-fra.rpki-client.org