$ rpki-client -vvf rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/04421FB4C2A911EBB201FE39C4F9AE02.roa File: 04421FB4C2A911EBB201FE39C4F9AE02.roa (raw, json) Hash identifier: 3WkaZdI0uhQVPS3Sr8DuXeFEO0b/iJ0J/L05bm/dHl0= Subject key identifier: 3D:06:6C:D1:71:DF:75:CD:AB:98:C5:31:A7:4B:61:91:B5:33:A2:E5 Certificate issuer: /CN=A91551D7/serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0 Certificate serial: 0D74 Authority key identifier: 11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/04421FB4C2A911EBB201FE39C4F9AE02.roa Signing time: Thu 04 Jan 2024 18:36:29 +0000 ROA not before: Thu 04 Jan 2024 18:36:29 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 18106 IP address blocks: 43.230.96.0/23 maxlen: 23 43.230.98.0/23 maxlen: 23 103.7.68.0/22 maxlen: 22 103.7.68.0/24 maxlen: 24 103.7.69.0/24 maxlen: 24 103.7.70.0/24 maxlen: 24 103.7.71.0/24 maxlen: 24 163.47.88.0/24 maxlen: 24 163.47.89.0/24 maxlen: 24 223.27.137.0/24 maxlen: 24 223.27.138.0/24 maxlen: 24 223.27.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3444 (0xd74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91551D7/serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0 Validity Not Before: Jan 4 18:36:29 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6596faad-b124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a8:79:6d:e0:4d:d7:a7:2a:69:7b:1c:77:53: 9e:6e:f1:53:e0:05:05:31:13:d8:fb:6a:73:6a:b4: 78:3c:4a:b4:3e:99:87:a0:7f:f6:c3:7a:ed:f0:9f: 5c:23:19:92:b5:ed:51:52:cf:01:12:3e:1b:05:2d: 86:64:da:bf:c4:db:2e:d0:00:5b:31:aa:39:7f:10: 16:28:93:dc:04:02:10:39:cc:7e:f9:9c:97:65:f1: f2:5e:86:19:6a:c7:3a:f1:ab:51:de:d1:51:1e:14: 0d:61:52:79:c2:ab:95:db:63:24:67:44:0e:c7:25: cf:15:5e:53:f3:b4:fb:61:b9:aa:1d:93:a8:5d:9f: a3:3e:b2:0b:87:c7:d3:83:2c:59:66:b1:93:03:49: 34:8c:18:61:5e:36:d0:af:eb:43:83:eb:10:a2:bc: af:4a:d6:4c:27:5e:10:3e:a2:21:0e:2a:08:53:78: 47:8b:03:bf:04:0e:6a:12:e0:7a:f9:77:a5:b4:a7: f3:1f:71:c6:d1:96:bf:39:4d:f3:9a:b9:79:8a:af: d7:6b:e2:d6:d0:45:b3:81:cc:40:cf:22:25:cc:aa: b5:f1:ed:9e:29:25:7b:f1:d5:ed:4f:14:12:00:45: 81:d9:a5:4f:f9:8c:20:8d:63:c0:e8:f3:f6:66:cf: 1f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:06:6C:D1:71:DF:75:CD:AB:98:C5:31:A7:4B:61:91:B5:33:A2:E5 X509v3 Authority Key Identifier: keyid:11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/04421FB4C2A911EBB201FE39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.96.0/22 103.7.68.0/22 163.47.88.0/23 223.27.137.0-223.27.138.255 223.27.140.0/24 Signature Algorithm: sha256WithRSAEncryption 03:c6:c1:b1:b0:74:2d:e3:b5:0e:41:92:93:c1:0a:25:b6:6b: 7d:81:3c:6b:7e:17:12:91:df:a0:71:57:4b:43:e8:cf:96:4d: 2e:b1:21:34:1e:69:c4:31:dd:0e:2f:7e:f5:4e:35:9a:6e:5c: cf:67:5c:7d:21:54:43:58:35:4a:d0:8e:02:5c:2d:92:eb:14: 4e:a8:78:39:58:1d:42:15:fc:f8:fb:12:df:7e:cc:e7:53:69: 85:90:a6:24:04:8c:f5:ef:79:84:4c:ae:a4:32:f4:ad:25:80: d9:1f:2a:d5:0a:cd:f0:71:dd:da:fa:e7:83:f5:42:a1:8c:0a: 53:3c:f4:ac:53:fe:70:e9:f4:0a:ef:91:a2:c6:eb:5d:46:f2: d8:84:99:9a:a2:d5:cf:f0:fe:3d:de:82:b6:d0:f1:03:13:a3: a7:ce:5e:5e:a5:9a:0a:74:54:db:14:55:9b:53:bb:37:19:f3: 1f:90:d3:bf:7d:72:13:ef:b3:6f:d3:48:c8:d3:4a:ce:70:bf: 19:f9:07:98:41:e5:ad:01:1d:24:ea:b5:93:20:ee:c7:9d:7f: c5:e5:2a:1b:d8:5e:c2:a8:b5:d0:45:81:3b:95:36:3f:aa:5c: d3:cf:b6:15:09:27:26:51:cb:1e:85:dc:5c:20:6d:65:7a:f2: e8:9b:27:d1 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICDXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUxRDcxMTAvBgNVBAUTKDExMzYxOEIwRDQxMDY4MkFDMDZBOTAxRDY1QkI5QUM5 NTVFRDg5RTAwHhcNMjQwMTA0MTgzNjI5WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTk2ZmFhZC1iMTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ah5beBN16cqaXscd1OebvFT4AUFMRPY+2pzarR4PEq0PpmHoH/2w3rt8J9c IxmSte1RUs8BEj4bBS2GZNq/xNsu0ABbMao5fxAWKJPcBAIQOcx++ZyXZfHyXoYZ asc68atR3tFRHhQNYVJ5wquV22MkZ0QOxyXPFV5T87T7YbmqHZOoXZ+jPrILh8fT gyxZZrGTA0k0jBhhXjbQr+tDg+sQoryvStZMJ14QPqIhDioIU3hHiwO/BA5qEuB6 +XeltKfzH3HG0Za/OU3zmrl5iq/Xa+LW0EWzgcxAzyIlzKq18e2eKSV78dXtTxQS AEWB2aVP+YwgjWPA6PP2Zs8fUwIDAQABo4ICtTCCArEwHQYDVR0OBBYEFD0GbNFx 33XNq5jFMadLYZG1M6LlMB8GA1UdIwQYMBaAFBE2GLDUEGgqwGqQHWW7mslV7Yng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTFENy82OEYwOTI5MjlF MkYxMUU5QjJFNTI4MEFDNEY5QUUwMi9FVFlZc05RUWFDckFhcEFkWmJ1YXlWWHRp ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VUWVlzTlFRYUNyQWFwQWRaYnVheVZYdGllQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTUxRDcvNjhGMDkyOTI5RTJGMTFFOUIyRTUyODBBQzRGOUFFMDIvMDQ0MjFGQjRD MkE5MTFFQkIyMDFGRTM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E MDAuMCwEAgABMCYDBAIr5mADBAJnB0QDBAGjL1gwDAMEAN8biQMEAN8bigMEAN8b jDANBgkqhkiG9w0BAQsFAAOCAQEAA8bBsbB0LeO1DkGSk8EKJbZrfYE8a34XEpHf oHFXS0Poz5ZNLrEhNB5pxDHdDi9+9U41mm5cz2dcfSFUQ1g1StCOAlwtkusUTqh4 OVgdQhX8+PsS337M51NphZCmJASM9e95hEyupDL0rSWA2R8q1QrN8HHd2vrng/VC oYwKUzz0rFP+cOn0Cu+RosbrXUby2ISZmqLVz/D+Pd6CttDxAxOjp85eXqWaCnRU 2xRVm1O7NxnzH5DTv31yE++zb9NIyNNKznC/GfkHmEHlrQEdJOq1kyDux51/xeUq G9hewqi10EWBO5U2P6pc08+2FQknJlHLHoXcXCBtZXry6Jsn0Q== -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:58 2024 by rpki-client on console-fra.rpki-client.org