$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/3F9B6EA88DB811E98ACC9F7EC4F9AE02.roa File: 3F9B6EA88DB811E98ACC9F7EC4F9AE02.roa (raw, json) Hash identifier: xQvYNidYAuGKs+7C3xsd7WHtZVCRM4sec03+1ySAFis= Subject key identifier: 44:5F:45:74:B0:51:1D:9F:F6:A9:B4:93:15:1F:95:C2:56:D6:31:B8 Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Certificate serial: 34D5 Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/3F9B6EA88DB811E98ACC9F7EC4F9AE02.roa Signing time: Mon 22 Jul 2024 14:40:17 +0000 ROA not before: Mon 22 Jul 2024 14:40:17 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 133764 IP address blocks: 203.155.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13525 (0x34d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Validity Not Before: Jul 22 14:40:17 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=669e6f51-241a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:01:35:fc:af:e3:1d:ef:51:5c:0d:60:ba:43: 6f:9e:2d:86:71:9b:9a:fe:b6:f1:cb:ac:ba:3b:4e: 25:6e:19:be:84:6a:da:14:97:be:53:ab:6e:a5:7b: 3c:4e:24:2c:6f:76:34:83:e8:05:c8:26:c7:54:9f: d6:34:69:ef:ee:a8:3a:5b:bf:04:44:98:d0:26:9b: d7:ab:c7:74:73:a7:bc:f9:78:de:8d:b3:23:82:92: 0f:3a:3e:1f:71:60:8c:55:c5:28:5b:74:24:5b:f3: ce:d5:68:51:42:e4:79:50:e8:34:a7:5a:55:9a:81: 5a:da:ae:6f:85:07:da:56:84:05:90:33:3b:fa:36: 0f:bf:3e:77:6f:68:94:cb:ff:00:77:27:6d:e8:32: 23:9a:aa:ec:8e:ea:cf:4e:d8:05:cd:81:fd:58:24: 3c:07:33:ab:92:f7:84:31:b9:d8:72:ba:cc:7b:7c: 4c:eb:73:62:58:dc:da:af:26:eb:55:a9:86:30:bb: cc:b9:8c:50:b3:e5:8c:6e:5b:7f:17:f1:58:0d:58: 3f:d8:1d:f7:e5:2f:65:28:29:bd:80:6b:3a:0e:8d: da:66:ac:22:72:13:f1:f2:fb:cc:b2:a7:53:6c:57: 96:c3:15:19:57:bf:b4:c4:2c:de:d6:b0:f5:5d:be: fd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5F:45:74:B0:51:1D:9F:F6:A9:B4:93:15:1F:95:C2:56:D6:31:B8 X509v3 Authority Key Identifier: keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/3F9B6EA88DB811E98ACC9F7EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.155.114.0/24 Signature Algorithm: sha256WithRSAEncryption 94:36:bb:e7:19:f2:b5:9c:92:9f:ae:d3:98:a5:45:0d:90:1b: dc:24:8c:a1:7d:7a:dc:37:ef:b2:47:94:7c:50:94:f0:38:e0: 05:08:73:27:be:90:23:22:b0:cc:bd:d4:e0:19:cc:53:ae:74: d4:0e:24:ab:aa:98:b0:f9:3f:34:80:9d:3e:d8:cc:01:ce:f4: 0d:51:28:ff:92:7b:dc:c3:92:45:ca:0c:9a:57:09:7e:57:ff: 63:8e:09:3d:84:a5:8b:fd:59:46:33:93:32:46:db:5f:84:3e: 3f:49:b2:70:e5:a5:1d:46:3b:ad:e6:0f:80:c6:3a:d9:9c:4a: 59:ee:4a:54:e7:62:11:c7:6f:cb:b6:02:eb:aa:5c:91:64:b4: 83:c0:c6:21:de:af:be:e7:47:70:b6:c3:e6:76:5e:fe:fb:76: 7f:e6:87:e5:2d:a1:d7:a0:0b:e5:12:35:cf:a5:5c:fc:c6:25: c7:37:24:6a:e7:eb:04:3f:aa:b4:14:65:a2:fc:2e:58:04:05: dd:e1:75:9e:71:60:bc:2a:05:04:60:e2:66:e6:58:1c:a0:44: 50:9a:92:94:1b:7b:05:8f:97:d4:d2:3d:e6:75:b1:fd:61:9d: bb:80:31:e7:ba:4c:5f:a3:d5:5e:f6:a4:03:e7:12:3a:eb:88: 83:e4:30:8a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw OTU2QTk4MkEwHhcNMjQwNzIyMTQ0MDE3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjllNmY1MS0yNDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgE1/K/jHe9RXA1gukNvni2GcZua/rbxy6y6O04lbhm+hGraFJe+U6tupXs8 TiQsb3Y0g+gFyCbHVJ/WNGnv7qg6W78ERJjQJpvXq8d0c6e8+XjejbMjgpIPOj4f cWCMVcUoW3QkW/PO1WhRQuR5UOg0p1pVmoFa2q5vhQfaVoQFkDM7+jYPvz53b2iU y/8Adydt6DIjmqrsjurPTtgFzYH9WCQ8BzOrkveEMbnYcrrMe3xM63NiWNzarybr VamGMLvMuYxQs+WMblt/F/FYDVg/2B335S9lKCm9gGs6Do3aZqwichPx8vvMsqdT bFeWwxUZV7+0xCze1rD1Xb79uQIDAQABo4IClTCCApEwHQYDVR0OBBYEFERfRXSw UR2f9qm0kxUflcJW1jG4MB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvM0Y5QjZFQTg4 REI4MTFFOThBQ0M5RjdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLm3IwDQYJKoZIhvcNAQELBQADggEBAJQ2u+cZ8rWckp+u 05ilRQ2QG9wkjKF9etw377JHlHxQlPA44AUIcye+kCMisMy91OAZzFOudNQOJKuq mLD5PzSAnT7YzAHO9A1RKP+Se9zDkkXKDJpXCX5X/2OOCT2EpYv9WUYzkzJG21+E Pj9JsnDlpR1GO63mD4DGOtmcSlnuSlTnYhHHb8u2AuuqXJFktIPAxiHer77nR3C2 w+Z2Xv77dn/mh+UtodegC+USNc+lXPzGJcc3JGrn6wQ/qrQUZaL8LlgEBd3hdZ5x YLwqBQRg4mbmWBygRFCakpQbewWPl9TSPeZ1sf1hnbuAMee6TF+j1V72pAPnEjrr iIPkMIo= -----END CERTIFICATE-----Generated at Sun Nov 24 15:31:15 2024 by rpki-client on console-ams.rpki-client.org