$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/B2FF274A00EC11EDBC60AA4FC4F9AE02.roa File: B2FF274A00EC11EDBC60AA4FC4F9AE02.roa (raw, json) Hash identifier: SB4SEPfrJcU4bAaiYGmkUQemcbi1AfCVHBrodW3eBtk= Subject key identifier: 64:A4:97:08:54:B3:2F:AE:C4:09:04:49:1F:04:5F:5D:C7:81:8F:51 Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Certificate serial: 34D6 Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/B2FF274A00EC11EDBC60AA4FC4F9AE02.roa Signing time: Mon 22 Jul 2024 14:40:18 +0000 ROA not before: Mon 22 Jul 2024 14:40:18 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 134438 IP address blocks: 203.107.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13526 (0x34d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Validity Not Before: Jul 22 14:40:18 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=669e6f52-38f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b3:fc:f2:17:1b:ca:b7:85:24:06:63:ae:1e: ea:73:dd:14:fb:ad:6a:dc:6a:75:13:79:cc:34:3b: 8e:b2:bf:a9:87:ad:94:a6:d0:e2:e1:c3:34:3d:ea: d4:c0:56:b6:d4:f5:8c:a5:4e:be:46:89:92:35:e0: dc:54:cb:74:1a:b4:f8:8e:1f:a8:cf:a8:f6:5f:48: cd:21:51:96:01:48:2b:5f:e9:2a:5b:cb:93:3e:ec: 5b:75:d9:c9:d4:d2:cb:1e:90:c1:8c:6b:a0:98:d8: 84:de:b8:ae:1f:d5:8c:77:c0:88:a6:38:ac:40:37: 7e:e6:ec:9b:52:6c:dd:bf:04:c4:1a:53:37:a6:1a: cd:4b:9e:27:70:f5:18:ca:85:4c:97:4a:ec:68:4f: ca:75:49:e4:c8:c6:5e:f3:be:20:79:44:cf:c9:44: 08:35:9d:e9:b8:85:24:34:67:f9:31:fe:58:7f:b2: 3d:f7:69:ae:3d:4b:08:60:08:48:95:b4:4f:9a:1b: 60:e1:2b:b2:6e:54:ae:82:34:5a:cc:b6:01:a6:62: 0e:02:a7:ff:fc:5b:2b:c0:e3:4a:f4:17:a8:2f:d5: 53:1f:26:b0:f9:68:51:64:52:03:5a:d2:2e:1e:0e: 89:89:71:f1:b7:78:83:b0:a4:3c:94:86:d9:3c:68: d0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A4:97:08:54:B3:2F:AE:C4:09:04:49:1F:04:5F:5D:C7:81:8F:51 X509v3 Authority Key Identifier: keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/B2FF274A00EC11EDBC60AA4FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.107.165.0/24 Signature Algorithm: sha256WithRSAEncryption 67:da:58:a5:40:34:9a:39:f2:3d:7b:a5:3e:3e:fb:1d:59:90: 6d:b4:60:28:68:ff:ad:8b:0a:75:98:1e:b5:36:df:86:a9:75: 85:58:8a:42:04:4b:32:d4:d4:e2:23:14:3e:c1:28:19:6b:26: 62:b7:43:32:d8:91:3c:b6:54:83:ec:02:af:26:dc:3f:ba:d8: 15:dd:55:99:df:8b:a0:aa:57:0d:fc:47:b9:37:7d:bb:df:f9: 8a:99:00:ce:d7:c1:84:d2:74:63:56:4d:ae:ef:a4:56:e4:76: a6:d2:3e:d3:6f:e7:27:60:a0:04:14:a9:ee:6f:52:67:43:74: 5b:8e:63:9c:ea:06:03:cf:11:43:55:17:15:9d:c5:a5:bc:69: 06:dc:19:17:39:6d:1e:c5:b4:be:5e:60:e6:a7:7a:45:0c:69: 52:47:1a:e5:00:ea:3d:b1:b0:55:a6:f9:58:66:17:5d:47:2d: fd:70:47:d6:cb:8e:94:cb:74:d3:b8:01:2c:c5:89:65:8a:11: 1d:e9:22:ac:e7:97:76:49:f4:3e:75:ab:6f:93:7f:14:cf:1f: e6:ff:1c:13:32:35:cd:cb:d0:12:d8:50:65:c3:1c:59:a5:61: ee:1f:28:af:e3:44:38:7c:aa:8e:61:d9:c6:3e:3b:ee:97:49: 1a:15:00:93 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw OTU2QTk4MkEwHhcNMjQwNzIyMTQ0MDE4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjllNmY1Mi0zOGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbP88hcbyreFJAZjrh7qc90U+61q3Gp1E3nMNDuOsr+ph62UptDi4cM0PerU wFa21PWMpU6+RomSNeDcVMt0GrT4jh+oz6j2X0jNIVGWAUgrX+kqW8uTPuxbddnJ 1NLLHpDBjGugmNiE3riuH9WMd8CIpjisQDd+5uybUmzdvwTEGlM3phrNS54ncPUY yoVMl0rsaE/KdUnkyMZe874geUTPyUQINZ3puIUkNGf5Mf5Yf7I992muPUsIYAhI lbRPmhtg4SuyblSugjRazLYBpmIOAqf//FsrwONK9BeoL9VTHyaw+WhRZFIDWtIu Hg6JiXHxt3iDsKQ8lIbZPGjQMQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGSklwhU sy+uxAkESR8EX13HgY9RMB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvQjJGRjI3NEEw MEVDMTFFREJDNjBBQTRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLa6UwDQYJKoZIhvcNAQELBQADggEBAGfaWKVANJo58j17 pT4++x1ZkG20YCho/62LCnWYHrU234apdYVYikIESzLU1OIjFD7BKBlrJmK3QzLY kTy2VIPsAq8m3D+62BXdVZnfi6CqVw38R7k3fbvf+YqZAM7XwYTSdGNWTa7vpFbk dqbSPtNv5ydgoAQUqe5vUmdDdFuOY5zqBgPPEUNVFxWdxaW8aQbcGRc5bR7FtL5e YOanekUMaVJHGuUA6j2xsFWm+VhmF11HLf1wR9bLjpTLdNO4ASzFiWWKER3pIqzn l3ZJ9D51q2+TfxTPH+b/HBMyNc3L0BLYUGXDHFmlYe4fKK/jRDh8qo5h2cY+O+6X SRoVAJM= -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:21 2024 by rpki-client on console-ams.rpki-client.org