$ rpki-client -vvf rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/46A569387DA911EFAC4E642AC4F9AE02.roa File: 46A569387DA911EFAC4E642AC4F9AE02.roa (raw, json) Hash identifier: f8XNdnN9MpGjh5uhvA20BgKfLLbWC1Eb3g7qFqX+uVY= Subject key identifier: 96:81:F9:3E:40:09:D3:A2:0B:8C:4C:11:F3:A6:5E:78:ED:1E:DA:03 Certificate issuer: /CN=A91799A0/serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8 Certificate serial: 0330 Authority key identifier: 37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/46A569387DA911EFAC4E642AC4F9AE02.roa Signing time: Thu 03 Oct 2024 01:34:41 +0000 ROA not before: Thu 03 Oct 2024 01:34:41 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 133793 IP address blocks: 103.43.20.0/24 maxlen: 24 103.43.21.0/24 maxlen: 24 103.43.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 816 (0x330) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91799A0/serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8 Validity Not Before: Oct 3 01:34:41 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66fdf4b1-5b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:43:b9:61:61:16:c9:ec:dc:4b:47:23:f3:7e: c0:3d:74:01:db:d9:c3:2d:2f:b3:3a:cc:a6:30:8c: d4:ad:c1:6b:96:69:6b:6c:4b:62:9d:f9:76:a3:1b: 91:2d:50:7a:78:20:e0:37:83:2c:ec:e6:e3:cd:5d: bb:26:25:32:26:0d:65:b9:91:ae:ea:ec:99:f3:ab: 19:93:c1:4a:1d:44:0e:34:16:33:55:ba:d5:c3:8c: 27:6e:2e:f9:39:91:46:ba:da:ad:49:bf:bc:07:ce: bc:53:df:de:a6:e2:2f:5f:52:e3:7b:1c:62:2e:cb: bd:3c:e9:ef:a7:f8:78:2b:19:4e:ae:65:02:18:75: 02:6d:2d:1e:2e:d0:e1:63:e1:21:f1:dd:3e:32:70: 84:b4:79:63:0b:db:51:6c:ad:67:09:ab:df:fe:d2: be:d8:1b:c1:bb:aa:7d:3a:8f:58:04:25:e1:c6:57: 1e:51:6d:6e:05:1b:63:16:26:0a:05:db:a2:4c:05: 58:c4:45:dc:dd:5d:0f:93:47:a3:ed:cd:36:e5:17: 3d:f1:b2:3d:86:d1:7b:6e:de:2e:88:a8:17:1e:d7: 25:65:01:2d:2c:3e:e7:d5:d7:f2:eb:aa:30:02:d2: 7d:90:ea:36:6a:bc:1b:00:11:b0:ce:da:cd:be:92: 92:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:81:F9:3E:40:09:D3:A2:0B:8C:4C:11:F3:A6:5E:78:ED:1E:DA:03 X509v3 Authority Key Identifier: keyid:37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/46A569387DA911EFAC4E642AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.43.20.0-103.43.22.255 Signature Algorithm: sha256WithRSAEncryption 38:39:b5:08:98:af:f7:50:38:88:9c:d5:20:71:01:cf:b4:62: 66:bf:b5:e2:fa:a6:19:db:13:63:91:c7:1a:fb:26:21:b1:9b: dd:2d:b6:31:b5:93:f8:da:79:2a:0e:f8:23:8e:ca:40:ef:2d: 84:26:0a:42:86:6f:07:41:d0:00:f1:1e:8c:f3:7f:fc:5d:09: e7:4e:df:92:f6:24:fb:8a:56:b0:9c:f1:3f:ad:e2:30:11:04: 0b:f4:15:b1:17:2a:64:2e:9e:1b:c5:70:51:63:ed:ca:4e:bf: 75:ef:f6:f1:66:57:62:0a:8e:38:35:20:2f:e6:18:19:f6:aa: 6a:da:fa:36:26:25:d4:94:f8:89:a6:18:ca:29:9d:2d:f8:02: ed:6e:f2:8c:b2:c0:0e:72:a8:e4:94:0f:b6:63:04:b2:f5:67: 0b:6e:5e:53:40:9f:c8:ed:6f:27:3f:58:67:87:48:5e:97:a8: 39:8a:03:25:e8:43:ed:22:83:70:aa:a7:8c:9a:dd:bd:31:27: dc:6b:a0:74:91:f5:8d:65:34:d2:fb:fd:d4:36:94:b9:bf:8a: cd:94:fc:b9:9a:72:22:c2:25:96:ca:94:e2:a2:3c:a5:61:e8: d9:17:f0:ba:52:d2:10:7c:f0:85:51:3e:35:08:72:5f:bb:12: 54:4f:60:06 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICAzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk5QTAxMTAvBgNVBAUTKDM3RTAzNTI0QjU4NDdEQkVBRDAwRkUzNzhDNDZBQkQw Q0E3MDQ1RjgwHhcNMjQxMDAzMDEzNDQxWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZkZjRiMS01Yjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEO5YWEWyezcS0cj837APXQB29nDLS+zOsymMIzUrcFrlmlrbEtinfl2oxuR LVB6eCDgN4Ms7ObjzV27JiUyJg1luZGu6uyZ86sZk8FKHUQONBYzVbrVw4wnbi75 OZFGutqtSb+8B868U9/epuIvX1LjexxiLsu9POnvp/h4KxlOrmUCGHUCbS0eLtDh Y+Eh8d0+MnCEtHljC9tRbK1nCavf/tK+2BvBu6p9Oo9YBCXhxlceUW1uBRtjFiYK BduiTAVYxEXc3V0Pk0ej7c025Rc98bI9htF7bt4uiKgXHtclZQEtLD7n1dfy66ow AtJ9kOo2arwbABGwztrNvpKSUwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFJaB+T5A CdOiC4xMEfOmXnjtHtoDMB8GA1UdIwQYMBaAFDfgNSS1hH2+rQD+N4xGq9DKcEX4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTlBMC80MEVEQTExRTlB RTgxMUVDOTc0QjQ5MUNDNEY5QUUwMi9OLUExSkxXRWZiNnRBUDQzakVhcjBNcHdS ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04tQTFKTFdFZmI2dEFQNDNqRWFyME1wd1JmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzk5QTAvNDBFREExMUU5QUU4MTFFQzk3NEI0OTFDQzRGOUFFMDIvNDZBNTY5Mzg3 REE5MTFFRkFDNEU2NDJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAmcrFAMEAGcrFjANBgkqhkiG9w0BAQsFAAOCAQEAODm1 CJiv91A4iJzVIHEBz7RiZr+14vqmGdsTY5HHGvsmIbGb3S22MbWT+Np5Kg74I47K QO8thCYKQoZvB0HQAPEejPN//F0J507fkvYk+4pWsJzxP63iMBEEC/QVsRcqZC6e G8VwUWPtyk6/de/28WZXYgqOODUgL+YYGfaqatr6NiYl1JT4iaYYyimdLfgC7W7y jLLADnKo5JQPtmMEsvVnC25eU0CfyO1vJz9YZ4dIXpeoOYoDJehD7SKDcKqnjJrd vTEn3GugdJH1jWU00vv91DaUub+KzZT8uZpyIsIllsqU4qI8pWHo2RfwulLSEHzw hVE+NQhyX7sSVE9gBg== -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:39 2024 by rpki-client on console-fra.rpki-client.org