$ rpki-client -vvf rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/F39CE41C7C3811EFBF44AF4FC4F9AE02.roa File: F39CE41C7C3811EFBF44AF4FC4F9AE02.roa (raw, json) Hash identifier: qYKHA79o/QNNLBRngvTLprJN4A1dHBhKA8ix5QbqNOU= Subject key identifier: 01:81:67:72:B8:65:D9:D6:23:A4:2B:C3:38:A9:4D:AB:A0:A6:7B:42 Certificate issuer: /CN=A91799A0/serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8 Certificate serial: 0332 Authority key identifier: 37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/F39CE41C7C3811EFBF44AF4FC4F9AE02.roa Signing time: Thu 03 Oct 2024 01:34:43 +0000 ROA not before: Thu 03 Oct 2024 01:34:43 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 273513 IP address blocks: 103.43.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 818 (0x332) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91799A0/serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8 Validity Not Before: Oct 3 01:34:43 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66fdf4b3-2cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:06:99:ea:b1:fd:71:e0:4c:bb:d7:80:3a:d5: 4f:39:49:cb:dc:03:08:eb:58:23:b4:96:83:44:9f: cf:2d:8b:40:62:c4:a0:7d:01:c9:f2:78:1f:16:0d: cf:71:fa:72:20:6c:a5:f5:fe:a8:b7:40:14:01:1b: 7d:91:97:e6:01:43:67:5a:ae:45:36:50:24:09:6d: 2f:71:24:f5:4f:d6:03:d2:4f:1e:88:d0:80:76:f4: 77:7a:f7:bb:9d:43:b9:13:7a:cb:a6:56:b2:5b:41: aa:5f:e4:e0:e0:cf:54:22:2a:b8:12:87:b3:59:87: 97:56:a2:6b:f5:da:fe:98:45:b3:b8:0a:03:dc:9c: 97:a9:ec:f6:ac:12:f5:62:5d:11:1c:cb:f5:b5:c6: 9f:8c:ae:a5:e4:02:db:8a:b9:59:3a:36:71:77:3f: b8:db:c1:2c:ac:fc:6e:2c:7f:82:e1:30:80:d4:98: fe:10:13:14:ea:1a:44:0f:ab:d7:8c:5d:70:c5:24: b2:5b:e9:cd:90:56:75:bc:e1:80:c7:e0:8e:4b:5c: 31:15:9e:9b:af:25:4c:51:85:98:f8:7b:68:22:63: f0:f1:c6:d8:22:52:7f:4e:07:75:32:02:99:76:14: 68:d5:d5:d4:eb:bc:3d:1d:ef:82:dc:30:a0:81:41: 26:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:81:67:72:B8:65:D9:D6:23:A4:2B:C3:38:A9:4D:AB:A0:A6:7B:42 X509v3 Authority Key Identifier: keyid:37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/F39CE41C7C3811EFBF44AF4FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.43.23.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:4e:83:3b:e7:7c:64:5e:83:bd:0c:ca:a9:de:c7:ef:6b:b8: 36:8e:3b:5c:77:1f:c3:00:67:55:34:17:c1:d8:f8:f0:40:34: 8c:af:cb:e5:1d:ec:8a:6c:99:1e:18:f7:3f:c3:2b:ce:2e:71: cf:83:99:a1:25:86:37:87:7f:23:bb:12:10:48:06:b1:06:e4: d0:e9:1c:ef:ea:26:fb:57:35:4e:e0:72:2d:3f:fe:ea:41:65: 3e:40:ec:95:be:21:a3:45:91:9f:62:4a:c0:70:27:70:04:24: 9c:4d:02:c3:dd:e7:7d:06:a0:6d:75:f0:8a:0e:17:5b:41:14: 19:92:12:93:be:b3:9d:1d:45:87:12:12:e2:9f:36:bc:7e:fe: 6e:1f:f8:1b:79:64:20:a6:f7:f2:eb:c6:9c:cb:ee:67:43:f3: 6f:51:ba:63:e7:14:da:fd:7a:f3:9e:41:ed:ab:ee:32:b2:21: ed:9a:97:e2:96:74:67:f0:fa:34:68:e8:e9:58:c0:af:07:f4: 04:22:fe:54:78:fc:5d:79:15:b0:f4:bb:41:a7:ba:b4:0a:e1: c8:09:44:3b:2c:86:a7:5e:d2:6d:84:a1:f7:c7:92:82:e2:95: aa:30:ed:0e:5c:da:99:ed:82:7c:7c:d5:9b:88:35:3e:f6:3f: c3:a9:7d:7a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk5QTAxMTAvBgNVBAUTKDM3RTAzNTI0QjU4NDdEQkVBRDAwRkUzNzhDNDZBQkQw Q0E3MDQ1RjgwHhcNMjQxMDAzMDEzNDQzWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZkZjRiMy0yY2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0waZ6rH9ceBMu9eAOtVPOUnL3AMI61gjtJaDRJ/PLYtAYsSgfQHJ8ngfFg3P cfpyIGyl9f6ot0AUARt9kZfmAUNnWq5FNlAkCW0vcST1T9YD0k8eiNCAdvR3eve7 nUO5E3rLplayW0GqX+Tg4M9UIiq4EoezWYeXVqJr9dr+mEWzuAoD3JyXqez2rBL1 Yl0RHMv1tcafjK6l5ALbirlZOjZxdz+428EsrPxuLH+C4TCA1Jj+EBMU6hpED6vX jF1wxSSyW+nNkFZ1vOGAx+COS1wxFZ6bryVMUYWY+HtoImPw8cbYIlJ/Tgd1MgKZ dhRo1dXU67w9He+C3DCggUEmqQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAGBZ3K4 ZdnWI6QrwzipTaugpntCMB8GA1UdIwQYMBaAFDfgNSS1hH2+rQD+N4xGq9DKcEX4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTlBMC80MEVEQTExRTlB RTgxMUVDOTc0QjQ5MUNDNEY5QUUwMi9OLUExSkxXRWZiNnRBUDQzakVhcjBNcHdS ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04tQTFKTFdFZmI2dEFQNDNqRWFyME1wd1JmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzk5QTAvNDBFREExMUU5QUU4MTFFQzk3NEI0OTFDQzRGOUFFMDIvRjM5Q0U0MUM3 QzM4MTFFRkJGNDRBRjRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnKxcwDQYJKoZIhvcNAQELBQADggEBAI1OgzvnfGReg70M yqnex+9ruDaOO1x3H8MAZ1U0F8HY+PBANIyvy+Ud7IpsmR4Y9z/DK84ucc+DmaEl hjeHfyO7EhBIBrEG5NDpHO/qJvtXNU7gci0//upBZT5A7JW+IaNFkZ9iSsBwJ3AE JJxNAsPd530GoG118IoOF1tBFBmSEpO+s50dRYcSEuKfNrx+/m4f+Bt5ZCCm9/Lr xpzL7mdD829RumPnFNr9evOeQe2r7jKyIe2al+KWdGfw+jRo6OlYwK8H9AQi/lR4 /F15FbD0u0GnurQK4cgJRDsshqde0m2EoffHkoLilaow7Q5c2pntgnx81ZuINT72 P8OpfXo= -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:39 2024 by rpki-client on console-fra.rpki-client.org