$ rpki-client -vvf rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/919148B2169911EF9DA1992BC4F9AE02.roa File: 919148B2169911EF9DA1992BC4F9AE02.roa (raw, json) Hash identifier: IQK6AsXx68/8Lqy99fcdojdDHrbfXEtCf8HvhW7NS3A= Subject key identifier: 7E:D6:C3:42:5B:B7:5C:8F:37:0B:C1:45:F1:66:8E:82:CB:D6:26:6F Certificate issuer: /CN=A917E968/serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Certificate serial: 3B Authority key identifier: 2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/919148B2169911EF9DA1992BC4F9AE02.roa Signing time: Thu 29 Aug 2024 07:19:57 +0000 ROA not before: Thu 29 Aug 2024 07:19:57 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 150133 IP address blocks: 103.191.166.0/23 maxlen: 24 2400:9720::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Oct 2024 04:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E968/serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Validity Not Before: Aug 29 07:19:57 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d0211d-444a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5c:42:85:63:7c:02:5b:db:5e:43:b9:97:7c: cf:0d:1e:54:a4:44:d7:b0:e2:a2:b5:1f:c2:ea:43: 38:68:df:87:e9:4d:0c:9e:f0:cd:f3:c8:c4:40:34: c6:f8:8a:84:39:33:20:a3:30:4a:b0:80:47:bf:d3: 92:69:7d:00:9d:84:69:98:7c:9d:d3:65:58:43:cb: f6:8f:ef:a2:06:22:77:15:25:b7:f4:44:5f:99:7e: 59:26:83:66:75:5b:0c:7e:00:bb:ad:82:0d:a9:06: 54:7c:c6:ab:08:9a:da:00:01:a9:b5:a1:85:88:32: 34:9a:fd:f5:c4:ca:33:30:91:1a:df:65:25:4d:c3: 37:3b:15:f3:18:f3:5e:76:32:0c:0c:3a:df:e4:7e: c6:de:e2:e4:72:22:6d:17:9e:de:49:a8:b7:f7:aa: f6:2e:7b:74:4c:6d:41:83:1d:5e:5e:f4:f6:07:00: d5:a5:91:f5:52:c1:21:67:71:7f:a9:93:7e:ef:90: 33:73:68:1e:97:da:43:e1:e6:8e:ba:b6:a1:2c:c1: 98:36:a9:44:d0:75:6d:a0:c9:c9:72:c2:cb:05:7d: 42:6d:4a:e9:34:2f:86:6d:f6:f9:54:6b:e2:86:1e: 81:bd:9f:55:10:c9:ce:3e:61:aa:20:e3:01:50:e3: 66:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D6:C3:42:5B:B7:5C:8F:37:0B:C1:45:F1:66:8E:82:CB:D6:26:6F X509v3 Authority Key Identifier: keyid:2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/919148B2169911EF9DA1992BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.191.166.0/23 IPv6: 2400:9720::/32 Signature Algorithm: sha256WithRSAEncryption 55:22:7b:1f:6c:c3:fa:99:ae:cb:20:df:4f:df:7b:ca:dc:d8: e0:8d:62:22:9e:78:cd:84:0f:b0:c0:e1:f6:31:a8:35:f7:4e: 24:30:f0:f9:bf:cd:b2:1e:fc:3f:83:ec:63:fe:68:c3:b0:84: 7e:ce:ba:0e:9b:94:be:88:07:c4:5a:cb:ed:8f:7b:b4:99:dc: ba:20:9a:1a:20:97:fd:5a:5c:7d:c9:27:4c:7b:a8:62:5a:6b: c5:34:d8:42:ae:c8:ba:ef:4e:ec:4d:70:b2:a4:69:55:35:3d: b8:fd:29:e3:4a:32:04:f4:76:bd:14:84:5e:64:bf:87:13:cd: 83:b6:00:06:d5:78:fa:b8:6f:6b:34:8d:ae:ca:35:33:c2:51: 3f:05:cf:60:73:7c:b5:bc:79:e0:74:b7:49:6e:40:78:7c:a1: e3:0a:af:96:57:9d:59:c8:24:9d:ec:b8:b5:a4:29:c6:04:5a: 37:93:6e:a9:38:4f:41:b0:28:f0:77:7f:61:c7:4f:45:e9:e3: 91:f3:7e:b9:78:97:18:f5:f1:92:ed:59:8a:fc:2c:aa:13:dc: 64:89:ad:44:06:ba:1b:65:f1:d9:d1:e1:06:4c:44:eb:4f:4d: 78:1b:b6:f5:0c:86:a5:2d:4b:44:03:21:4c:09:73:4e:c8:0e: fa:99:81:d6 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTk2ODExMC8GA1UEBRMoMkUwNTJCMzcwMTEzMzEyQUE5ODgzRDk3RURBRDIzMENB MTY2MjE2MjAeFw0yNDA4MjkwNzE5NTdaFw0yNTEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZDAyMTFkLTQ0NGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1XEKFY3wCW9teQ7mXfM8NHlSkRNew4qK1H8LqQzho34fpTQye8M3zyMRANMb4 ioQ5MyCjMEqwgEe/05JpfQCdhGmYfJ3TZVhDy/aP76IGIncVJbf0RF+Zflkmg2Z1 Wwx+ALutgg2pBlR8xqsImtoAAam1oYWIMjSa/fXEyjMwkRrfZSVNwzc7FfMY8152 MgwMOt/kfsbe4uRyIm0Xnt5JqLf3qvYue3RMbUGDHV5e9PYHANWlkfVSwSFncX+p k37vkDNzaB6X2kPh5o66tqEswZg2qUTQdW2gyclywssFfUJtSuk0L4Zt9vlUa+KG HoG9n1UQyc4+Yaog4wFQ42YfAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUftbDQlu3 XI83C8FF8WaOgsvWJm8wHwYDVR0jBBgwFoAULgUrNwETMSqpiD2X7a0jDKFmIWIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFOTY4LzJCQTJFQzBFMTY5 OTExRUZCQTQwQzkyQUM0RjlBRTAyL0xnVXJOd0VUTVNxcGlEMlg3YTBqREtGbUlX SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTGdVck53RVRNU3FwaUQyWDdhMGpES0ZtSVdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTk2OC8yQkEyRUMwRTE2OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi85MTkxNDhCMjE2 OTkxMUVGOURBMTk5MkJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAWe/pjANBAIAAjAHAwUAJACXIDANBgkqhkiG9w0BAQsFAAOC AQEAVSJ7H2zD+pmuyyDfT997ytzY4I1iIp54zYQPsMDh9jGoNfdOJDDw+b/Nsh78 P4PsY/5ow7CEfs66DpuUvogHxFrL7Y97tJncuiCaGiCX/VpcfcknTHuoYlprxTTY Qq7Iuu9O7E1wsqRpVTU9uP0p40oyBPR2vRSEXmS/hxPNg7YABtV4+rhvazSNrso1 M8JRPwXPYHN8tbx54HS3SW5AeHyh4wqvlledWcgkney4taQpxgRaN5NuqThPQbAo 8Hd/YcdPRenjkfN+uXiXGPXxku1ZivwsqhPcZImtRAa6G2Xx2dHhBkxE609NeBu2 9QyGpS1LRAMhTAlzTsgO+pmB1g== -----END CERTIFICATE-----Generated at Thu Oct 17 06:45:48 2024 by rpki-client on console-fra.rpki-client.org