$ rpki-client -vvf rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/37B318C0050111EEAFBCAE7EC4F9AE02.roa File: 37B318C0050111EEAFBCAE7EC4F9AE02.roa (raw, json) Hash identifier: pZ0jtDypa9zbTRVdqPzNYcOmaqaH3zak3MFxphvTBnU= Subject key identifier: 6E:84:DA:1E:2F:EE:0A:D7:68:79:62:23:AA:40:8B:4B:32:BA:D3:42 Certificate issuer: /CN=A91889A4/serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860 Certificate serial: CE Authority key identifier: FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/37B318C0050111EEAFBCAE7EC4F9AE02.roa Signing time: Wed 03 Jul 2024 05:46:38 +0000 ROA not before: Wed 03 Jul 2024 05:46:38 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 133041 IP address blocks: 103.140.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889A4/serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860 Validity Not Before: Jul 3 05:46:38 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6684e5be-adf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7a:ba:86:e1:27:56:b6:cf:8b:24:79:b8:dd: 1a:50:38:6a:03:bc:27:b2:5e:56:64:4d:31:fa:43: 16:f2:15:91:0f:97:ab:30:a7:a9:0b:92:11:d8:99: f3:cc:af:97:4a:b7:86:0d:74:06:1f:11:be:9e:5e: 50:db:66:a0:cc:50:7a:bf:07:84:ae:e0:7d:87:36: 5a:e4:34:53:fc:c0:98:1d:6e:ab:2b:8a:9f:ef:fa: 46:aa:23:d0:b7:a2:ff:3a:18:78:9c:c3:5d:4b:32: b3:3a:71:0f:45:9f:74:67:6f:d4:34:74:b5:d1:81: dc:cb:ac:a8:10:5d:f0:06:29:ad:e1:5b:08:5a:c3: 75:db:51:9c:79:24:fd:94:d5:6c:78:89:60:d8:f7: 30:a0:44:67:03:29:31:9e:4e:56:3a:fe:17:d1:96: 36:a1:85:b0:4c:c9:0b:ef:77:ab:e0:fb:16:52:43: 48:0b:1e:df:2f:45:ff:cb:4d:b0:b2:dc:13:bd:6f: e8:7c:8e:ba:3b:04:49:24:50:53:bf:ee:38:2b:cc: 64:d1:ce:b7:b1:29:42:59:e3:82:ba:f0:4f:05:a3: 41:aa:b5:1e:ef:a7:3d:85:d5:66:27:80:79:67:75: a9:03:c9:ee:24:d1:12:99:02:a5:bd:00:ea:93:a7: a7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:84:DA:1E:2F:EE:0A:D7:68:79:62:23:AA:40:8B:4B:32:BA:D3:42 X509v3 Authority Key Identifier: keyid:FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/37B318C0050111EEAFBCAE7EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.68.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:8b:22:2c:85:f5:18:98:bd:22:20:a4:ed:51:e9:50:5c:2d: 3f:e7:51:08:17:e7:60:02:c1:ab:2e:8a:64:44:a9:31:23:cf: 12:cb:6e:fe:9d:55:1a:fc:63:ca:d9:94:c2:c4:0e:4b:91:de: 74:ab:d1:a4:8d:6b:ab:67:64:c0:15:42:b1:c1:84:e3:b2:d1: 72:7d:b9:17:35:5a:f7:12:bc:31:58:e9:2a:5c:99:c1:cd:c7: c3:be:a4:78:36:aa:5c:c0:60:1f:e4:49:f6:72:1c:31:80:11: c6:14:e3:50:e8:c3:e4:8f:20:7e:a9:af:5f:87:26:f1:aa:c8: d1:e5:b3:c4:86:d9:f3:c6:7f:74:d4:2d:e3:69:5e:bd:e7:05: 76:3f:b2:75:57:bc:ec:32:06:e4:df:83:77:19:33:76:27:77: ef:9f:fb:e7:c0:e4:c3:3c:f7:30:70:61:21:20:a9:53:99:dd: 3c:a0:c6:58:96:84:11:00:d8:3b:4e:74:04:70:8a:77:84:f5: 10:0c:15:8c:de:4c:3d:4c:39:fa:d1:cc:06:5a:43:af:ab:bb: 23:2f:66:53:fe:bb:81:08:3e:62:4d:5b:7d:22:27:63:de:d5: a9:38:15:84:89:4c:f8:5e:a3:49:0f:39:aa:08:a6:e3:db:4a: e8:e2:ba:22 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QTQxMTAvBgNVBAUTKEZFNzQwNzcxRDZFQTAwMTJERTM4NzA1NkY4OENCRURE MzZDNEE4NjAwHhcNMjQwNzAzMDU0NjM4WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njg0ZTViZS1hZGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Hq6huEnVrbPiyR5uN0aUDhqA7wnsl5WZE0x+kMW8hWRD5erMKepC5IR2Jnz zK+XSreGDXQGHxG+nl5Q22agzFB6vweEruB9hzZa5DRT/MCYHW6rK4qf7/pGqiPQ t6L/Ohh4nMNdSzKzOnEPRZ90Z2/UNHS10YHcy6yoEF3wBimt4VsIWsN121GceST9 lNVseIlg2PcwoERnAykxnk5WOv4X0ZY2oYWwTMkL73er4PsWUkNICx7fL0X/y02w stwTvW/ofI66OwRJJFBTv+44K8xk0c63sSlCWeOCuvBPBaNBqrUe76c9hdVmJ4B5 Z3WpA8nuJNESmQKlvQDqk6encQIDAQABo4IClTCCApEwHQYDVR0OBBYEFG6E2h4v 7grXaHliI6pAi0syutNCMB8GA1UdIwQYMBaAFP50B3HW6gAS3jhwVviMvt02xKhg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlBNC8yN0EyNUE1NjA0 RkExMUVFOEQ0NkUyNDVDNEY5QUUwMi9fblFIY2RicUFCTGVPSEJXLUl5LTNUYkVx R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19uUUhjZGJxQUJMZU9IQlctSXktM1RiRXFHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODg5QTQvMjdBMjVBNTYwNEZBMTFFRThENDZFMjQ1QzRGOUFFMDIvMzdCMzE4QzAw NTAxMTFFRUFGQkNBRTdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnjEQwDQYJKoZIhvcNAQELBQADggEBAA+LIiyF9RiYvSIg pO1R6VBcLT/nUQgX52ACwasuimREqTEjzxLLbv6dVRr8Y8rZlMLEDkuR3nSr0aSN a6tnZMAVQrHBhOOy0XJ9uRc1WvcSvDFY6SpcmcHNx8O+pHg2qlzAYB/kSfZyHDGA EcYU41Dow+SPIH6pr1+HJvGqyNHls8SG2fPGf3TULeNpXr3nBXY/snVXvOwyBuTf g3cZM3Ynd++f++fA5MM89zBwYSEgqVOZ3TygxliWhBEA2DtOdARwineE9RAMFYze TD1MOfrRzAZaQ6+ruyMvZlP+u4EIPmJNW30iJ2Pe1ak4FYSJTPheo0kPOaoIpuPb SujiuiI= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:44 2024 by rpki-client on console-ams.rpki-client.org