$ rpki-client -vvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/B0425744D7E211ECBD1D447FC4F9AE02.roa File: B0425744D7E211ECBD1D447FC4F9AE02.roa (raw, json) Hash identifier: OdlMqUDNtGzAyirklP55vsYTOSuUBKJCfr9lvqlqHYg= Subject key identifier: D7:2C:DE:59:68:9C:86:0C:15:5A:6A:12:84:D1:06:07:E8:38:D6:4C Certificate issuer: /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC Certificate serial: 0721 Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/B0425744D7E211ECBD1D447FC4F9AE02.roa Signing time: Fri 02 Aug 2024 22:40:48 +0000 ROA not before: Fri 02 Aug 2024 22:40:48 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 2519 IP address blocks: 43.231.220.0/22 maxlen: 22 43.251.48.0/22 maxlen: 22 103.3.28.0/22 maxlen: 22 103.8.240.0/22 maxlen: 22 103.20.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1825 (0x721) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC Validity Not Before: Aug 2 22:40:48 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66ad606f-ac95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:1c:98:f8:6c:f7:4d:37:3e:37:4c:d2:da:71: 1e:d1:85:48:d1:19:84:02:37:be:71:f2:08:61:62: c4:13:8f:28:27:88:16:8d:51:e6:34:37:e3:47:1f: 17:03:7e:da:0a:68:f6:7e:e2:28:ec:f9:7e:13:35: 8e:43:f0:1d:5a:68:e4:7f:46:30:de:b7:ea:b9:88: cb:71:92:8e:f3:01:2a:ef:ff:4a:07:21:42:4a:4f: a3:9b:0c:dd:4f:33:41:63:95:5f:66:1f:5f:f8:a0: 5a:ff:8f:32:e3:97:0a:6b:84:6c:b7:6d:77:cf:cb: 1a:6b:0d:e3:12:fa:01:60:8a:f8:4e:6f:a9:d8:77: d2:5e:36:5d:bd:6a:29:57:e5:03:90:59:99:4d:b7: c4:a5:54:29:b9:22:05:e2:98:ea:bc:74:6a:2a:cc: 5a:ec:c5:5d:5e:35:4c:0b:46:5a:ca:43:43:ba:10: 2f:7d:ae:b0:da:43:77:85:41:06:43:a9:c9:3f:57: 52:bd:1b:86:de:06:89:25:2a:38:e2:3c:29:ba:79: 57:19:e4:08:61:6b:a8:89:33:d0:1c:b5:14:bc:74: 3d:3d:45:f2:ef:37:3e:2b:0d:b4:c7:38:74:fb:97: 17:36:2b:21:1c:69:5a:6b:68:c0:8d:94:6b:10:b5: 9e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:2C:DE:59:68:9C:86:0C:15:5A:6A:12:84:D1:06:07:E8:38:D6:4C X509v3 Authority Key Identifier: keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/B0425744D7E211ECBD1D447FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.231.220.0/22 43.251.48.0/22 103.3.28.0/22 103.8.240.0/22 103.20.156.0/22 Signature Algorithm: sha256WithRSAEncryption 14:e8:69:21:9c:ad:00:99:6b:9e:7f:67:60:17:35:c9:3d:75: 8f:00:2d:c6:7f:ed:3d:61:d4:5b:35:c2:13:d7:b7:3a:bb:d8: 18:00:ad:8a:48:e5:49:6b:05:bf:2b:9d:88:5f:16:1b:5b:89: 4e:da:84:ca:2a:03:5b:2d:5b:a9:9c:5e:d2:ce:c1:cd:d7:d1: 03:8a:45:62:32:76:00:e6:04:7a:2f:fd:97:07:be:69:3a:ce: a0:ca:3c:58:3e:59:8d:2a:a0:bc:b8:00:d1:ad:2a:33:7a:58: 1b:31:f0:63:f9:73:c7:ab:42:07:5b:ad:8e:5b:42:c5:f5:ff: 78:7d:fb:9c:86:e4:72:83:fc:26:2f:c9:c8:f4:93:59:15:61: fe:b3:06:b0:a7:ee:37:bb:e7:39:ff:21:ac:93:15:78:0d:f3: b0:09:06:45:d9:3e:49:68:61:26:cc:d2:2f:12:6a:e6:a8:42: 65:6d:05:73:b9:fd:d7:00:d4:a6:e0:4b:c6:fc:8d:22:de:ec: af:f4:70:97:e7:9a:10:e9:48:57:f7:d5:be:f7:6e:b0:42:72: 07:be:b1:83:b3:38:f8:59:c6:56:f8:12:49:3f:53:bb:dd:aa: a2:4d:56:98:27:3d:a6:fb:33:51:42:82:e2:d4:0e:d5:c1:62: d9:96:c2:1b -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICByEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQxRTkxMTAvBgNVBAUTKDA1QUQzRTRBQTE5NjFCQTdFQ0JFMDI5MzU3MjVDMjVD RDI2QkQ2QkMwHhcNMjQwODAyMjI0MDQ4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmFkNjA2Zi1hYzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9xyY+Gz3TTc+N0zS2nEe0YVI0RmEAje+cfIIYWLEE48oJ4gWjVHmNDfjRx8X A37aCmj2fuIo7Pl+EzWOQ/AdWmjkf0Yw3rfquYjLcZKO8wEq7/9KByFCSk+jmwzd TzNBY5VfZh9f+KBa/48y45cKa4Rst213z8saaw3jEvoBYIr4Tm+p2HfSXjZdvWop V+UDkFmZTbfEpVQpuSIF4pjqvHRqKsxa7MVdXjVMC0ZaykNDuhAvfa6w2kN3hUEG Q6nJP1dSvRuG3gaJJSo44jwpunlXGeQIYWuoiTPQHLUUvHQ9PUXy7zc+Kw20xzh0 +5cXNishHGlaa2jAjZRrELWeNQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFNcs3llo nIYMFVpqEoTRBgfoONZMMB8GA1UdIwQYMBaAFAWtPkqhlhun7L4Ck1clwlzSa9a8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDFFOS9EQUQ4RkI4MDA3 OTAxMUVCQkI5OEMwNzZDNEY5QUUwMi9CYTAtU3FHV0c2ZnN2Z0tUVnlYQ1hOSnIx cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JhMC1TcUdXRzZmc3ZnS1RWeVhDWE5KcjFydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTQxRTkvREFEOEZCODAwNzkwMTFFQkJCOThDMDc2QzRGOUFFMDIvQjA0MjU3NDRE N0UyMTFFQ0JEMUQ0NDdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAIr59wDBAIr+zADBAJnAxwDBAJnCPADBAJnFJwwDQYJKoZI hvcNAQELBQADggEBABToaSGcrQCZa55/Z2AXNck9dY8ALcZ/7T1h1Fs1whPXtzq7 2BgArYpI5UlrBb8rnYhfFhtbiU7ahMoqA1stW6mcXtLOwc3X0QOKRWIydgDmBHov /ZcHvmk6zqDKPFg+WY0qoLy4ANGtKjN6WBsx8GP5c8erQgdbrY5bQsX1/3h9+5yG 5HKD/CYvycj0k1kVYf6zBrCn7je75zn/IayTFXgN87AJBkXZPkloYSbM0i8Sauao QmVtBXO5/dcA1KbgS8b8jSLe7K/0cJfnmhDpSFf31b73brBCcge+sYOzOPhZxlb4 Ekk/U7vdqqJNVpgnPab7M1FCguLUDtXBYtmWwhs= -----END CERTIFICATE-----Generated at Sun Nov 24 23:07:55 2024 by rpki-client on console-ams.rpki-client.org