$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/A43B3718ABC111E9A200115CC4F9AE02.roa File: A43B3718ABC111E9A200115CC4F9AE02.roa (raw, json) Hash identifier: rc2HKldu1pWCNCmvoKIq756wtH7kDxYrdw5/oSGbQ3M= Subject key identifier: 98:69:2E:AC:EC:A0:66:7A:CE:8D:D9:9F:57:B1:59:7A:07:93:1F:32 Certificate issuer: /CN=A91A0D57/serialNumber=7F2B2EB5B8F4F7956895F1312D8DCC42239C9A62 Certificate serial: 0D55 Authority key identifier: 7F:2B:2E:B5:B8:F4:F7:95:68:95:F1:31:2D:8D:CC:42:23:9C:9A:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/A43B3718ABC111E9A200115CC4F9AE02.roa Signing time: Tue 16 Apr 2024 18:57:19 +0000 ROA not before: Tue 16 Apr 2024 18:57:19 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 59342 IP address blocks: 103.229.104.0/22 maxlen: 22 103.229.104.0/23 maxlen: 23 103.229.104.0/24 maxlen: 24 103.229.105.0/24 maxlen: 24 103.229.106.0/23 maxlen: 23 103.229.106.0/24 maxlen: 24 103.229.107.0/24 maxlen: 24 103.252.176.0/24 maxlen: 24 103.252.177.0/24 maxlen: 24 103.252.178.0/24 maxlen: 24 103.252.179.0/24 maxlen: 24 2400:bd40::/32 maxlen: 32 2400:bd40::/34 maxlen: 34 2400:bd40:4000::/34 maxlen: 34 2400:bd40:8000::/34 maxlen: 34 2400:bd40:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.crl rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3413 (0xd55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0D57/serialNumber=7F2B2EB5B8F4F7956895F1312D8DCC42239C9A62 Validity Not Before: Apr 16 18:57:19 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=661eca0f-aeb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b0:e4:eb:17:38:ea:18:01:46:c7:d3:b8:f1: fe:26:86:ab:e3:0f:b4:df:84:90:6f:30:cb:28:0c: 72:f8:07:d6:a8:04:30:d7:2f:7e:b8:aa:e4:df:67: 35:d5:55:a5:c3:d4:e9:fc:03:ff:90:05:fe:fb:9e: ea:37:66:b7:0f:5d:ab:f5:e6:54:5d:e9:94:04:55: d6:f0:28:a5:c3:f5:bc:b0:b9:51:f6:f2:5b:c1:00: b6:1b:82:13:20:72:20:12:3c:c5:2e:8c:99:c4:dd: 69:12:2e:93:51:59:cd:db:b0:c4:21:b6:8d:24:c6: 60:21:9a:c0:fb:fe:d2:53:37:6d:26:08:eb:1e:10: e6:3d:34:1c:33:8f:db:87:94:0c:bd:fe:06:e0:ed: cf:a3:76:95:2c:be:18:76:1f:8e:57:45:52:70:93: 82:43:f9:bd:d6:7e:94:e1:42:d3:8c:84:21:f2:d3: 1a:f2:f7:bd:1f:8d:73:f7:8e:57:d9:17:61:4e:86: 70:68:2a:bd:af:4c:18:f8:7c:9c:80:75:d3:66:c3: 28:b1:8a:6f:c9:d0:3f:d3:33:36:eb:0f:cd:fe:50: d3:15:55:21:c0:98:9b:d1:3e:08:1c:1c:6a:b0:a2: 0e:0b:ec:8d:a4:e2:fa:46:44:15:ff:9c:d9:ac:76: a1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:69:2E:AC:EC:A0:66:7A:CE:8D:D9:9F:57:B1:59:7A:07:93:1F:32 X509v3 Authority Key Identifier: keyid:7F:2B:2E:B5:B8:F4:F7:95:68:95:F1:31:2D:8D:CC:42:23:9C:9A:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/A43B3718ABC111E9A200115CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.229.104.0/22 103.252.176.0/22 IPv6: 2400:bd40::/32 Signature Algorithm: sha256WithRSAEncryption 8d:6b:fd:a9:5b:5e:9e:f1:a2:f5:d5:3b:fc:74:91:7f:82:f9: 2e:ee:0c:a7:bd:ca:7e:b4:b8:db:2f:fb:c3:b7:a2:82:e3:75: 35:73:45:ca:4b:f9:ce:7f:8f:54:9f:36:31:74:05:2a:a7:be: a1:21:4c:70:79:e6:19:23:f0:64:e9:d5:12:7d:41:fc:8a:ac: fd:98:86:52:ef:94:79:7a:8e:5c:10:6a:c6:fb:bc:4b:22:45: e5:3a:17:24:05:5c:ed:43:9e:3b:a9:49:83:92:2c:78:91:fa: e7:e8:24:a5:83:4c:d6:0f:0d:3e:2e:5e:e0:68:e3:72:3f:b2: ed:72:9e:2d:82:81:b0:f8:02:98:c1:ee:5f:9c:46:de:62:f7: ef:fe:99:0f:25:f3:9a:42:82:ce:a6:c8:c5:41:8a:0e:48:33: 4c:12:b0:1e:14:28:96:77:26:6e:13:aa:f0:1c:0b:06:65:84: 40:4e:35:12:b2:6f:55:9d:2f:da:01:38:da:26:38:15:1f:63: fd:d8:96:26:40:19:85:a5:3a:81:6d:60:c1:99:e3:c2:a0:18: 6a:00:e2:16:ad:e9:c4:41:ca:2a:20:fc:21:a7:78:2a:7f:c5: 86:6d:3e:00:e1:f4:c3:2d:8d:63:f9:92:2c:82:1f:52:74:9d: 64:9f:0b:55 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICDVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBENTcxMTAvBgNVBAUTKDdGMkIyRUI1QjhGNEY3OTU2ODk1RjEzMTJEOERDQzQy MjM5QzlBNjIwHhcNMjQwNDE2MTg1NzE5WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjFlY2EwZi1hZWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbDk6xc46hgBRsfTuPH+Joar4w+034SQbzDLKAxy+AfWqAQw1y9+uKrk32c1 1VWlw9Tp/AP/kAX++57qN2a3D12r9eZUXemUBFXW8Cilw/W8sLlR9vJbwQC2G4IT IHIgEjzFLoyZxN1pEi6TUVnN27DEIbaNJMZgIZrA+/7SUzdtJgjrHhDmPTQcM4/b h5QMvf4G4O3Po3aVLL4Ydh+OV0VScJOCQ/m91n6U4ULTjIQh8tMa8ve9H41z945X 2RdhToZwaCq9r0wY+HycgHXTZsMosYpvydA/0zM26w/N/lDTFVUhwJib0T4IHBxq sKIOC+yNpOL6RkQV/5zZrHahbwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFJhpLqzs oGZ6zo3Zn1exWXoHkx8yMB8GA1UdIwQYMBaAFH8rLrW49PeVaJXxMS2NzEIjnJpi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEQ1Ny85RkQyQzlEMEE5 MTgxMUU5OEMzRUMyNEZDNEY5QUUwMi9meXN1dGJqMDk1Vm9sZkV4TFkzTVFpT2Nt bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z5c3V0YmowOTVWb2xmRXhMWTNNUWlPY21tSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTBENTcvOUZEMkM5RDBBOTE4MTFFOThDM0VDMjRGQzRGOUFFMDIvQTQzQjM3MThB QkMxMTFFOUEyMDAxMTVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJn5WgDBAJn/LAwDQQCAAIwBwMFACQAvUAwDQYJKoZIhvcN AQELBQADggEBAI1r/albXp7xovXVO/x0kX+C+S7uDKe9yn60uNsv+8O3ooLjdTVz RcpL+c5/j1SfNjF0BSqnvqEhTHB55hkj8GTp1RJ9QfyKrP2YhlLvlHl6jlwQasb7 vEsiReU6FyQFXO1DnjupSYOSLHiR+ufoJKWDTNYPDT4uXuBo43I/su1yni2CgbD4 ApjB7l+cRt5i9+/+mQ8l85pCgs6myMVBig5IM0wSsB4UKJZ3Jm4TqvAcCwZlhEBO NRKyb1WdL9oBONomOBUfY/3YliZAGYWlOoFtYMGZ48KgGGoA4hat6cRByiog/CGn eCp/xYZtPgDh9MMtjWP5kiyCH1J0nWSfC1U= -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org