$ rpki-client -vvf rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/FA66BA00BD1311EEBC015623C4F9AE02.roa File: FA66BA00BD1311EEBC015623C4F9AE02.roa (raw, json) Hash identifier: 8zPxRe7MaH+hS0FNXaje7YOQ+Hnyx7RIa4mbg2ZFLUE= Subject key identifier: 9C:49:12:10:97:FF:09:C8:23:B7:32:AB:BA:E5:3B:F0:A0:7F:77:BE Certificate issuer: /CN=A91A11A1/serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A Certificate serial: 76 Authority key identifier: 7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/FA66BA00BD1311EEBC015623C4F9AE02.roa Signing time: Thu 01 Aug 2024 07:08:41 +0000 ROA not before: Thu 01 Aug 2024 07:08:41 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 18013 IP address blocks: 103.141.220.0/24 maxlen: 24 103.141.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:22:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A11A1/serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A Validity Not Before: Aug 1 07:08:41 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66ab3479-a93d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ea:b0:c9:57:6d:b0:93:2c:77:f7:09:fd:a5: da:a7:b0:d9:fe:02:e7:9e:be:bc:5c:b4:37:90:a3: c6:73:97:14:19:34:66:82:27:63:fc:77:c3:5c:46: c6:75:fa:57:75:38:83:a3:6c:9c:2b:87:80:9e:af: ea:97:61:69:0c:a7:c3:64:cc:84:a0:f5:60:fe:2a: bd:4f:70:c0:93:93:0c:52:ed:d3:1d:13:40:6e:c2: 0b:62:8d:cc:e6:c4:4e:07:e2:e2:3e:18:f8:f6:3b: 6f:28:c9:19:e8:68:c8:94:f8:f4:e9:29:13:01:24: 48:3e:5d:f4:fc:39:ec:95:6f:54:fb:fc:27:1c:f2: c8:32:c3:00:18:fa:61:c6:69:e2:f9:cb:c3:4b:9b: a5:56:27:01:ab:f2:34:e5:48:4c:d6:eb:f1:6d:e6: b4:8f:7f:a6:c9:2e:6f:ce:7e:0d:37:cf:0f:3e:5c: c2:23:d1:cb:32:55:88:e6:a9:f7:9c:bc:be:28:8b: 46:a5:ed:e3:cf:af:28:c9:00:6f:2c:e4:be:97:e1: 6b:a9:95:1a:11:1d:62:20:8b:6b:d3:a2:97:24:ef: 67:ab:f2:5c:af:3f:cc:42:56:da:68:cd:b0:d0:c3: 5c:23:d9:38:b0:92:2f:a1:80:22:c9:29:81:de:73: bc:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:49:12:10:97:FF:09:C8:23:B7:32:AB:BA:E5:3B:F0:A0:7F:77:BE X509v3 Authority Key Identifier: keyid:7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/FA66BA00BD1311EEBC015623C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.141.220.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:12:82:42:32:d9:50:0f:6c:f0:8d:95:8d:6e:55:fb:db:43: 8d:95:cf:bf:5b:a5:05:70:cc:41:e1:f9:52:ea:94:d7:e0:78: 72:23:3f:fb:52:1d:3a:01:bd:97:92:ec:67:bd:6d:ce:36:fc: fe:51:01:c0:0b:35:ef:b9:b8:d2:c2:16:15:e6:27:ca:2a:e2: 08:e7:6b:53:1d:5d:c0:b0:ef:0a:03:b4:25:3d:eb:75:54:4e: b1:a6:01:a4:23:db:31:d7:89:aa:44:8d:0d:8b:da:26:a7:d7: 74:e1:af:0b:6a:5c:2c:89:7a:56:70:a8:0e:2e:37:47:0a:8e: 1b:2a:b7:69:6a:57:ae:4f:43:56:42:83:33:a6:47:d3:31:7d: 0a:09:84:1c:84:13:02:44:54:48:aa:40:56:6d:10:14:21:ef: 82:91:ce:dc:cf:1d:e0:f3:90:75:0a:89:26:d3:79:57:f2:bd: 46:76:ad:b0:dc:50:ff:9a:00:7b:05:fa:5c:b8:10:e6:e6:18: e3:08:a4:e8:72:d8:97:60:4e:0e:b5:f2:a8:b1:b4:84:19:ae: fc:45:ed:fc:0a:16:f9:83:c6:96:80:e5:da:81:02:36:ce:64: bd:75:4e:ef:ee:5d:8b:24:55:f7:6c:72:af:09:78:eb:77:0a: 4b:1e:30:fb -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MTFBMTExMC8GA1UEBRMoN0U3MUQ5RDE0NjEyMTdCMEY4MkMwN0IxNUM0RjAyOUYy NjcyNDk4QTAeFw0yNDA4MDEwNzA4NDFaFw0yNTEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YWIzNDc5LWE5M2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDN6rDJV22wkyx39wn9pdqnsNn+AueevrxctDeQo8ZzlxQZNGaCJ2P8d8NcRsZ1 +ld1OIOjbJwrh4Cer+qXYWkMp8NkzISg9WD+Kr1PcMCTkwxS7dMdE0Buwgtijczm xE4H4uI+GPj2O28oyRnoaMiU+PTpKRMBJEg+XfT8OeyVb1T7/Ccc8sgywwAY+mHG aeL5y8NLm6VWJwGr8jTlSEzW6/Ft5rSPf6bJLm/Ofg03zw8+XMIj0csyVYjmqfec vL4oi0al7ePPryjJAG8s5L6X4WuplRoRHWIgi2vTopck72er8lyvP8xCVtpozbDQ w1wj2Tiwki+hgCLJKYHec7xVAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUnEkSEJf/ CcgjtzKruuU78KB/d74wHwYDVR0jBBgwFoAUfnHZ0UYSF7D4LAexXE8CnyZySYow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExMUExL0E5QjczQ0E4QjA1 RjExRUU5OUM2NTQ3N0M0RjlBRTAyL2ZuSFowVVlTRjdENExBZXhYRThDbnlaeVNZ by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZm5IWjBVWVNGN0Q0TEFleFhFOENueVp5U1lvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTFBMS9BOUI3M0NBOEIwNUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9GQTY2QkEwMEJE MTMxMUVFQkMwMTU2MjNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWeN3DANBgkqhkiG9w0BAQsFAAOCAQEAOhKCQjLZUA9s8I2V jW5V+9tDjZXPv1ulBXDMQeH5UuqU1+B4ciM/+1IdOgG9l5LsZ71tzjb8/lEBwAs1 77m40sIWFeYnyiriCOdrUx1dwLDvCgO0JT3rdVROsaYBpCPbMdeJqkSNDYvaJqfX dOGvC2pcLIl6VnCoDi43RwqOGyq3aWpXrk9DVkKDM6ZH0zF9CgmEHIQTAkRUSKpA Vm0QFCHvgpHO3M8d4POQdQqJJtN5V/K9RnatsNxQ/5oAewX6XLgQ5uYY4wik6HLY l2BODrXyqLG0hBmu/EXt/AoW+YPGloDl2oECNs5kvXVO7+5diyRV92xyrwl463cK Sx4w+w== -----END CERTIFICATE-----Generated at Thu Nov 21 05:06:02 2024 by rpki-client on console-fra.rpki-client.org