$ rpki-client -vvf rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/285AD17A061811EEADC2405AC4F9AE02.roa File: 285AD17A061811EEADC2405AC4F9AE02.roa (raw, json) Hash identifier: WVJ4UwY6KypbKvk4Ln4sfzY4jnw/x07G6eZ4nvVHo1Y= Subject key identifier: 8C:31:14:24:A5:84:01:9D:09:BB:FA:0D:A4:B8:37:2F:C2:F5:F5:86 Certificate issuer: /CN=A91A43EE/serialNumber=8EC333757E363A1711B00273250446FE1B4938DB Certificate serial: 01C5 Authority key identifier: 8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/285AD17A061811EEADC2405AC4F9AE02.roa Signing time: Sat 03 Aug 2024 04:14:51 +0000 ROA not before: Sat 03 Aug 2024 04:14:51 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 979 IP address blocks: 103.20.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A43EE/serialNumber=8EC333757E363A1711B00273250446FE1B4938DB Validity Not Before: Aug 3 04:14:51 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66adaebb-7963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b7:8d:64:6a:5f:d7:b7:90:61:ea:4a:cb:07: c9:13:88:1f:0d:ab:20:b5:73:95:5b:31:f5:a3:10: 9e:27:59:aa:7b:a2:d5:ce:69:a9:de:2a:53:2f:fa: ed:45:fc:98:5f:62:9a:92:55:7f:70:18:a0:87:f7: d8:d1:ed:00:0b:d7:a0:30:bc:e7:45:94:85:04:4f: 5d:d4:f6:c0:45:6c:0a:b1:48:6b:58:d6:db:b7:a0: 81:e6:9c:7b:4f:f5:8b:f5:1c:93:39:b7:8b:f4:83: 41:75:b9:56:2b:4f:ee:2d:93:96:de:ff:98:40:97: b0:11:f8:be:28:ed:0a:d3:ca:73:44:5c:b8:e9:66: 10:67:8a:88:60:03:5a:cf:64:52:04:79:c5:4a:f6: c5:3a:b9:ea:1d:8d:ca:0b:20:b0:d4:ea:25:19:85: a5:6f:4c:4e:2b:ac:d3:40:f0:79:3d:f9:54:09:13: 4e:87:d6:06:f8:4c:e5:c8:08:f6:41:a3:29:2b:b7: 99:7a:b6:bc:0f:01:d8:5b:e5:33:47:1a:c3:87:fb: cf:a1:c4:31:fb:71:10:7b:25:3e:37:09:bb:5e:0c: b4:14:66:84:4c:02:10:7b:86:0d:ed:fd:58:9b:1d: 0c:ef:20:04:79:e8:07:dd:97:63:57:20:b3:28:b4: 50:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:31:14:24:A5:84:01:9D:09:BB:FA:0D:A4:B8:37:2F:C2:F5:F5:86 X509v3 Authority Key Identifier: keyid:8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/285AD17A061811EEADC2405AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.20.198.0/23 Signature Algorithm: sha256WithRSAEncryption b9:3a:d6:e0:5c:aa:9a:af:b7:4f:be:2f:c9:e3:72:72:9c:9d: 8d:0a:90:d7:8f:64:5c:00:48:7b:9e:2f:63:8d:03:c0:4d:11: ca:97:42:dc:00:43:1b:38:15:ef:57:a8:80:52:2a:72:bb:f9: 75:11:a0:d1:ea:06:5b:f7:65:9d:7f:b0:ea:24:a9:f9:5b:9d: af:1e:d0:6d:d2:92:2e:31:a1:7e:23:c0:2f:6f:ad:d6:cb:22: 0c:ce:69:24:65:fe:c6:c8:26:47:48:52:fa:1f:8a:5d:a3:e1: 97:ea:fe:d0:41:51:0a:4b:28:fa:53:eb:8b:47:81:29:67:f4: a8:89:83:14:ff:0b:5f:49:4f:8c:c2:ea:61:42:9f:5c:05:7e: 25:b0:56:a9:f7:8a:88:9d:79:d5:7a:9c:3f:51:e1:f1:51:6c: a4:97:76:ed:4d:6c:36:ec:e5:c1:26:92:d8:0f:47:f5:b4:92: c0:79:f2:0b:4b:96:35:42:f4:7a:15:de:59:f3:44:14:94:a7: 30:5b:60:a9:40:b5:56:ae:ef:65:44:df:61:3d:d6:24:57:d1: ee:48:7d:9d:e9:82:5e:88:19:f8:19:11:1f:6f:1b:8b:b0:a0: f9:44:34:59:e0:31:da:e8:01:91:1d:21:30:e4:e0:93:c5:71: 44:cb:68:c8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQzRUUxMTAvBgNVBAUTKDhFQzMzMzc1N0UzNjNBMTcxMUIwMDI3MzI1MDQ0NkZF MUI0OTM4REIwHhcNMjQwODAzMDQxNDUxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmFkYWViYi03OTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq7eNZGpf17eQYepKywfJE4gfDasgtXOVWzH1oxCeJ1mqe6LVzmmp3ipTL/rt RfyYX2KaklV/cBigh/fY0e0AC9egMLznRZSFBE9d1PbARWwKsUhrWNbbt6CB5px7 T/WL9RyTObeL9INBdblWK0/uLZOW3v+YQJewEfi+KO0K08pzRFy46WYQZ4qIYANa z2RSBHnFSvbFOrnqHY3KCyCw1OolGYWlb0xOK6zTQPB5PflUCRNOh9YG+EzlyAj2 QaMpK7eZera8DwHYW+UzRxrDh/vPocQx+3EQeyU+Nwm7Xgy0FGaETAIQe4YN7f1Y mx0M7yAEeegH3ZdjVyCzKLRQVwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIwxFCSl hAGdCbv6DaS4Ny/C9fWGMB8GA1UdIwQYMBaAFI7DM3V+NjoXEbACcyUERv4bSTjb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDNFRS8wMUU0RTY5NjIz Q0IxMUVEQThFMzU4M0VDNEY5QUUwMi9qc016ZFg0Mk9oY1JzQUp6SlFSR19odEpP TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pzTXpkWDQyT2hjUnNBSnpKUVJHX2h0Sk9Ocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQzRUUvMDFFNEU2OTYyM0NCMTFFREE4RTM1ODNFQzRGOUFFMDIvMjg1QUQxN0Ew NjE4MTFFRUFEQzI0MDVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnFMYwDQYJKoZIhvcNAQELBQADggEBALk61uBcqpqvt0++ L8njcnKcnY0KkNePZFwASHueL2ONA8BNEcqXQtwAQxs4Fe9XqIBSKnK7+XURoNHq Blv3ZZ1/sOokqflbna8e0G3Ski4xoX4jwC9vrdbLIgzOaSRl/sbIJkdIUvofil2j 4Zfq/tBBUQpLKPpT64tHgSln9KiJgxT/C19JT4zC6mFCn1wFfiWwVqn3ioidedV6 nD9R4fFRbKSXdu1NbDbs5cEmktgPR/W0ksB58gtLljVC9HoV3lnzRBSUpzBbYKlA tVau72VE32E91iRX0e5IfZ3pgl6IGfgZER9vG4uwoPlENFngMdroAZEdITDk4JPF cUTLaMg= -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:49 2024 by rpki-client on console-ams.rpki-client.org