$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/3F0F6E96BE5411EDAD9B2A1BC4F9AE02.roa File: 3F0F6E96BE5411EDAD9B2A1BC4F9AE02.roa (raw, json) Hash identifier: vPkGIHgQPJ1VAQ3X3HAo9z/KW3qD/rBAtvMfS+J6XPE= Subject key identifier: 0D:65:B3:B2:AC:77:D0:76:8A:CD:BE:3E:EF:B7:89:EF:9F:B5:C8:0D Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0A79 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/3F0F6E96BE5411EDAD9B2A1BC4F9AE02.roa Signing time: Sat 02 Mar 2024 20:28:47 +0000 ROA not before: Sat 02 Mar 2024 20:28:47 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 9311 IP address blocks: 43.246.128.0/24 maxlen: 24 43.246.130.0/24 maxlen: 24 43.246.196.0/24 maxlen: 24 43.246.198.0/24 maxlen: 24 103.8.85.0/24 maxlen: 24 103.15.32.0/24 maxlen: 24 103.15.79.0/24 maxlen: 24 103.24.161.0/24 maxlen: 24 103.24.162.0/24 maxlen: 24 103.24.163.0/24 maxlen: 24 103.248.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:58:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2681 (0xa79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Mar 2 20:28:47 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65e38bff-f55f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:18:bc:37:11:90:9d:31:a3:17:1f:1d:93:e1: f2:e1:e2:d1:7b:b3:ac:80:22:c5:b9:61:36:e0:a9: 3f:ad:37:28:cf:cd:83:d6:83:26:59:3d:3c:ac:3e: 55:62:c5:95:a2:d1:b9:b4:74:60:e7:ff:de:7e:97: 09:85:a4:3a:20:9e:4f:2a:4b:fd:59:d9:d0:cf:1e: b2:25:6a:51:17:0d:dc:88:ba:e1:6a:26:2f:1b:4c: f0:70:24:ca:f4:11:c8:f4:91:b9:a4:af:15:64:36: 04:82:0a:26:9b:b6:6f:6c:82:d2:e0:45:56:16:bf: a9:fe:73:e2:3c:3e:85:ba:33:75:e0:4d:78:b5:72: f1:5e:14:0a:10:41:ce:9a:48:c7:39:5a:9a:43:ea: bb:55:a6:56:77:3f:05:cf:57:ff:f1:ea:83:e4:61: 5a:6d:b6:ed:e1:d5:db:b8:61:a8:a0:0a:13:03:24: 60:4a:61:73:5a:8d:11:77:da:81:ac:f6:67:71:4a: 88:7e:6a:66:9a:33:23:df:69:0b:92:b2:58:9d:d1: b3:6d:33:ed:9b:92:49:1b:27:24:4b:12:dd:4b:b2: 78:86:14:9a:f1:bc:48:24:75:4a:b4:f1:8c:66:86: 82:33:f4:3b:e5:10:a8:1e:b8:a4:62:64:29:55:27: 0f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:65:B3:B2:AC:77:D0:76:8A:CD:BE:3E:EF:B7:89:EF:9F:B5:C8:0D X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/3F0F6E96BE5411EDAD9B2A1BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.246.128.0/24 43.246.130.0/24 43.246.196.0/24 43.246.198.0/24 103.8.85.0/24 103.15.32.0/24 103.15.79.0/24 103.24.161.0-103.24.163.255 103.248.150.0/24 Signature Algorithm: sha256WithRSAEncryption 34:8d:5f:fd:6d:ca:72:1a:0e:1d:8e:6f:04:fa:07:c4:dd:82: 55:f2:09:6f:47:1f:19:77:6d:c3:5d:47:62:52:74:0e:25:bd: e6:a5:3d:cf:6d:af:55:98:06:e7:0a:63:58:00:56:19:c0:45: 03:8f:8b:88:45:14:7d:7a:4b:bc:d2:ac:d7:06:19:f3:8f:bc: 04:88:e5:97:3f:e1:01:4f:49:c4:ea:e3:73:23:cb:77:a2:06: cf:22:58:b1:c6:12:4d:03:cd:e7:9f:97:3d:c8:d3:a5:2c:07: dc:b8:c2:08:ec:a6:f0:27:73:3e:10:03:cf:45:33:9e:f2:54: ac:b6:fb:23:10:60:29:5e:ce:b0:d2:59:88:22:2f:95:28:38: 33:67:2a:a9:41:08:c7:89:9a:93:03:73:9b:a1:da:09:3e:95: da:18:8d:1d:dc:da:a1:48:cf:20:97:e2:bc:f3:d4:78:0b:44: 95:0d:78:d4:88:18:b1:a7:62:d0:7e:75:9f:0b:e4:ec:50:51: 45:86:eb:ba:e4:e1:dd:34:62:eb:a7:8c:d9:1a:c5:57:7b:1a: 2f:da:69:37:5a:f2:4f:0b:ba:d9:7b:7b:7d:03:ae:25:47:b6: d4:44:f8:40:80:71:3f:c5:0d:b4:6c:09:d6:71:41:c0:07:02: dd:39:54:cf -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgICCnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjQwMzAyMjAyODQ3WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NWUzOGJmZi1mNTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRi8NxGQnTGjFx8dk+Hy4eLRe7OsgCLFuWE24Kk/rTcoz82D1oMmWT08rD5V YsWVotG5tHRg5//efpcJhaQ6IJ5PKkv9WdnQzx6yJWpRFw3ciLrhaiYvG0zwcCTK 9BHI9JG5pK8VZDYEggomm7ZvbILS4EVWFr+p/nPiPD6FujN14E14tXLxXhQKEEHO mkjHOVqaQ+q7VaZWdz8Fz1f/8eqD5GFabbbt4dXbuGGooAoTAyRgSmFzWo0Rd9qB rPZncUqIfmpmmjMj32kLkrJYndGzbTPtm5JJGyckSxLdS7J4hhSa8bxIJHVKtPGM ZoaCM/Q75RCoHrikYmQpVScP+QIDAQABo4ICzTCCAskwHQYDVR0OBBYEFA1ls7Ks d9B2is2+Pu+3ie+ftcgNMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvM0YwRjZFOTZC RTU0MTFFREFEOUIyQTFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVwYIKwYBBQUHAQcBAf8E SDBGMEQEAgABMD4DBAAr9oADBAAr9oIDBAAr9sQDBAAr9sYDBABnCFUDBABnDyAD BABnD08wDAMEAGcYoQMEAmcYoAMEAGf4ljANBgkqhkiG9w0BAQsFAAOCAQEANI1f /W3KchoOHY5vBPoHxN2CVfIJb0cfGXdtw11HYlJ0DiW95qU9z22vVZgG5wpjWABW GcBFA4+LiEUUfXpLvNKs1wYZ84+8BIjllz/hAU9JxOrjcyPLd6IGzyJYscYSTQPN 55+XPcjTpSwH3LjCCOym8CdzPhADz0UznvJUrLb7IxBgKV7OsNJZiCIvlSg4M2cq qUEIx4makwNzm6HaCT6V2hiNHdzaoUjPIJfivPPUeAtElQ141IgYsadi0H51nwvk 7FBRRYbruuTh3TRi66eM2RrFV3saL9ppN1ryTwu62Xt7fQOuJUe21ET4QIBxP8UN tGwJ1nFBwAcC3TlUzw== -----END CERTIFICATE-----Generated at Fri May 31 22:13:09 2024 by rpki-client on console-fra.rpki-client.org