$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/9584CC888FD611ECB5BAF00AC4F9AE02.roa File: 9584CC888FD611ECB5BAF00AC4F9AE02.roa (raw, json) Hash identifier: v7D11uFZh04llDHZqrd6SYkr8JZCdq90Vl4D6sHdAWk= Subject key identifier: 29:BF:ED:91:62:EF:7C:89:6B:CE:CB:B0:31:19:79:A7:3F:CD:52:70 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0AF2 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/9584CC888FD611ECB5BAF00AC4F9AE02.roa Signing time: Thu 12 Sep 2024 04:55:49 +0000 ROA not before: Thu 12 Sep 2024 04:55:49 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 2519 IP address blocks: 43.249.240.0/22 maxlen: 22 43.250.88.0/22 maxlen: 22 103.26.164.0/22 maxlen: 22 103.197.208.0/22 maxlen: 22 103.240.20.0/22 maxlen: 22 160.20.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2802 (0xaf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Sep 12 04:55:49 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=66e27455-5123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c2:23:55:17:64:47:e1:64:da:62:c1:34:61: d6:ce:2b:32:79:cd:3c:c5:98:0c:ab:de:30:b8:4d: 79:95:0e:4a:82:b8:2d:d0:9e:c9:2e:25:22:cf:c5: 94:0a:24:4c:80:dc:78:d8:36:54:c4:02:4e:f6:16: 71:f4:63:ac:c9:35:80:6f:f1:c0:a6:21:b6:b0:32: 76:9f:a7:17:79:75:50:91:9f:65:ef:8b:ac:5b:d9: 3e:04:a9:a5:72:eb:03:f8:18:79:0c:12:bd:4f:f4: 3d:d7:57:f8:e7:36:eb:c8:d7:c8:cf:6c:41:af:0e: ad:cc:73:37:1b:38:f2:33:9e:11:b1:3c:0f:6c:e7: 3e:0a:df:25:87:ec:6f:6a:1c:d6:60:50:cd:bf:52: 18:a5:f7:74:11:21:41:67:ff:92:db:84:3e:24:39: 0a:5a:b4:25:32:03:81:10:71:bd:7a:7e:32:1f:c5: 2d:82:c6:f6:bf:27:50:d5:f0:bc:9a:07:73:c3:66: df:8f:04:48:ef:de:a8:21:97:22:35:1e:98:bd:70: 2e:8f:db:87:8e:f6:f4:82:4b:98:28:75:1d:af:87: 12:3f:75:73:43:83:9e:94:5c:dc:25:4c:59:98:9c: a0:33:70:1e:bc:3c:1f:c6:90:25:e1:20:39:2e:88: c6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BF:ED:91:62:EF:7C:89:6B:CE:CB:B0:31:19:79:A7:3F:CD:52:70 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/9584CC888FD611ECB5BAF00AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.240.0/22 43.250.88.0/22 103.26.164.0/22 103.197.208.0/22 103.240.20.0/22 160.20.44.0/22 Signature Algorithm: sha256WithRSAEncryption b4:fe:ce:14:97:6f:4f:ee:9d:02:50:ed:aa:1c:8f:95:fe:c1: 23:dd:0b:06:43:bb:b8:23:1f:dc:29:da:a1:08:f8:dc:06:4e: e0:d4:dc:95:ba:37:06:a2:bb:bb:c6:31:e9:61:7c:a5:83:f3: 15:7a:c9:57:30:d1:09:da:2e:b7:b6:9b:41:e1:fb:b1:5a:ef: 7d:eb:7d:f2:fd:2d:17:0d:ac:76:ef:cc:b1:a6:ab:2a:0d:bd: 2e:16:4d:51:65:28:ee:a2:d0:90:2e:1e:24:83:b6:f0:75:e3: c2:48:13:e2:c2:5e:71:b5:98:a6:35:93:57:c0:85:85:71:17: 0a:e8:05:66:db:41:60:0d:71:51:1c:45:82:8b:b5:d8:1f:16: 2f:95:85:54:a8:7b:9c:2f:ba:69:64:0b:09:74:34:8b:f8:50: 8c:b9:a9:70:e7:af:c4:57:31:b8:63:6a:33:6e:4e:ab:5d:2f: d1:c1:6e:b2:a8:ea:8d:5f:33:73:32:e0:f1:d3:7e:f5:70:78: 07:c1:6b:33:6c:f4:87:31:f7:de:63:3c:f1:8a:eb:ef:6b:3c: c1:88:c9:fe:47:97:8b:04:fa:98:62:34:09:d1:93:ee:3c:b8: 40:da:29:ea:6d:ec:c1:d9:4c:fa:af:3b:06:f1:0f:67:07:69: 3f:c6:2f:2a -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICCvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjQwOTEyMDQ1NTQ5WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NmUyNzQ1NS01MTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8IjVRdkR+Fk2mLBNGHWzisyec08xZgMq94wuE15lQ5Kgrgt0J7JLiUiz8WU CiRMgNx42DZUxAJO9hZx9GOsyTWAb/HApiG2sDJ2n6cXeXVQkZ9l74usW9k+BKml cusD+Bh5DBK9T/Q911f45zbryNfIz2xBrw6tzHM3GzjyM54RsTwPbOc+Ct8lh+xv ahzWYFDNv1IYpfd0ESFBZ/+S24Q+JDkKWrQlMgOBEHG9en4yH8Utgsb2vydQ1fC8 mgdzw2bfjwRI796oIZciNR6YvXAuj9uHjvb0gkuYKHUdr4cSP3VzQ4OelFzcJUxZ mJygM3AevDwfxpAl4SA5LojGaQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFCm/7ZFi 73yJa87LsDEZeac/zVJwMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvOTU4NENDODg4 RkQ2MTFFQ0I1QkFGMDBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgABMCQDBAIr+fADBAIr+lgDBAJnGqQDBAJnxdADBAJn8BQDBAKgFCww DQYJKoZIhvcNAQELBQADggEBALT+zhSXb0/unQJQ7aocj5X+wSPdCwZDu7gjH9wp 2qEI+NwGTuDU3JW6Nwaiu7vGMelhfKWD8xV6yVcw0QnaLre2m0Hh+7Fa733rffL9 LRcNrHbvzLGmqyoNvS4WTVFlKO6i0JAuHiSDtvB148JIE+LCXnG1mKY1k1fAhYVx FwroBWbbQWANcVEcRYKLtdgfFi+VhVSoe5wvumlkCwl0NIv4UIy5qXDnr8RXMbhj ajNuTqtdL9HBbrKo6o1fM3My4PHTfvVweAfBazNs9Icx995jPPGK6+9rPMGIyf5H l4sE+phiNAnRk+48uEDaKept7MHZTPqvOwbxD2cHaT/GLyo= -----END CERTIFICATE-----Generated at Sun Nov 24 20:09:53 2024 by rpki-client on console-ams.rpki-client.org