$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/074283A632A511EF84ECD41AC4F9AE02.roa File: 074283A632A511EF84ECD41AC4F9AE02.roa (raw, json) Hash identifier: f4DCasN1alZ70tb2pHL9Cyk/z0rne/HgPP80BOvFb+o= Subject key identifier: 4C:FD:36:DA:F7:4D:43:7C:2A:2C:AE:1D:D9:C0:E6:97:8A:16:6E:97 Certificate issuer: /CN=A91A4DA5/serialNumber=4630A4B026A93D0DFAA8ECEC579CC521382E4E58 Certificate serial: 19 Authority key identifier: 46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/074283A632A511EF84ECD41AC4F9AE02.roa Signing time: Fri 26 Jul 2024 10:28:41 +0000 ROA not before: Fri 26 Jul 2024 10:28:41 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 133396 IP address blocks: 103.226.252.0/24 maxlen: 24 103.226.253.0/24 maxlen: 24 103.226.254.0/24 maxlen: 24 103.226.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 05:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4DA5/serialNumber=4630A4B026A93D0DFAA8ECEC579CC521382E4E58 Validity Not Before: Jul 26 10:28:41 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=66a37a59-da76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2a:01:63:36:78:2e:24:ce:62:91:62:d1:1d: 14:be:8c:39:04:f0:46:fd:37:8e:d4:91:90:d3:06: 09:9b:9f:b8:dd:65:54:49:4f:41:62:97:60:f3:e4: 1a:2b:f5:49:73:7e:14:c8:fb:32:6a:de:c3:03:08: cc:73:f2:b5:e6:a5:e5:10:28:9b:90:5a:1d:64:8c: 91:2a:8f:4f:7c:4d:8d:70:fb:80:7b:e3:85:d0:8a: 7a:7f:27:56:a3:cb:6d:8f:fe:ff:54:ec:d6:06:e5: b0:b1:57:6e:ff:df:26:89:ab:57:fb:a1:e0:c3:61: 13:0b:df:74:f2:76:d4:a0:44:86:8c:92:27:b3:06: f2:95:36:38:e7:ac:46:a4:ce:c0:d5:73:10:da:4a: cb:f1:10:e7:66:aa:bf:bb:3f:09:5d:c3:d8:f2:c0: 10:8f:cd:06:1d:b9:cb:6c:d8:36:49:ef:27:4a:60: d1:4a:24:28:86:40:26:56:e4:f1:a7:e0:31:a5:7d: 64:2e:db:97:60:6f:ff:9b:65:2b:63:f0:1d:b3:30: 37:56:c3:47:8c:3a:d8:f4:6b:85:fa:ec:80:37:00: 8a:87:7c:33:d2:89:bf:18:07:26:77:e4:9e:7f:c9: 9c:9f:c8:ab:9f:a7:e5:9c:f1:dc:ce:88:f4:99:ad: dd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:FD:36:DA:F7:4D:43:7C:2A:2C:AE:1D:D9:C0:E6:97:8A:16:6E:97 X509v3 Authority Key Identifier: keyid:46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/074283A632A511EF84ECD41AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.226.252.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:29:eb:34:b4:49:df:7e:2e:5d:b5:b5:ee:cc:0b:d6:ef:fb: 35:c6:a2:ee:44:a5:77:e6:14:13:d9:16:1f:2d:9c:4e:59:1e: 4f:4c:9e:ae:62:c2:95:03:87:41:c2:4a:54:ac:0e:c7:21:fc: 1d:b7:2a:4c:2a:b0:23:4d:80:28:1d:96:15:11:63:b6:e1:3e: 6a:d1:46:e9:21:8f:1f:76:ff:a0:ec:07:00:2b:d2:8a:36:b0: 52:6e:81:8e:0d:08:66:17:4a:01:6d:0b:8a:92:1b:37:21:d6: ac:89:ce:14:85:22:c9:03:3f:68:58:9a:d4:a6:6d:77:dd:eb: 87:22:ff:5a:7a:36:e6:d5:89:bb:4f:9a:04:97:65:b7:1d:cc: a9:6b:1c:4e:18:65:ba:4e:80:6f:e1:ab:77:35:bd:5e:0e:b1: 7b:78:7f:dc:a9:79:35:f4:96:60:82:48:ed:04:2f:3e:91:9c: 80:99:ff:c0:b0:e8:c5:2e:54:84:54:e1:10:f9:96:8a:5c:e1: 27:f4:9c:cf:65:c6:c9:c8:8f:64:9d:e8:d8:ab:e1:af:05:96: f4:c3:b4:f0:19:e7:e8:42:ba:0f:82:f9:81:01:24:5e:3a:6f: f4:92:64:54:4f:03:07:5f:26:4d:de:20:72:34:6a:48:8b:9d: 7a:98:00:1d -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NERBNTExMC8GA1UEBRMoNDYzMEE0QjAyNkE5M0QwREZBQThFQ0VDNTc5Q0M1MjEz ODJFNEU1ODAeFw0yNDA3MjYxMDI4NDFaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YTM3YTU5LWRhNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/KgFjNnguJM5ikWLRHRS+jDkE8Eb9N47UkZDTBgmbn7jdZVRJT0Fil2Dz5Bor 9UlzfhTI+zJq3sMDCMxz8rXmpeUQKJuQWh1kjJEqj098TY1w+4B744XQinp/J1aj y22P/v9U7NYG5bCxV27/3yaJq1f7oeDDYRML33TydtSgRIaMkiezBvKVNjjnrEak zsDVcxDaSsvxEOdmqr+7Pwldw9jywBCPzQYducts2DZJ7ydKYNFKJCiGQCZW5PGn 4DGlfWQu25dgb/+bZStj8B2zMDdWw0eMOtj0a4X67IA3AIqHfDPSib8YByZ35J5/ yZyfyKufp+Wc8dzOiPSZrd2jAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUTP022vdN Q3wqLK4d2cDml4oWbpcwHwYDVR0jBBgwFoAURjCksCapPQ36qOzsV5zFITguTlgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0REE1L0JEMzQ1NDlDMzJB NDExRUY4MjJFMEYxQUM0RjlBRTAyL1JqQ2tzQ2FwUFEzNnFPenNWNXpGSVRndVRs Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUmpDa3NDYXBQUTM2cU96c1Y1ekZJVGd1VGxnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NERBNS9CRDM0NTQ5QzMyQTQxMUVGODIyRTBGMUFDNEY5QUUwMi8wNzQyODNBNjMy QTUxMUVGODRFQ0Q0MUFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmfi/DANBgkqhkiG9w0BAQsFAAOCAQEAPynrNLRJ334uXbW1 7swL1u/7Ncai7kSld+YUE9kWHy2cTlkeT0yermLClQOHQcJKVKwOxyH8HbcqTCqw I02AKB2WFRFjtuE+atFG6SGPH3b/oOwHACvSijawUm6Bjg0IZhdKAW0LipIbNyHW rInOFIUiyQM/aFia1KZtd93rhyL/Wno25tWJu0+aBJdltx3MqWscThhluk6Ab+Gr dzW9Xg6xe3h/3Kl5NfSWYIJI7QQvPpGcgJn/wLDoxS5UhFThEPmWilzhJ/Scz2XG yciPZJ3o2KvhrwWW9MO08Bnn6EK6D4L5gQEkXjpv9JJkVE8DB18mTd4gcjRqSIud epgAHQ== -----END CERTIFICATE-----Generated at Thu Sep 19 07:14:20 2024 by rpki-client on console-fra.rpki-client.org