$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/10EB4F2CC04811ECA5D31D72C4F9AE02.roa File: 10EB4F2CC04811ECA5D31D72C4F9AE02.roa (raw, json) Hash identifier: e7kmKfmvHJritB3ZOiTxFs45wUmPvKdNCszQgaIQpPg= Subject key identifier: F1:D4:57:6D:CB:4C:20:B7:56:57:EC:14:4B:97:4A:64:E9:90:CC:E7 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4545 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/10EB4F2CC04811ECA5D31D72C4F9AE02.roa Signing time: Thu 05 Sep 2024 03:32:02 +0000 ROA not before: Thu 05 Sep 2024 03:32:02 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 131401 IP address blocks: 103.228.20.0/22 maxlen: 24 2001:df0:8380::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17733 (0x4545) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:32:02 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d92631-7268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:02:ea:a0:92:40:02:cf:a4:f7:fb:48:30:69: e2:d9:98:6a:ec:c9:e4:b9:ff:67:36:0f:7d:60:b8: ff:b8:08:0c:05:e2:76:88:54:0d:3e:da:f2:df:26: 3d:d8:b9:3e:42:3b:7c:b5:6a:68:75:c7:70:7f:fd: bd:a6:e3:45:32:cc:47:ad:54:88:5e:a2:3f:5d:f5: 23:43:70:3e:73:27:e2:11:57:d5:b2:c5:b6:60:ef: 45:0b:5e:8a:2f:95:38:e8:d2:78:35:7a:bd:9b:90: 3a:56:61:80:95:da:ac:ac:06:68:1a:53:89:40:46: 11:12:26:f1:05:e6:9c:85:44:43:b2:a8:c9:a2:91: 25:67:03:65:89:de:32:48:6c:a4:ef:d1:55:b1:2a: 85:93:af:c2:bd:89:26:3c:8e:5b:cb:31:a5:3a:fa: 75:f6:f1:ba:f1:8f:18:87:58:f9:ff:a0:38:fa:9b: e7:44:47:82:1b:f9:60:b0:d6:6f:1b:bd:9d:c2:2b: cb:51:ec:fb:36:81:5a:f9:8b:40:a1:10:7c:01:b5: 5e:a5:43:a1:dc:8e:79:51:f7:6c:90:31:f9:13:18: ca:aa:e8:2d:36:15:a9:1a:fc:4d:08:54:6e:38:ba: 7b:b1:cb:13:14:fd:b9:66:7b:3f:10:50:47:80:c4: 5c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D4:57:6D:CB:4C:20:B7:56:57:EC:14:4B:97:4A:64:E9:90:CC:E7 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/10EB4F2CC04811ECA5D31D72C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.228.20.0/22 IPv6: 2001:df0:8380::/48 Signature Algorithm: sha256WithRSAEncryption 59:8c:63:23:04:85:bb:0e:93:c9:9e:f8:59:b0:6e:cf:a7:64: 89:5d:a0:89:6f:0f:09:94:4b:84:64:97:44:b9:0f:7d:7e:b0: 23:58:f2:18:40:a0:26:f6:ef:d6:77:8f:b2:5c:c9:6c:af:fb: 52:1e:60:59:d0:5f:bc:04:c1:32:3c:27:d9:4a:83:d1:59:68: 12:e6:9f:55:45:e3:3d:2b:82:35:bd:35:2c:60:19:81:58:79: b2:b6:a6:cc:bb:a3:17:1e:e4:f9:0a:f6:20:da:d1:88:6c:2f: 0d:d1:bf:b0:04:25:25:a5:5a:18:a2:04:3f:7b:e3:6d:19:ca: 10:05:f5:cf:2f:d4:3a:89:82:9d:3f:f8:91:76:e4:6b:17:64: f9:e9:59:51:42:07:b1:db:5c:87:5e:08:34:4d:66:7e:5f:89: dd:d2:de:59:ae:ac:04:ee:66:45:6e:78:2a:a8:99:56:ad:15: 8e:12:78:34:4f:ba:75:72:76:be:f6:d0:ed:be:27:03:4b:29: 29:7d:f6:88:23:e4:60:df:69:ed:b1:44:87:81:7d:dc:cf:4d: ca:fc:86:79:d1:ec:92:1e:48:26:43:ee:f2:72:bb:1f:a1:fa: 96:9a:cb:25:09:44:ee:7a:47:00:b7:b4:9c:2b:95:23:6d:7a: 9e:50:d0:27 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICRUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzMjAyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjYzMS03MjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3gLqoJJAAs+k9/tIMGni2Zhq7Mnkuf9nNg99YLj/uAgMBeJ2iFQNPtry3yY9 2Lk+Qjt8tWpodcdwf/29puNFMsxHrVSIXqI/XfUjQ3A+cyfiEVfVssW2YO9FC16K L5U46NJ4NXq9m5A6VmGAldqsrAZoGlOJQEYREibxBeachURDsqjJopElZwNlid4y SGyk79FVsSqFk6/CvYkmPI5byzGlOvp19vG68Y8Yh1j5/6A4+pvnREeCG/lgsNZv G72dwivLUez7NoFa+YtAoRB8AbVepUOh3I55UfdskDH5ExjKqugtNhWpGvxNCFRu OLp7scsTFP25Zns/EFBHgMRcSwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPHUV23L TCC3VlfsFEuXSmTpkMznMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMTBFQjRGMkND MDQ4MTFFQ0E1RDMxRDcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJn5BQwDwQCAAIwCQMHACABDfCDgDANBgkqhkiG9w0BAQsF AAOCAQEAWYxjIwSFuw6TyZ74WbBuz6dkiV2giW8PCZRLhGSXRLkPfX6wI1jyGECg Jvbv1nePslzJbK/7Uh5gWdBfvATBMjwn2UqD0VloEuafVUXjPSuCNb01LGAZgVh5 sramzLujFx7k+Qr2INrRiGwvDdG/sAQlJaVaGKIEP3vjbRnKEAX1zy/UOomCnT/4 kXbkaxdk+elZUUIHsdtch14INE1mfl+J3dLeWa6sBO5mRW54KqiZVq0VjhJ4NE+6 dXJ2vvbQ7b4nA0spKX32iCPkYN9p7bFEh4F93M9NyvyGedHskh5IJkPu8nK7H6H6 lprLJQlE7npHALe0nCuVI216nlDQJw== -----END CERTIFICATE-----Generated at Mon Nov 25 13:05:15 2024 by rpki-client on console-fra.rpki-client.org