$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A14437C0FAD311EDBF5E232DC4F9AE02.roa File: A14437C0FAD311EDBF5E232DC4F9AE02.roa (raw, json) Hash identifier: ZlfYUyzNDkY/Hdhzuxohezq9neeAWh1nZPe5y6PK9CQ= Subject key identifier: C7:9B:92:48:58:BD:09:FE:89:94:26:BE:D2:9B:27:54:29:98:5D:26 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4575 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A14437C0FAD311EDBF5E232DC4F9AE02.roa Signing time: Thu 05 Sep 2024 03:32:44 +0000 ROA not before: Thu 05 Sep 2024 03:32:44 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 135944 IP address blocks: 103.159.54.0/24 maxlen: 24 103.159.55.0/24 maxlen: 24 103.165.144.0/23 maxlen: 23 103.165.144.0/24 maxlen: 24 103.165.145.0/24 maxlen: 24 103.199.8.0/22 maxlen: 22 103.199.8.0/23 maxlen: 23 103.199.8.0/24 maxlen: 24 103.199.9.0/24 maxlen: 24 103.199.11.0/24 maxlen: 24 103.216.124.0/22 maxlen: 24 116.118.88.0/22 maxlen: 24 116.118.92.0/22 maxlen: 24 157.119.248.0/22 maxlen: 22 180.93.172.0/22 maxlen: 24 180.93.176.0/22 maxlen: 24 180.93.180.0/22 maxlen: 24 2001:df7:cc00::/48 maxlen: 48 2404:ef80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17781 (0x4575) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:32:44 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d9265c-4324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c3:e1:9f:b7:cc:c3:ab:4f:73:b6:12:43:3e: 16:f5:ed:bb:94:2c:c7:b5:78:08:77:43:05:a0:a7: 5d:14:3b:72:24:c9:85:68:50:40:60:19:bc:7a:29: c5:2e:a4:86:47:b0:f3:5a:f5:8a:6b:6a:7b:7d:4a: 98:ab:eb:62:4b:27:c0:e9:d1:cf:56:5d:7c:b8:c9: c4:75:40:7e:3c:ee:2e:1d:13:22:c1:26:9a:eb:05: 9a:57:32:ec:bd:9a:ec:bb:1c:98:a8:56:d5:ee:58: 58:4e:d9:86:65:d3:79:06:44:f5:00:14:7c:6c:fc: 9e:07:d2:1b:89:9a:7b:ce:bf:a3:f7:9a:6a:0a:a6: 09:4e:22:6b:6f:5d:de:e8:06:26:c9:6e:fc:3e:c3: 05:a6:d3:b7:77:f5:b7:f7:64:82:c8:23:64:9b:19: be:f2:05:23:9b:dc:b0:80:4b:09:93:52:97:55:07: bf:a0:62:6c:15:a3:4c:b1:8e:5a:3a:8a:aa:4f:6f: 6d:e6:dd:9b:f4:49:86:a2:aa:03:37:f6:39:92:77: b4:9b:71:99:87:b7:f6:98:6a:60:a7:2b:83:d2:c8: f8:21:d9:df:8e:64:4c:f6:43:4f:53:94:30:f6:48: 46:7c:19:61:a6:d6:1e:e2:33:5d:b9:7a:02:94:1c: 08:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:9B:92:48:58:BD:09:FE:89:94:26:BE:D2:9B:27:54:29:98:5D:26 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A14437C0FAD311EDBF5E232DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.159.54.0/23 103.165.144.0/23 103.199.8.0/22 103.216.124.0/22 116.118.88.0/21 157.119.248.0/22 180.93.172.0-180.93.183.255 IPv6: 2001:df7:cc00::/48 2404:ef80::/48 Signature Algorithm: sha256WithRSAEncryption 24:ed:32:7c:95:9e:b0:ee:64:70:49:98:79:d8:de:24:89:55: 74:dc:cb:56:dc:4d:41:29:db:40:73:3c:d1:11:47:a1:c2:39: 20:ad:0b:fd:86:c2:b0:be:52:6b:62:f5:ec:12:32:14:eb:17: 42:cd:94:8e:b6:bc:f9:0f:ce:62:bd:0e:c6:db:c1:46:e3:bb: 45:df:cf:39:8c:e2:d0:e6:6c:eb:9e:7b:b8:de:b2:04:f0:c0: 31:ae:1e:fd:8f:6f:29:69:48:46:88:36:aa:4a:21:d5:3e:fc: 7c:31:58:00:9f:96:19:10:60:5e:ef:ea:7b:52:f2:c2:0d:e1: 11:3e:5c:0c:e4:8d:d3:35:be:66:63:01:b7:96:0d:fc:01:a0: 37:37:41:2b:4e:4d:99:fe:c4:9a:8e:0f:86:20:8e:56:20:53: cf:75:48:12:45:63:83:d5:0e:b7:74:4e:05:09:2f:da:9e:7d: 48:98:ba:0e:51:7d:60:5b:2f:c9:9a:61:80:74:c5:2a:52:26: df:55:cb:77:a2:68:0a:85:91:7c:e2:0c:86:5b:39:7c:21:7a: b4:3d:76:2d:b7:ce:c7:a9:25:21:bc:b7:17:f9:bb:f6:e0:fc: 1d:c7:c4:59:2a:ad:cc:8c:48:fb:cb:04:c9:0b:98:a8:9b:2a: d0:db:77:7e -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgICRXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzMjQ0WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjY1Yy00MzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8Phn7fMw6tPc7YSQz4W9e27lCzHtXgId0MFoKddFDtyJMmFaFBAYBm8einF LqSGR7DzWvWKa2p7fUqYq+tiSyfA6dHPVl18uMnEdUB+PO4uHRMiwSaa6wWaVzLs vZrsuxyYqFbV7lhYTtmGZdN5BkT1ABR8bPyeB9IbiZp7zr+j95pqCqYJTiJrb13e 6AYmyW78PsMFptO3d/W392SCyCNkmxm+8gUjm9ywgEsJk1KXVQe/oGJsFaNMsY5a OoqqT29t5t2b9EmGoqoDN/Y5kne0m3GZh7f2mGpgpyuD0sj4IdnfjmRM9kNPU5Qw 9khGfBlhptYe4jNduXoClBwIzQIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFMebkkhY vQn+iZQmvtKbJ1QpmF0mMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQTE0NDM3QzBG QUQzMTFFREJGNUUyMzJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwZQYIKwYBBQUHAQcBAf8E VjBUMDgEAgABMDIDBAFnnzYDBAFnpZADBAJnxwgDBAJn2HwDBAN0dlgDBAKdd/gw DAMEArRdrAMEA7RdsDAYBAIAAjASAwcAIAEN98wAAwcAJATvgAAAMA0GCSqGSIb3 DQEBCwUAA4IBAQAk7TJ8lZ6w7mRwSZh52N4kiVV03MtW3E1BKdtAczzREUehwjkg rQv9hsKwvlJrYvXsEjIU6xdCzZSOtrz5D85ivQ7G28FG47tF3885jOLQ5mzrnnu4 3rIE8MAxrh79j28paUhGiDaqSiHVPvx8MVgAn5YZEGBe7+p7UvLCDeERPlwM5I3T Nb5mYwG3lg38AaA3N0ErTk2Z/sSajg+GII5WIFPPdUgSRWOD1Q63dE4FCS/ann1I mLoOUX1gWy/JmmGAdMUqUibfVct3omgKhZF84gyGWzl8IXq0PXYtt87HqSUhvLcX +bv24Pwdx8RZKq3MjEj7ywTJC5iomyrQ23d+ -----END CERTIFICATE-----Generated at Mon Nov 25 13:05:15 2024 by rpki-client on console-fra.rpki-client.org