$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A7872280B71911ED81414035C4F9AE02.roa File: A7872280B71911ED81414035C4F9AE02.roa (raw, json) Hash identifier: G/NrPlImn5APtooki/YrO6I9fUDOFsDYxEWKs8O6WFw= Subject key identifier: F9:8D:2E:22:EC:40:27:3C:49:56:1C:23:A7:A4:BA:43:B9:D5:A7:20 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4780 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A7872280B71911ED81414035C4F9AE02.roa Signing time: Tue 22 Oct 2024 07:33:40 +0000 ROA not before: Tue 22 Oct 2024 07:33:40 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 135981 IP address blocks: 103.141.142.0/23 maxlen: 23 103.155.216.0/24 maxlen: 24 103.168.52.0/24 maxlen: 24 2400:3220::/48 maxlen: 48 2405:1a40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18304 (0x4780) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 22 07:33:40 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67175554-5d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e9:b0:7d:da:8e:4a:79:da:7a:b0:21:aa:37: ac:c2:43:e1:36:42:be:96:1e:5d:6b:05:f6:ba:7c: 2d:da:5d:c0:c6:90:15:c7:4a:55:61:1a:1b:d3:4f: ae:e8:93:9d:2a:df:3f:45:05:8d:e6:4f:81:7e:e2: b4:10:34:2c:91:37:ea:45:92:08:45:68:77:7c:f5: 90:57:f9:e5:8d:f7:d6:b6:ab:6e:04:d0:83:85:0e: cd:b7:c0:7b:93:e5:c7:8e:f0:f1:45:b4:a4:f1:be: e2:7d:b2:a6:cc:a0:67:c2:e2:73:ab:a0:39:1b:bb: a1:60:61:4d:91:56:34:1d:4f:73:25:30:35:4d:cb: da:f9:4e:63:b1:a8:24:e9:be:83:a6:cc:41:2c:20: 8a:3b:60:80:a4:00:e1:bc:e5:84:c2:e7:18:fc:58: d9:13:8a:ea:18:d9:fe:78:87:72:37:17:d3:8e:28: 2f:7b:3d:29:74:47:3c:36:01:25:a5:8a:bc:00:de: 8a:b1:61:f2:c4:09:62:a5:0e:cc:8b:e9:ed:a5:7e: 02:d8:fe:d2:cc:63:18:38:fb:e0:30:28:05:d8:4a: 59:5e:d7:2c:ff:3e:35:d0:8e:3f:97:f5:cc:50:d2: 01:32:aa:6b:f4:8d:f4:e7:a1:ac:87:4c:00:e9:78: 8b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8D:2E:22:EC:40:27:3C:49:56:1C:23:A7:A4:BA:43:B9:D5:A7:20 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A7872280B71911ED81414035C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.141.142.0/23 103.155.216.0/24 103.168.52.0/24 IPv6: 2400:3220::/48 2405:1a40::/48 Signature Algorithm: sha256WithRSAEncryption 02:a3:92:3e:96:c5:99:bc:4c:4b:44:2a:ee:6a:a0:ba:db:76: d8:51:e7:2e:6d:4f:bb:b2:cb:44:6c:8b:9a:05:f8:35:df:f0: 2b:52:77:f4:e6:33:1f:b6:b1:f5:f0:d3:e4:05:62:d8:92:ac: b6:a0:09:92:cc:f3:70:ce:31:7b:8b:08:b6:72:95:30:a8:2d: cb:49:65:45:c0:3f:67:34:84:2f:dc:79:7a:2b:06:b5:b6:af: 6a:f0:30:d5:1a:37:d0:61:ce:c2:d8:a4:68:df:4f:cd:0e:fb: 86:15:aa:df:64:ea:e1:b0:90:2a:1e:ca:1b:04:fc:97:fa:fb: 56:b8:92:db:0c:2f:9f:96:25:7a:4a:55:7b:e4:5f:74:b5:94: 5f:35:44:6a:6f:29:14:10:18:44:ae:a4:76:31:3e:02:eb:ba: 54:7c:f4:e7:5e:f9:96:97:48:6c:09:1f:a3:fe:95:2f:1b:bb: b5:13:f6:5b:d8:35:f5:95:52:d1:75:79:ea:43:0f:d8:3e:5e: 3a:0d:72:aa:d8:b7:ab:c2:b4:f6:dc:4d:0c:33:75:8d:77:99: 79:73:69:e7:ca:6b:2b:90:ae:05:13:04:b4:48:0b:74:0d:17: 58:6e:0d:c1:53:fa:f9:95:e3:52:ff:3d:2e:f5:63:2d:fa:e8: e1:27:2e:51 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgICR4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQxMDIyMDczMzQwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzE3NTU1NC01ZDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwemwfdqOSnnaerAhqjeswkPhNkK+lh5dawX2unwt2l3AxpAVx0pVYRob00+u 6JOdKt8/RQWN5k+BfuK0EDQskTfqRZIIRWh3fPWQV/nljffWtqtuBNCDhQ7Nt8B7 k+XHjvDxRbSk8b7ifbKmzKBnwuJzq6A5G7uhYGFNkVY0HU9zJTA1Tcva+U5jsagk 6b6DpsxBLCCKO2CApADhvOWEwucY/FjZE4rqGNn+eIdyNxfTjigvez0pdEc8NgEl pYq8AN6KsWHyxAlipQ7Mi+ntpX4C2P7SzGMYOPvgMCgF2EpZXtcs/z410I4/l/XM UNIBMqpr9I3056Gsh0wA6XiLgQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFPmNLiLs QCc8SVYcI6ekukO51acgMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQTc4NzIyODBC NzE5MTFFRDgxNDE0MDM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRQYIKwYBBQUHAQcBAf8E NjA0MBgEAgABMBIDBAFnjY4DBABnm9gDBABnqDQwGAQCAAIwEgMHACQAMiAAAAMH ACQFGkAAADANBgkqhkiG9w0BAQsFAAOCAQEAAqOSPpbFmbxMS0Qq7mqgutt22FHn Lm1Pu7LLRGyLmgX4Nd/wK1J39OYzH7ax9fDT5AVi2JKstqAJkszzcM4xe4sItnKV MKgty0llRcA/ZzSEL9x5eisGtbavavAw1Ro30GHOwtikaN9PzQ77hhWq32Tq4bCQ Kh7KGwT8l/r7VriS2wwvn5YlekpVe+RfdLWUXzVEam8pFBAYRK6kdjE+Auu6VHz0 5175lpdIbAkfo/6VLxu7tRP2W9g19ZVS0XV56kMP2D5eOg1yqti3q8K09txNDDN1 jXeZeXNp58prK5CuBRMEtEgLdA0XWG4NwVP6+ZXjUv89LvVjLfro4ScuUQ== -----END CERTIFICATE-----Generated at Mon Nov 25 13:05:16 2024 by rpki-client on console-fra.rpki-client.org