$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/8F14EDAA70B911EDB6E1F81BC4F9AE02.roa File: 8F14EDAA70B911EDB6E1F81BC4F9AE02.roa (raw, json) Hash identifier: MNxrpIPrHgM/agNjK/jcXHufvJo1kAtzpF1UchJEPbQ= Subject key identifier: 88:78:F2:BF:6E:F9:6B:2C:1D:6D:F5:C9:EA:4D:B9:1E:36:54:3A:66 Certificate issuer: /CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540 Certificate serial: 012B Authority key identifier: 71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/8F14EDAA70B911EDB6E1F81BC4F9AE02.roa Signing time: Tue 04 Jun 2024 10:18:42 +0000 ROA not before: Tue 04 Jun 2024 10:18:42 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 137449 IP address blocks: 103.42.228.0/23 maxlen: 24 103.42.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:10:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540 Validity Not Before: Jun 4 10:18:42 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=665eea02-30c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:64:4d:17:2e:91:cb:2c:40:55:a3:9b:91:e1: e9:da:27:c1:b6:00:18:42:fe:e7:66:bd:58:63:92: ca:db:4c:16:56:12:86:01:22:c5:b3:4e:25:83:dc: c6:46:27:23:ef:55:d1:00:49:a7:3f:ce:29:a3:bc: 9c:90:c6:e3:10:6f:c5:44:c4:9f:a2:dd:5c:f1:0d: 25:0e:8a:fb:5d:b3:1b:71:83:62:86:57:87:c5:eb: 84:36:99:99:39:43:fe:68:22:63:43:47:55:4b:fb: 17:bf:fe:24:f5:cf:85:8c:19:b1:9e:31:7c:77:11: d8:54:a3:fa:dd:92:86:13:36:95:f4:75:c6:d5:c7: 4d:cb:97:4a:62:aa:1e:75:a8:40:9e:58:02:6f:89: 01:e1:8b:ea:2a:59:38:7b:5f:98:9b:65:67:23:0f: 3e:96:ff:bd:2e:28:e4:37:73:f7:ad:41:f9:d8:6a: 0d:17:dc:f7:76:e5:c3:93:8f:fa:0e:23:4c:fa:88: 20:ae:48:63:18:43:19:2d:4a:bd:3b:3e:83:0b:21: f8:f4:25:03:08:62:33:a9:82:2a:cf:a1:55:18:c6: d1:a6:04:3c:82:6f:31:a8:64:81:a7:39:5c:c1:d6: f0:b9:3f:1d:a2:a1:39:4f:1b:8e:9d:00:28:bc:95: 28:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:78:F2:BF:6E:F9:6B:2C:1D:6D:F5:C9:EA:4D:B9:1E:36:54:3A:66 X509v3 Authority Key Identifier: keyid:71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/8F14EDAA70B911EDB6E1F81BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.42.228.0/23 Signature Algorithm: sha256WithRSAEncryption 44:3d:1c:3d:6f:d3:96:57:14:91:5b:52:4b:d9:4b:3a:f1:46: 79:4a:64:2b:6f:4e:cc:0a:0a:73:e3:24:4f:06:d9:d7:18:d5: 9c:ce:7f:84:bb:6f:46:01:06:4f:cc:8c:7f:6a:9e:83:2a:44: dc:57:b0:a8:fa:85:0f:09:0c:0c:c6:2c:91:a2:d6:66:39:60: 9c:b3:a4:16:18:4b:81:6a:fc:57:f0:df:0b:53:f6:3a:bc:f4: 84:16:c2:84:3e:7e:39:41:44:d2:8b:36:9f:5f:11:6d:57:8a: 9d:8e:d0:49:bd:6d:eb:16:d8:46:1b:c1:51:8a:41:05:a3:30: c5:fb:c4:d7:6b:71:c6:3b:dc:26:95:70:48:4e:2b:bd:cb:cb: 6b:cb:06:82:0c:b8:92:9d:d5:a6:9f:f7:9c:d8:7d:3b:59:ee: 61:17:38:95:8d:6e:91:43:43:20:8c:71:34:3c:93:48:c6:e3: 6a:62:95:98:94:71:b4:ee:c7:dd:e6:4f:c8:00:9d:d8:c5:5c: da:98:b6:31:b8:b8:80:26:06:6c:73:7e:f0:81:59:3c:24:77: 02:3e:bb:d4:86:42:87:ad:be:24:04:86:b4:0f:c3:64:76:21: 6f:58:d7:d1:0a:ea:33:d1:bf:3a:06:20:2d:87:6b:e6:20:32: ad:c0:d4:1e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBNTIxMTAvBgNVBAUTKDcxMkVCNUEyRDcwNjlGMThFRTlDNjVGM0IwMTMyNzFB REJGMUY1NDAwHhcNMjQwNjA0MTAxODQyWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NjVlZWEwMi0zMGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2RNFy6RyyxAVaObkeHp2ifBtgAYQv7nZr1YY5LK20wWVhKGASLFs04lg9zG Ricj71XRAEmnP84po7yckMbjEG/FRMSfot1c8Q0lDor7XbMbcYNihleHxeuENpmZ OUP+aCJjQ0dVS/sXv/4k9c+FjBmxnjF8dxHYVKP63ZKGEzaV9HXG1cdNy5dKYqoe dahAnlgCb4kB4YvqKlk4e1+Ym2VnIw8+lv+9LijkN3P3rUH52GoNF9z3duXDk4/6 DiNM+oggrkhjGEMZLUq9Oz6DCyH49CUDCGIzqYIqz6FVGMbRpgQ8gm8xqGSBpzlc wdbwuT8doqE5TxuOnQAovJUoYwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIh48r9u +WssHW31yepNuR42VDpmMB8GA1UdIwQYMBaAFHEutaLXBp8Y7pxl87ATJxrb8fVA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE1Mi9GQjdFNEJERTcw QjUxMUVEOTNGMEREMTZDNEY5QUUwMi9jUzYxb3RjR254anVuR1h6c0JNbkd0dng5 VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NTNjFvdGNHbnhqdW5HWHpzQk1uR3R2eDlVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QThBNTIvRkI3RTRCREU3MEI1MTFFRDkzRjBERDE2QzRGOUFFMDIvOEYxNEVEQUE3 MEI5MTFFREI2RTFGODFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnKuQwDQYJKoZIhvcNAQELBQADggEBAEQ9HD1v05ZXFJFb UkvZSzrxRnlKZCtvTswKCnPjJE8G2dcY1ZzOf4S7b0YBBk/MjH9qnoMqRNxXsKj6 hQ8JDAzGLJGi1mY5YJyzpBYYS4Fq/Ffw3wtT9jq89IQWwoQ+fjlBRNKLNp9fEW1X ip2O0Em9besW2EYbwVGKQQWjMMX7xNdrccY73CaVcEhOK73Ly2vLBoIMuJKd1aaf 95zYfTtZ7mEXOJWNbpFDQyCMcTQ8k0jG42pilZiUcbTux93mT8gAndjFXNqYtjG4 uIAmBmxzfvCBWTwkdwI+u9SGQoetviQEhrQPw2R2IW9Y19EK6jPRvzoGIC2Ha+Yg Mq3A1B4= -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:55 2024 by rpki-client on console-fra.rpki-client.org