$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/204459886A4211EDB5C5EC63C4F9AE02.roa File: 204459886A4211EDB5C5EC63C4F9AE02.roa (raw, json) Hash identifier: Sq8uiyerrkKYOGJIifBc8UcljCMgS+tMTePx7O1v9zk= Subject key identifier: E9:6C:A4:F3:1E:53:47:CF:5C:A4:1A:D3:A6:03:06:BB:4E:B1:AE:B6 Certificate issuer: /CN=A91AA28B/serialNumber=6FC2EDF0C51152A3BEC1149A1BDB2EDB293C9D95 Certificate serial: 0C67 Authority key identifier: 6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/204459886A4211EDB5C5EC63C4F9AE02.roa Signing time: Wed 28 Feb 2024 18:57:29 +0000 ROA not before: Wed 28 Feb 2024 18:57:29 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 58682 IP address blocks: 103.204.208.0/22 maxlen: 22 103.204.208.0/24 maxlen: 24 103.204.209.0/24 maxlen: 24 103.204.210.0/24 maxlen: 24 103.204.211.0/24 maxlen: 24 202.181.16.0/24 maxlen: 24 202.181.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.crl rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3175 (0xc67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA28B/serialNumber=6FC2EDF0C51152A3BEC1149A1BDB2EDB293C9D95 Validity Not Before: Feb 28 18:57:29 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65df8218-4942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a5:ea:69:29:00:d3:7d:46:a6:10:78:38:f7: b3:a9:7f:89:7c:0c:c9:b3:0a:de:64:e5:a0:78:b5: d6:1f:36:74:8c:c9:6d:7a:40:83:76:1b:cf:c8:02: a3:b8:9b:67:e8:c5:91:1c:c7:e8:3f:38:6a:fc:c5: eb:87:c2:ba:ce:1a:ff:71:48:54:0e:2d:2f:1f:85: 79:84:3d:7e:20:f3:69:3a:c7:12:fd:2e:9f:d8:aa: 02:72:17:95:e2:a7:f3:6e:89:8e:c2:6c:7c:2b:3d: 53:4d:02:f0:b4:8f:79:39:36:56:4f:d8:7e:49:86: 88:6c:10:0d:c6:8f:f6:ee:b1:a5:7f:f8:ed:91:79: f3:e9:24:2f:e7:a3:2b:ac:fb:cd:10:50:2f:c6:50: d6:a0:75:f8:59:7e:89:5f:ac:2d:96:2b:5f:a5:39: 22:5f:71:b7:61:ac:ab:9d:1b:2b:36:94:9a:38:73: 0c:cf:9d:0f:2f:66:cc:ae:11:fe:ae:5a:f6:17:b3: 60:63:e8:92:6c:1b:ce:8c:bf:e1:28:43:ac:66:68: 96:08:62:f1:a8:a2:6d:7d:6b:bf:bf:1e:58:21:b5: 2e:7a:86:e9:ca:b1:99:ae:ed:ab:0d:e5:d9:92:fd: 03:73:16:28:c9:8a:45:90:47:5b:e6:45:ae:22:be: a6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:6C:A4:F3:1E:53:47:CF:5C:A4:1A:D3:A6:03:06:BB:4E:B1:AE:B6 X509v3 Authority Key Identifier: keyid:6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/204459886A4211EDB5C5EC63C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.204.208.0/22 202.181.16.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:21:47:63:c1:09:48:35:ef:e5:7a:84:9a:2e:09:08:95:a2: 72:e6:b0:5c:97:81:db:9c:78:d2:61:c9:a2:68:aa:ed:a4:6f: 98:22:1c:f9:f5:d1:72:08:36:dc:9c:bb:06:64:46:9b:f0:8b: 57:01:53:11:c8:4f:11:d0:e9:3c:77:6d:ef:c1:e3:87:e1:5a: 25:75:5a:5c:e2:49:98:76:9d:7a:f2:ac:b7:29:11:75:77:bd: d9:1e:92:e5:ef:74:dc:2b:ba:f8:9e:37:59:7d:87:3c:26:6e: 81:d9:6c:94:0c:e7:51:4c:cd:27:f3:3f:22:de:b3:2a:84:88: a5:39:e1:83:67:03:8f:66:29:fd:da:22:79:44:fe:0e:d5:7b: 57:bf:1b:a8:32:ac:61:e2:fd:83:24:04:0f:a4:99:d4:f0:f7: a0:51:d0:7a:05:6e:9c:14:e8:a3:ba:a5:a5:a0:94:88:56:8e: 86:a2:07:e6:a7:79:db:d6:95:ad:2c:ca:de:e5:94:da:bb:80: 89:0c:c8:d3:ac:75:c4:f2:89:99:c9:b5:df:9b:9d:1b:a4:38: 5d:91:e9:d0:17:6f:22:70:57:93:74:09:72:13:07:05:a2:e1: b0:77:04:2f:37:52:70:d6:af:55:c8:9d:12:e8:db:97:9d:f4: b6:34:ff:39 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUEyOEIxMTAvBgNVBAUTKDZGQzJFREYwQzUxMTUyQTNCRUMxMTQ5QTFCREIyRURC MjkzQzlEOTUwHhcNMjQwMjI4MTg1NzI5WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWRmODIxOC00OTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo6XqaSkA031GphB4OPezqX+JfAzJswreZOWgeLXWHzZ0jMltekCDdhvPyAKj uJtn6MWRHMfoPzhq/MXrh8K6zhr/cUhUDi0vH4V5hD1+IPNpOscS/S6f2KoCcheV 4qfzbomOwmx8Kz1TTQLwtI95OTZWT9h+SYaIbBANxo/27rGlf/jtkXnz6SQv56Mr rPvNEFAvxlDWoHX4WX6JX6wtlitfpTkiX3G3YayrnRsrNpSaOHMMz50PL2bMrhH+ rlr2F7NgY+iSbBvOjL/hKEOsZmiWCGLxqKJtfWu/vx5YIbUueobpyrGZru2rDeXZ kv0DcxYoyYpFkEdb5kWuIr6mDwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOlspPMe U0fPXKQa06YDBrtOsa62MB8GA1UdIwQYMBaAFG/C7fDFEVKjvsEUmhvbLtspPJ2V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTI4Qi8xRTAyNjRBQURC QzgxMUU5QkVBOTEwNTFDNEY5QUUwMi9iOEx0OE1VUlVxTy13UlNhRzlzdTJ5azhu WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4THQ4TVVSVXFPLXdSU2FHOXN1MnlrOG5aVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUEyOEIvMUUwMjY0QUFEQkM4MTFFOUJFQTkxMDUxQzRGOUFFMDIvMjA0NDU5ODg2 QTQyMTFFREI1QzVFQzYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnzNADBAHKtRAwDQYJKoZIhvcNAQELBQADggEBAD4hR2PB CUg17+V6hJouCQiVonLmsFyXgduceNJhyaJoqu2kb5giHPn10XIINtycuwZkRpvw i1cBUxHITxHQ6Tx3be/B44fhWiV1WlziSZh2nXryrLcpEXV3vdkekuXvdNwruvie N1l9hzwmboHZbJQM51FMzSfzPyLesyqEiKU54YNnA49mKf3aInlE/g7Ve1e/G6gy rGHi/YMkBA+kmdTw96BR0HoFbpwU6KO6paWglIhWjoaiB+anedvWla0syt7llNq7 gIkMyNOsdcTyiZnJtd+bnRukOF2R6dAXbyJwV5N0CXITBwWi4bB3BC83UnDWr1XI nRLo25ed9LY0/zk= -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org