$ rpki-client -vvf rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/8409527078B011EE8D737723C4F9AE02.roa File: 8409527078B011EE8D737723C4F9AE02.roa (raw, json) Hash identifier: 0ZYVM7VxDyYQJk7ae/RUp5ynDYTJuRZ5sT+0mo9VS4c= Subject key identifier: C7:57:AE:CC:04:6B:6F:FE:29:1F:53:FA:46:70:5D:BB:73:71:C0:09 Certificate issuer: /CN=A91B12FB/serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E Certificate serial: 023D Authority key identifier: 59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/8409527078B011EE8D737723C4F9AE02.roa Signing time: Mon 29 Jul 2024 03:04:47 +0000 ROA not before: Mon 29 Jul 2024 03:04:47 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 137443 IP address blocks: 103.189.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B12FB/serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E Validity Not Before: Jul 29 03:04:47 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66a706cf-0e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:49:43:0e:d7:8c:bd:70:5f:74:cc:40:30:f9: be:d9:aa:cc:5d:3e:04:1c:a3:32:a8:89:05:56:d6: 77:ec:7e:28:3c:4e:f2:c8:cc:87:52:3b:b1:ea:95: 08:18:0b:2d:49:ce:ca:42:b9:69:31:a1:73:66:50: e6:75:1e:f8:ee:2e:64:a6:b4:2c:88:aa:8f:53:6a: 55:8f:a0:50:ae:dc:1a:b9:48:2b:e1:a1:74:8e:b9: 1c:4e:8d:28:07:ee:a9:94:ae:4f:f3:a6:4a:f4:4b: 48:16:ff:9c:06:77:37:ea:d3:41:58:27:00:6f:10: 9d:c1:b9:26:65:57:eb:44:c6:fb:ef:49:50:ca:05: b1:37:e0:52:e6:82:20:34:3c:80:9c:59:b1:bf:49: bd:f7:6e:8b:ea:c7:2d:89:97:f0:29:0d:10:63:c6: 44:a7:7a:bf:57:1b:30:68:39:0f:b1:c2:ff:9f:be: f5:f4:77:ba:7f:65:a7:32:9e:c7:da:08:96:0c:d9: ca:13:5c:d4:3b:b8:1a:d3:dd:42:41:74:4a:5b:58: cf:fa:f4:20:4e:e3:38:ef:d8:d7:25:d1:97:00:3d: 53:6c:52:86:3d:e8:b1:c3:18:cf:dc:a4:be:5d:31: 17:31:34:dc:4c:e2:19:9d:7f:b3:48:f0:c7:bd:e5: 42:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:57:AE:CC:04:6B:6F:FE:29:1F:53:FA:46:70:5D:BB:73:71:C0:09 X509v3 Authority Key Identifier: keyid:59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/8409527078B011EE8D737723C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.189.140.0/23 Signature Algorithm: sha256WithRSAEncryption 08:bc:44:ef:2b:41:e0:7f:44:9c:a6:fe:d3:7b:48:e8:b0:7f: a6:87:47:21:9c:88:ac:ee:3a:e9:1b:03:1e:bb:74:ec:a8:38: f7:19:e4:d9:34:ce:ac:08:9c:c1:cb:38:c5:9a:74:5c:31:7b: 2d:19:11:96:9c:43:2c:43:d4:ee:f8:6f:0f:e0:50:45:f0:44: 99:0f:b5:b1:fa:6f:cc:f3:15:6a:41:4e:60:be:b7:24:cb:c3: aa:40:0f:f2:62:a0:68:2b:a6:24:65:40:5e:49:98:1e:e6:17: 7b:fa:e9:4a:d7:6e:9f:49:08:02:f9:d1:44:e0:ed:62:8a:d1: d3:c6:8c:71:d1:e5:ac:25:4c:a6:4d:5a:2b:a0:73:45:5b:98: c8:d9:29:54:3e:77:d8:cd:02:2d:00:1e:65:a9:3a:b9:c7:e6: eb:46:f4:08:d1:a4:25:82:da:72:aa:66:b2:42:70:fd:85:8b: 80:b5:35:86:fa:22:25:98:e9:61:14:d3:13:01:ee:55:3c:66: e5:3e:38:92:89:de:a3:49:b2:7c:db:d2:8f:ed:71:ff:35:44: 8e:33:96:1f:bb:32:10:0a:ce:48:f3:da:22:04:9b:6b:dd:06: ee:bb:2f:da:df:21:07:15:5f:bb:1a:98:1c:6e:e1:22:b2:33: 5a:29:56:39 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEyRkIxMTAvBgNVBAUTKDU5MTE4REQ3NTNGMDUzMEVEQzJCOEMzQkUyNjNCRURC MENDRUJDMEUwHhcNMjQwNzI5MDMwNDQ3WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmE3MDZjZi0wZTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxklDDteMvXBfdMxAMPm+2arMXT4EHKMyqIkFVtZ37H4oPE7yyMyHUjux6pUI GAstSc7KQrlpMaFzZlDmdR747i5kprQsiKqPU2pVj6BQrtwauUgr4aF0jrkcTo0o B+6plK5P86ZK9EtIFv+cBnc36tNBWCcAbxCdwbkmZVfrRMb770lQygWxN+BS5oIg NDyAnFmxv0m9926L6sctiZfwKQ0QY8ZEp3q/VxswaDkPscL/n7719He6f2WnMp7H 2giWDNnKE1zUO7ga091CQXRKW1jP+vQgTuM479jXJdGXAD1TbFKGPeixwxjP3KS+ XTEXMTTcTOIZnX+zSPDHveVCwQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMdXrswE a2/+KR9T+kZwXbtzccAJMB8GA1UdIwQYMBaAFFkRjddT8FMO3CuMO+JjvtsMzrwO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTJGQi9FMEQ2NDUxNEVE MUQxMUVDQjVGRjJCMjRDNEY5QUUwMi9XUkdOMTFQd1V3N2NLNHc3NG1PLTJ3ek92 QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dSR04xMVB3VXc3Y0s0dzc0bU8tMnd6T3ZBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjEyRkIvRTBENjQ1MTRFRDFEMTFFQ0I1RkYyQjI0QzRGOUFFMDIvODQwOTUyNzA3 OEIwMTFFRThENzM3NzIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnvYwwDQYJKoZIhvcNAQELBQADggEBAAi8RO8rQeB/RJym /tN7SOiwf6aHRyGciKzuOukbAx67dOyoOPcZ5Nk0zqwInMHLOMWadFwxey0ZEZac QyxD1O74bw/gUEXwRJkPtbH6b8zzFWpBTmC+tyTLw6pAD/JioGgrpiRlQF5JmB7m F3v66UrXbp9JCAL50UTg7WKK0dPGjHHR5awlTKZNWiugc0VbmMjZKVQ+d9jNAi0A HmWpOrnH5utG9AjRpCWC2nKqZrJCcP2Fi4C1NYb6IiWY6WEU0xMB7lU8ZuU+OJKJ 3qNJsnzb0o/tcf81RI4zlh+7MhAKzkjz2iIEm2vdBu67L9rfIQcVX7samBxu4SKy M1opVjk= -----END CERTIFICATE-----Generated at Thu Nov 21 03:12:03 2024 by rpki-client on console-fra.rpki-client.org