$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/AAA33A7A74B011EF85E1C348C4F9AE02.roa File: AAA33A7A74B011EF85E1C348C4F9AE02.roa (raw, json) Hash identifier: P0ja5yGMmuugrOF5BJ+3udMpfSg7jsGxtmTDuFAzbtc= Subject key identifier: 4F:C0:D0:A4:09:D0:3E:1A:15:ED:0C:BA:D6:3C:8B:D0:1D:FD:BB:EA Certificate issuer: /CN=A91B7D14/serialNumber=BC42C3BC875C0676B29FD7ABC9F81B4A91FD8A89 Certificate serial: 0D Authority key identifier: BC:42:C3:BC:87:5C:06:76:B2:9F:D7:AB:C9:F8:1B:4A:91:FD:8A:89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/AAA33A7A74B011EF85E1C348C4F9AE02.roa Signing time: Thu 03 Oct 2024 07:10:13 +0000 ROA not before: Thu 03 Oct 2024 07:10:13 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 132300 IP address blocks: 103.74.252.0/22 maxlen: 22 103.74.252.0/24 maxlen: 24 103.74.253.0/24 maxlen: 24 103.74.254.0/24 maxlen: 24 103.74.255.0/24 maxlen: 24 202.94.168.0/22 maxlen: 22 202.94.168.0/24 maxlen: 24 202.94.169.0/24 maxlen: 24 202.94.170.0/24 maxlen: 24 202.94.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.crl rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7D14/serialNumber=BC42C3BC875C0676B29FD7ABC9F81B4A91FD8A89 Validity Not Before: Oct 3 07:10:13 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66fe4355-d7e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9d:24:ea:f2:db:84:47:a6:3b:06:c8:0d:b4: 9c:cf:7b:2d:3a:18:9d:01:e8:84:3f:cd:7e:cc:ec: 4d:2a:7c:45:b6:eb:c2:6d:23:e8:be:87:80:4a:5f: 55:c2:ab:1f:16:9c:ab:2c:26:90:03:8a:47:ba:79: 10:ae:6f:d4:f5:a8:98:7d:04:c8:29:62:97:20:cc: d9:22:59:f8:2f:af:29:b9:5e:f0:77:1d:d1:d6:3a: 25:14:31:77:b1:84:db:c7:b7:de:0d:12:5e:fb:02: 39:12:3c:7e:15:bd:a4:f0:74:42:26:1b:06:8c:49: 20:ec:a3:72:a5:bd:2e:77:36:b1:78:6d:63:96:89: c6:90:d8:42:ec:4c:fd:f3:64:68:ee:a3:ff:8e:48: c6:33:96:ba:70:f9:b9:e6:9a:fb:ef:69:9f:23:0c: fb:af:54:5d:50:0e:cd:c6:f5:ac:d9:33:42:5e:f5: 68:94:a6:84:a0:74:ea:4e:3d:35:df:5c:3e:28:59: 8a:ce:e1:87:69:83:57:1a:59:77:79:23:1d:e0:a3: bf:69:40:ce:1d:19:fe:05:a0:29:95:36:5e:1e:0a: 25:03:82:fe:66:62:a8:f2:99:d9:a8:e0:b7:86:f4: 2c:ea:51:61:fc:ac:ae:2e:1d:cd:9d:16:ca:e2:97: d0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C0:D0:A4:09:D0:3E:1A:15:ED:0C:BA:D6:3C:8B:D0:1D:FD:BB:EA X509v3 Authority Key Identifier: keyid:BC:42:C3:BC:87:5C:06:76:B2:9F:D7:AB:C9:F8:1B:4A:91:FD:8A:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/AAA33A7A74B011EF85E1C348C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.74.252.0/22 202.94.168.0/22 Signature Algorithm: sha256WithRSAEncryption 45:c9:49:05:a3:9c:0f:d9:a1:cf:82:0c:df:b9:92:92:87:aa: 8f:7b:b1:71:17:aa:80:ee:a2:6c:c3:4c:bf:86:9f:83:ab:1d: b3:f4:b1:18:a2:85:ec:42:dc:7d:6c:c9:fd:a3:6c:72:ec:19: 1c:4e:14:ed:50:16:7c:45:36:9c:e7:9d:75:c8:88:71:a6:b0: 73:19:94:36:6b:07:f9:c3:f5:a5:0a:65:69:35:86:13:ad:07: 6d:83:57:6a:37:e2:99:48:3c:51:00:d1:49:5f:2f:61:c8:39: 8e:e4:ae:21:5b:c0:a9:e7:32:45:8a:1d:e9:75:65:8c:7e:b3: cd:90:9e:76:83:65:55:26:84:4e:4c:29:95:a2:42:51:8a:19: 6c:6a:e2:af:2e:48:db:75:0e:51:a7:9d:20:e7:9a:83:3e:41: 09:8e:13:70:eb:90:f8:2c:40:3e:88:82:69:f0:fc:11:59:b7: 6f:95:9c:61:f2:2d:ed:e9:00:f4:f3:f5:25:4b:56:66:c7:03: 70:a6:01:02:57:23:54:58:ca:2a:28:a5:d6:1a:bd:9c:d1:c4: 6c:4d:19:90:89:5d:43:f5:e5:bd:00:50:60:d1:2d:6f:f4:b8: 12:98:41:2d:d8:0b:a7:b2:ca:0a:38:a8:e9:b3:a5:68:d6:88: 7b:b1:a3:ad -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC N0QxNDExMC8GA1UEBRMoQkM0MkMzQkM4NzVDMDY3NkIyOUZEN0FCQzlGODFCNEE5 MUZEOEE4OTAeFw0yNDEwMDMwNzEwMTNaFw0yNTEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZmU0MzU1LWQ3ZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFnSTq8tuER6Y7BsgNtJzPey06GJ0B6IQ/zX7M7E0qfEW268JtI+i+h4BKX1XC qx8WnKssJpADike6eRCub9T1qJh9BMgpYpcgzNkiWfgvrym5XvB3HdHWOiUUMXex hNvHt94NEl77AjkSPH4VvaTwdEImGwaMSSDso3KlvS53NrF4bWOWicaQ2ELsTP3z ZGjuo/+OSMYzlrpw+bnmmvvvaZ8jDPuvVF1QDs3G9azZM0Je9WiUpoSgdOpOPTXf XD4oWYrO4Ydpg1caWXd5Ix3go79pQM4dGf4FoCmVNl4eCiUDgv5mYqjymdmo4LeG 9CzqUWH8rK4uHc2dFsril9ApAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUT8DQpAnQ PhoV7Qy61jyL0B39u+owHwYDVR0jBBgwFoAUvELDvIdcBnayn9eryfgbSpH9iokw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3RDE0L0NEQjNCOUFBNzRB RjExRUY5MUE2NjE0NkM0RjlBRTAyL3ZFTER2SWRjQm5heW45ZXJ5ZmdiU3BIOWlv ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdkVMRHZJZGNCbmF5bjllcnlmZ2JTcEg5aW9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0QxNC9DREIzQjlBQTc0QUYxMUVGOTFBNjYxNDZDNEY5QUUwMi9BQUEzM0E3QTc0 QjAxMUVGODVFMUMzNDhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAmdK/AMEAspeqDANBgkqhkiG9w0BAQsFAAOCAQEARclJBaOc D9mhz4IM37mSkoeqj3uxcReqgO6ibMNMv4afg6sds/SxGKKF7ELcfWzJ/aNscuwZ HE4U7VAWfEU2nOeddciIcaawcxmUNmsH+cP1pQplaTWGE60HbYNXajfimUg8UQDR SV8vYcg5juSuIVvAqecyRYod6XVljH6zzZCedoNlVSaETkwplaJCUYoZbGriry5I 23UOUaedIOeagz5BCY4TcOuQ+CxAPoiCafD8EVm3b5WcYfIt7ekA9PP1JUtWZscD cKYBAlcjVFjKKiil1hq9nNHEbE0ZkIldQ/XlvQBQYNEtb/S4EphBLdgLp7LKCjio 6bOlaNaIe7GjrQ== -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:29 2024 by rpki-client on console-fra.rpki-client.org