$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/71014290D87411EE97234F5CC4F9AE02.roa File: 71014290D87411EE97234F5CC4F9AE02.roa (raw, json) Hash identifier: UriYheink9mBFpQsL32JX0ce8LUKE4XsmIwp1611QqI= Subject key identifier: C3:75:1F:5E:40:1B:1F:3A:FA:FF:D9:78:5A:7D:8B:7C:4D:59:E7:90 Certificate issuer: /CN=A91BB227/serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B Certificate serial: AD Authority key identifier: 73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/71014290D87411EE97234F5CC4F9AE02.roa Signing time: Thu 15 Aug 2024 05:47:12 +0000 ROA not before: Thu 15 Aug 2024 05:47:11 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 16509 IP address blocks: 103.14.230.0/24 maxlen: 24 2001:df2:b740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB227/serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B Validity Not Before: Aug 15 05:47:11 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66bd965f-378f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:cc:5c:8d:6b:6f:0f:83:50:a0:b8:7d:3c:56: f1:88:d1:ab:d1:d8:90:0b:76:3a:a8:05:15:69:c8: 76:be:f3:6d:30:fa:49:aa:be:46:2c:ee:bc:7d:63: 6e:3f:72:42:a3:4b:0e:bd:9e:ee:3f:79:2c:3a:e1: df:ed:d7:d1:53:8c:11:80:3f:49:c9:04:ca:a8:f3: a3:e4:9e:e4:29:2a:c5:0a:bc:ea:b3:66:67:0e:a5: 22:9f:75:a6:27:94:b6:5e:6f:2a:77:8d:48:1c:bf: 82:35:18:46:09:4c:67:71:25:bd:4a:b0:aa:8a:8d: 48:53:da:a8:18:0c:7f:09:d8:bc:13:93:53:9a:38: fa:df:73:b8:b5:2e:52:d0:f4:73:90:7b:e4:ba:4a: 44:76:53:ab:90:33:e7:e9:f5:7e:c2:46:2b:9f:bd: b9:68:f8:47:e1:83:57:2c:c7:cb:11:84:46:da:44: be:ab:9f:b8:0d:7b:88:4c:2e:86:5e:a1:67:dc:db: e9:99:72:f2:ae:3d:0c:3c:15:21:a6:a7:75:2f:5f: 15:17:61:d9:9a:b4:99:e8:87:de:98:81:b0:3c:81: 63:70:7a:99:4e:5f:40:2c:df:e1:1a:2c:c3:2b:5d: 71:d8:bc:c9:9d:05:00:bc:d3:80:99:ed:34:11:d0: 12:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:75:1F:5E:40:1B:1F:3A:FA:FF:D9:78:5A:7D:8B:7C:4D:59:E7:90 X509v3 Authority Key Identifier: keyid:73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/71014290D87411EE97234F5CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.14.230.0/24 IPv6: 2001:df2:b740::/48 Signature Algorithm: sha256WithRSAEncryption b2:f0:e7:0a:35:7b:82:d3:bf:ec:04:29:bd:43:66:a6:bf:d0: 52:ed:4d:6f:c5:09:39:7e:2a:38:12:8c:60:10:57:09:01:24: 32:a6:b9:13:26:fa:d2:a1:44:64:9c:9d:85:d8:b0:c1:28:96: 51:87:ac:25:0d:a4:69:2f:46:3f:24:94:bd:5a:d7:7d:c6:26: c9:00:6e:06:81:be:31:fd:94:d8:a3:aa:08:99:fc:24:a2:eb: 6d:b7:16:8b:88:fa:b3:d5:fb:dd:1d:4d:9e:20:4c:50:3b:ba: 8c:44:0e:4a:e9:9c:82:1f:bc:4d:66:b9:0d:a1:26:a3:df:57: c4:25:3b:88:ec:37:e7:6a:e0:26:3f:71:b9:7a:ab:e0:b2:08: 39:78:24:4e:0d:19:57:b2:ea:c7:c8:c9:9a:01:a3:bb:3c:40: 20:9b:c7:86:ed:e8:59:9c:15:47:dc:74:f6:fe:b4:7d:8c:60: d8:d7:2d:c4:b6:57:99:06:f8:c9:f7:f1:55:c4:31:ce:7c:05: c8:b4:33:7a:69:8b:ee:7d:cd:b9:98:da:9c:50:35:f9:98:66: d2:d4:21:65:45:9d:45:2d:9c:a9:31:d6:d5:d4:e8:ca:6f:57: b4:f1:60:b9:11:94:bd:9b:b2:58:8d:7d:fc:df:ce:2b:22:45: 5c:53:c0:21 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIyMjcxMTAvBgNVBAUTKDczNThFNkJDMjkwOEM2ODE0MEJGM0I4QTgxNUY2OTVE Q0IyQThBNEIwHhcNMjQwODE1MDU0NzExWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmJkOTY1Zi0zNzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5sxcjWtvD4NQoLh9PFbxiNGr0diQC3Y6qAUVach2vvNtMPpJqr5GLO68fWNu P3JCo0sOvZ7uP3ksOuHf7dfRU4wRgD9JyQTKqPOj5J7kKSrFCrzqs2ZnDqUin3Wm J5S2Xm8qd41IHL+CNRhGCUxncSW9SrCqio1IU9qoGAx/Cdi8E5NTmjj633O4tS5S 0PRzkHvkukpEdlOrkDPn6fV+wkYrn725aPhH4YNXLMfLEYRG2kS+q5+4DXuITC6G XqFn3NvpmXLyrj0MPBUhpqd1L18VF2HZmrSZ6IfemIGwPIFjcHqZTl9ALN/hGizD K11x2LzJnQUAvNOAme00EdAScwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFMN1H15A Gx86+v/ZeFp9i3xNWeeQMB8GA1UdIwQYMBaAFHNY5rwpCMaBQL87ioFfaV3LKopL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjIyNy9ENUE1NTM5ODVE MkQxMUVFQTNFMzlGNTdDNEY5QUUwMi9jMWptdkNrSXhvRkF2enVLZ1Y5cFhjc3Fp a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Mxam12Q2tJeG9GQXZ6dUtnVjlwWGNzcWlrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkIyMjcvRDVBNTUzOTg1RDJEMTFFRUEzRTM5RjU3QzRGOUFFMDIvNzEwMTQyOTBE ODc0MTFFRTk3MjM0RjVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnDuYwDwQCAAIwCQMHACABDfK3QDANBgkqhkiG9w0BAQsF AAOCAQEAsvDnCjV7gtO/7AQpvUNmpr/QUu1Nb8UJOX4qOBKMYBBXCQEkMqa5Eyb6 0qFEZJydhdiwwSiWUYesJQ2kaS9GPySUvVrXfcYmyQBuBoG+Mf2U2KOqCJn8JKLr bbcWi4j6s9X73R1NniBMUDu6jEQOSumcgh+8TWa5DaEmo99XxCU7iOw352rgJj9x uXqr4LIIOXgkTg0ZV7Lqx8jJmgGjuzxAIJvHhu3oWZwVR9x09v60fYxg2NctxLZX mQb4yffxVcQxznwFyLQzemmL7n3NuZjanFA1+Zhm0tQhZUWdRS2cqTHW1dToym9X tPFguRGUvZuyWI19/N/OKyJFXFPAIQ== -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:21 2024 by rpki-client on console-ams.rpki-client.org