$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/0DC2D3EC8D7A11EDBFA7C381C4F9AE02.roa File: 0DC2D3EC8D7A11EDBFA7C381C4F9AE02.roa (raw, json) Hash identifier: fk3GNutu1Xl8jf9hzH4EWHosYGuy+JY1n5pgsTabR1E= Subject key identifier: B8:98:8E:8C:23:25:C4:7C:B2:F4:C9:3B:FA:13:5F:24:21:A8:28:AA Certificate issuer: /CN=A91BC2E3/serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C Certificate serial: 0165 Authority key identifier: C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/0DC2D3EC8D7A11EDBFA7C381C4F9AE02.roa Signing time: Thu 21 Nov 2024 02:45:48 +0000 ROA not before: Thu 21 Nov 2024 02:45:48 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 142543 IP address blocks: 103.22.96.0/23 maxlen: 23 103.22.96.0/24 maxlen: 24 103.22.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC2E3/serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C Validity Not Before: Nov 21 02:45:48 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=673e9edc-e0d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e0:da:9a:55:37:e3:4e:48:1c:08:12:9e:d1: 8a:bd:d6:ff:b7:8c:30:39:02:28:54:7e:19:c3:35: 8d:1b:19:c9:89:d8:bd:6a:4d:b5:74:c3:58:ee:e3: 79:22:92:38:5d:9d:a1:9a:48:5a:b6:ea:d9:a3:bc: 81:eb:43:ec:ba:b3:47:01:0d:31:3d:96:9c:a6:14: a7:c4:62:56:4f:e3:9e:30:c2:ca:71:38:e9:39:1c: 3e:1e:7b:2c:4a:ad:b5:36:0b:96:c7:7f:2b:7d:91: 9f:cc:14:22:4b:f3:a6:9d:ac:35:1a:54:c8:29:b9: 0c:3f:11:1b:0a:d8:d9:a5:e3:4e:46:fa:c9:33:c1: 21:58:61:f6:0e:93:3a:00:b4:52:9a:b1:b9:63:55: e4:0a:ed:34:a5:ee:1a:04:76:e4:47:9d:47:04:4a: ca:22:58:b9:2c:02:d9:6c:4b:ea:a7:1d:a1:5b:6f: 36:b1:84:6b:6c:e4:99:a2:9e:00:39:01:12:1f:4e: 93:fd:11:e4:bd:9d:17:52:c2:4d:b1:44:2e:50:dd: 6d:bc:6c:ce:ee:d3:5d:43:94:55:61:20:f9:8e:25: 7c:f7:5a:bb:6e:8d:12:4d:b0:c9:22:72:41:64:4a: ea:15:b0:13:4e:07:dd:b3:39:9d:69:91:56:aa:6a: 48:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:98:8E:8C:23:25:C4:7C:B2:F4:C9:3B:FA:13:5F:24:21:A8:28:AA X509v3 Authority Key Identifier: keyid:C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/0DC2D3EC8D7A11EDBFA7C381C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.22.96.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:02:31:aa:ea:34:06:6d:5f:6b:18:b3:52:d5:27:48:25:7e: 94:d4:c9:29:39:9e:a5:dc:16:b2:0d:c8:b3:e3:f7:63:b3:82: 3c:86:94:72:66:0e:f7:18:3b:c1:56:2f:87:ae:02:2e:61:30: 2f:8f:95:58:b6:04:f0:8a:72:eb:f0:18:60:fa:b9:b7:a8:d1: 9a:20:3b:5f:14:b8:a8:e3:bd:a2:eb:54:c5:2f:6d:a9:15:c9: f2:33:67:b7:8f:af:b9:5e:03:1d:b8:5e:69:8e:05:46:5b:41: e9:4a:41:d1:f5:dc:b0:89:9a:ca:85:f6:69:64:b0:87:48:90: 7d:aa:ec:70:b4:eb:1b:ff:b8:26:9a:01:2f:22:21:97:67:04: 60:60:f9:42:cf:a7:4f:2d:35:6d:b8:53:dd:cd:4d:6a:d3:f4: 89:f2:30:45:cf:1c:02:e6:12:2c:50:7a:21:18:d5:d8:84:5c: f3:b8:f6:65:6d:b4:a5:88:4f:5a:00:30:51:5a:f5:fd:bd:6e: d4:28:e4:b4:c3:38:4c:91:d2:15:f6:a5:6e:a5:7d:b3:41:3e: 92:70:1a:85:22:b4:5c:c5:e3:30:49:c8:9a:24:fd:9a:02:37: 0d:46:08:8e:2a:b2:4e:cc:71:77:a5:3e:98:e8:72:3d:92:c3: fb:c0:58:bb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyRTMxMTAvBgNVBAUTKEM0NzEwRDQ4QjRFNEYyQjczNUJFNEIxQjVDOTBFREI4 OEQyNjlCMkMwHhcNMjQxMTIxMDI0NTQ4WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzNlOWVkYy1lMGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvODamlU3405IHAgSntGKvdb/t4wwOQIoVH4ZwzWNGxnJidi9ak21dMNY7uN5 IpI4XZ2hmkhaturZo7yB60PsurNHAQ0xPZacphSnxGJWT+OeMMLKcTjpORw+Hnss Sq21NguWx38rfZGfzBQiS/Omnaw1GlTIKbkMPxEbCtjZpeNORvrJM8EhWGH2DpM6 ALRSmrG5Y1XkCu00pe4aBHbkR51HBErKIli5LALZbEvqpx2hW282sYRrbOSZop4A OQESH06T/RHkvZ0XUsJNsUQuUN1tvGzO7tNdQ5RVYSD5jiV891q7bo0STbDJInJB ZErqFbATTgfdszmdaZFWqmpIkQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLiYjowj JcR8svTJO/oTXyQhqCiqMB8GA1UdIwQYMBaAFMRxDUi05PK3Nb5LG1yQ7biNJpss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzJFMy85QjRBNDg5MDg5 QTAxMUVEODM3NTkzNDZDNEY5QUUwMi94SEVOU0xUazhyYzF2a3NiWEpEdHVJMG1t eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hIRU5TTFRrOHJjMXZrc2JYSkR0dUkwbW15dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkMyRTMvOUI0QTQ4OTA4OUEwMTFFRDgzNzU5MzQ2QzRGOUFFMDIvMERDMkQzRUM4 RDdBMTFFREJGQTdDMzgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnFmAwDQYJKoZIhvcNAQELBQADggEBAG4CMarqNAZtX2sY s1LVJ0glfpTUySk5nqXcFrINyLPj92OzgjyGlHJmDvcYO8FWL4euAi5hMC+PlVi2 BPCKcuvwGGD6ubeo0ZogO18UuKjjvaLrVMUvbakVyfIzZ7ePr7leAx24XmmOBUZb QelKQdH13LCJmsqF9mlksIdIkH2q7HC06xv/uCaaAS8iIZdnBGBg+ULPp08tNW24 U93NTWrT9InyMEXPHALmEixQeiEY1diEXPO49mVttKWIT1oAMFFa9f29btQo5LTD OEyR0hX2pW6lfbNBPpJwGoUitFzF4zBJyJok/ZoCNw1GCI4qsk7McXelPpjocj2S w/vAWLs= -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:56 2024 by rpki-client on console-fra.rpki-client.org