$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/713C4814F9DC11EBA9C81A44C4F9AE02.roa File: 713C4814F9DC11EBA9C81A44C4F9AE02.roa (raw, json) Hash identifier: CQpWK2+G2LnLlpiGc5AJJ6xJWy2B0MtLT56Nh25qbzU= Subject key identifier: 64:87:74:DD:4F:82:29:34:0B:D0:15:44:CC:A3:06:C5:68:5E:0D:42 Certificate issuer: /CN=A91BD9B7/serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414 Certificate serial: 04A7 Authority key identifier: F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/713C4814F9DC11EBA9C81A44C4F9AE02.roa Signing time: Wed 21 Aug 2024 00:43:41 +0000 ROA not before: Wed 21 Aug 2024 00:43:41 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 142593 IP address blocks: 103.170.138.0/23 maxlen: 23 103.170.138.0/24 maxlen: 24 103.170.139.0/24 maxlen: 24 2407:b2c0::/32 maxlen: 32 2407:b2c0::/36 maxlen: 36 2407:b2c0:1000::/36 maxlen: 36 2407:b2c0:2000::/36 maxlen: 36 2407:b2c0:3000::/36 maxlen: 36 2407:b2c0:4000::/36 maxlen: 36 2407:b2c0:5000::/36 maxlen: 36 2407:b2c0:6000::/36 maxlen: 36 2407:b2c0:7000::/36 maxlen: 36 2407:b2c0:8000::/36 maxlen: 36 2407:b2c0:9000::/36 maxlen: 36 2407:b2c0:a000::/36 maxlen: 36 2407:b2c0:b000::/36 maxlen: 36 2407:b2c0:c000::/36 maxlen: 36 2407:b2c0:d000::/36 maxlen: 36 2407:b2c0:e000::/36 maxlen: 36 2407:b2c0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1191 (0x4a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD9B7/serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414 Validity Not Before: Aug 21 00:43:41 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66c5383d-1942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:43:2b:b5:b2:db:8e:c9:5a:18:30:09:ee:37: 75:5e:90:83:49:9e:3f:6b:de:03:0f:85:b8:1c:31: b8:6a:6a:9d:f5:39:86:bf:d6:aa:5f:cc:ee:50:4f: 6d:1d:45:38:00:02:84:ea:34:40:c9:90:51:e7:51: ab:f3:e6:77:7e:78:6d:62:de:70:3d:6e:92:fd:26: a1:04:af:64:32:cc:ff:63:df:c3:99:ea:fd:33:02: 2e:65:b1:b0:45:dd:a8:2a:de:57:6b:98:fc:fb:d3: 57:08:b2:87:54:68:14:21:91:4a:a0:80:a9:98:59: 9a:41:04:d4:38:a9:a6:eb:0d:f3:95:aa:30:a5:99: 61:60:3e:14:99:eb:f6:84:c0:ea:3a:17:72:1a:71: 20:8a:70:e3:00:6b:7d:99:22:00:e6:b5:59:b3:6e: 71:fc:a7:cc:b0:10:e7:05:c1:47:54:9f:b9:82:c9: 50:cd:dd:59:4a:c1:d4:b8:67:01:49:86:12:7b:1b: 28:92:cf:5f:7a:72:b4:fb:34:68:57:ee:5f:58:f3: 27:b5:15:2f:d7:5f:a9:03:bb:5d:67:0f:5b:a7:19: 29:e5:10:18:ef:32:eb:dc:dd:11:ee:af:12:dd:9e: 93:4c:6f:64:a5:fe:17:24:1d:f2:38:fb:d3:1d:9f: 44:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:87:74:DD:4F:82:29:34:0B:D0:15:44:CC:A3:06:C5:68:5E:0D:42 X509v3 Authority Key Identifier: keyid:F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/713C4814F9DC11EBA9C81A44C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.170.138.0/23 IPv6: 2407:b2c0::/32 Signature Algorithm: sha256WithRSAEncryption 53:1a:df:3f:82:fc:a1:e7:67:e7:31:ff:fb:5d:54:86:61:08: f8:90:27:86:f4:cf:93:0a:66:61:78:1b:21:0e:98:47:f0:86: 77:70:c4:af:d1:aa:98:3c:ac:49:d1:cc:a2:c0:b3:e9:88:27: 7f:b3:6b:7a:1d:73:5c:37:2f:b3:86:40:45:34:02:35:f4:ea: 56:f8:6b:89:0e:49:88:e7:f5:19:77:3e:1e:9c:74:12:b1:d0: ee:f9:6f:78:8a:d5:cd:9c:7f:1e:d7:2e:50:ac:ce:f9:3b:56: b8:ed:63:31:39:6e:ed:71:37:23:38:66:ba:b1:d6:47:68:ab: c9:ca:1e:82:eb:82:ac:9d:89:58:1b:5c:2b:1c:dd:93:dd:f4: 6b:d4:62:d3:cc:f8:8a:df:8b:7c:bc:70:76:8c:fa:38:58:1c: be:13:8c:3a:59:26:bf:6a:84:10:55:91:bc:9e:07:50:bf:ab: eb:c7:c4:ff:67:33:35:79:db:11:6d:24:73:7e:eb:92:a9:75: 47:21:93:60:49:70:54:a9:f4:dc:1a:8d:fb:6b:4a:f0:0e:11: 9c:07:d8:68:d4:2f:88:4c:13:14:2b:3b:1c:82:02:7a:63:f5: 79:35:e3:4e:d4:02:32:62:ec:41:b2:08:ac:bd:f2:cf:40:fa: 15:88:e0:08 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ5QjcxMTAvBgNVBAUTKEYyMEEzMjYwREIyQ0M1NjFCMzNCNjRERTE0QjAxMUYy OUExRTI0MTQwHhcNMjQwODIxMDA0MzQxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmM1MzgzZC0xOTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmkMrtbLbjslaGDAJ7jd1XpCDSZ4/a94DD4W4HDG4amqd9TmGv9aqX8zuUE9t HUU4AAKE6jRAyZBR51Gr8+Z3fnhtYt5wPW6S/SahBK9kMsz/Y9/Dmer9MwIuZbGw Rd2oKt5Xa5j8+9NXCLKHVGgUIZFKoICpmFmaQQTUOKmm6w3zlaowpZlhYD4Umev2 hMDqOhdyGnEginDjAGt9mSIA5rVZs25x/KfMsBDnBcFHVJ+5gslQzd1ZSsHUuGcB SYYSexsoks9fenK0+zRoV+5fWPMntRUv11+pA7tdZw9bpxkp5RAY7zLr3N0R7q8S 3Z6TTG9kpf4XJB3yOPvTHZ9EuQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFGSHdN1P gik0C9AVRMyjBsVoXg1CMB8GA1UdIwQYMBaAFPIKMmDbLMVhsztk3hSwEfKaHiQU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDlCNy8xNDk4MDQ5OEY5 RDkxMUVCOEQyQjBFM0VDNEY5QUUwMi84Z295WU5zc3hXR3pPMlRlRkxBUjhwb2VK QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhnb3lZTnNzeFdHek8yVGVGTEFSOHBvZUpCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkQ5QjcvMTQ5ODA0OThGOUQ5MTFFQjhEMkIwRTNFQzRGOUFFMDIvNzEzQzQ4MTRG OURDMTFFQkE5QzgxQTQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnqoowDQQCAAIwBwMFACQHssAwDQYJKoZIhvcNAQELBQAD ggEBAFMa3z+C/KHnZ+cx//tdVIZhCPiQJ4b0z5MKZmF4GyEOmEfwhndwxK/Rqpg8 rEnRzKLAs+mIJ3+za3odc1w3L7OGQEU0AjX06lb4a4kOSYjn9Rl3Ph6cdBKx0O75 b3iK1c2cfx7XLlCszvk7VrjtYzE5bu1xNyM4Zrqx1kdoq8nKHoLrgqydiVgbXCsc 3ZPd9GvUYtPM+Irfi3y8cHaM+jhYHL4TjDpZJr9qhBBVkbyeB1C/q+vHxP9nMzV5 2xFtJHN+65KpdUchk2BJcFSp9NwajftrSvAOEZwH2GjUL4hMExQrOxyCAnpj9Xk1 407UAjJi7EGyCKy98s9A+hWI4Ag= -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:37 2024 by rpki-client on console-fra.rpki-client.org