$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/4FF0079CC6CB11ECB185E43EC4F9AE02.roa File: 4FF0079CC6CB11ECB185E43EC4F9AE02.roa (raw, json) Hash identifier: p51YofghFqe/P1BWUf3vy05r4fDl5jSux9C8jQxGEcM= Subject key identifier: BB:03:0C:4B:09:F8:50:D4:CC:8B:12:B0:48:0B:5D:13:2D:3E:77:47 Certificate issuer: /CN=A91C7A69/serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Certificate serial: 02C4 Authority key identifier: CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/4FF0079CC6CB11ECB185E43EC4F9AE02.roa Signing time: Fri 25 Oct 2024 01:45:23 +0000 ROA not before: Fri 25 Oct 2024 01:45:23 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 132742 IP address blocks: 43.249.76.0/22 maxlen: 24 103.40.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 708 (0x2c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7A69/serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Validity Not Before: Oct 25 01:45:23 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=671af833-9e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:be:46:51:68:ac:7c:f6:5b:8e:a3:6e:3d:21: 55:24:24:3c:2b:52:b5:3c:74:fe:3b:71:45:2b:de: 33:7a:c6:24:28:e8:8e:56:d3:fc:65:17:51:53:04: 4f:7f:b8:db:72:49:34:33:8b:1b:7f:19:a8:57:ef: 6d:7f:dd:b6:44:7e:20:b0:ec:f0:cf:26:7b:3b:d6: 34:3d:55:d8:ad:2a:f3:d3:e8:55:fc:6d:20:69:f1: 41:1b:9b:57:83:3f:11:1f:16:ec:ca:77:09:e3:d7: 5a:cf:bd:40:22:0c:ec:e7:1e:67:22:32:e3:05:ad: 18:68:02:2e:da:ea:40:b6:fd:db:4f:5e:74:c0:15: 3e:7e:f2:8f:ef:1d:3f:b2:d2:d7:29:50:3e:b5:23: 6f:87:20:f5:46:e5:a6:5f:e7:ee:3b:ae:fb:4d:35: cf:54:7c:0b:0c:cc:bc:90:30:56:47:de:9e:56:0f: c0:06:77:24:8d:48:35:4e:8c:04:7e:21:04:04:82: 02:81:f0:5e:9b:65:76:7b:1d:d5:6a:14:54:9b:d6: d6:97:a5:05:1d:01:03:e0:86:94:92:a6:4f:97:17: f6:72:b2:50:85:26:53:84:35:b4:8a:69:28:1f:83: 91:a4:c1:bd:e7:65:1f:45:5f:f9:c7:50:02:12:90: da:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:03:0C:4B:09:F8:50:D4:CC:8B:12:B0:48:0B:5D:13:2D:3E:77:47 X509v3 Authority Key Identifier: keyid:CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/4FF0079CC6CB11ECB185E43EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.76.0/22 103.40.152.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:5f:c4:b0:83:4a:4c:8a:9c:60:0f:bd:ec:a0:da:e1:0f:95: ad:87:22:c3:78:53:f7:f5:0c:a8:93:98:d2:f3:74:ad:6b:1d: 54:1c:ed:a6:11:22:ed:78:04:d8:c8:7d:46:55:6c:21:14:50: b0:87:d8:fa:87:4b:d6:12:fa:1c:90:0d:d2:72:da:48:be:e5: ff:94:18:82:0c:a2:5e:74:8e:33:62:d6:b4:e4:5c:d5:34:e0: e9:bf:f1:6b:59:da:7b:14:a7:44:77:c6:bd:3d:af:27:01:52: 97:e9:5a:47:a8:2c:0e:85:8f:6c:1e:45:1d:db:48:f6:fd:9c: 06:36:ec:20:8e:30:b8:43:3c:2b:80:bb:97:f2:85:95:13:68: 4e:bc:e2:22:3f:03:48:2f:c0:5f:f9:10:82:f1:02:1c:ad:39: c0:6a:ab:b5:0b:32:7d:1b:98:09:8f:75:9b:06:68:ae:1e:21: 88:8f:28:bb:2c:af:a4:5e:81:13:a6:fd:f4:19:5d:00:32:49: 42:e4:35:64:f8:dc:b1:79:87:d4:50:13:6c:67:25:ef:d0:0d: d7:04:ac:91:92:cd:36:d6:49:73:83:0c:23:b4:a5:e9:6b:a7: 01:4c:24:24:11:30:bc:3c:82:83:34:5d:82:aa:3c:36:87:63: d2:0c:43:25 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdBNjkxMTAvBgNVBAUTKENCOUQ0MUE2REE5NkY3NkE0RkYwNTg2QjVFOEE4ODlG QzAyMzU0NTcwHhcNMjQxMDI1MDE0NTIzWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFhZjgzMy05ZTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsL5GUWisfPZbjqNuPSFVJCQ8K1K1PHT+O3FFK94zesYkKOiOVtP8ZRdRUwRP f7jbckk0M4sbfxmoV+9tf922RH4gsOzwzyZ7O9Y0PVXYrSrz0+hV/G0gafFBG5tX gz8RHxbsyncJ49daz71AIgzs5x5nIjLjBa0YaAIu2upAtv3bT150wBU+fvKP7x0/ stLXKVA+tSNvhyD1RuWmX+fuO677TTXPVHwLDMy8kDBWR96eVg/ABnckjUg1TowE fiEEBIICgfBem2V2ex3VahRUm9bWl6UFHQED4IaUkqZPlxf2crJQhSZThDW0imko H4ORpMG952UfRV/5x1ACEpDaJwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLsDDEsJ +FDUzIsSsEgLXRMtPndHMB8GA1UdIwQYMBaAFMudQabalvdqT/BYa16KiJ/AI1RX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0E2OS84QUYzRDVCMkM2 MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzkycFA4RmhyWG9xSW44QWpW RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1MUJwdHFXOTJwUDhGaHJYb3FJbjhBalZGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzdBNjkvOEFGM0Q1QjJDNjAzMTFFQzhCMEQ1RDNEQzRGOUFFMDIvNEZGMDA3OUND NkNCMTFFQ0IxODVFNDNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr+UwDBAJnKJgwDQYJKoZIhvcNAQELBQADggEBACpfxLCD SkyKnGAPveyg2uEPla2HIsN4U/f1DKiTmNLzdK1rHVQc7aYRIu14BNjIfUZVbCEU ULCH2PqHS9YS+hyQDdJy2ki+5f+UGIIMol50jjNi1rTkXNU04Om/8WtZ2nsUp0R3 xr09rycBUpfpWkeoLA6Fj2weRR3bSPb9nAY27CCOMLhDPCuAu5fyhZUTaE684iI/ A0gvwF/5EILxAhytOcBqq7ULMn0bmAmPdZsGaK4eIYiPKLssr6RegROm/fQZXQAy SULkNWT43LF5h9RQE2xnJe/QDdcErJGSzTbWSXODDCO0pelrpwFMJCQRMLw8goM0 XYKqPDaHY9IMQyU= -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:45 2024 by rpki-client on console-fra.rpki-client.org