$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/5761FF06493411EF859C1D49C4F9AE02.roa File: 5761FF06493411EF859C1D49C4F9AE02.roa (raw, json) Hash identifier: L8G18w6rwaHmMSrJokPAC0OZq/Tml3UVjCIQ2Q/Hgqk= Subject key identifier: EC:74:7C:C8:4C:AE:1A:CF:2F:41:7C:37:27:41:B2:E8:B0:3F:2B:20 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 3419 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/5761FF06493411EF859C1D49C4F9AE02.roa Signing time: Sat 14 Sep 2024 15:00:40 +0000 ROA not before: Sat 14 Sep 2024 15:00:40 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 3356 IP address blocks: 103.212.168.0/24 maxlen: 24 160.202.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:28:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13337 (0x3419) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Sep 14 15:00:40 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66e5a517-50db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f2:83:1d:b7:50:49:85:d7:dd:0b:f2:fa:3e: 5c:62:53:94:17:16:fa:29:98:c0:9f:17:5f:1d:ab: 45:22:bb:03:9e:3e:0a:19:f2:ac:3f:44:88:3a:51: 56:e7:e4:1c:1a:d7:60:c0:60:7e:73:e8:d2:75:ec: 70:5e:e9:36:f3:85:1e:26:90:a7:a7:1c:7a:d1:d4: 5e:b7:71:15:27:5e:b1:e0:12:bd:e2:f5:46:a5:47: 2d:0e:17:ac:56:f8:fe:94:d1:63:f5:d7:49:f3:93: 87:c9:57:8a:d8:3d:f4:d7:d6:b1:9b:a8:e3:19:6d: 1a:45:d7:46:1d:5d:eb:87:8b:8d:91:bb:e5:8a:7c: 42:d4:86:b7:75:b9:9e:80:e7:5b:a5:ca:94:76:67: 60:e9:13:ac:50:bd:3d:f7:3f:97:cf:dd:42:6e:08: c8:fa:22:92:4e:a5:33:b3:0f:1c:cb:42:e8:91:8c: 7e:af:9d:14:55:d7:e1:ef:d5:27:ca:c8:92:f6:79: b5:d0:76:7d:27:3d:b9:76:ae:a2:58:34:06:be:07: c8:91:d6:67:fc:39:4e:1d:6a:2f:15:4a:0a:ea:c6: dc:dc:50:87:e5:25:f3:18:fe:a5:f1:4a:18:bb:ba: be:8c:d8:39:01:17:60:2f:4d:b7:44:50:aa:d9:84: eb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:74:7C:C8:4C:AE:1A:CF:2F:41:7C:37:27:41:B2:E8:B0:3F:2B:20 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/5761FF06493411EF859C1D49C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.212.168.0/24 160.202.136.0/24 Signature Algorithm: sha256WithRSAEncryption 08:20:2f:73:df:a7:ad:95:97:ea:db:ad:90:4e:85:a8:93:76: 12:29:0a:24:8c:5e:56:0f:d8:eb:9a:18:57:45:29:ce:bf:13: 83:42:0e:f8:5b:be:e3:76:ad:63:03:4d:1d:20:01:e7:0d:7b: 0b:71:9b:75:27:71:27:2b:e7:34:8d:c3:a1:76:df:0b:dc:82: 2c:1b:62:47:87:c3:8a:59:2b:94:61:ef:b3:21:06:cf:9b:33: 98:13:2d:ac:13:78:2f:d1:79:b7:cb:04:75:11:a0:1f:b2:39: a9:be:e1:04:52:c3:96:a9:cf:e0:69:77:e1:49:86:7b:0f:31: b3:3a:12:44:66:8c:71:88:80:bf:54:92:5c:b5:3f:e0:06:01: 0f:cf:e7:c6:6f:55:e8:12:06:5c:75:bf:e9:1c:3e:10:d3:c6: 1c:57:bc:53:c3:52:53:a2:be:18:ab:ea:31:0a:ec:42:82:1f: 38:49:11:d3:d7:78:88:a9:ae:fc:38:6a:b8:88:bf:70:47:00: d9:11:31:09:06:63:e2:dd:a2:53:3c:6f:a7:6a:53:44:d9:ce: 3e:8d:c7:39:73:f2:94:62:be:af:0d:8f:75:83:6a:43:85:af: b8:f4:f5:ca:3b:59:37:e7:7c:fe:66:ad:17:9c:78:1b:27:a8: 0c:a0:75:d0 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICNBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjQwOTE0MTUwMDQwWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmU1YTUxNy01MGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1fKDHbdQSYXX3Qvy+j5cYlOUFxb6KZjAnxdfHatFIrsDnj4KGfKsP0SIOlFW 5+QcGtdgwGB+c+jSdexwXuk284UeJpCnpxx60dRet3EVJ16x4BK94vVGpUctDhes Vvj+lNFj9ddJ85OHyVeK2D3019axm6jjGW0aRddGHV3rh4uNkbvlinxC1Ia3dbme gOdbpcqUdmdg6ROsUL099z+Xz91CbgjI+iKSTqUzsw8cy0LokYx+r50UVdfh79Un ysiS9nm10HZ9Jz25dq6iWDQGvgfIkdZn/DlOHWovFUoK6sbc3FCH5SXzGP6l8UoY u7q+jNg5ARdgL023RFCq2YTruQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOx0fMhM rhrPL0F8NydBsuiwPysgMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzkzNTAvMzkxM0JDQTAxRDg3MTFFMkI0MkIwMkRGMDhCMDJDRDIvNTc2MUZGMDY0 OTM0MTFFRjg1OUMxRDQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABn1KgDBACgyogwDQYJKoZIhvcNAQELBQADggEBAAggL3Pf p62Vl+rbrZBOhaiTdhIpCiSMXlYP2OuaGFdFKc6/E4NCDvhbvuN2rWMDTR0gAecN ewtxm3UncScr5zSNw6F23wvcgiwbYkeHw4pZK5Rh77MhBs+bM5gTLawTeC/RebfL BHURoB+yOam+4QRSw5apz+Bpd+FJhnsPMbM6EkRmjHGIgL9Ukly1P+AGAQ/P58Zv VegSBlx1v+kcPhDTxhxXvFPDUlOivhir6jEK7EKCHzhJEdPXeIiprvw4ariIv3BH ANkRMQkGY+LdolM8b6dqU0TZzj6Nxzlz8pRivq8Nj3WDakOFr7j09co7WTfnfP5m rReceBsnqAygddA= -----END CERTIFICATE-----Generated at Wed Nov 20 16:12:03 2024 by rpki-client on console-fra.rpki-client.org