$ rpki-client -vvf rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/F719961A1A8611ECB908E939C4F9AE02.roa File: F719961A1A8611ECB908E939C4F9AE02.roa (raw, json) Hash identifier: 8CERVYgkltWj4G95QfjHRAzhZOs/2MofXT3PQbZreQ8= Subject key identifier: 28:0B:19:AF:89:81:25:1D:6F:FD:07:CD:DE:61:37:2A:3F:B7:80:01 Certificate issuer: /CN=A91C941B/serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F Certificate serial: 0468 Authority key identifier: 08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/F719961A1A8611ECB908E939C4F9AE02.roa Signing time: Thu 05 Sep 2024 01:03:31 +0000 ROA not before: Thu 05 Sep 2024 01:03:31 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 55736 IP address blocks: 103.164.128.0/24 maxlen: 24 103.164.129.0/24 maxlen: 24 123.100.228.0/24 maxlen: 24 123.100.229.0/24 maxlen: 24 123.100.230.0/24 maxlen: 24 123.100.231.0/24 maxlen: 24 202.157.178.0/24 maxlen: 24 203.142.9.0/24 maxlen: 24 2405:70c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1128 (0x468) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C941B/serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F Validity Not Before: Sep 5 01:03:31 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d90362-705b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:57:71:28:a1:d5:8f:a6:b7:74:07:21:6c:23: 79:73:47:91:76:af:91:ef:54:5f:28:33:6c:52:e9: 1a:70:b8:20:54:d3:e5:02:89:41:83:cf:ec:3b:d5: ae:f0:a0:cf:13:95:5c:e1:7b:3d:b5:4a:7f:e4:7e: 10:e1:59:3d:53:3a:4a:7f:ad:6c:8f:f7:5a:a2:d7: 24:f6:d7:74:36:38:04:04:07:27:6e:67:97:9b:bb: 65:89:95:30:8b:b7:09:aa:0b:05:36:e6:db:7a:66: 53:59:43:bb:8d:15:ee:0d:c9:e8:cb:cd:54:34:7a: d3:04:0e:5c:55:61:a2:1a:6b:f8:20:12:07:a6:46: 3b:21:08:47:79:3a:11:a8:ab:42:f9:e5:1e:ec:b1: cc:55:37:6b:32:83:51:26:e9:f2:35:83:a5:6b:a1: fe:94:53:5a:a7:c4:72:c6:b7:ee:f7:bc:b1:55:b9: c6:c9:87:fc:4d:b8:1f:d2:dc:0b:b9:39:a9:8f:bf: 52:43:b8:f2:f0:f9:3e:56:d1:32:8c:74:fb:4d:ea: f0:c9:ab:2a:44:c7:ad:8f:b1:46:99:8a:53:7a:bb: 06:af:30:04:83:a4:e5:46:06:9a:1c:90:67:8a:7b: 78:5a:b6:5a:5f:80:a9:10:d3:00:5c:a9:8d:cc:27: 0e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:0B:19:AF:89:81:25:1D:6F:FD:07:CD:DE:61:37:2A:3F:B7:80:01 X509v3 Authority Key Identifier: keyid:08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/F719961A1A8611ECB908E939C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.164.128.0/23 123.100.228.0/22 202.157.178.0/24 203.142.9.0/24 IPv6: 2405:70c0::/32 Signature Algorithm: sha256WithRSAEncryption 53:56:94:53:68:05:4b:6a:f4:69:84:e1:cb:a2:38:e9:13:8d: bb:73:1e:bb:a8:b3:10:1f:c6:ad:3c:ec:f0:93:8b:b7:ee:45: 97:32:3a:94:8f:f1:42:77:2e:7b:b7:ea:b0:fc:7b:64:b3:17: 2a:a9:3d:c2:49:90:c5:3c:ef:e7:0a:ec:0a:c8:1a:60:28:d2: b1:b2:91:c4:da:be:ae:98:82:a8:d6:96:da:b3:52:da:ef:54: 03:72:a7:1d:a5:77:99:1e:1b:dc:7c:c8:c4:63:13:1c:54:29: 39:66:53:de:eb:58:11:ad:74:9b:74:a6:9e:bb:ab:cb:cc:10: 72:78:23:30:d1:31:b0:6d:18:07:6f:a3:69:93:b7:dc:e7:e6: d1:cf:1d:41:34:a7:5a:7a:08:f0:a0:97:1d:53:f3:fc:78:3d: 37:42:2f:9c:b2:51:bd:91:41:70:38:62:cf:6b:21:d7:e7:d6: c3:22:73:57:f5:f8:9f:fd:96:6e:40:aa:42:a9:25:df:ce:a0: 55:92:56:77:90:c5:b0:78:d7:74:3c:35:b1:79:02:bf:5e:b5: 83:26:e1:68:b1:56:3b:6e:1f:79:0b:22:43:0e:19:50:c2:c2: ab:60:a8:b3:ec:f1:0c:33:a5:25:e4:17:d1:5e:ce:27:91:1d: 16:5f:87:51 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICBGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0MUIxMTAvBgNVBAUTKDA4MDI1QjlCNDRFRUQ4QUUwQjc2RjExRTAzNzJDRTk2 MTg3N0FEOUYwHhcNMjQwOTA1MDEwMzMxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MDM2Mi03MDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFdxKKHVj6a3dAchbCN5c0eRdq+R71RfKDNsUukacLggVNPlAolBg8/sO9Wu 8KDPE5Vc4Xs9tUp/5H4Q4Vk9UzpKf61sj/daotck9td0NjgEBAcnbmeXm7tliZUw i7cJqgsFNubbemZTWUO7jRXuDcnoy81UNHrTBA5cVWGiGmv4IBIHpkY7IQhHeToR qKtC+eUe7LHMVTdrMoNRJunyNYOla6H+lFNap8Ryxrfu97yxVbnGyYf8Tbgf0twL uTmpj79SQ7jy8Pk+VtEyjHT7TerwyasqRMetj7FGmYpTersGrzAEg6TlRgaaHJBn int4WrZaX4CpENMAXKmNzCcOHQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFCgLGa+J gSUdb/0Hzd5hNyo/t4ABMB8GA1UdIwQYMBaAFAgCW5tE7tiuC3bxHgNyzpYYd62f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQxQi82OUY2QjdERTFB ODMxMUVDOEM5MjIyMjlDNEY5QUUwMi9DQUpibTBUdTJLNExkdkVlQTNMT2xoaDNy WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NBSmJtMFR1Mks0TGR2RWVBM0xPbGhoM3JaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk0MUIvNjlGNkI3REUxQTgzMTFFQzhDOTIyMjI5QzRGOUFFMDIvRjcxOTk2MUEx QTg2MTFFQ0I5MDhFOTM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAFnpIADBAJ7ZOQDBADKnbIDBADLjgkwDQQCAAIwBwMFACQF cMAwDQYJKoZIhvcNAQELBQADggEBAFNWlFNoBUtq9GmE4cuiOOkTjbtzHruosxAf xq087PCTi7fuRZcyOpSP8UJ3Lnu36rD8e2SzFyqpPcJJkMU87+cK7ArIGmAo0rGy kcTavq6YgqjWltqzUtrvVANypx2ld5keG9x8yMRjExxUKTlmU97rWBGtdJt0pp67 q8vMEHJ4IzDRMbBtGAdvo2mTt9zn5tHPHUE0p1p6CPCglx1T8/x4PTdCL5yyUb2R QXA4Ys9rIdfn1sMic1f1+J/9lm5AqkKpJd/OoFWSVneQxbB413Q8NbF5Ar9etYMm 4WixVjtuH3kLIkMOGVDCwqtgqLPs8QwzpSXkF9FezieRHRZfh1E= -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:37 2024 by rpki-client on console-fra.rpki-client.org