$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/5440C4C8848111EF9F3ECE34C4F9AE02.roa File: 5440C4C8848111EF9F3ECE34C4F9AE02.roa (raw, json) Hash identifier: 3hnmn/EG7rhYM2a7/Cnm16lA4qC355sf3kWBw8CmIQU= Subject key identifier: 97:B6:04:CC:1E:A3:10:C1:51:A2:15:A7:6E:17:F1:71:49:64:44:B5 Certificate issuer: /CN=A91C9E72/serialNumber=73D900924E701548E6E3203880F6C0972A4C291A Certificate serial: 17 Authority key identifier: 73:D9:00:92:4E:70:15:48:E6:E3:20:38:80:F6:C0:97:2A:4C:29:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/5440C4C8848111EF9F3ECE34C4F9AE02.roa Signing time: Mon 11 Nov 2024 06:09:25 +0000 ROA not before: Mon 11 Nov 2024 06:09:25 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 58411 IP address blocks: 43.252.148.0/24 maxlen: 24 43.252.149.0/24 maxlen: 24 43.252.150.0/24 maxlen: 24 43.252.151.0/24 maxlen: 24 103.242.140.0/24 maxlen: 24 103.242.141.0/24 maxlen: 24 103.242.142.0/24 maxlen: 24 103.242.143.0/24 maxlen: 24 2401:1380::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.crl rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 05:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E72/serialNumber=73D900924E701548E6E3203880F6C0972A4C291A Validity Not Before: Nov 11 06:09:25 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67319f95-2e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7b:07:d4:39:55:f4:6f:6f:11:9a:0b:6f:53: cb:e7:a6:d0:7f:e2:2a:80:98:e3:67:b8:71:8c:cf: 00:b2:6b:c9:e7:d5:58:ab:89:60:47:32:71:59:40: 46:8f:06:79:57:a3:5c:7b:12:f2:c0:85:d7:d2:a1: 39:41:6d:c8:f0:ff:b3:3f:a6:46:0c:a6:56:6a:00: 6c:de:57:1d:5e:66:28:af:c9:ee:9a:91:cc:c1:f7: 6e:f8:20:42:07:4b:a0:a8:9c:3f:cc:c9:77:53:f2: 32:da:f7:19:3d:ab:d5:05:e9:4c:19:5b:55:0b:66: 86:4f:1a:fe:98:77:34:3f:ca:7c:63:cb:12:78:7f: c4:da:35:2f:ff:13:ce:1a:32:c0:86:a1:80:e1:a8: 86:49:71:27:d4:48:d4:f8:b4:7f:bf:58:ef:c6:1f: 97:15:60:33:20:2e:4e:a1:20:5e:f0:9b:cd:98:43: 62:c6:df:91:3e:01:8e:4f:db:34:6b:2f:1c:ba:66: 08:19:7f:ca:2d:0e:b2:4e:64:8c:c9:c8:9c:c2:fc: fe:26:eb:03:d3:54:d5:a6:87:5d:7d:43:d0:b3:58: 21:58:3a:46:54:27:70:64:c3:4b:52:74:59:54:f8: d8:55:1a:b9:8d:0e:d9:85:53:ef:ee:70:04:45:56: 8e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B6:04:CC:1E:A3:10:C1:51:A2:15:A7:6E:17:F1:71:49:64:44:B5 X509v3 Authority Key Identifier: keyid:73:D9:00:92:4E:70:15:48:E6:E3:20:38:80:F6:C0:97:2A:4C:29:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/5440C4C8848111EF9F3ECE34C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.252.148.0/22 103.242.140.0/22 IPv6: 2401:1380::/32 Signature Algorithm: sha256WithRSAEncryption 3c:8a:11:b4:0d:dd:69:64:1f:75:0c:20:15:dd:41:3b:7a:2c: bd:25:32:7d:19:31:75:df:e6:87:bf:ac:f4:9f:5c:c3:39:24: 39:97:e1:b6:a0:7c:31:64:d2:77:5b:e5:b6:73:18:91:4f:85: cc:b7:33:70:26:51:9f:f7:ba:97:1c:8f:d4:be:03:d2:ef:35: c8:46:b3:6c:71:de:f9:99:aa:b5:44:2e:ca:29:10:6f:34:f4: 58:82:8d:00:e1:4a:2e:81:d2:7c:be:57:9d:8a:22:61:c8:f7: 2b:77:9e:ff:e8:53:ed:13:d5:e8:10:22:0f:74:27:29:6a:4e: 70:32:ac:0a:6e:e0:59:1f:70:d9:09:1b:cd:35:0b:3a:4c:26: 50:7b:ae:e3:9b:29:ab:77:0e:2c:1c:96:6d:13:14:90:f3:0a: 30:45:23:9c:03:25:7c:2c:71:e9:e6:fd:c3:1d:7a:36:73:35: f6:9b:51:a7:7d:dd:a7:15:f3:4e:7b:e2:7b:5a:ea:e9:76:dc: 8d:45:26:2a:fe:92:26:9d:22:00:46:3c:22:06:a1:26:1e:ce: 5a:75:08:9c:70:16:be:d7:7d:69:04:4e:af:82:1d:73:43:d1: a9:a7:36:ec:d8:6f:34:b3:a3:49:07:77:52:b8:6a:b5:21:3b: 70:6c:bb:56 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUU3MjExMC8GA1UEBRMoNzNEOTAwOTI0RTcwMTU0OEU2RTMyMDM4ODBGNkMwOTcy QTRDMjkxQTAeFw0yNDExMTEwNjA5MjVaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MzE5Zjk1LTJlMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkewfUOVX0b28RmgtvU8vnptB/4iqAmONnuHGMzwCya8nn1ViriWBHMnFZQEaP BnlXo1x7EvLAhdfSoTlBbcjw/7M/pkYMplZqAGzeVx1eZiivye6akczB9274IEIH S6ConD/MyXdT8jLa9xk9q9UF6UwZW1ULZoZPGv6YdzQ/ynxjyxJ4f8TaNS//E84a MsCGoYDhqIZJcSfUSNT4tH+/WO/GH5cVYDMgLk6hIF7wm82YQ2LG35E+AY5P2zRr Lxy6ZggZf8otDrJOZIzJyJzC/P4m6wPTVNWmh119Q9CzWCFYOkZUJ3Bkw0tSdFlU +NhVGrmNDtmFU+/ucARFVo5PAgMBAAGjggKqMIICpjAdBgNVHQ4EFgQUl7YEzB6j EMFRohWnbhfxcUlkRLUwHwYDVR0jBBgwFoAUc9kAkk5wFUjm4yA4gPbAlypMKRow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5RTcyL0U2QjQ0OTAyODQ4 MDExRUZBQUQ4RTIzM0M0RjlBRTAyL2M5a0FrazV3RlVqbTR5QTRnUGJBbHlwTUtS by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYzlrQWtrNXdGVWptNHlBNGdQYkFseXBNS1JvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUU3Mi9FNkI0NDkwMjg0ODAxMUVGQUFEOEUyMzNDNEY5QUUwMi81NDQwQzRDODg0 ODExMUVGOUYzRUNFMzRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA0BggrBgEFBQcBBwEB/wQl MCMwEgQCAAEwDAMEAiv8lAMEAmfyjDANBAIAAjAHAwUAJAETgDANBgkqhkiG9w0B AQsFAAOCAQEAPIoRtA3daWQfdQwgFd1BO3osvSUyfRkxdd/mh7+s9J9cwzkkOZfh tqB8MWTSd1vltnMYkU+FzLczcCZRn/e6lxyP1L4D0u81yEazbHHe+ZmqtUQuyikQ bzT0WIKNAOFKLoHSfL5XnYoiYcj3K3ee/+hT7RPV6BAiD3QnKWpOcDKsCm7gWR9w 2QkbzTULOkwmUHuu45spq3cOLByWbRMUkPMKMEUjnAMlfCxx6eb9wx16NnM19ptR p33dpxXzTnvie1rq6XbcjUUmKv6SJp0iAEY8IgahJh7OWnUInHAWvtd9aQROr4Id c0PRqac27NhvNLOjSQd3UrhqtSE7cGy7Vg== -----END CERTIFICATE-----Generated at Mon Nov 25 07:14:57 2024 by rpki-client on console-fra.rpki-client.org