$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/8FADE73CA49B11EEB19E774BC4F9AE02.roa File: 8FADE73CA49B11EEB19E774BC4F9AE02.roa (raw, json) Hash identifier: 7eZAVrRcBGBKFlQHZK9vBEWzwyr7ij0OTTCgEmnjTCo= Subject key identifier: 4C:7B:91:B4:B8:47:BF:3D:29:FB:E0:33:38:9F:46:60:1B:AA:27:CC Certificate issuer: /CN=A91CF77D/serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358 Certificate serial: 077A Authority key identifier: 98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/8FADE73CA49B11EEB19E774BC4F9AE02.roa Signing time: Thu 06 Jun 2024 23:00:49 +0000 ROA not before: Thu 06 Jun 2024 23:00:49 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 9541 IP address blocks: 103.139.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:42:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1914 (0x77a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF77D/serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358 Validity Not Before: Jun 6 23:00:49 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66623fa1-070b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:66:0e:28:0c:b8:33:5a:da:ae:e5:53:c7:55: 2e:f5:63:1b:81:f2:5c:1e:29:9a:34:c1:0f:ca:e6: f7:0a:13:d2:c2:8c:8f:4b:f3:ff:15:e9:11:28:18: 81:fa:2a:3f:09:e8:12:4e:73:8b:8f:de:62:3f:17: d1:9d:05:4e:51:89:82:a6:22:3d:f3:04:e9:0d:c4: 5a:dd:37:03:0a:0a:24:f4:eb:f9:23:03:6c:42:86: de:e8:0c:93:31:52:94:af:a8:41:09:2c:53:bc:bd: a8:fd:fd:e3:54:27:5c:9c:dd:50:9c:9b:c6:2b:35: 02:dc:62:17:db:35:ac:3d:ec:87:57:17:35:58:2b: 1e:73:51:33:39:4f:7c:36:ad:34:b4:a9:dc:6a:32: 52:74:ce:85:51:4f:1d:04:41:38:8a:5a:bc:34:6b: 16:ec:44:1d:77:30:7a:1b:13:22:80:76:36:7a:13: e3:a0:7f:66:3a:ae:83:d3:a6:a6:e4:b1:6f:a5:fc: 28:f2:ed:17:d0:0b:49:71:bb:f9:07:69:df:48:a2: 0b:96:67:4f:77:43:c2:1a:d6:20:cc:29:87:30:f5: eb:fb:4f:0f:00:eb:16:b6:ea:58:9c:76:16:0a:84: cf:58:7c:62:78:4a:0d:64:a8:4e:82:f1:f7:74:8d: e6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7B:91:B4:B8:47:BF:3D:29:FB:E0:33:38:9F:46:60:1B:AA:27:CC X509v3 Authority Key Identifier: keyid:98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/8FADE73CA49B11EEB19E774BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.139.62.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:6a:45:f3:9a:69:cb:fb:2f:bc:03:98:bb:a8:ac:43:45:15: 49:3a:da:91:ba:71:2f:e4:eb:3f:dd:3f:e7:87:96:c1:3d:b1: d4:5c:60:7d:11:94:90:8a:50:a7:cd:74:fe:3d:a7:9a:68:ba: f1:e5:20:7d:ee:6a:8f:1c:44:3a:3e:36:86:69:fe:51:30:85: 5c:8e:d8:df:85:a2:a4:cf:7f:7b:77:41:e9:7a:e2:a6:ef:d9: 16:ae:43:a2:08:1c:b9:2e:ae:db:6d:d5:85:a3:4f:99:65:9b: ab:4c:f7:25:72:87:08:93:65:80:4f:56:6c:a4:35:c5:54:56: 26:34:04:df:c7:eb:92:d5:07:94:13:fb:c4:3a:24:4e:cc:05: 92:8f:5f:f7:8d:94:db:2d:e1:39:42:c3:50:a4:10:7f:ea:90: 76:6c:08:e5:46:1f:9a:91:87:f3:80:fd:88:20:04:b9:c3:a3: ba:c7:a5:9b:28:cc:06:b9:55:ec:c1:b2:d4:89:88:f2:0b:0d: 89:51:08:40:6b:d7:56:98:65:89:69:51:52:53:54:34:7b:9b: 20:c0:bd:4f:79:f8:66:37:ea:17:f5:2f:3d:a3:04:1c:d4:57: 49:e3:d4:a5:cb:b1:4b:b5:0b:84:6a:aa:00:fa:8d:42:34:21: b7:5e:5b:48 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y3N0QxMTAvBgNVBAUTKDk4M0Q3ODMwMDJDNTREQThGOEE2RTI5NTgzOEI5Q0FG MDEzNjQzNTgwHhcNMjQwNjA2MjMwMDQ5WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjYyM2ZhMS0wNzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWYOKAy4M1raruVTx1Uu9WMbgfJcHimaNMEPyub3ChPSwoyPS/P/FekRKBiB +io/CegSTnOLj95iPxfRnQVOUYmCpiI98wTpDcRa3TcDCgok9Ov5IwNsQobe6AyT MVKUr6hBCSxTvL2o/f3jVCdcnN1QnJvGKzUC3GIX2zWsPeyHVxc1WCsec1EzOU98 Nq00tKncajJSdM6FUU8dBEE4ilq8NGsW7EQddzB6GxMigHY2ehPjoH9mOq6D06am 5LFvpfwo8u0X0AtJcbv5B2nfSKILlmdPd0PCGtYgzCmHMPXr+08PAOsWtupYnHYW CoTPWHxieEoNZKhOgvH3dI3muwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEx7kbS4 R789KfvgMzifRmAbqifMMB8GA1UdIwQYMBaAFJg9eDACxU2o+KbilYOLnK8BNkNY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjc3RC8xMUUyNTlEMEQy MkQxMUVBOEFFNzNEMjdDNEY5QUUwMi9tRDE0TUFMRlRhajRwdUtWZzR1Y3J3RTJR MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21EMTRNQUxGVGFqNHB1S1ZnNHVjcndFMlExZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0Y3N0QvMTFFMjU5RDBEMjJEMTFFQThBRTczRDI3QzRGOUFFMDIvOEZBREU3M0NB NDlCMTFFRUIxOUU3NzRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABniz4wDQYJKoZIhvcNAQELBQADggEBAG9qRfOaacv7L7wD mLuorENFFUk62pG6cS/k6z/dP+eHlsE9sdRcYH0RlJCKUKfNdP49p5pouvHlIH3u ao8cRDo+NoZp/lEwhVyO2N+FoqTPf3t3Qel64qbv2RauQ6IIHLkurttt1YWjT5ll m6tM9yVyhwiTZYBPVmykNcVUViY0BN/H65LVB5QT+8Q6JE7MBZKPX/eNlNst4TlC w1CkEH/qkHZsCOVGH5qRh/OA/YggBLnDo7rHpZsozAa5VezBstSJiPILDYlRCEBr 11aYZYlpUVJTVDR7myDAvU95+GY36hf1Lz2jBBzUV0nj1KXLsUu1C4RqqgD6jUI0 IbdeW0g= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:12 2024 by rpki-client on console-fra.rpki-client.org