$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/F4D295243FDA11EFAF5E676AC4F9AE02.roa File: F4D295243FDA11EFAF5E676AC4F9AE02.roa (raw, json) Hash identifier: Zzu4mk3oMia2siQQ0DnH3c4pXZbn4XSvZ0+RKKFCJKs= Subject key identifier: 7C:9E:EC:62:06:14:36:B9:9F:52:91:D4:A7:16:22:B6:BA:A3:CE:F9 Certificate issuer: /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Certificate serial: 0387 Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/F4D295243FDA11EFAF5E676AC4F9AE02.roa Signing time: Thu 11 Jul 2024 23:14:43 +0000 ROA not before: Thu 11 Jul 2024 23:14:43 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 133894 IP address blocks: 103.88.192.0/24 maxlen: 24 103.88.193.0/24 maxlen: 24 103.88.194.0/24 maxlen: 24 103.88.195.0/24 maxlen: 24 116.204.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 903 (0x387) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Validity Not Before: Jul 11 23:14:43 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66906763-0abd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:94:e2:09:42:d8:ee:1e:0e:61:d6:6a:93:02: 0a:ca:4b:24:17:2b:da:d3:10:64:82:00:a4:eb:ee: f1:98:e8:d0:6d:82:6e:1b:00:de:35:45:40:34:f3: 4f:68:c4:70:74:94:84:ce:32:3d:b1:cb:1a:b9:95: d6:ff:94:95:db:11:94:48:8f:50:64:ba:cb:0a:b3: 87:80:5a:5e:1b:09:cf:f7:04:10:83:4c:f8:f0:43: da:25:a7:51:4f:b0:cf:6b:36:03:3e:41:34:33:bd: 38:cb:c0:be:5d:49:cf:a5:cc:7a:c8:20:82:3d:bd: f9:30:6b:c8:94:a0:54:b6:ec:09:7a:dd:33:d1:c0: 35:b2:49:48:49:90:15:b0:c3:cd:77:b2:9d:4b:75: 91:a3:e0:db:d3:df:9c:bd:c7:41:dd:69:a2:89:11: 32:e3:35:08:d0:39:63:7d:09:3b:dc:37:dd:6d:3e: 93:cd:30:79:dd:a2:c5:f3:12:43:45:48:0b:c3:4a: 38:5a:fb:53:4d:ef:79:a1:07:9b:ff:52:60:60:3f: 6e:1f:5d:80:37:dc:ed:3c:8b:bf:58:a9:f5:71:9d: cc:5b:b0:99:eb:de:31:a6:97:a5:31:d7:0a:36:0f: e0:b1:af:92:34:9e:83:2d:b3:b2:e0:bd:10:f5:a6: 0e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:9E:EC:62:06:14:36:B9:9F:52:91:D4:A7:16:22:B6:BA:A3:CE:F9 X509v3 Authority Key Identifier: keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/F4D295243FDA11EFAF5E676AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.88.192.0/22 116.204.240.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:1c:87:6f:01:7c:5b:05:50:d5:51:9f:3b:ff:09:56:7b:47: 23:7d:c2:09:09:93:6a:aa:4e:0d:34:de:b9:3f:dc:49:59:48: 63:57:c9:ef:ad:a7:1e:ef:88:e6:f9:71:fc:24:78:33:6b:3a: e1:d6:e4:66:48:c3:b4:1f:0e:bc:d3:79:6b:15:86:df:58:64: 3e:d2:01:9f:a2:93:45:10:eb:da:de:30:1a:49:a3:ca:5e:22: c7:e0:67:df:4c:fe:95:39:ad:09:ce:c5:b6:b2:f3:ea:fe:cb: ba:c9:43:8d:1e:e9:5a:06:e7:91:52:30:82:cb:b9:cf:4b:db: db:e8:e5:53:7a:38:5a:27:65:cd:37:86:bb:11:6b:c4:88:d7: 9e:b2:a0:be:1a:78:69:22:b3:92:97:22:a6:e2:4b:25:76:e0: 7b:f3:4b:b1:c7:2c:c2:e5:c9:e0:87:4a:b4:26:97:7b:b2:91: 90:b2:10:ca:e4:54:4e:1c:c8:a5:aa:dd:d8:3e:8a:49:38:5a: 9f:4e:09:9b:88:7a:88:17:4b:52:24:18:47:54:ad:fb:4b:42: 44:54:dd:4c:59:dc:a2:e3:e1:f4:98:aa:a4:dc:2b:bd:cf:6c: f9:05:2a:5f:c4:7b:2e:29:b8:18:7a:54:b4:7d:f9:03:da:16: 10:d5:65:c2 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICA4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDOEUxMTAvBgNVBAUTKDk1MzVENzYxMTBCM0MwMjlDNTg1NUI0QzE3NDUwNUFG NjExOUYzMEMwHhcNMjQwNzExMjMxNDQzWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjkwNjc2My0wYWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3pTiCULY7h4OYdZqkwIKykskFyva0xBkggCk6+7xmOjQbYJuGwDeNUVANPNP aMRwdJSEzjI9scsauZXW/5SV2xGUSI9QZLrLCrOHgFpeGwnP9wQQg0z48EPaJadR T7DPazYDPkE0M704y8C+XUnPpcx6yCCCPb35MGvIlKBUtuwJet0z0cA1sklISZAV sMPNd7KdS3WRo+Db09+cvcdB3WmiiREy4zUI0DljfQk73DfdbT6TzTB53aLF8xJD RUgLw0o4WvtTTe95oQeb/1JgYD9uH12AN9ztPIu/WKn1cZ3MW7CZ694xppelMdcK Ng/gsa+SNJ6DLbOy4L0Q9aYONQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHye7GIG FDa5n1KR1KcWIra6o875MB8GA1UdIwQYMBaAFJU112EQs8ApxYVbTBdFBa9hGfMM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEM4RS8wMzJFNTdCODc0 MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendDbkZoVnRNRjBVRnIyRVo4 d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUWFhZUkN6d0NuRmhWdE1GMFVGcjJFWjh3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDBDOEUvMDMyRTU3Qjg3NDM5MTFFQ0I1NTcyMzZGQzRGOUFFMDIvRjREMjk1MjQz RkRBMTFFRkFGNUU2NzZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnWMADBAB0zPAwDQYJKoZIhvcNAQELBQADggEBAE8ch28B fFsFUNVRnzv/CVZ7RyN9wgkJk2qqTg003rk/3ElZSGNXye+tpx7viOb5cfwkeDNr OuHW5GZIw7QfDrzTeWsVht9YZD7SAZ+ik0UQ69reMBpJo8peIsfgZ99M/pU5rQnO xbay8+r+y7rJQ40e6VoG55FSMILLuc9L29vo5VN6OFonZc03hrsRa8SI156yoL4a eGkis5KXIqbiSyV24HvzS7HHLMLlyeCHSrQml3uykZCyEMrkVE4cyKWq3dg+ikk4 Wp9OCZuIeogXS1IkGEdUrftLQkRU3UxZ3KLj4fSYqqTcK73PbPkFKl/Eey4puBh6 VLR9+QPaFhDVZcI= -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:46 2024 by rpki-client on console-fra.rpki-client.org