$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/C458350E979C11EC8E769C43C4F9AE02.roa File: C458350E979C11EC8E769C43C4F9AE02.roa (raw, json) Hash identifier: eviaeNHpTyeX/nwMhD0qRHeqmHQSy0IY0Lvxy4hMeV0= Subject key identifier: 22:4C:B0:B6:6D:97:47:48:31:8E:89:BD:2B:BB:C9:F8:9E:EB:32:37 Certificate issuer: /CN=A91D4636/serialNumber=B4684E0D622CB9AFD12CB5FA3E4885DFCD85004D Certificate serial: 033B Authority key identifier: B4:68:4E:0D:62:2C:B9:AF:D1:2C:B5:FA:3E:48:85:DF:CD:85:00:4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGhODWIsua_RLLX6PkiF382FAE0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/C458350E979C11EC8E769C43C4F9AE02.roa Signing time: Sun 13 Oct 2024 01:04:28 +0000 ROA not before: Sun 13 Oct 2024 01:04:28 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 139659 IP address blocks: 103.143.80.0/24 maxlen: 24 103.143.81.0/24 maxlen: 24 2001:df1:7880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.crl rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGhODWIsua_RLLX6PkiF382FAE0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 827 (0x33b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4636/serialNumber=B4684E0D622CB9AFD12CB5FA3E4885DFCD85004D Validity Not Before: Oct 13 01:04:28 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=670b1c9b-8af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:60:94:60:1d:36:6c:b7:2d:04:ef:f7:c3:97: 71:03:68:5b:d8:e6:cb:f8:f5:e8:41:35:73:09:50: 22:9f:90:b1:db:81:81:cc:0d:4f:85:59:9e:2b:1e: ed:82:c3:e0:18:f7:5a:c1:7d:db:f9:47:eb:f5:14: 1f:bf:9c:0e:cd:8a:e5:ce:0b:ab:dd:10:c2:1b:80: be:0a:aa:1d:1b:a7:45:17:3c:bf:f0:5b:cf:bb:33: d6:68:fc:37:6b:0c:ac:c5:f6:a4:d6:46:24:73:e4: ec:34:15:86:07:3c:bf:23:f2:86:48:6b:fd:ef:9b: 4c:d8:83:a0:40:aa:cc:fc:78:a9:a8:e8:c6:c7:c6: be:c3:13:b7:6d:f0:ab:ab:0f:35:08:d1:1f:b6:b9: c4:8d:84:48:19:1d:87:84:5b:fd:4b:d3:42:e9:75: ae:c7:80:9c:99:63:b4:7a:90:a3:0e:e8:42:4f:4f: b9:13:7b:e3:14:d1:84:ad:6c:7c:54:64:39:44:d5: e9:54:98:45:41:47:30:20:5e:76:73:69:b6:1e:35: 34:aa:ba:ea:92:1a:e5:83:2d:4a:53:be:fe:2e:3f: 65:2c:8b:51:d6:21:97:0a:b9:6d:56:40:ca:2e:12: 6d:4b:e8:02:a5:73:28:2a:34:3e:74:35:3e:0e:c3: 7c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4C:B0:B6:6D:97:47:48:31:8E:89:BD:2B:BB:C9:F8:9E:EB:32:37 X509v3 Authority Key Identifier: keyid:B4:68:4E:0D:62:2C:B9:AF:D1:2C:B5:FA:3E:48:85:DF:CD:85:00:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGhODWIsua_RLLX6PkiF382FAE0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/C458350E979C11EC8E769C43C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.143.80.0/23 IPv6: 2001:df1:7880::/48 Signature Algorithm: sha256WithRSAEncryption 05:d1:a1:8f:1c:91:5c:8d:4e:24:ce:0f:8c:0f:77:df:c0:b1: 1a:0d:03:91:3e:b8:67:f3:04:d7:9d:16:07:59:6b:42:a7:9c: b0:cb:bc:9b:8d:1d:c8:c2:17:31:2a:a8:37:c8:aa:6e:4d:d4: 15:ae:a9:9b:a3:cc:be:c0:9a:ab:ca:da:71:99:8c:2d:c2:47: c6:a0:ea:9f:fc:32:77:4f:4a:f1:b9:e6:49:c0:c0:ad:50:94: 91:06:75:11:96:aa:69:37:1d:d9:4c:9a:03:04:57:77:92:30: 14:2b:88:b0:fa:82:74:1d:a6:6f:d8:09:78:3b:f4:0d:51:4b: 2c:49:56:0a:94:3a:80:32:8d:72:34:9a:6e:0b:18:b3:39:14: d3:a8:41:74:dd:6e:fb:9b:27:87:84:2b:7b:25:b3:79:b4:e7: e0:a4:21:46:1e:bd:2f:ef:d3:26:04:f4:b6:ee:21:34:e7:d6: 48:d8:04:89:7b:39:8a:7b:33:d9:80:cc:cc:d7:d7:3b:24:bb: 8c:e7:b0:5a:b6:54:93:cf:c2:9b:a0:b0:c7:31:bf:76:b2:6c: 79:48:f4:7e:08:e4:49:9d:29:ed:71:42:fd:8c:4f:a9:ef:a8: fc:2d:4f:c8:c9:7f:6a:96:9d:57:37:8d:38:72:4e:12:54:f5: 0b:63:81:33 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MzYxMTAvBgNVBAUTKEI0Njg0RTBENjIyQ0I5QUZEMTJDQjVGQTNFNDg4NURG Q0Q4NTAwNEQwHhcNMjQxMDEzMDEwNDI4WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzBiMWM5Yi04YWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoWCUYB02bLctBO/3w5dxA2hb2ObL+PXoQTVzCVAin5Cx24GBzA1PhVmeKx7t gsPgGPdawX3b+Ufr9RQfv5wOzYrlzgur3RDCG4C+CqodG6dFFzy/8FvPuzPWaPw3 awysxfak1kYkc+TsNBWGBzy/I/KGSGv975tM2IOgQKrM/HipqOjGx8a+wxO3bfCr qw81CNEftrnEjYRIGR2HhFv9S9NC6XWux4CcmWO0epCjDuhCT0+5E3vjFNGErWx8 VGQ5RNXpVJhFQUcwIF52c2m2HjU0qrrqkhrlgy1KU77+Lj9lLItR1iGXCrltVkDK LhJtS+gCpXMoKjQ+dDU+DsN8ZwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFCJMsLZt l0dIMY6JvSu7yfie6zI3MB8GA1UdIwQYMBaAFLRoTg1iLLmv0Sy1+j5Ihd/NhQBN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYzNi8yQzlCQzMzQzk3 OTkxMUVDQkU3MjVBM0NDNEY5QUUwMi90R2hPRFdJc3VhX1JMTFg2UGtpRjM4MkZB RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RHaE9EV0lzdWFfUkxMWDZQa2lGMzgyRkFFMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQ2MzYvMkM5QkMzM0M5Nzk5MTFFQ0JFNzI1QTNDQzRGOUFFMDIvQzQ1ODM1MEU5 NzlDMTFFQzhFNzY5QzQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnj1AwDwQCAAIwCQMHACABDfF4gDANBgkqhkiG9w0BAQsF AAOCAQEABdGhjxyRXI1OJM4PjA9338CxGg0DkT64Z/ME150WB1lrQqecsMu8m40d yMIXMSqoN8iqbk3UFa6pm6PMvsCaq8racZmMLcJHxqDqn/wyd09K8bnmScDArVCU kQZ1EZaqaTcd2UyaAwRXd5IwFCuIsPqCdB2mb9gJeDv0DVFLLElWCpQ6gDKNcjSa bgsYszkU06hBdN1u+5snh4QreyWzebTn4KQhRh69L+/TJgT0tu4hNOfWSNgEiXs5 insz2YDMzNfXOyS7jOewWrZUk8/Cm6CwxzG/drJseUj0fgjkSZ0p7XFC/YxPqe+o /C1PyMl/apadVzeNOHJOElT1C2OBMw== -----END CERTIFICATE-----Generated at Thu Nov 21 01:31:58 2024 by rpki-client on console-fra.rpki-client.org