$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/07D85DDEA7C811EF92C28379C4F9AE02.roa File: 07D85DDEA7C811EF92C28379C4F9AE02.roa (raw, json) Hash identifier: 9mVkmZtrTEdtUbw4LlN+DxJy0nOhfAMrpxdSeh7xUKY= Subject key identifier: 34:21:53:28:C9:20:E1:CD:23:31:8E:DD:FC:EF:2F:63:69:6A:6D:F2 Certificate issuer: /CN=A91D4786/serialNumber=578C8D02AEF0B43E29FECEA1895DCC9D10663535 Certificate serial: 03 Authority key identifier: 57:8C:8D:02:AE:F0:B4:3E:29:FE:CE:A1:89:5D:CC:9D:10:66:35:35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/07D85DDEA7C811EF92C28379C4F9AE02.roa Signing time: Thu 21 Nov 2024 05:18:24 +0000 ROA not before: Thu 21 Nov 2024 05:18:24 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 7545 IP address blocks: 203.22.108.0/23 maxlen: 23 203.22.108.0/24 maxlen: 24 203.22.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4786/serialNumber=578C8D02AEF0B43E29FECEA1895DCC9D10663535 Validity Not Before: Nov 21 05:18:24 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=673ec2a0-86f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e2:fd:8f:56:f7:84:49:4d:ec:8b:97:0a:69: ae:09:e8:99:92:2b:42:d7:eb:76:5b:a9:02:e7:f8: 39:94:7a:fe:ad:5e:43:b8:d4:c5:91:17:25:c1:bd: cd:e5:5d:64:04:1f:8a:ad:1e:8f:a9:8e:fe:02:95: 6d:69:34:e0:b0:73:b8:64:e4:50:4d:53:dd:bd:26: 2d:84:1c:f5:37:23:7f:37:f7:54:a7:e1:b1:2d:e0: dd:b4:f1:da:cb:b8:45:5d:56:87:d3:6a:38:07:75: 99:b0:26:c0:3d:f2:3f:0e:10:80:dc:0f:14:30:42: 7a:e7:d9:7c:6b:61:ae:36:de:39:c4:c7:40:7c:86: 3a:74:0d:3f:0a:ba:b3:67:c7:d2:8b:35:cb:e0:53: 70:9b:24:f8:ef:88:da:0d:a4:43:43:d5:3c:e4:18: bb:d9:ba:c3:82:0d:35:a1:56:b0:8e:d8:e5:c3:e2: 97:6f:c7:05:8e:12:57:d5:1e:b3:4a:12:9f:b7:88: ff:c2:1d:68:c2:fd:6f:46:b8:78:38:2c:06:a6:da: 33:34:bf:de:89:1a:d4:8f:86:51:36:9c:c1:c5:f6: ae:73:14:dc:92:8e:c9:3d:b7:b1:9f:2c:8e:69:9d: d2:61:3e:cf:9a:d8:46:2e:36:07:1a:0c:42:03:da: 16:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:21:53:28:C9:20:E1:CD:23:31:8E:DD:FC:EF:2F:63:69:6A:6D:F2 X509v3 Authority Key Identifier: keyid:57:8C:8D:02:AE:F0:B4:3E:29:FE:CE:A1:89:5D:CC:9D:10:66:35:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/07D85DDEA7C811EF92C28379C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.22.108.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:94:8d:cf:7d:57:17:04:d7:59:f0:38:ec:60:f2:d5:f6:6d: fd:3e:67:16:6a:80:ec:2e:59:ef:42:8d:62:60:25:78:6b:9f: c4:b0:13:ed:9e:2e:8b:aa:3f:63:05:5e:a1:4e:b1:12:1f:e3: 47:be:01:e2:e6:2c:04:75:bb:e3:8c:f1:c7:98:70:47:46:0c: e8:59:d4:a4:10:2e:98:d0:80:3b:86:59:32:ab:3e:4d:40:e8: 5a:1d:d2:ca:b6:9b:f6:76:0d:36:6f:b1:b8:43:a0:f2:c2:76: 23:e0:86:58:fe:eb:fc:3f:a7:02:b5:cc:ce:c1:f0:1d:8c:46: 70:3e:9c:38:87:74:c2:ad:21:cc:66:71:26:6d:99:5f:d4:0e: c8:9f:1e:99:7e:92:4e:5f:b8:5e:6e:59:d1:ac:85:46:9b:8b: a7:06:22:9a:42:ca:b7:0b:46:7d:7f:5c:75:44:75:33:1a:7a: 27:c7:86:4f:7f:20:3b:11:98:bd:c8:a3:2c:e8:30:f9:ce:cc: a9:67:32:53:4c:75:3a:2a:14:4e:c7:c9:74:eb:02:1a:f6:35: 7c:5a:eb:47:49:bd:97:3c:ac:cf:4f:ae:00:31:99:fb:d7:90: 4c:38:46:1e:d1:de:88:2a:45:99:30:81:aa:ff:8d:77:8f:21: 7a:cd:ee:f6 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDc4NjExMC8GA1UEBRMoNTc4QzhEMDJBRUYwQjQzRTI5RkVDRUExODk1RENDOUQx MDY2MzUzNTAeFw0yNDExMjEwNTE4MjRaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY3M2VjMmEwLTg2ZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCx4v2PVveESU3si5cKaa4J6JmSK0LX63ZbqQLn+DmUev6tXkO41MWRFyXBvc3l XWQEH4qtHo+pjv4ClW1pNOCwc7hk5FBNU929Ji2EHPU3I38391Sn4bEt4N208drL uEVdVofTajgHdZmwJsA98j8OEIDcDxQwQnrn2XxrYa423jnEx0B8hjp0DT8KurNn x9KLNcvgU3CbJPjviNoNpEND1TzkGLvZusOCDTWhVrCO2OXD4pdvxwWOElfVHrNK Ep+3iP/CHWjC/W9GuHg4LAam2jM0v96JGtSPhlE2nMHF9q5zFNySjsk9t7GfLI5p ndJhPs+a2EYuNgcaDEID2hZLAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUNCFTKMkg 4c0jMY7d/O8vY2lqbfIwHwYDVR0jBBgwFoAUV4yNAq7wtD4p/s6hiV3MnRBmNTUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0Nzg2LzM0NTk4QzcwQTdD MzExRUZCNTExRTA1M0M0RjlBRTAyL1Y0eU5BcTd3dEQ0cF9zNmhpVjNNblJCbU5U VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVjR5TkFxN3d0RDRwX3M2aGlWM01uUkJtTlRVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDc4Ni8zNDU5OEM3MEE3QzMxMUVGQjUxMUUwNTNDNEY5QUUwMi8wN0Q4NURERUE3 QzgxMUVGOTJDMjgzNzlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAcsWbDANBgkqhkiG9w0BAQsFAAOCAQEAT5SNz31XFwTXWfA4 7GDy1fZt/T5nFmqA7C5Z70KNYmAleGufxLAT7Z4ui6o/YwVeoU6xEh/jR74B4uYs BHW744zxx5hwR0YM6FnUpBAumNCAO4ZZMqs+TUDoWh3Syrab9nYNNm+xuEOg8sJ2 I+CGWP7r/D+nArXMzsHwHYxGcD6cOId0wq0hzGZxJm2ZX9QOyJ8emX6STl+4Xm5Z 0ayFRpuLpwYimkLKtwtGfX9cdUR1Mxp6J8eGT38gOxGYvcijLOgw+c7MqWcyU0x1 OioUTsfJdOsCGvY1fFrrR0m9lzysz0+uADGZ+9eQTDhGHtHeiCpFmTCBqv+Nd48h es3u9g== -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:51 2024 by rpki-client on console-fra.rpki-client.org