$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/94B101721B8B11EEACEA736AC4F9AE02.roa File: 94B101721B8B11EEACEA736AC4F9AE02.roa (raw, json) Hash identifier: JMbP2bjYVSs5KHacifQiOMQEGqNSmjGLrxcOwrXZ3Uc= Subject key identifier: 85:78:F0:15:F4:BD:42:40:27:DA:61:2F:73:F4:B7:9B:94:68:0D:34 Certificate issuer: /CN=A91D76E5/serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886 Certificate serial: 07EC Authority key identifier: 74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/94B101721B8B11EEACEA736AC4F9AE02.roa Signing time: Sat 02 Nov 2024 20:49:28 +0000 ROA not before: Sat 02 Nov 2024 20:49:28 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 134555 IP address blocks: 43.247.80.0/22 maxlen: 24 103.23.174.0/24 maxlen: 24 103.87.38.0/23 maxlen: 24 103.235.188.0/22 maxlen: 24 103.236.203.0/24 maxlen: 24 202.52.54.0/23 maxlen: 24 2402:d840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:38:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2028 (0x7ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D76E5/serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886 Validity Not Before: Nov 2 20:49:28 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67269057-27fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cb:d8:12:8c:d6:86:41:ab:21:3f:d1:8b:75: 52:6d:63:73:64:17:69:6c:26:85:0e:9e:70:d7:4a: 82:ac:31:4f:f1:de:43:2e:ba:29:e5:00:74:d7:c7: 0d:6e:01:5c:09:83:16:44:d5:83:db:7b:e5:52:f5: ce:04:02:6e:84:a9:d4:33:33:d9:71:56:17:28:07: a0:8f:e1:cd:7c:62:fe:bb:7a:5d:c9:ea:38:ae:3c: 21:e3:de:a6:30:44:c8:89:a5:2b:13:2e:1b:d4:e4: ac:00:c9:7d:39:3f:3d:91:35:48:20:9c:83:ac:af: 6d:37:dc:59:4d:ea:c3:5a:2d:5f:10:2f:d9:89:5d: fc:bc:ba:6a:63:80:85:3d:3b:0d:7e:98:19:54:18: 6f:3e:75:81:60:32:2e:d9:9e:d5:78:eb:7b:74:06: 75:79:4f:10:23:78:0d:46:45:68:11:b8:80:d7:f3: 09:59:9b:ab:54:ec:50:27:7e:bb:17:32:53:97:46: 0c:33:d5:3a:b4:c3:62:16:72:86:c0:e4:17:86:36: 0a:dc:12:e3:5d:b5:1b:c9:7b:b8:f7:91:dc:f8:24: e2:4a:23:32:f7:02:45:11:d4:7f:25:2b:36:7e:1d: 7d:bd:01:83:af:7a:7e:4e:7b:5f:f9:e2:00:a2:e7: d2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:78:F0:15:F4:BD:42:40:27:DA:61:2F:73:F4:B7:9B:94:68:0D:34 X509v3 Authority Key Identifier: keyid:74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/94B101721B8B11EEACEA736AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.247.80.0/22 103.23.174.0/24 103.87.38.0/23 103.235.188.0/22 103.236.203.0/24 202.52.54.0/23 IPv6: 2402:d840::/32 Signature Algorithm: sha256WithRSAEncryption 7e:7a:37:c0:9f:0d:69:70:9c:65:11:bd:29:7f:35:a3:55:07: 04:21:55:d3:f9:10:d0:4b:d5:22:3a:33:94:23:f2:d6:ae:93: 91:de:8f:48:a7:a8:09:4d:d5:2d:4d:9f:fa:9b:99:d6:36:1f: 8b:31:a7:83:19:58:4a:c6:0a:96:86:e0:d6:b4:83:fe:20:bf: 69:15:5a:26:32:75:c1:ba:76:0b:33:84:6a:a7:aa:dc:87:31: 35:ac:d9:a5:44:a8:fe:70:b1:23:8c:5b:f2:14:98:2d:50:51: 85:ad:6c:c5:73:9b:c0:de:70:57:f4:a3:ad:19:d5:fc:51:02: 8e:68:24:a1:33:12:73:21:02:41:5f:ce:a6:e9:61:c1:92:fa: e6:ea:f4:5b:55:5d:4b:82:90:f9:ff:7b:ee:b9:e1:9c:4d:a3: b6:7a:92:aa:e6:82:d2:76:41:47:0a:7c:f9:04:45:af:1b:09: 70:21:7f:52:27:43:51:5a:54:43:7c:5e:c4:aa:e1:99:f0:84: a2:37:3f:34:df:11:f6:53:25:72:54:97:7a:1a:1f:da:c4:d0: 88:f2:16:fd:3e:39:bf:84:d1:6f:04:86:73:11:05:23:fe:6b: bb:67:d7:68:38:59:dd:e1:75:ce:69:2d:76:ff:c0:d9:f9:0f: d5:bf:58:dc -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgICB+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc2RTUxMTAvBgNVBAUTKDc0OEJDNzlBRkE5QjdGRjc1QjEzMDBBRDI5NDBFN0ZD QzE0MkY4ODYwHhcNMjQxMTAyMjA0OTI4WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzI2OTA1Ny0yN2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08vYEozWhkGrIT/Ri3VSbWNzZBdpbCaFDp5w10qCrDFP8d5DLrop5QB018cN bgFcCYMWRNWD23vlUvXOBAJuhKnUMzPZcVYXKAegj+HNfGL+u3pdyeo4rjwh496m METIiaUrEy4b1OSsAMl9OT89kTVIIJyDrK9tN9xZTerDWi1fEC/ZiV38vLpqY4CF PTsNfpgZVBhvPnWBYDIu2Z7VeOt7dAZ1eU8QI3gNRkVoEbiA1/MJWZurVOxQJ367 FzJTl0YMM9U6tMNiFnKGwOQXhjYK3BLjXbUbyXu495Hc+CTiSiMy9wJFEdR/JSs2 fh19vQGDr3p+Tntf+eIAoufS2QIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFIV48BX0 vUJAJ9phL3P0t5uUaA00MB8GA1UdIwQYMBaAFHSLx5r6m3/3WxMArSlA5/zBQviG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzZFNS9FMDgzQTBFQUNC MTIxMUVBOTI1MDdBMkJDNEY5QUUwMi9kSXZIbXZxYmZfZGJFd0N0S1VEbl9NRkMt SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RJdkhtdnFiZl9kYkV3Q3RLVURuX01GQy1JWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDc2RTUvRTA4M0EwRUFDQjEyMTFFQTkyNTA3QTJCQzRGOUFFMDIvOTRCMTAxNzIx QjhCMTFFRUFDRUE3MzZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTAYIKwYBBQUHAQcBAf8E PTA7MCoEAgABMCQDBAIr91ADBABnF64DBAFnVyYDBAJn67wDBABn7MsDBAHKNDYw DQQCAAIwBwMFACQC2EAwDQYJKoZIhvcNAQELBQADggEBAH56N8CfDWlwnGURvSl/ NaNVBwQhVdP5ENBL1SI6M5Qj8tauk5Hej0inqAlN1S1Nn/qbmdY2H4sxp4MZWErG CpaG4Na0g/4gv2kVWiYydcG6dgszhGqnqtyHMTWs2aVEqP5wsSOMW/IUmC1QUYWt bMVzm8DecFf0o60Z1fxRAo5oJKEzEnMhAkFfzqbpYcGS+ubq9FtVXUuCkPn/e+65 4ZxNo7Z6kqrmgtJ2QUcKfPkERa8bCXAhf1InQ1FaVEN8XsSq4ZnwhKI3PzTfEfZT JXJUl3oaH9rE0IjyFv0+Ob+E0W8EhnMRBSP+a7tn12g4Wd3hdc5pLXb/wNn5D9W/ WNw= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:13 2024 by rpki-client on console-fra.rpki-client.org