$ rpki-client -vvf rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/AA5F20585B9A11EFBB8CB141C4F9AE02.roa File: AA5F20585B9A11EFBB8CB141C4F9AE02.roa (raw, json) Hash identifier: ecxjqjNdTq+EP2ECpqRdRKRjGTmFLrzhQxbK9x8LpmM= Subject key identifier: 19:F0:87:66:C5:73:DB:A7:71:0D:BC:7F:21:D5:A8:ED:DE:2A:4E:3B Certificate issuer: /CN=A91D824A/serialNumber=5C722A26141C88F7CD40F39B374ADA7FBC1F9B1F Certificate serial: 04 Authority key identifier: 5C:72:2A:26:14:1C:88:F7:CD:40:F3:9B:37:4A:DA:7F:BC:1F:9B:1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XHIqJhQciPfNQPObN0raf7wfmx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/AA5F20585B9A11EFBB8CB141C4F9AE02.roa Signing time: Fri 16 Aug 2024 06:42:11 +0000 ROA not before: Fri 16 Aug 2024 06:42:11 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 26658 IP address blocks: 103.202.48.0/22 maxlen: 24 202.88.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.crl rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XHIqJhQciPfNQPObN0raf7wfmx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D824A/serialNumber=5C722A26141C88F7CD40F39B374ADA7FBC1F9B1F Validity Not Before: Aug 16 06:42:11 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66bef4c3-3435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b0:e4:67:75:60:8e:08:f5:e1:f8:6c:81:6d: a4:3d:bc:e5:a0:80:43:41:72:7c:98:2b:99:51:dd: 61:f1:ae:2c:af:81:22:3d:9e:75:67:38:03:7f:1b: 02:40:aa:fc:2b:ad:e4:8c:da:86:e1:b4:0e:54:dd: 64:d0:b1:9b:6b:04:56:80:ec:01:7d:34:ac:2c:9f: b8:dc:c4:ae:3a:02:71:e8:94:3a:36:dc:a4:ae:6b: d8:90:f1:c1:16:cb:2a:11:c0:6b:8d:f6:64:13:14: 54:e6:47:75:76:3a:dd:db:6d:7d:47:ab:eb:d6:dc: aa:49:5d:7b:ed:1b:f2:c8:00:df:ed:f1:0d:40:c7: e5:66:12:a9:9a:73:b4:7b:1b:3f:77:66:55:62:6e: 4d:1c:4f:73:52:e7:78:80:ad:08:31:c9:29:1f:02: 8c:39:a2:a4:df:01:d4:33:c6:0e:e4:88:87:4e:8e: a5:48:79:82:4f:94:74:4d:34:1b:33:f9:72:2d:0b: ec:3a:42:68:34:38:c5:f4:f7:ea:34:9b:ea:ea:aa: b8:3b:07:32:cf:62:71:1f:7a:e4:e5:6a:19:cf:4d: 5d:df:41:b2:93:9a:38:dc:b6:25:62:ec:ba:a5:a6: 33:75:49:7e:c5:c6:f9:00:4c:b6:8f:f8:35:96:36: 79:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F0:87:66:C5:73:DB:A7:71:0D:BC:7F:21:D5:A8:ED:DE:2A:4E:3B X509v3 Authority Key Identifier: keyid:5C:72:2A:26:14:1C:88:F7:CD:40:F3:9B:37:4A:DA:7F:BC:1F:9B:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XHIqJhQciPfNQPObN0raf7wfmx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/AA5F20585B9A11EFBB8CB141C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.202.48.0/22 202.88.36.0/22 Signature Algorithm: sha256WithRSAEncryption a3:34:a6:63:d2:ac:bc:c6:98:7e:55:83:c6:52:7a:2a:ff:8f: 06:4d:ef:94:4b:f4:bc:11:b5:2a:98:00:f7:f5:33:5c:99:75: fb:15:c6:34:16:d3:8e:f1:80:78:16:09:71:ae:8e:9f:37:5c: 37:f5:d0:85:f4:3c:f9:d3:1c:af:4f:ab:6b:ef:f7:4c:9c:e5: fe:fc:3d:f9:25:01:f0:f7:18:52:26:06:31:34:aa:02:e2:c0: 82:95:87:68:96:f8:97:8d:95:c0:84:ff:3b:62:3b:3a:35:7a: d2:3e:64:2d:5c:43:83:14:c2:4e:0a:19:9d:af:f6:b2:02:a2: 48:ca:75:ab:1b:bc:65:9e:6a:ee:71:00:32:12:06:ef:fb:c8: c0:77:44:be:35:f6:2a:58:8f:c0:1e:3b:08:d9:ce:66:05:cf: 09:38:59:9e:33:c0:cb:23:51:1c:61:9b:2e:2b:5d:1b:ed:d7: 3c:fd:97:15:0b:31:35:41:21:8b:2e:9f:df:8f:79:fd:a7:31: 54:25:e4:ff:d5:20:3e:d2:1b:6e:68:2b:e7:e8:41:6d:41:80: 00:bf:06:25:00:ce:d7:34:d4:71:fe:8d:d8:17:30:cb:07:84: 67:79:28:6a:b4:ed:61:d0:bd:52:52:0b:e9:9b:52:d8:76:e4: 49:80:4c:fe -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODI0QTExMC8GA1UEBRMoNUM3MjJBMjYxNDFDODhGN0NENDBGMzlCMzc0QURBN0ZC QzFGOUIxRjAeFw0yNDA4MTYwNjQyMTFaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YmVmNGMzLTM0MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+sORndWCOCPXh+GyBbaQ9vOWggENBcnyYK5lR3WHxriyvgSI9nnVnOAN/GwJA qvwrreSM2obhtA5U3WTQsZtrBFaA7AF9NKwsn7jcxK46AnHolDo23KSua9iQ8cEW yyoRwGuN9mQTFFTmR3V2Ot3bbX1Hq+vW3KpJXXvtG/LIAN/t8Q1Ax+VmEqmac7R7 Gz93ZlVibk0cT3NS53iArQgxySkfAow5oqTfAdQzxg7kiIdOjqVIeYJPlHRNNBsz +XItC+w6Qmg0OMX09+o0m+rqqrg7BzLPYnEfeuTlahnPTV3fQbKTmjjctiVi7Lql pjN1SX7FxvkATLaP+DWWNnm5AgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUGfCHZsVz 26dxDbx/IdWo7d4qTjswHwYDVR0jBBgwFoAUXHIqJhQciPfNQPObN0raf7wfmx8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MjRBLzRBREYzM0ZDNUI5 QTExRUY4MzA3RjU0MEM0RjlBRTAyL1hISXFKaFFjaVBmTlFQT2JOMHJhZjd3Zm14 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWEhJcUpoUWNpUGZOUVBPYk4wcmFmN3dmbXg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODI0QS80QURGMzNGQzVCOUExMUVGODMwN0Y1NDBDNEY5QUUwMi9BQTVGMjA1ODVC OUExMUVGQkI4Q0IxNDFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAmfKMAMEAspYJDANBgkqhkiG9w0BAQsFAAOCAQEAozSmY9Ks vMaYflWDxlJ6Kv+PBk3vlEv0vBG1KpgA9/UzXJl1+xXGNBbTjvGAeBYJca6Onzdc N/XQhfQ8+dMcr0+ra+/3TJzl/vw9+SUB8PcYUiYGMTSqAuLAgpWHaJb4l42VwIT/ O2I7OjV60j5kLVxDgxTCTgoZna/2sgKiSMp1qxu8ZZ5q7nEAMhIG7/vIwHdEvjX2 KliPwB47CNnOZgXPCThZnjPAyyNRHGGbLitdG+3XPP2XFQsxNUEhiy6f3495/acx VCXk/9UgPtIbbmgr5+hBbUGAAL8GJQDO1zTUcf6N2BcwyweEZ3koarTtYdC9UlIL 6ZtS2HbkSYBM/g== -----END CERTIFICATE-----Generated at Thu Sep 19 07:14:24 2024 by rpki-client on console-fra.rpki-client.org