$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/CAE1D9E2404611EB913D5C10C4F9AE02.roa File: CAE1D9E2404611EB913D5C10C4F9AE02.roa (raw, json) Hash identifier: Ax63BRCrGm3rOVIvpURoa8KAyGx4REQ36ZFskHiV9Hs= Subject key identifier: 26:F7:C0:44:15:6B:86:F6:72:63:5D:A8:BA:E6:96:81:9B:A2:A8:E3 Certificate issuer: /CN=A91D9FF0/serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225 Certificate serial: 0CC8 Authority key identifier: E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/CAE1D9E2404611EB913D5C10C4F9AE02.roa Signing time: Mon 15 Jul 2024 13:56:05 +0000 ROA not before: Mon 15 Jul 2024 13:56:05 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 139302 IP address blocks: 103.141.4.0/24 maxlen: 24 103.141.5.0/24 maxlen: 24 2001:df1:39c0::/48 maxlen: 48 2001:df1:39c0::/50 maxlen: 50 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3272 (0xcc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9FF0/serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225 Validity Not Before: Jul 15 13:56:05 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66952a75-88dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9a:85:e1:83:8e:9f:7f:73:b0:5b:1f:85:c1: ec:7b:4e:41:ad:03:74:9a:00:d2:d5:3d:c3:6b:0a: e8:40:f4:f6:ec:22:d4:65:86:38:f0:75:f1:44:03: 0e:d0:e1:a6:69:93:2a:cb:68:1a:86:57:79:d3:09: 34:98:77:74:e5:28:f6:77:07:57:59:2a:6d:19:e5: ff:c7:db:ea:ef:dd:55:82:3d:c5:bd:c4:6b:d8:85: 30:a6:09:bb:11:63:46:15:90:cc:d2:ea:79:fb:19: ad:3f:db:ce:34:52:23:77:b8:3b:9a:32:0d:f5:13: 00:ab:80:0d:04:97:68:2c:4b:d9:b9:af:07:c0:a7: e7:73:c1:b3:31:69:f7:15:23:ae:3a:3e:e9:24:8f: d6:5c:cc:2d:64:a4:41:17:e3:26:e8:14:ae:50:a2: bb:f3:45:46:4e:a6:9a:9a:28:1c:d8:32:f0:05:3f: fe:31:9d:1d:c9:b2:16:57:d2:26:ca:35:45:8e:c7: 0f:af:80:98:be:68:10:60:18:a1:dd:46:19:f4:65: 8d:ff:62:81:2f:ad:a2:b4:e1:3d:a8:9a:d9:a1:74: 2f:a9:bb:32:30:0b:e2:6c:24:d8:76:f6:33:bd:21: 15:f0:bb:05:ad:87:b4:e3:94:92:63:f9:cc:b7:d9: 62:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F7:C0:44:15:6B:86:F6:72:63:5D:A8:BA:E6:96:81:9B:A2:A8:E3 X509v3 Authority Key Identifier: keyid:E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/CAE1D9E2404611EB913D5C10C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.141.4.0/23 IPv6: 2001:df1:39c0::/48 Signature Algorithm: sha256WithRSAEncryption 9c:c3:9d:b7:4e:f4:cc:e3:0c:45:4f:f3:4b:e5:75:b2:00:9e: 33:48:03:80:1c:b9:a2:2d:8f:92:34:65:46:d3:3d:7f:3b:24: b5:f5:a5:2f:01:f4:e7:09:35:8f:e3:3c:82:6c:a3:ef:78:81: d7:a3:f7:f7:71:c9:b3:64:01:08:ad:8e:4a:8c:72:e4:3e:b2: f5:48:8c:be:2a:e3:e1:ad:16:3f:a9:60:96:c0:2f:2f:40:98: 40:9d:87:44:6f:b8:69:ce:0a:91:b3:a9:01:8e:f8:81:77:e2: e3:32:ca:b2:83:d6:3c:0c:ea:05:6e:63:a8:31:71:c1:bf:ad: 03:71:6a:de:3b:d0:b3:34:67:ab:da:47:db:e2:15:8e:0b:ef: 86:b4:ab:42:e1:06:c1:d1:3c:f6:5b:53:b4:97:84:f9:40:5a: eb:7f:df:1a:65:11:7c:1a:cc:4f:2d:72:c5:0a:4f:c4:22:35: 51:26:86:2b:32:6a:ea:51:2c:08:5e:24:b4:9c:7d:7e:a1:04: bb:e5:5f:44:b7:34:2b:99:05:33:4a:fa:1e:ef:7f:46:c2:f7: 19:50:12:cb:24:c0:97:ec:db:f9:52:79:fa:42:cf:46:3e:b3: ac:0e:27:97:50:68:fa:6b:5b:80:70:9d:57:96:c3:cd:52:0b: 4b:f7:d9:2b -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGRjAxMTAvBgNVBAUTKEU3REUzMUZBREVEMzc5NDE0RDY3RkJCQ0Y1MUQ5NzY1 MTRFMzQyMjUwHhcNMjQwNzE1MTM1NjA1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njk1MmE3NS04OGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5qF4YOOn39zsFsfhcHse05BrQN0mgDS1T3DawroQPT27CLUZYY48HXxRAMO 0OGmaZMqy2gahld50wk0mHd05Sj2dwdXWSptGeX/x9vq791Vgj3FvcRr2IUwpgm7 EWNGFZDM0up5+xmtP9vONFIjd7g7mjIN9RMAq4ANBJdoLEvZua8HwKfnc8GzMWn3 FSOuOj7pJI/WXMwtZKRBF+Mm6BSuUKK780VGTqaamigc2DLwBT/+MZ0dybIWV9Im yjVFjscPr4CYvmgQYBih3UYZ9GWN/2KBL62itOE9qJrZoXQvqbsyMAvibCTYdvYz vSEV8LsFrYe045SSY/nMt9liiwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFCb3wEQV a4b2cmNdqLrmloGboqjjMB8GA1UdIwQYMBaAFOfeMfre03lBTWf7vPUdl2UU40Il MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUZGMC85NDMzMEZFNkQ0 NjkxMUU5OEYwMTk4MkNDNEY5QUUwMi81OTR4LXQ3VGVVRk5aX3U4OVIyWFpSVGpR aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU5NHgtdDdUZVVGTlpfdTg5UjJYWlJUalFpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDlGRjAvOTQzMzBGRTZENDY5MTFFOThGMDE5ODJDQzRGOUFFMDIvQ0FFMUQ5RTI0 MDQ2MTFFQjkxM0Q1QzEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnjQQwDwQCAAIwCQMHACABDfE5wDANBgkqhkiG9w0BAQsF AAOCAQEAnMOdt070zOMMRU/zS+V1sgCeM0gDgBy5oi2PkjRlRtM9fzsktfWlLwH0 5wk1j+M8gmyj73iB16P393HJs2QBCK2OSoxy5D6y9UiMvirj4a0WP6lglsAvL0CY QJ2HRG+4ac4KkbOpAY74gXfi4zLKsoPWPAzqBW5jqDFxwb+tA3Fq3jvQszRnq9pH 2+IVjgvvhrSrQuEGwdE89ltTtJeE+UBa63/fGmURfBrMTy1yxQpPxCI1USaGKzJq 6lEsCF4ktJx9fqEEu+VfRLc0K5kFM0r6Hu9/RsL3GVASyyTAl+zb+VJ5+kLPRj6z rA4nl1Bo+mtbgHCdV5bDzVILS/fZKw== -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:04 2024 by rpki-client on console-fra.rpki-client.org