$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/69DDDFECA7EE11EF8C6E2652C4F9AE02.roa File: 69DDDFECA7EE11EF8C6E2652C4F9AE02.roa (raw, json) Hash identifier: RaJbPCcc9BeQ/XdO6gqfmS1b+mW4ola9vkAinZ4p0X4= Subject key identifier: 47:77:0D:2E:46:A8:ED:AB:15:CB:FE:7A:77:E2:5C:09:19:B0:1D:CC Certificate issuer: /CN=A91DC017/serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Certificate serial: 016F Authority key identifier: 0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/69DDDFECA7EE11EF8C6E2652C4F9AE02.roa Signing time: Thu 21 Nov 2024 09:53:09 +0000 ROA not before: Thu 21 Nov 2024 09:53:09 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 38277 IP address blocks: 43.252.40.0/24 maxlen: 24 43.252.41.0/24 maxlen: 24 103.228.28.0/22 maxlen: 22 103.228.28.0/24 maxlen: 24 103.228.29.0/24 maxlen: 24 103.228.30.0/24 maxlen: 24 103.228.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 09:51:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC017/serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Validity Not Before: Nov 21 09:53:09 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=673f0305-8b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:89:e6:ac:7a:15:3c:ce:67:27:2d:7e:e4:6a: 67:55:05:de:6e:e2:41:e5:fd:97:21:6d:6b:30:d7: f4:9f:27:22:09:ae:77:e1:7b:89:e5:77:0f:4b:f6: 90:e2:9b:6f:34:da:95:3a:f6:16:8a:d0:e5:be:48: 74:44:72:f6:da:ea:fd:59:b3:79:df:e8:de:f4:5d: aa:3c:59:21:3b:fb:b7:19:e4:25:6e:a7:57:8b:b8: 3e:7c:28:b2:73:62:2e:9f:05:36:ee:25:0d:b8:20: 0f:81:75:6f:a1:8c:69:d5:ba:0f:75:6a:14:28:d2: b2:f3:89:fc:bb:79:74:ee:aa:3f:18:4f:4e:d5:b3: f4:dc:0d:12:6a:eb:52:f7:a9:f7:df:1a:6a:68:26: a9:b0:11:8d:16:65:82:55:50:cb:6f:60:7f:fc:99: b7:91:d6:82:a8:b1:9c:f9:0e:13:36:cf:d8:28:a2: 46:57:c6:75:e6:6a:c8:09:b3:04:fc:82:15:fd:56: a3:51:70:91:b7:66:0b:0e:ad:c5:35:a5:52:03:7b: 2f:b8:74:7f:36:6e:17:03:a7:5e:9d:2d:64:a4:96: 40:e8:17:71:41:4a:2a:fc:68:7d:df:cc:0e:0a:9a: 98:8d:e8:39:5b:3c:ae:7c:39:f4:0a:c3:41:5a:14: d5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:77:0D:2E:46:A8:ED:AB:15:CB:FE:7A:77:E2:5C:09:19:B0:1D:CC X509v3 Authority Key Identifier: keyid:0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/69DDDFECA7EE11EF8C6E2652C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.252.40.0/23 103.228.28.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:61:7f:1b:6c:9d:c3:31:35:21:59:d3:d6:2c:e3:39:c7:54: 80:24:37:7d:dd:84:21:a4:7e:84:7e:e3:51:08:02:ba:54:63: 7d:6e:43:7f:08:c2:85:8b:73:04:7b:d4:d5:b5:bd:3c:56:87: 99:70:80:67:28:92:4b:3c:15:94:02:ca:b1:7d:76:38:93:b8: ca:69:b1:fe:35:af:08:0b:e2:92:26:40:6c:14:c4:30:7f:41: 44:f7:11:86:58:6b:87:e5:af:c5:85:ea:64:e8:05:8c:49:73: 0e:41:05:fd:89:59:74:32:12:ef:8e:3a:ff:6a:0c:e1:d6:95: a9:03:dc:b7:65:ce:cf:65:84:0b:7c:b4:62:02:39:cd:fd:cb: b1:fd:a4:21:3c:13:ad:34:b2:7e:4f:a1:83:37:e9:f2:53:bd: 4b:a2:b2:0a:82:cb:1a:4d:32:76:4f:8c:7d:ba:a3:f4:b3:16: 4a:f8:f4:69:d6:dc:27:04:82:df:f9:ee:5c:c3:22:b6:11:e6: 41:f7:76:74:d9:a1:aa:6c:06:ca:35:77:36:61:bf:67:de:28: b6:c4:cd:93:0c:a2:6b:f4:6f:51:01:d3:c1:de:ba:cf:5b:ca: 2a:d2:c4:f9:8b:73:e8:54:70:ad:f9:48:2c:c9:46:11:9a:d2: fe:61:95:c6 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwMTcxMTAvBgNVBAUTKDBBQTVERTI5MjY1QTA4RTI3QTU4MUQ4OTQ0NjVCRENE QjczNzA5QkIwHhcNMjQxMTIxMDk1MzA5WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzNmMDMwNS04YjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24nmrHoVPM5nJy1+5GpnVQXebuJB5f2XIW1rMNf0nyciCa534XuJ5XcPS/aQ 4ptvNNqVOvYWitDlvkh0RHL22ur9WbN53+je9F2qPFkhO/u3GeQlbqdXi7g+fCiy c2IunwU27iUNuCAPgXVvoYxp1boPdWoUKNKy84n8u3l07qo/GE9O1bP03A0SautS 96n33xpqaCapsBGNFmWCVVDLb2B//Jm3kdaCqLGc+Q4TNs/YKKJGV8Z15mrICbME /IIV/VajUXCRt2YLDq3FNaVSA3svuHR/Nm4XA6denS1kpJZA6BdxQUoq/Gh938wO CpqYjeg5WzyufDn0CsNBWhTVsQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEd3DS5G qO2rFcv+enfiXAkZsB3MMB8GA1UdIwQYMBaAFAql3ikmWgjielgdiURlvc23Nwm7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzAxNy8xMDVBQzhGQzkw QzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNPSjZXQjJKUkdXOXpiYzND YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxWGVLU1phQ09KNldCMkpSR1c5emJjM0Nicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REMwMTcvMTA1QUM4RkM5MEMzMTFFREJBMURDQzIzQzRGOUFFMDIvNjlERERGRUNB N0VFMTFFRjhDNkUyNjUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAEr/CgDBAJn5BwwDQYJKoZIhvcNAQELBQADggEBAGphfxts ncMxNSFZ09Ys4znHVIAkN33dhCGkfoR+41EIArpUY31uQ38IwoWLcwR71NW1vTxW h5lwgGcokks8FZQCyrF9djiTuMppsf41rwgL4pImQGwUxDB/QUT3EYZYa4flr8WF 6mToBYxJcw5BBf2JWXQyEu+OOv9qDOHWlakD3Ldlzs9lhAt8tGICOc39y7H9pCE8 E600sn5PoYM36fJTvUuisgqCyxpNMnZPjH26o/SzFkr49GnW3CcEgt/57lzDIrYR 5kH3dnTZoapsBso1dzZhv2feKLbEzZMMomv0b1EB08Heus9byirSxPmLc+hUcK35 SCzJRhGa0v5hlcY= -----END CERTIFICATE-----Generated at Thu Nov 21 11:11:35 2024 by rpki-client on console-ams.rpki-client.org