$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/091435C84FA911EFB86F4D40C4F9AE02.roa File: 091435C84FA911EFB86F4D40C4F9AE02.roa (raw, json) Hash identifier: NelfvKaRaVaEbDOwevGJvcL0j28tKOydvj9j6bNje84= Subject key identifier: C4:67:EF:00:A2:9D:79:C0:ED:1F:80:8F:37:FB:96:48:73:E8:8A:BC Certificate issuer: /CN=A91E0CE8/serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C Certificate serial: 15F3 Authority key identifier: 06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/091435C84FA911EFB86F4D40C4F9AE02.roa Signing time: Thu 01 Aug 2024 01:56:20 +0000 ROA not before: Thu 01 Aug 2024 01:56:20 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 139021 IP address blocks: 43.224.152.0/22 maxlen: 24 103.43.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:44:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5619 (0x15f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CE8/serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C Validity Not Before: Aug 1 01:56:20 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66aaeb43-44f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:80:76:8c:c5:61:4d:97:02:85:b3:c3:4d:b5: d6:df:e1:02:42:cf:d2:d6:31:21:ce:24:a8:2a:c3: 1d:d6:88:96:4c:9a:3e:19:b3:20:cb:73:ee:52:81: ec:6f:05:81:30:c7:68:97:7f:a5:6c:84:ef:8a:2d: 60:8e:22:c2:52:cc:0e:9d:22:36:1b:75:3d:0f:e5: e7:dd:70:34:6f:1e:04:90:6f:d0:2d:e9:af:9c:29: 09:92:f8:41:5c:cb:0e:36:0b:44:a9:60:df:7f:3d: 03:93:cc:26:65:e1:ad:0c:bf:f1:b5:6d:17:d0:e3: c0:9d:a0:a3:b8:53:75:3b:1b:1a:8e:d6:b6:37:cb: 22:cd:6f:83:b7:33:84:56:50:77:2e:be:9e:72:92: 1a:88:3b:12:f7:5e:04:4d:1e:a4:9c:a6:54:64:dd: 58:c8:5e:05:f9:53:7d:c2:3b:7e:ba:ca:a4:9f:96: 2f:10:8f:ac:90:90:e4:87:47:d8:89:04:81:3d:9e: 65:79:5c:d8:42:08:ac:02:c6:7e:73:2c:80:9b:46: 3c:32:fc:9d:44:41:f2:e1:6b:ef:b2:66:de:5d:b8: 8c:42:65:8a:ac:df:1f:50:72:6a:21:e4:ec:3f:cb: 4b:0f:e3:16:29:43:f9:91:e2:2d:2a:87:9b:50:6a: b7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:67:EF:00:A2:9D:79:C0:ED:1F:80:8F:37:FB:96:48:73:E8:8A:BC X509v3 Authority Key Identifier: keyid:06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/091435C84FA911EFB86F4D40C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.224.152.0/22 103.43.188.0/22 Signature Algorithm: sha256WithRSAEncryption 67:a4:e5:d6:f5:9c:23:bc:17:a3:4f:18:9e:70:44:70:69:70: 1b:8b:26:c1:34:0b:1a:9d:10:2d:72:08:42:83:65:a7:3f:c6: 39:3b:09:72:b7:35:8a:54:2f:4e:bc:24:ab:63:ca:3c:da:65: b8:89:b4:a5:d5:c8:93:8c:d1:17:63:01:fc:06:3d:73:96:16: 5f:70:8d:cd:c9:4f:0c:d4:46:a1:c0:73:a2:44:bb:f1:a0:eb: d3:5b:b9:98:ed:90:81:5f:32:47:1c:98:43:bf:1f:42:de:78: 03:f5:35:e4:46:95:b2:18:7c:53:45:4d:9c:06:c0:15:db:05: 99:8f:df:09:cd:2d:73:69:26:b1:f9:a0:8c:75:dd:63:7e:61: 28:2c:03:bb:2b:27:5a:ad:68:a2:de:50:19:d2:0d:5f:40:8d: 52:ff:29:8e:e3:8d:90:21:75:17:7a:d2:9b:e5:2e:0b:00:b5: 27:94:1e:9b:a6:f8:91:be:25:d4:aa:45:fe:87:0b:57:47:8d: 92:97:7d:db:12:05:83:34:c6:d0:ac:2e:02:97:c1:72:65:ad: 76:d7:d5:9d:1e:22:a8:ed:48:f8:37:54:6a:2c:10:3d:22:36: c6:c8:49:88:e2:df:e6:8e:61:f5:02:8f:49:fd:24:80:80:10: 05:5e:fe:b2 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICFfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDRTgxMTAvBgNVBAUTKDA2QzYyN0Q5QzMxMkM3QjQ3RDFDM0E1M0I0NDc1NUEx MEE2ODQ4N0MwHhcNMjQwODAxMDE1NjIwWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NmFhZWI0My00NGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6oB2jMVhTZcChbPDTbXW3+ECQs/S1jEhziSoKsMd1oiWTJo+GbMgy3PuUoHs bwWBMMdol3+lbITvii1gjiLCUswOnSI2G3U9D+Xn3XA0bx4EkG/QLemvnCkJkvhB XMsONgtEqWDffz0Dk8wmZeGtDL/xtW0X0OPAnaCjuFN1Oxsajta2N8sizW+DtzOE VlB3Lr6ecpIaiDsS914ETR6knKZUZN1YyF4F+VN9wjt+usqkn5YvEI+skJDkh0fY iQSBPZ5leVzYQgisAsZ+cyyAm0Y8MvydREHy4WvvsmbeXbiMQmWKrN8fUHJqIeTs P8tLD+MWKUP5keItKoebUGq3IwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMRn7wCi nXnA7R+Ajzf7lkhz6Iq8MB8GA1UdIwQYMBaAFAbGJ9nDEse0fRw6U7RHVaEKaEh8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENFOC85MDBEMjY0NjA2 NkExMUU4QjlCQUY2ODJDNEY5QUUwMi9Cc1luMmNNU3g3UjlIRHBUdEVkVm9RcG9T SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JzWW4yY01TeDdSOUhEcFR0RWRWb1Fwb1NIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTBDRTgvOTAwRDI2NDYwNjZBMTFFOEI5QkFGNjgyQzRGOUFFMDIvMDkxNDM1Qzg0 RkE5MTFFRkI4NkY0RDQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr4JgDBAJnK7wwDQYJKoZIhvcNAQELBQADggEBAGek5db1 nCO8F6NPGJ5wRHBpcBuLJsE0CxqdEC1yCEKDZac/xjk7CXK3NYpUL068JKtjyjza ZbiJtKXVyJOM0RdjAfwGPXOWFl9wjc3JTwzURqHAc6JEu/Gg69NbuZjtkIFfMkcc mEO/H0LeeAP1NeRGlbIYfFNFTZwGwBXbBZmP3wnNLXNpJrH5oIx13WN+YSgsA7sr J1qtaKLeUBnSDV9AjVL/KY7jjZAhdRd60pvlLgsAtSeUHpum+JG+JdSqRf6HC1dH jZKXfdsSBYM0xtCsLgKXwXJlrXbX1Z0eIqjtSPg3VGosED0iNsbISYji3+aOYfUC j0n9JICAEAVe/rI= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:19 2024 by rpki-client on console-ams.rpki-client.org