$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/2F581CEA33F311EEABFC7410C4F9AE02.roa File: 2F581CEA33F311EEABFC7410C4F9AE02.roa (raw, json) Hash identifier: 0O6TcMZ7cyiTOQX6a4lo9IW8lZvmQl+TflI94IQBsXg= Subject key identifier: 1D:0C:07:AF:6E:D2:1A:A6:AC:50:A5:F6:5E:93:52:E5:08:F6:30:F1 Certificate issuer: /CN=A91E0EF8/serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B Certificate serial: 0534 Authority key identifier: A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/2F581CEA33F311EEABFC7410C4F9AE02.roa Signing time: Sat 31 Aug 2024 01:03:59 +0000 ROA not before: Sat 31 Aug 2024 01:03:59 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 151634 IP address blocks: 103.168.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1332 (0x534) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0EF8/serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B Validity Not Before: Aug 31 01:03:59 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66d26bfe-4f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3e:b0:03:da:3c:0a:96:9d:4e:b2:e8:ba:cf: b0:08:90:85:92:c5:2d:b2:0f:c1:65:6f:ad:17:fb: 8f:7b:3d:31:60:75:b7:c0:47:08:a8:bf:d5:c7:81: 97:58:b6:34:d4:c4:47:ec:6b:5a:ce:61:11:a1:be: 8f:87:42:eb:30:94:40:6d:64:9a:d2:d3:79:9b:b0: a7:51:3c:8a:c9:13:93:c7:1d:17:46:3b:75:a0:3d: 8a:0d:c8:69:c1:32:bb:5a:2d:89:68:f9:bc:dd:c1: 76:5a:f1:b6:5c:4c:28:12:31:0d:82:09:0a:48:d1: f9:c1:0d:97:46:e5:86:c1:f9:e9:47:2c:b1:5a:4e: 9a:f2:0c:41:61:53:10:75:25:9a:5a:8d:60:55:31: 26:46:0e:98:bd:f6:76:19:28:32:21:47:53:0d:aa: c3:79:85:55:47:78:05:2b:c4:da:e2:ca:e6:bb:3a: bc:03:cc:75:d7:9b:8f:4b:4a:24:6c:e3:cd:86:70: 47:bc:22:a7:31:d0:d2:23:8f:d8:2f:55:94:a4:03: c9:06:f6:c4:71:10:7c:54:bb:c8:7c:f8:1d:81:5c: 3d:a5:77:35:07:46:3e:dc:28:6b:c6:96:be:e0:60: dc:10:61:65:91:36:04:53:11:00:0d:51:fc:e0:86: bb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:0C:07:AF:6E:D2:1A:A6:AC:50:A5:F6:5E:93:52:E5:08:F6:30:F1 X509v3 Authority Key Identifier: keyid:A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/2F581CEA33F311EEABFC7410C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.168.43.0/24 Signature Algorithm: sha256WithRSAEncryption 90:c4:a5:3f:55:1b:35:04:fa:59:ab:aa:89:54:ab:d8:d4:e2: 6c:25:7d:f3:d4:b8:83:5c:65:2f:e6:c8:9d:39:bc:58:88:81: 86:0d:11:be:17:c1:eb:77:7d:b7:01:b4:d7:f2:4a:9a:e6:d9: 30:74:34:1d:89:81:b8:b6:f9:67:d8:42:df:b5:23:d6:01:56: c4:31:0d:5b:c4:46:4b:81:79:f6:bb:89:7e:a5:6a:7d:ce:15: eb:52:46:6c:22:3f:ff:db:65:c6:4b:99:22:11:96:f5:23:70: d3:b3:8f:ab:a9:19:95:62:85:ee:d1:a6:07:6e:fa:ac:1b:13: dd:3c:38:00:d4:73:c8:aa:f9:31:d1:ac:ca:b8:3d:cc:e5:5b: b3:17:8b:0e:76:50:e6:89:f5:63:dc:af:64:77:55:f3:33:4d: 83:65:78:01:56:79:0c:f8:91:3b:39:70:0e:2a:d0:8c:76:98: 6a:34:f7:f8:49:e9:0a:91:d8:52:8e:a9:56:a8:9d:d3:19:e0: 27:24:fb:4f:42:c1:e6:c8:bb:7e:8d:73:fe:ba:ea:62:49:b0: 74:b0:97:55:fb:be:4d:f4:1e:82:41:4e:86:7b:49:04:ce:e2: bd:2f:d3:33:fd:24:3c:5c:ca:96:04:70:67:f3:9b:e2:02:c8: 03:c7:48:02 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBFRjgxMTAvBgNVBAUTKEEwNEU3NDNBRDMxRjRGODNGMDlEQzVEMkY3RUY0RkFC RTFFRjY4N0IwHhcNMjQwODMxMDEwMzU5WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQyNmJmZS00ZjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6z6wA9o8CpadTrLous+wCJCFksUtsg/BZW+tF/uPez0xYHW3wEcIqL/Vx4GX WLY01MRH7GtazmERob6Ph0LrMJRAbWSa0tN5m7CnUTyKyROTxx0XRjt1oD2KDchp wTK7Wi2JaPm83cF2WvG2XEwoEjENggkKSNH5wQ2XRuWGwfnpRyyxWk6a8gxBYVMQ dSWaWo1gVTEmRg6YvfZ2GSgyIUdTDarDeYVVR3gFK8Ta4srmuzq8A8x115uPS0ok bOPNhnBHvCKnMdDSI4/YL1WUpAPJBvbEcRB8VLvIfPgdgVw9pXc1B0Y+3Chrxpa+ 4GDcEGFlkTYEUxEADVH84Ia7KQIDAQABo4IClTCCApEwHQYDVR0OBBYEFB0MB69u 0hqmrFCl9l6TUuUI9jDxMB8GA1UdIwQYMBaAFKBOdDrTH0+D8J3F0vfvT6vh72h7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEVGOC9DOTM4RDEwNkNC NTQxMUVCQTNEMzZDNUJDNEY5QUUwMi9vRTUwT3RNZlQ0UHduY1hTOS05UHEtSHZh SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29FNTBPdE1mVDRQd25jWFM5LTlQcS1IdmFIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTBFRjgvQzkzOEQxMDZDQjU0MTFFQkEzRDM2QzVCQzRGOUFFMDIvMkY1ODFDRUEz M0YzMTFFRUFCRkM3NDEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnqCswDQYJKoZIhvcNAQELBQADggEBAJDEpT9VGzUE+lmr qolUq9jU4mwlffPUuINcZS/myJ05vFiIgYYNEb4Xwet3fbcBtNfySprm2TB0NB2J gbi2+WfYQt+1I9YBVsQxDVvERkuBefa7iX6lan3OFetSRmwiP//bZcZLmSIRlvUj cNOzj6upGZVihe7Rpgdu+qwbE908OADUc8iq+THRrMq4PczlW7MXiw52UOaJ9WPc r2R3VfMzTYNleAFWeQz4kTs5cA4q0Ix2mGo09/hJ6QqR2FKOqVaondMZ4Cck+09C webIu36Nc/666mJJsHSwl1X7vk30HoJBToZ7SQTO4r0v0zP9JDxcypYEcGfzm+IC yAPHSAI= -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:38 2024 by rpki-client on console-fra.rpki-client.org