$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/14A4E3F099E211EAAC99C833C4F9AE02.roa File: 14A4E3F099E211EAAC99C833C4F9AE02.roa (raw, json) Hash identifier: EhRN/uooWnaf/BKx+rG8uVpZETp6E4AIAKPHufyI6h0= Subject key identifier: A2:48:01:24:B3:52:DE:6F:A5:F3:39:AB:00:2C:56:FD:31:28:DA:21 Certificate issuer: /CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Certificate serial: 08BC Authority key identifier: 25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/14A4E3F099E211EAAC99C833C4F9AE02.roa Signing time: Thu 18 Jul 2024 21:18:59 +0000 ROA not before: Thu 18 Jul 2024 21:18:59 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 139004 IP address blocks: 103.138.120.0/22 maxlen: 24 2001:df0:3b80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2236 (0x8bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Validity Not Before: Jul 18 21:18:59 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=669986c3-ccdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:94:b4:95:01:4d:87:25:a0:34:fd:05:d1:b6: 3f:b6:a8:c9:25:d0:c5:d1:73:c0:31:8e:79:d9:b5: 31:a5:ae:2f:70:54:8c:ca:65:4d:b6:07:cd:19:12: b1:3c:02:f8:a2:8a:c4:9e:04:33:0f:ab:fa:6a:b8: 41:31:e3:03:7a:eb:ed:77:8d:fa:5f:61:67:4b:99: 1b:b9:ad:08:51:d7:e4:c3:9f:b5:e6:2c:f3:98:12: 36:37:2e:6d:22:0f:06:9f:ad:cb:4d:7b:1c:39:2a: da:20:11:11:4c:9d:7e:bf:60:9f:5d:4c:23:df:b1: 6b:f4:bb:12:06:26:1d:0f:a6:96:d4:88:14:57:51: 5c:dc:5e:b1:64:e1:fd:f9:d9:4d:ca:ee:35:fa:7f: cd:e9:59:04:03:b2:90:10:b8:13:30:13:65:03:50: db:4d:bd:8b:29:7b:d3:1a:c2:f5:43:2d:31:bb:9f: 00:3f:dc:ab:c6:5f:cb:6f:f0:46:ed:fa:bb:d9:e2: 1d:eb:31:cf:55:59:24:d2:cf:a4:52:91:06:fb:32: a7:24:91:ac:bd:a3:73:d1:db:44:19:31:70:69:85: cf:8f:ce:9d:60:5a:de:02:94:3b:88:de:5e:2d:b2: 91:b8:a0:57:be:af:34:82:81:df:80:23:db:86:60: 4b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:48:01:24:B3:52:DE:6F:A5:F3:39:AB:00:2C:56:FD:31:28:DA:21 X509v3 Authority Key Identifier: keyid:25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/14A4E3F099E211EAAC99C833C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.120.0/22 IPv6: 2001:df0:3b80::/48 Signature Algorithm: sha256WithRSAEncryption b0:5d:a5:bf:69:04:30:0a:b5:64:96:c9:4a:b2:79:31:59:75: 7b:86:7b:1e:32:2e:86:e1:5a:94:7e:b7:07:e8:ce:30:c4:0f: 4b:fd:66:68:65:9c:84:7c:40:a1:cb:8f:7a:8a:84:d5:24:b2: 7b:c2:7f:a6:86:86:51:6f:e9:ae:9f:60:e6:8c:e3:2f:81:68: 64:51:88:72:a2:08:aa:d2:0e:dd:b2:42:2f:e6:d8:2b:9a:07: 3f:bc:aa:18:88:3f:e6:48:10:0b:c6:94:12:46:5f:a9:0e:5a: 0e:a8:4c:48:ea:78:00:30:75:d7:f7:34:88:0b:a7:6f:53:5f: aa:34:18:87:4c:e3:71:18:11:65:65:45:97:99:7a:c4:1c:44: 41:7d:1b:28:e5:b4:6e:00:15:74:a1:7b:d4:95:cb:94:3d:2d: f2:ac:74:7c:5d:c5:b6:ac:82:92:8d:f2:43:ba:b3:2f:7c:26: 7d:36:22:f3:1c:17:e2:cd:42:d9:a4:c3:67:1b:2c:55:02:fb: 74:4c:d5:4c:cb:65:27:a0:e7:a3:0f:12:47:3a:10:75:5e:c4: 80:60:04:4f:09:f2:41:23:2d:58:6a:55:86:fb:b8:43:f5:2c: 4a:10:fc:c5:0f:96:c6:03:47:24:d6:2a:08:91:ce:9a:bc:ee: 61:83:05:08 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4QzExMTAvBgNVBAUTKDI1ODQxRkE3N0MwNTcxNjU4NUZFN0JEQjA2MDBCOTg2 NEUzNDA2RDIwHhcNMjQwNzE4MjExODU5WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njk5ODZjMy1jY2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJS0lQFNhyWgNP0F0bY/tqjJJdDF0XPAMY552bUxpa4vcFSMymVNtgfNGRKx PAL4oorEngQzD6v6arhBMeMDeuvtd436X2FnS5kbua0IUdfkw5+15izzmBI2Ny5t Ig8Gn63LTXscOSraIBERTJ1+v2CfXUwj37Fr9LsSBiYdD6aW1IgUV1Fc3F6xZOH9 +dlNyu41+n/N6VkEA7KQELgTMBNlA1DbTb2LKXvTGsL1Qy0xu58AP9yrxl/Lb/BG 7fq72eId6zHPVVkk0s+kUpEG+zKnJJGsvaNz0dtEGTFwaYXPj86dYFreApQ7iN5e LbKRuKBXvq80goHfgCPbhmBLOwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKJIASSz Ut5vpfM5qwAsVv0xKNohMB8GA1UdIwQYMBaAFCWEH6d8BXFlhf572wYAuYZONAbS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhDMS9GOEFGQTE0MDk5 RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNXV0ZfbnZiQmdDNWhrNDBC dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZUWZwM3dGY1dXRl9udmJCZ0M1aGs0MEJ0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTI4QzEvRjhBRkExNDA5OUUwMTFFQTk2NjUyRjMyQzRGOUFFMDIvMTRBNEUzRjA5 OUUyMTFFQUFDOTlDODMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJningwDwQCAAIwCQMHACABDfA7gDANBgkqhkiG9w0BAQsF AAOCAQEAsF2lv2kEMAq1ZJbJSrJ5MVl1e4Z7HjIuhuFalH63B+jOMMQPS/1maGWc hHxAocuPeoqE1SSye8J/poaGUW/prp9g5ozjL4FoZFGIcqIIqtIO3bJCL+bYK5oH P7yqGIg/5kgQC8aUEkZfqQ5aDqhMSOp4ADB11/c0iAunb1NfqjQYh0zjcRgRZWVF l5l6xBxEQX0bKOW0bgAVdKF71JXLlD0t8qx0fF3FtqyCko3yQ7qzL3wmfTYi8xwX 4s1C2aTDZxssVQL7dEzVTMtlJ6Dnow8SRzoQdV7EgGAETwnyQSMtWGpVhvu4Q/Us ShD8xQ+WxgNHJNYqCJHOmrzuYYMFCA== -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:34 2024 by rpki-client on console-fra.rpki-client.org