$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/A3BE70CCD5AE11EE909D5C40C4F9AE02.roa File: A3BE70CCD5AE11EE909D5C40C4F9AE02.roa (raw, json) Hash identifier: It+EzOgB+4GwVpz41BOeTUKf/RikBUyvJSCbvGF22zE= Subject key identifier: 73:47:EF:17:DE:85:F1:CE:0A:4B:83:3B:D7:A1:0F:40:38:9B:C6:82 Certificate issuer: /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C Certificate serial: 0AB9 Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/A3BE70CCD5AE11EE909D5C40C4F9AE02.roa Signing time: Tue 30 Jul 2024 19:57:39 +0000 ROA not before: Tue 30 Jul 2024 19:57:39 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 137884 IP address blocks: 103.116.116.0/23 maxlen: 23 103.116.116.0/24 maxlen: 24 103.116.117.0/24 maxlen: 24 103.116.118.0/24 maxlen: 24 2402:f940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:06:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2745 (0xab9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C Validity Not Before: Jul 30 19:57:39 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66a945b3-c122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ee:f6:72:65:ac:39:6e:c8:e2:59:d7:71:4e: 53:fa:4a:57:28:3e:ca:7a:e7:58:03:6f:c3:5f:66: 84:53:75:df:b0:5b:6c:05:3d:e3:88:f8:48:16:f7: 33:c4:0f:c3:3b:75:9a:a5:b2:cf:7b:55:48:06:49: 1f:5f:bd:3b:8d:b7:d8:f6:c6:4b:92:fc:08:c0:44: 41:82:c1:92:41:3e:74:ac:8b:17:89:df:79:6e:51: 1e:70:0d:cf:03:49:c0:81:c1:80:01:85:a3:33:66: 3f:0c:7e:9e:04:41:a9:8d:f6:a3:bd:dc:5e:8f:a9: 13:80:28:81:4a:41:e7:4a:dd:da:66:06:12:59:72: 89:a6:88:32:17:2e:39:43:21:4c:6e:a4:82:7c:6e: 16:6c:ba:40:10:23:88:0d:d7:5e:88:1d:48:77:0e: 86:e5:a0:b7:c8:cd:da:df:24:3b:51:f0:0b:84:a0: 4d:0b:9b:54:f3:81:48:35:4a:ed:07:1f:13:70:c1: e4:5b:d2:cb:40:ed:8d:14:32:b4:99:b7:a3:9b:61: 09:35:c0:9c:3f:ed:c3:26:54:0f:60:c7:07:65:54: d4:f7:c2:32:77:f4:4e:2e:2e:b6:68:8c:eb:64:97: b9:0b:1f:9e:d7:18:48:3b:93:91:6c:96:84:24:32: ef:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:47:EF:17:DE:85:F1:CE:0A:4B:83:3B:D7:A1:0F:40:38:9B:C6:82 X509v3 Authority Key Identifier: keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/A3BE70CCD5AE11EE909D5C40C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.116.116.0-103.116.118.255 IPv6: 2402:f940::/32 Signature Algorithm: sha256WithRSAEncryption 8a:65:5a:2e:20:66:0c:13:37:fe:10:d7:1c:9a:2a:e2:42:74: ee:b6:de:ba:bf:88:22:3b:05:42:17:ec:f3:42:d9:b1:88:3f: 60:1e:11:78:cc:0c:0b:86:4e:1e:61:6a:99:8b:e4:be:5c:7f: 9a:32:5e:25:80:eb:bd:0c:41:af:b5:dc:30:31:0a:43:da:a6: ff:cf:cc:65:c3:bb:35:03:a6:b9:66:e4:24:d0:90:1a:94:08: 5b:b6:95:99:82:10:b1:89:d4:9f:8a:7a:af:03:ef:6b:7e:2d: 88:59:0f:87:ba:11:0d:d4:79:30:d1:ca:8d:4c:ec:ad:a7:84: 5e:91:b7:af:19:0a:21:6a:48:ba:06:3d:17:e6:7e:b4:74:b0: e4:1d:bc:5f:be:6a:fd:49:da:ce:a3:f6:12:0a:54:07:c1:d0: f7:31:75:b0:04:c1:6d:c6:cb:86:df:74:12:57:3d:48:a6:08: 49:23:a2:e4:fe:3f:03:1a:c9:c4:04:96:e9:54:25:24:40:e6: 60:47:49:12:ad:ac:74:a2:87:b4:f4:b9:ac:fc:73:f9:b8:30: 84:9c:8d:11:1a:b8:ab:e7:46:ec:72:35:c4:a4:c8:d0:41:1b: 95:4d:d4:e9:b1:26:48:bf:c6:6f:2b:06:e2:e7:e2:9e:4d:24: e0:6b:35:9b -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICCrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRGNjYxMTAvBgNVBAUTKDY5QzgxOThCREEzRkQwOTA1M0Y0MjU1M0Q3M0VFQTE1 MTIxRDI0MUMwHhcNMjQwNzMwMTk1NzM5WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmE5NDViMy1jMTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+72cmWsOW7I4lnXcU5T+kpXKD7KeudYA2/DX2aEU3XfsFtsBT3jiPhIFvcz xA/DO3WapbLPe1VIBkkfX707jbfY9sZLkvwIwERBgsGSQT50rIsXid95blEecA3P A0nAgcGAAYWjM2Y/DH6eBEGpjfajvdxej6kTgCiBSkHnSt3aZgYSWXKJpogyFy45 QyFMbqSCfG4WbLpAECOIDddeiB1Idw6G5aC3yM3a3yQ7UfALhKBNC5tU84FINUrt Bx8TcMHkW9LLQO2NFDK0mbejm2EJNcCcP+3DJlQPYMcHZVTU98Iyd/ROLi62aIzr ZJe5Cx+e1xhIO5ORbJaEJDLv4QIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFHNH7xfe hfHOCkuDO9ehD0A4m8aCMB8GA1UdIwQYMBaAFGnIGYvaP9CQU/QlU9c+6hUSHSQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEY2Ni9FNUY2NThBQTM2 OEExMUVBQjU3NDkyNzJDNEY5QUUwMi9hY2daaTlvXzBKQlQ5Q1ZUMXo3cUZSSWRK QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FjZ1ppOW9fMEpCVDlDVlQxejdxRlJJZEpCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTRGNjYvRTVGNjU4QUEzNjhBMTFFQUI1NzQ5MjcyQzRGOUFFMDIvQTNCRTcwQ0NE NUFFMTFFRTkwOUQ1QzQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBQEAgABMA4wDAMEAmd0dAMEAGd0djANBAIAAjAHAwUAJAL5QDANBgkqhkiG 9w0BAQsFAAOCAQEAimVaLiBmDBM3/hDXHJoq4kJ07rbeur+IIjsFQhfs80LZsYg/ YB4ReMwMC4ZOHmFqmYvkvlx/mjJeJYDrvQxBr7XcMDEKQ9qm/8/MZcO7NQOmuWbk JNCQGpQIW7aVmYIQsYnUn4p6rwPva34tiFkPh7oRDdR5MNHKjUzsraeEXpG3rxkK IWpIugY9F+Z+tHSw5B28X75q/UnazqP2EgpUB8HQ9zF1sATBbcbLht90Elc9SKYI SSOi5P4/AxrJxASW6VQlJEDmYEdJEq2sdKKHtPS5rPxz+bgwhJyNERq4q+dG7HI1 xKTI0EEblU3U6bEmSL/GbysG4ufink0k4Gs1mw== -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:34 2024 by rpki-client on console-fra.rpki-client.org