$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/2417A16240D111EEB97F9366C4F9AE02.roa File: 2417A16240D111EEB97F9366C4F9AE02.roa (raw, json) Hash identifier: 5HxbfCADS0YE8zgWBNeHaLAjeMofIFQYhkC/UJjBOds= Subject key identifier: 86:05:27:C9:8C:FE:41:B4:E8:42:02:E2:7A:DC:F9:68:C0:C6:98:51 Certificate issuer: /CN=A91E8BAF/serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D Certificate serial: 340D Authority key identifier: 24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/2417A16240D111EEB97F9366C4F9AE02.roa Signing time: Sat 10 Aug 2024 15:41:06 +0000 ROA not before: Sat 10 Aug 2024 15:41:06 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 58641 IP address blocks: 103.14.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13325 (0x340d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8BAF/serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D Validity Not Before: Aug 10 15:41:06 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66b78a11-5633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ba:12:72:44:3e:86:fd:94:25:5f:d1:de:be: 08:50:70:26:3d:0e:97:e1:83:77:0f:d1:ef:d1:3e: f6:5b:99:a1:3e:08:a0:05:fa:18:3e:3d:9c:b0:97: 66:55:aa:1b:66:d7:dd:3a:18:48:cd:4c:28:ce:6b: db:0d:7a:6c:57:cd:85:ba:2f:69:82:3d:43:29:64: 0b:62:7d:39:a0:f3:db:62:04:40:7e:44:6d:f4:dc: db:3e:fe:b8:42:bd:82:d6:97:f4:53:0e:79:7a:b5: 06:9d:70:ef:df:c7:04:d8:52:7b:0e:be:e6:8d:a5: 64:a7:a9:d2:1a:bd:33:46:e0:35:db:df:35:dd:0c: 34:e6:02:15:df:3a:12:7f:54:d8:50:04:ba:74:45: f5:78:e3:8c:e3:de:0b:71:09:7c:25:3e:82:29:30: 96:3f:c4:6d:3b:78:09:68:e9:17:da:3e:d2:51:0a: 41:81:14:c6:5b:39:18:cc:a8:34:b0:0d:d1:34:77: 6a:ab:13:8d:1f:84:82:1c:9d:4a:14:cc:73:27:6e: 47:42:f8:50:09:cd:b4:9d:76:46:3a:1c:28:16:c0: 81:e3:8b:0f:52:b6:b7:64:78:50:57:dd:a8:df:e2: 4b:3c:23:88:44:ee:50:04:ed:20:4c:c3:3d:b2:8d: a7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:05:27:C9:8C:FE:41:B4:E8:42:02:E2:7A:DC:F9:68:C0:C6:98:51 X509v3 Authority Key Identifier: keyid:24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/2417A16240D111EEB97F9366C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.14.96.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:d2:f5:e8:da:6d:93:49:2e:17:02:d8:66:a7:d7:07:97:83: 26:f9:25:9f:6a:0f:0f:a6:7d:6e:53:06:83:4a:27:98:ab:7e: 04:67:4d:ca:02:42:27:da:ee:be:70:63:cf:d5:14:fc:40:95: 98:fd:45:6a:db:49:be:56:a2:5a:9c:69:b8:62:d4:b3:17:63: e4:aa:e4:69:ad:90:ed:9b:53:88:04:85:67:88:1e:b7:fb:7c: 47:5b:ef:58:07:e9:47:b3:5d:35:69:4b:0c:f0:f4:3c:c4:a4: 45:42:0d:0c:2e:94:3b:3d:e0:bb:11:bf:59:62:f0:40:31:00: 9e:0e:72:5c:8a:9f:01:3d:25:64:8f:a2:e9:0c:91:83:79:d5: 36:b6:bb:37:16:db:11:35:2c:18:c6:d8:cc:6f:f6:67:44:04: aa:ba:2e:12:e0:13:dc:87:8b:47:96:69:52:c4:ac:c1:4a:c9: 36:f7:bd:c0:76:db:75:a7:8e:84:0a:39:4e:9d:75:5c:43:67: 7a:9a:14:a9:a1:d0:c4:05:b9:4b:b6:1e:70:33:18:09:a7:87: bb:f8:3b:96:63:91:d6:26:60:62:89:7f:35:e6:87:12:07:c0: ed:51:ac:ba:8d:69:07:94:32:bb:89:c8:5a:e3:80:ae:a0:2b: 17:ff:06:74 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThCQUYxMTAvBgNVBAUTKDI0OERCMUZFRTU1MTBDOEE2QUY4NUVBQzgxMEVDNEND QUU4QkY5MEQwHhcNMjQwODEwMTU0MTA2WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmI3OGExMS01NjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7oSckQ+hv2UJV/R3r4IUHAmPQ6X4YN3D9Hv0T72W5mhPgigBfoYPj2csJdm VaobZtfdOhhIzUwozmvbDXpsV82Fui9pgj1DKWQLYn05oPPbYgRAfkRt9NzbPv64 Qr2C1pf0Uw55erUGnXDv38cE2FJ7Dr7mjaVkp6nSGr0zRuA129813Qw05gIV3zoS f1TYUAS6dEX1eOOM494LcQl8JT6CKTCWP8RtO3gJaOkX2j7SUQpBgRTGWzkYzKg0 sA3RNHdqqxONH4SCHJ1KFMxzJ25HQvhQCc20nXZGOhwoFsCB44sPUra3ZHhQV92o 3+JLPCOIRO5QBO0gTMM9so2nawIDAQABo4IClTCCApEwHQYDVR0OBBYEFIYFJ8mM /kG06EIC4nrc+WjAxphRMB8GA1UdIwQYMBaAFCSNsf7lUQyKavherIEOxMyui/kN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEJBRi8zMkQ4RTIyRTFE QUIxMUUyQTk3RDIzQTkwOEIwMkNEMi9KSTJ4X3VWUkRJcHEtRjZzZ1E3RXpLNkwt UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pJMnhfdVZSRElwcS1GNnNnUTdFeks2TC1RMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RThCQUYvMzJEOEUyMkUxREFCMTFFMkE5N0QyM0E5MDhCMDJDRDIvMjQxN0ExNjI0 MEQxMTFFRUI5N0Y5MzY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnDmAwDQYJKoZIhvcNAQELBQADggEBAA3S9ejabZNJLhcC 2Gan1weXgyb5JZ9qDw+mfW5TBoNKJ5irfgRnTcoCQifa7r5wY8/VFPxAlZj9RWrb Sb5Wolqcabhi1LMXY+Sq5GmtkO2bU4gEhWeIHrf7fEdb71gH6UezXTVpSwzw9DzE pEVCDQwulDs94LsRv1li8EAxAJ4OclyKnwE9JWSPoukMkYN51Ta2uzcW2xE1LBjG 2Mxv9mdEBKq6LhLgE9yHi0eWaVLErMFKyTb3vcB223WnjoQKOU6ddVxDZ3qaFKmh 0MQFuUu2HnAzGAmnh7v4O5ZjkdYmYGKJfzXmhxIHwO1RrLqNaQeUMruJyFrjgK6g Kxf/BnQ= -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:22 2024 by rpki-client on console-fra.rpki-client.org