$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/D376CA2E63B311EFBEFCDF10C4F9AE02.roa File: D376CA2E63B311EFBEFCDF10C4F9AE02.roa (raw, json) Hash identifier: KB7PskjjZpvlmJB1Ro3HLdROD0xauXaxZy0otkkd9Bs= Subject key identifier: BD:02:D3:CA:6B:73:DB:B7:77:5D:2C:92:96:40:07:45:0D:E4:72:B3 Certificate issuer: /CN=A91EA2CC/serialNumber=90A98450B9DA938118A2D5AD534D8828F4B94634 Certificate serial: 0B85 Authority key identifier: 90:A9:84:50:B9:DA:93:81:18:A2:D5:AD:53:4D:88:28:F4:B9:46:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/D376CA2E63B311EFBEFCDF10C4F9AE02.roa Signing time: Mon 26 Aug 2024 14:02:27 +0000 ROA not before: Mon 26 Aug 2024 14:02:27 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 139722 IP address blocks: 103.134.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.crl rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2949 (0xb85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA2CC/serialNumber=90A98450B9DA938118A2D5AD534D8828F4B94634 Validity Not Before: Aug 26 14:02:27 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=66cc8af3-a786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e5:c6:c1:50:11:ff:5f:c7:1a:9c:fe:c5:9e: e1:91:9a:aa:32:c4:fc:79:7a:95:bd:b5:3c:6c:d8: 26:ca:72:1c:9c:76:04:81:4b:e9:5a:38:f9:0f:75: ba:81:79:17:da:2a:41:78:90:3f:73:ea:e8:69:03: 16:22:8e:75:ea:4f:96:85:60:89:e6:06:ce:31:1a: c3:ee:83:16:42:ec:a6:69:ef:8f:9c:93:e1:ab:ca: 31:05:e9:0f:ac:2f:d3:58:3f:d7:bf:e5:c8:0e:00: 99:f2:48:aa:22:72:f0:5b:08:55:5b:7e:1e:be:e1: 1f:71:13:9a:85:de:d9:06:84:77:2f:dd:35:59:f5: 3d:32:82:03:78:57:1d:ff:a3:d0:11:54:d9:0f:7c: c1:23:8c:37:98:61:e1:91:9d:35:fd:2e:72:01:60: d3:a4:84:3a:0d:b2:0e:cc:1c:d9:7a:92:d6:e7:6a: 1f:54:75:6e:91:98:dc:28:a1:fa:a0:e7:85:63:a2: 09:b4:fe:b0:94:95:04:96:2b:2a:08:e4:47:e5:e9: e0:eb:14:07:d4:96:2d:53:65:67:c2:74:5f:29:9a: bd:f3:de:aa:5d:8c:54:1e:97:b4:3b:9d:53:76:dc: 36:5a:13:e7:b3:21:9d:8b:ec:fb:1c:2f:e3:72:3f: c6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:02:D3:CA:6B:73:DB:B7:77:5D:2C:92:96:40:07:45:0D:E4:72:B3 X509v3 Authority Key Identifier: keyid:90:A9:84:50:B9:DA:93:81:18:A2:D5:AD:53:4D:88:28:F4:B9:46:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/D376CA2E63B311EFBEFCDF10C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.134.43.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:ea:67:56:cb:0a:5c:b4:62:ca:28:da:1b:97:18:b7:ae:b2: d2:b1:58:9d:be:b6:39:f2:de:0b:1f:fb:ca:ac:38:af:d4:76: 7d:82:6e:b2:35:c9:60:1c:89:8d:77:22:13:c1:d3:aa:83:95: 1c:22:32:0e:6c:03:09:c2:e2:f2:3d:fe:33:48:23:2d:ac:13: be:3d:b2:68:e4:ae:a3:1c:47:b0:f8:8f:1b:05:a0:b9:32:de: 5e:b4:fb:f9:e1:36:d7:0e:56:cc:84:2f:19:b4:b9:e8:0c:47: 49:31:81:8c:7b:3e:32:9d:13:9f:b2:b4:a5:92:3e:9c:19:43: 1b:ec:e0:04:17:eb:2c:f1:d1:a0:38:bf:45:7e:93:c4:6c:86: 85:f8:ed:7a:70:f3:e1:c0:03:17:66:c3:66:82:90:04:5a:ab: a1:0f:e1:3d:ba:bb:8a:d0:69:49:20:30:09:24:f9:42:d1:f0: d0:fc:bb:31:38:d1:8d:4d:63:1d:88:3b:ba:75:6c:b7:33:7a: cd:b9:72:d4:a6:42:6e:bf:a6:79:93:ad:c3:5d:8f:51:34:71: 4c:6e:bc:0d:ae:93:3a:44:93:82:48:75:cb:c7:40:79:38:50: e2:5c:c5:37:46:43:1d:70:e2:5f:d8:d2:ce:1e:08:25:1b:f4: 87:46:65:fa -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUEyQ0MxMTAvBgNVBAUTKDkwQTk4NDUwQjlEQTkzODExOEEyRDVBRDUzNEQ4ODI4 RjRCOTQ2MzQwHhcNMjQwODI2MTQwMjI3WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmNjOGFmMy1hNzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+XGwVAR/1/HGpz+xZ7hkZqqMsT8eXqVvbU8bNgmynIcnHYEgUvpWjj5D3W6 gXkX2ipBeJA/c+roaQMWIo516k+WhWCJ5gbOMRrD7oMWQuymae+PnJPhq8oxBekP rC/TWD/Xv+XIDgCZ8kiqInLwWwhVW34evuEfcROahd7ZBoR3L901WfU9MoIDeFcd /6PQEVTZD3zBI4w3mGHhkZ01/S5yAWDTpIQ6DbIOzBzZepLW52ofVHVukZjcKKH6 oOeFY6IJtP6wlJUElisqCORH5eng6xQH1JYtU2VnwnRfKZq9896qXYxUHpe0O51T dtw2WhPnsyGdi+z7HC/jcj/GnQIDAQABo4IClTCCApEwHQYDVR0OBBYEFL0C08pr c9u3d10skpZAB0UN5HKzMB8GA1UdIwQYMBaAFJCphFC52pOBGKLVrVNNiCj0uUY0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTJDQy9GMjZFMDZDRTEx RjkxMUVBOUNCODhDMzVDNEY5QUUwMi9rS21FVUxuYWs0RVlvdFd0VTAySUtQUzVS alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tLbUVVTG5hazRFWW90V3RVMDJJS1BTNVJqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUEyQ0MvRjI2RTA2Q0UxMUY5MTFFQTlDQjg4QzM1QzRGOUFFMDIvRDM3NkNBMkU2 M0IzMTFFRkJFRkNERjEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnhiswDQYJKoZIhvcNAQELBQADggEBAE3qZ1bLCly0Ysoo 2huXGLeustKxWJ2+tjny3gsf+8qsOK/Udn2CbrI1yWAciY13IhPB06qDlRwiMg5s AwnC4vI9/jNIIy2sE749smjkrqMcR7D4jxsFoLky3l60+/nhNtcOVsyELxm0uegM R0kxgYx7PjKdE5+ytKWSPpwZQxvs4AQX6yzx0aA4v0V+k8RshoX47Xpw8+HAAxdm w2aCkARaq6EP4T26u4rQaUkgMAkk+ULR8ND8uzE40Y1NYx2IO7p1bLczes25ctSm Qm6/pnmTrcNdj1E0cUxuvA2ukzpEk4JIdcvHQHk4UOJcxTdGQx1w4l/Y0s4eCCUb 9IdGZfo= -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:04 2024 by rpki-client on console-fra.rpki-client.org