$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/3F7B6BA6759A11EF88710D30C4F9AE02.roa File: 3F7B6BA6759A11EF88710D30C4F9AE02.roa (raw, json) Hash identifier: oTI4/5J52N+CdGqh6V5SlwZzW8qZ2EAhotERjvLVwjM= Subject key identifier: 14:DB:40:08:56:1A:7E:3A:AA:20:88:69:84:40:F4:BA:23:3F:98:38 Certificate issuer: /CN=A91EB002/serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC Certificate serial: 53 Authority key identifier: 9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/3F7B6BA6759A11EF88710D30C4F9AE02.roa Signing time: Wed 18 Sep 2024 08:44:42 +0000 ROA not before: Wed 18 Sep 2024 08:44:42 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 133766 IP address blocks: 103.40.166.0/23 maxlen: 23 103.40.166.0/24 maxlen: 24 103.40.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB002/serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC Validity Not Before: Sep 18 08:44:42 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66ea92fa-9df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c1:bd:e4:b9:6e:5f:79:6a:c7:5c:e5:6e:87: 33:98:0c:19:b4:20:09:df:85:02:9e:3c:1f:e9:69: 53:81:e7:a3:ef:63:23:e0:1c:5b:7d:d5:1b:4a:5a: ac:4b:76:73:e3:0e:9c:a2:de:a3:61:87:a2:e4:5f: ab:de:5b:71:74:3f:aa:bf:85:6b:01:75:11:3b:88: db:67:12:e7:d6:d2:5e:86:43:c5:77:31:d4:92:26: bc:53:25:ce:17:24:ee:24:d7:bc:2b:38:7f:8a:3d: c8:bc:11:47:ef:fe:27:9a:29:8f:14:c7:48:f8:40: ed:28:4a:c6:32:da:48:c8:c2:88:df:7d:90:ed:1a: 78:d4:74:bd:32:a2:4a:6c:c2:26:f0:f0:d1:52:8e: d8:22:d5:76:aa:59:49:19:42:7f:26:f6:55:b1:50: 41:d2:1d:8c:c2:56:12:18:40:06:c9:e7:64:48:4f: 6c:b2:92:c1:ad:2c:25:6a:fb:a3:43:5c:ae:2a:06: 88:49:30:54:7f:a6:a6:6e:2e:71:f0:78:a2:10:92: da:bd:de:c9:f9:5c:34:62:89:09:9d:74:e6:b6:9e: 2b:2d:ee:11:7e:34:1e:79:98:5b:05:45:ad:fb:07: 9b:aa:68:bb:dc:d7:93:fd:2e:28:37:c2:37:cd:88: 92:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DB:40:08:56:1A:7E:3A:AA:20:88:69:84:40:F4:BA:23:3F:98:38 X509v3 Authority Key Identifier: keyid:9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/3F7B6BA6759A11EF88710D30C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.40.166.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:8e:ca:4f:f6:83:35:e2:d3:40:4f:3a:38:9b:09:2a:1c:dc: a3:1d:07:e6:cf:c2:c3:47:bc:6b:3c:3b:1a:3f:e5:8b:e1:96: 76:fb:43:b0:76:b2:f2:ac:d5:4d:e4:2e:52:55:f2:6c:b8:8f: 46:0b:62:80:81:85:29:09:4e:77:58:7a:d7:3d:0b:69:28:a1: eb:2d:a7:fc:64:25:f2:d3:5f:f8:95:aa:99:4c:c2:f8:87:a9: a3:00:b0:e6:4b:d9:11:c8:98:e3:ce:50:7e:ce:67:7b:04:ce: 26:93:fb:e6:d3:91:21:b6:4d:f0:44:c7:35:40:76:d6:dd:9b: e3:56:96:5c:a5:91:fc:97:0b:af:b7:59:e2:d1:de:ff:1e:5b: 70:37:90:c2:55:97:d1:df:3a:c9:b1:60:10:19:29:b8:c7:cd: 39:48:c6:12:94:21:49:b9:9b:8d:e0:cc:3a:67:91:22:73:43: ce:69:7e:73:94:5d:f2:6e:28:d5:5c:ae:17:1d:aa:72:b3:88: de:8a:cc:d5:17:88:24:61:8b:cc:d3:2b:e1:d4:9b:75:bd:13: ec:d0:43:9c:1f:3b:b4:8e:e6:a9:db:12:69:28:6c:fd:ee:1b: 9b:bc:cf:86:fa:1c:a6:45:be:b9:cf:e5:1d:42:07:2a:6f:7a: 4a:25:15:a8 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QjAwMjExMC8GA1UEBRMoOUVGM0U2MDRBNjNGMkNFRjRCRERFMzdEQ0E4OTBEMDQ1 MTk2N0FFQzAeFw0yNDA5MTgwODQ0NDJaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZWE5MmZhLTlkZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkwb3kuW5feWrHXOVuhzOYDBm0IAnfhQKePB/paVOB56PvYyPgHFt91RtKWqxL dnPjDpyi3qNhh6LkX6veW3F0P6q/hWsBdRE7iNtnEufW0l6GQ8V3MdSSJrxTJc4X JO4k17wrOH+KPci8EUfv/ieaKY8Ux0j4QO0oSsYy2kjIwojffZDtGnjUdL0yokps wibw8NFSjtgi1XaqWUkZQn8m9lWxUEHSHYzCVhIYQAbJ52RIT2yyksGtLCVq+6ND XK4qBohJMFR/pqZuLnHweKIQktq93sn5XDRiiQmddOa2nist7hF+NB55mFsFRa37 B5uqaLvc15P9Lig3wjfNiJI3AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUFNtACFYa fjqqIIhphED0uiM/mDgwHwYDVR0jBBgwFoAUnvPmBKY/LO9L3eN9yokNBFGWeuww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCMDAyL0UyNEY4MjM0MDIy RTExRUY4NTZGNTEzMkM0RjlBRTAyL252UG1CS1lfTE85TDNlTjl5b2tOQkZHV2V1 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnZQbUJLWV9MTzlMM2VOOXlva05CRkdXZXV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjAwMi9FMjRGODIzNDAyMkUxMUVGODU2RjUxMzJDNEY5QUUwMi8zRjdCNkJBNjc1 OUExMUVGODg3MTBEMzBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWcopjANBgkqhkiG9w0BAQsFAAOCAQEAm47KT/aDNeLTQE86 OJsJKhzcox0H5s/Cw0e8azw7Gj/li+GWdvtDsHay8qzVTeQuUlXybLiPRgtigIGF KQlOd1h61z0LaSih6y2n/GQl8tNf+JWqmUzC+IepowCw5kvZEciY485Qfs5newTO JpP75tORIbZN8ETHNUB21t2b41aWXKWR/JcLr7dZ4tHe/x5bcDeQwlWX0d86ybFg EBkpuMfNOUjGEpQhSbmbjeDMOmeRInNDzml+c5Rd8m4o1VyuFx2qcrOI3orM1ReI JGGLzNMr4dSbdb0T7NBDnB87tI7mqdsSaShs/e4bm7zPhvocpkW+uc/lHUIHKm96 SiUVqA== -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:26 2024 by rpki-client on console-ams.rpki-client.org