$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/F7BA1FCE70C611EFBF64266FC4F9AE02.roa File: F7BA1FCE70C611EFBF64266FC4F9AE02.roa (raw, json) Hash identifier: dfP5faa/Yw/V2aLs80Ju1Tmgf9Tm0S0758+0J53NO7M= Subject key identifier: E5:B1:E2:04:DB:CB:FC:1E:34:54:51:DC:88:79:FB:1F:55:B3:B8:E4 Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Certificate serial: 0A92 Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/F7BA1FCE70C611EFBF64266FC4F9AE02.roa Signing time: Thu 12 Sep 2024 05:22:13 +0000 ROA not before: Thu 12 Sep 2024 05:22:13 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 17408 IP address blocks: 103.18.228.0/24 maxlen: 24 103.18.230.0/24 maxlen: 24 103.231.36.0/24 maxlen: 24 103.231.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 18:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2706 (0xa92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Validity Not Before: Sep 12 05:22:13 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66e27a85-552f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:11:16:39:6d:c4:c3:21:a2:ad:e9:61:b3:d0: 3a:12:c8:6e:c1:ce:5c:db:b8:c5:1f:13:f5:0e:8c: b3:7a:44:b8:dc:62:c9:76:d7:47:43:c9:8e:f6:90: 74:4c:5f:74:36:10:46:fc:7a:1c:1f:99:ca:71:96: c2:b7:9e:d3:77:2a:09:19:c3:72:a2:82:6f:b1:d3: 50:bc:8f:1f:85:b1:c2:03:06:1c:65:df:3f:9b:b7: 34:91:15:29:0b:4c:44:7c:4b:46:b4:92:4a:0f:eb: b2:21:ec:58:d3:ef:ab:a4:89:27:dd:b1:65:cc:11: 1e:29:f8:35:8d:7e:c0:7a:b6:7c:55:c1:0e:96:5b: 86:b7:70:8c:7d:bd:f7:81:83:0a:13:8d:db:88:03: 65:5f:0a:f9:76:38:aa:66:63:74:17:2c:03:2b:16: be:aa:96:82:26:13:8e:21:11:ce:6d:36:58:49:40: 04:c4:b4:6e:89:5b:50:2e:1a:0b:f5:36:05:fe:82: f0:5d:9e:80:7a:70:84:f9:22:89:63:aa:4c:c3:6f: b0:17:90:9e:c6:dc:3c:cb:72:b3:f8:8f:29:9a:52: 35:7a:6e:72:ef:54:76:4f:bf:52:09:67:50:59:28: a3:ad:5f:e8:58:07:53:9b:29:97:f2:e4:56:f7:48: 91:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B1:E2:04:DB:CB:FC:1E:34:54:51:DC:88:79:FB:1F:55:B3:B8:E4 X509v3 Authority Key Identifier: keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/F7BA1FCE70C611EFBF64266FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.18.228.0/24 103.18.230.0/24 103.231.36.0/24 103.231.38.0/24 Signature Algorithm: sha256WithRSAEncryption 95:09:fb:1e:a0:27:50:29:5c:51:86:72:47:54:a8:47:dc:a2: 4a:81:b5:05:9a:f3:3f:e3:65:94:59:5c:5e:18:87:00:d2:37: ca:54:b3:d6:c2:22:0f:6f:37:af:af:05:da:4e:dc:41:f7:6b: 9f:c2:79:6f:a4:f9:e5:20:05:4f:d2:42:fb:08:42:76:11:5d: d3:1c:2a:76:d9:57:4e:83:62:6e:dc:11:e9:fe:e2:9c:d3:89: 3b:00:78:61:ce:9a:a8:34:c7:20:3f:c2:21:20:a5:c1:7f:67: e8:9b:96:3a:e9:50:3b:81:68:21:13:27:1f:7c:8d:3f:19:cf: 8f:c7:05:0e:cc:4c:65:65:94:69:ca:d1:32:07:f2:08:df:4e: 52:09:5f:32:a7:63:3c:a2:3d:76:ac:f7:08:59:fa:e4:79:99: 8b:9d:ab:12:db:4a:f4:ac:27:ff:b8:25:d5:e6:1c:2a:9a:5f: 14:85:ca:7d:50:71:d6:4f:08:ac:86:2d:b7:e4:5d:ed:8a:ae: 51:3f:65:55:e8:0f:8d:75:91:d6:98:46:d8:9a:6d:78:e9:8f: ba:69:e2:3f:2b:45:63:25:f4:b8:b8:1f:42:22:e5:1c:3c:70: f0:63:ca:14:c8:46:7b:e0:ae:78:34:e5:96:76:92:c5:ea:6c: f4:fa:e0:6f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICCpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCNUIxMTAvBgNVBAUTKDk1QzEzQTNDQzdFQzI3MEI3RTVGMTlGM0NENEYzQjUw REZERjYyRTQwHhcNMjQwOTEyMDUyMjEzWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmUyN2E4NS01NTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxEWOW3EwyGirelhs9A6Eshuwc5c27jFHxP1DoyzekS43GLJdtdHQ8mO9pB0 TF90NhBG/HocH5nKcZbCt57TdyoJGcNyooJvsdNQvI8fhbHCAwYcZd8/m7c0kRUp C0xEfEtGtJJKD+uyIexY0++rpIkn3bFlzBEeKfg1jX7AerZ8VcEOlluGt3CMfb33 gYMKE43biANlXwr5djiqZmN0FywDKxa+qpaCJhOOIRHObTZYSUAExLRuiVtQLhoL 9TYF/oLwXZ6AenCE+SKJY6pMw2+wF5Cextw8y3Kz+I8pmlI1em5y71R2T79SCWdQ WSijrV/oWAdTmymX8uRW90iRowIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFOWx4gTb y/weNFRR3Ih5+x9Vs7jkMB8GA1UdIwQYMBaAFJXBOjzH7CcLfl8Z881PO1Df32Lk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkI1Qi8yOURFNzQ4QTQx OUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3dC1YeG56elU4N1VOX2ZZ dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xjRTZQTWZzSnd0LVh4bnp6VTg3VU5fZll1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUJCNUIvMjlERTc0OEE0MTlFMTFFQUI4NjZFNzdBQzRGOUFFMDIvRjdCQTFGQ0U3 MEM2MTFFRkJGNjQyNjZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBABnEuQDBABnEuYDBABn5yQDBABn5yYwDQYJKoZIhvcNAQEL BQADggEBAJUJ+x6gJ1ApXFGGckdUqEfcokqBtQWa8z/jZZRZXF4YhwDSN8pUs9bC Ig9vN6+vBdpO3EH3a5/CeW+k+eUgBU/SQvsIQnYRXdMcKnbZV06DYm7cEen+4pzT iTsAeGHOmqg0xyA/wiEgpcF/Z+ibljrpUDuBaCETJx98jT8Zz4/HBQ7MTGVllGnK 0TIH8gjfTlIJXzKnYzyiPXas9whZ+uR5mYudqxLbSvSsJ/+4JdXmHCqaXxSFyn1Q cdZPCKyGLbfkXe2KrlE/ZVXoD411kdaYRtiabXjpj7pp4j8rRWMl9Li4H0Ii5Rw8 cPBjyhTIRnvgrng05ZZ2ksXqbPT64G8= -----END CERTIFICATE-----Generated at Wed Nov 20 20:07:29 2024 by rpki-client on console-fra.rpki-client.org