$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/08CA5724E2B111E9A73CAB51C4F9AE02.roa File: 08CA5724E2B111E9A73CAB51C4F9AE02.roa (raw, json) Hash identifier: hxOmPvPOn5zrLZ2ksvGMh7mEDCQIxMBDMGA2oTUGfDw= Subject key identifier: B5:EE:7C:0D:73:54:16:8B:97:FC:59:3E:4C:5F:1D:6F:A4:12:2C:FC Certificate issuer: /CN=A91F1B61/serialNumber=728A824092E5741254BB92D597723361A04BF292 Certificate serial: 0C6C Authority key identifier: 72:8A:82:40:92:E5:74:12:54:BB:92:D5:97:72:33:61:A0:4B:F2:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/08CA5724E2B111E9A73CAB51C4F9AE02.roa Signing time: Thu 08 Aug 2024 18:46:28 +0000 ROA not before: Thu 08 Aug 2024 18:46:28 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 132341 IP address blocks: 103.14.73.0/24 maxlen: 24 103.59.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.crl rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:06:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3180 (0xc6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1B61/serialNumber=728A824092E5741254BB92D597723361A04BF292 Validity Not Before: Aug 8 18:46:28 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66b51284-b6b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:07:19:2f:9d:17:b2:7c:0c:cb:3d:f4:41:78: f7:de:93:65:96:fc:bd:a1:78:61:9b:d1:c7:fb:86: 90:8d:47:9f:32:14:46:fa:3d:45:86:b6:80:1c:5e: 3a:48:7e:b8:47:55:a3:7c:c4:f4:9e:48:ee:eb:20: 31:68:28:c2:57:cd:09:08:72:37:9c:07:aa:a5:7f: 67:99:2d:97:1c:08:ad:15:6f:f9:d6:40:c7:d9:4d: c9:a9:60:1b:ba:d6:89:01:96:36:f3:aa:54:45:73: 95:79:3a:21:1d:21:f0:46:77:b2:f3:60:f6:80:b2: b9:50:0c:fa:b9:bd:db:5c:89:42:32:85:ec:f2:e3: 9b:53:ac:55:84:1b:d7:2d:2f:7b:d2:a2:22:61:39: 0c:ac:60:54:53:7c:e5:c4:ab:a0:3c:66:ae:94:fb: 3e:62:66:e7:1f:b9:2b:20:3b:b5:39:6e:07:6c:11: 2e:2d:dc:ea:87:5b:d6:3f:e9:c6:bb:06:36:8c:24: fd:27:ec:33:69:2c:85:b7:a4:0e:c2:a0:b0:1f:6b: 60:d1:ff:cb:61:c4:04:b3:87:f1:41:ad:3f:78:c0: 64:ed:cb:99:97:c1:90:b6:9b:6e:dd:a9:91:e1:d5: a1:a7:1b:30:37:1b:60:c1:9c:57:6b:b9:09:22:22: 75:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:EE:7C:0D:73:54:16:8B:97:FC:59:3E:4C:5F:1D:6F:A4:12:2C:FC X509v3 Authority Key Identifier: keyid:72:8A:82:40:92:E5:74:12:54:BB:92:D5:97:72:33:61:A0:4B:F2:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/08CA5724E2B111E9A73CAB51C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.14.73.0/24 103.59.233.0/24 Signature Algorithm: sha256WithRSAEncryption 45:6a:21:bc:e7:39:5b:0a:43:49:7e:e9:32:1b:21:d7:38:de: 36:98:73:cb:94:95:e3:18:02:2f:b9:d0:0f:8f:81:d7:d5:a4: 3b:51:53:77:66:06:18:ae:82:23:b5:7d:41:63:0e:71:8e:02: 6a:b6:31:43:28:6d:1a:18:57:6a:79:af:87:9c:c3:a6:67:1f: c2:b3:d9:4a:52:f2:e5:24:8d:5f:30:36:9b:42:8a:fe:f9:62: 60:eb:ce:82:36:9b:ae:17:ed:a6:c8:57:4c:29:ad:fa:d1:c7: 5b:75:f4:69:fa:fd:44:f7:34:dd:3a:c0:9b:35:9c:73:01:68: 12:85:43:aa:33:b8:cb:e2:19:61:e4:8c:a4:5b:fb:cc:e2:f0: 27:60:fa:1f:ab:16:3f:7c:46:37:62:32:40:81:29:01:33:f9: ff:d8:b1:10:ae:c4:0a:7b:15:66:88:9e:b4:c6:50:67:33:33: b0:78:c7:62:72:9a:0c:08:b3:62:56:4e:fc:ef:78:51:7b:67: 34:28:74:bc:62:43:88:b0:66:57:6e:d5:18:b1:30:e6:57:2b: a8:2c:9f:5f:f6:9a:28:aa:3e:08:06:42:85:01:10:e4:8f:49: 1c:aa:aa:5a:73:49:2b:bb:ba:e2:a9:95:7e:32:ac:93:96:0c: dd:02:b5:c0 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFCNjExMTAvBgNVBAUTKDcyOEE4MjQwOTJFNTc0MTI1NEJCOTJENTk3NzIzMzYx QTA0QkYyOTIwHhcNMjQwODA4MTg0NjI4WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmI1MTI4NC1iNmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4gcZL50XsnwMyz30QXj33pNllvy9oXhhm9HH+4aQjUefMhRG+j1FhraAHF46 SH64R1WjfMT0nkju6yAxaCjCV80JCHI3nAeqpX9nmS2XHAitFW/51kDH2U3JqWAb utaJAZY286pURXOVeTohHSHwRney82D2gLK5UAz6ub3bXIlCMoXs8uObU6xVhBvX LS970qIiYTkMrGBUU3zlxKugPGaulPs+YmbnH7krIDu1OW4HbBEuLdzqh1vWP+nG uwY2jCT9J+wzaSyFt6QOwqCwH2tg0f/LYcQEs4fxQa0/eMBk7cuZl8GQtptu3amR 4dWhpxswNxtgwZxXa7kJIiJ1UwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLXufA1z VBaLl/xZPkxfHW+kEiz8MB8GA1UdIwQYMBaAFHKKgkCS5XQSVLuS1ZdyM2GgS/KS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUI2MS8zRjAwRDc1Q0Uy QUYxMUU5QkIwMUZDNERDNEY5QUUwMi9jb3FDUUpMbGRCSlV1NUxWbDNJellhQkw4 cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NvcUNRSkxsZEJKVXU1TFZsM0l6WWFCTDhwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjFCNjEvM0YwMEQ3NUNFMkFGMTFFOUJCMDFGQzREQzRGOUFFMDIvMDhDQTU3MjRF MkIxMTFFOUE3M0NBQjUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnDkkDBABnO+kwDQYJKoZIhvcNAQELBQADggEBAEVqIbzn OVsKQ0l+6TIbIdc43jaYc8uUleMYAi+50A+PgdfVpDtRU3dmBhiugiO1fUFjDnGO Amq2MUMobRoYV2p5r4ecw6ZnH8Kz2UpS8uUkjV8wNptCiv75YmDrzoI2m64X7abI V0wprfrRx1t19Gn6/UT3NN06wJs1nHMBaBKFQ6ozuMviGWHkjKRb+8zi8Cdg+h+r Fj98RjdiMkCBKQEz+f/YsRCuxAp7FWaInrTGUGczM7B4x2JymgwIs2JWTvzveFF7 ZzQodLxiQ4iwZldu1RixMOZXK6gsn1/2miiqPggGQoUBEOSPSRyqqlpzSSu7uuKp lX4yrJOWDN0CtcA= -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:05 2024 by rpki-client on console-fra.rpki-client.org