$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/FFCE072E2B8111EE9BDEC079C4F9AE02.roa File: FFCE072E2B8111EE9BDEC079C4F9AE02.roa (raw, json) Hash identifier: rtZPUDV9v5M5UjLf6mnKGmlSZjqBzQjmkl2wyx5PPSc= Subject key identifier: 6B:DA:9D:35:65:03:FE:8D:CA:53:A8:F2:D7:66:1D:33:5A:80:F0:AA Certificate issuer: /CN=A91FA64C/serialNumber=566A6F34440AC9295ED8A002D5049F574CF16C88 Certificate serial: DB Authority key identifier: 56:6A:6F:34:44:0A:C9:29:5E:D8:A0:02:D5:04:9F:57:4C:F1:6C:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/FFCE072E2B8111EE9BDEC079C4F9AE02.roa Signing time: Fri 21 Jun 2024 05:30:16 +0000 ROA not before: Fri 21 Jun 2024 05:30:15 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 151480 IP address blocks: 103.243.100.0/23 maxlen: 23 202.53.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.crl rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA64C/serialNumber=566A6F34440AC9295ED8A002D5049F574CF16C88 Validity Not Before: Jun 21 05:30:15 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66750fe7-5619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8c:34:86:a9:a2:c8:c1:61:4d:50:b1:38:b7: 92:4a:ef:38:7d:1e:ab:cc:e7:ea:e6:c5:a4:eb:ed: 13:c8:8f:23:b6:cf:71:c9:d3:43:16:34:cf:26:2a: 5d:06:e6:1f:4c:ce:08:c8:29:50:fb:8b:35:18:73: 44:9b:9a:db:48:63:17:d7:1c:9f:2b:96:72:39:46: cb:8b:1e:40:45:24:26:27:da:ef:38:c7:cd:82:92: e7:24:18:66:81:47:f7:8e:61:bd:3e:44:af:1c:6b: bd:56:2a:b2:2a:c6:b4:5e:c1:07:b6:e8:1e:82:69: 88:44:44:13:a6:97:a5:1c:a5:0e:8b:7d:fe:1b:0a: c7:b8:66:53:4c:50:b2:e6:3d:49:ff:25:06:ed:ef: ab:57:4a:b7:bc:19:e6:fe:4a:e2:15:82:cf:5f:b9: b9:b3:2a:d8:2f:21:ed:50:c8:2a:f6:a1:fc:99:5e: 74:2a:59:d6:e9:9b:39:01:3f:b3:07:96:4b:f2:62: e6:4a:5c:e5:87:f2:cf:f9:f5:d5:68:b6:c8:52:07: d2:de:81:88:48:67:36:a7:1d:fa:51:a2:80:10:da: d2:24:ea:34:9c:7c:d5:c2:f6:a6:8b:3e:d7:e6:df: 81:84:f8:83:5b:ca:6f:ec:95:b5:e1:d8:b8:09:e9: 01:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:DA:9D:35:65:03:FE:8D:CA:53:A8:F2:D7:66:1D:33:5A:80:F0:AA X509v3 Authority Key Identifier: keyid:56:6A:6F:34:44:0A:C9:29:5E:D8:A0:02:D5:04:9F:57:4C:F1:6C:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/FFCE072E2B8111EE9BDEC079C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.243.100.0/23 202.53.0.0/22 Signature Algorithm: sha256WithRSAEncryption 08:a0:3b:8a:4b:14:47:90:73:27:82:79:55:8b:7d:96:69:81: c5:93:6f:bb:48:22:17:b2:ad:4b:70:e1:59:08:9f:86:cc:5b: 91:56:c1:2a:fd:76:75:71:0e:e1:43:f8:94:87:01:fe:96:23: 36:84:0d:08:c5:7e:7c:6f:81:6b:c4:a4:e6:83:f6:01:be:fb: 20:93:f7:9d:70:b3:f1:f2:50:3b:1f:20:3f:c9:f8:65:15:dc: 55:e4:01:23:5e:bb:d9:ba:e9:4d:ed:d4:d1:3c:11:eb:68:08: 44:55:83:3e:8c:a2:47:d7:36:c8:ce:51:37:4b:39:fd:1c:1c: 14:14:b4:af:4d:0f:6a:09:e4:72:62:f1:c2:be:85:19:6d:0b: b0:0e:9e:11:0d:b6:07:37:d0:ae:15:5e:63:c4:15:aa:5d:63: 9a:87:3d:27:bc:a1:22:cc:c6:94:42:c0:cf:26:ba:a6:a1:26: e9:99:3e:1b:b8:81:60:f8:03:d4:e3:a4:9f:16:18:c5:3f:86: f2:5c:82:45:d6:ff:9a:ee:a8:de:14:29:4f:4a:ae:bb:fe:e4: 8f:aa:b6:b4:a9:5a:83:c4:c3:e5:b0:04:12:b6:d7:fd:59:a4: 9a:90:f2:e3:69:d7:21:fd:2d:40:46:e3:25:42:00:74:b7:96: 32:bd:09:5c -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2NEMxMTAvBgNVBAUTKDU2NkE2RjM0NDQwQUM5Mjk1RUQ4QTAwMkQ1MDQ5RjU3 NENGMTZDODgwHhcNMjQwNjIxMDUzMDE1WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njc1MGZlNy01NjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ow0hqmiyMFhTVCxOLeSSu84fR6rzOfq5sWk6+0TyI8jts9xydNDFjTPJipd BuYfTM4IyClQ+4s1GHNEm5rbSGMX1xyfK5ZyOUbLix5ARSQmJ9rvOMfNgpLnJBhm gUf3jmG9PkSvHGu9ViqyKsa0XsEHtugegmmIREQTppelHKUOi33+GwrHuGZTTFCy 5j1J/yUG7e+rV0q3vBnm/kriFYLPX7m5syrYLyHtUMgq9qH8mV50KlnW6Zs5AT+z B5ZL8mLmSlzlh/LP+fXVaLbIUgfS3oGISGc2px36UaKAENrSJOo0nHzVwvamiz7X 5t+BhPiDW8pv7JW14di4CekBawIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGvanTVl A/6NylOo8tdmHTNagPCqMB8GA1UdIwQYMBaAFFZqbzRECskpXtigAtUEn1dM8WyI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY0Qy9FMUE1NDYyNkY3 OTgxMUVEOTY3NzcxMjRDNEY5QUUwMi9WbXB2TkVRS3lTbGUyS0FDMVFTZlYwenhi SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZtcHZORVFLeVNsZTJLQUMxUVNmVjB6eGJJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkE2NEMvRTFBNTQ2MjZGNzk4MTFFRDk2Nzc3MTI0QzRGOUFFMDIvRkZDRTA3MkUy QjgxMTFFRTlCREVDMDc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFn82QDBALKNQAwDQYJKoZIhvcNAQELBQADggEBAAigO4pL FEeQcyeCeVWLfZZpgcWTb7tIIheyrUtw4VkIn4bMW5FWwSr9dnVxDuFD+JSHAf6W IzaEDQjFfnxvgWvEpOaD9gG++yCT951ws/HyUDsfID/J+GUV3FXkASNeu9m66U3t 1NE8EetoCERVgz6MokfXNsjOUTdLOf0cHBQUtK9ND2oJ5HJi8cK+hRltC7AOnhEN tgc30K4VXmPEFapdY5qHPSe8oSLMxpRCwM8muqahJumZPhu4gWD4A9TjpJ8WGMU/ hvJcgkXW/5ruqN4UKU9Krrv+5I+qtrSpWoPEw+WwBBK21/1ZpJqQ8uNp1yH9LUBG 4yVCAHS3ljK9CVw= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:59 2024 by rpki-client on console-ams.rpki-client.org