$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/14B312EC3AE711EDBF700472C4F9AE02.roa File: 14B312EC3AE711EDBF700472C4F9AE02.roa (raw, json) Hash identifier: jkOQ3dPuDLNPKoML9QUoAglZcGE8mWGDMaT0FDV/Rrk= Subject key identifier: 83:7F:4C:E5:AB:6D:06:5E:C7:49:AE:FC:DB:53:0E:7E:AA:53:BF:2C Certificate issuer: /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Certificate serial: 01BB Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/14B312EC3AE711EDBF700472C4F9AE02.roa Signing time: Thu 03 Oct 2024 02:36:32 +0000 ROA not before: Thu 03 Oct 2024 02:36:32 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 19905 IP address blocks: 103.99.4.0/24 maxlen: 24 103.99.6.0/24 maxlen: 24 103.196.140.0/24 maxlen: 24 103.196.141.0/24 maxlen: 24 103.196.142.0/24 maxlen: 24 103.196.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Validity Not Before: Oct 3 02:36:32 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=66fe032f-8152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d0:73:3b:17:7d:2b:79:e8:ab:35:f2:9c:e1: 7a:7a:8e:13:51:af:c3:35:e9:2c:da:93:ae:98:65: 83:f6:67:d9:3a:32:22:37:da:e9:fe:94:a4:44:3a: d9:64:b7:29:1d:99:b5:c2:c6:e3:89:71:81:14:e0: 64:cf:4f:96:82:e2:46:4b:bd:fa:8f:84:1b:a7:c9: 62:55:18:89:a5:4a:dd:0d:2a:9c:18:f9:4f:31:31: be:aa:d2:06:e3:23:2a:9e:d6:3a:6d:d2:f9:ee:21: a5:16:be:ae:e4:22:72:ea:63:9e:14:d0:e2:c1:bf: 84:f3:9e:a7:6e:5e:31:c5:db:fb:85:ec:86:79:58: d0:8b:1b:c6:c3:4c:49:07:9e:90:5a:4d:39:ea:da: 84:dd:ef:b6:4b:10:33:cb:2a:fb:ce:81:6e:4b:36: 2c:ee:e0:f9:2b:86:5c:cf:f4:30:ad:f6:2a:0a:e1: 7c:e3:96:f7:1a:ea:3c:17:9b:f4:4e:83:98:88:5a: 09:06:72:d9:ae:58:07:af:7b:8b:66:c1:05:93:d8: b4:06:95:59:6d:ce:fa:ca:4c:54:37:17:fe:69:88: 2a:3d:02:cd:75:4d:b1:94:57:b2:3c:f8:ea:6c:c4: c0:08:7b:ca:64:64:f1:52:3f:86:52:ab:c0:4f:fb: e2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:7F:4C:E5:AB:6D:06:5E:C7:49:AE:FC:DB:53:0E:7E:AA:53:BF:2C X509v3 Authority Key Identifier: keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/14B312EC3AE711EDBF700472C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.99.4.0/24 103.99.6.0/24 103.196.140.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:15:8e:ab:53:ef:ce:e5:16:db:b7:89:0a:59:2a:69:fe:e8: 37:46:ca:d8:c8:ad:4e:1d:35:c8:db:f5:01:9d:0f:7d:cb:a1: c5:e3:36:98:f3:fc:38:84:bf:3d:98:4e:30:db:cc:36:12:3c: ac:e8:ef:43:a6:af:2a:7b:18:5d:f9:64:7a:9c:7b:fc:3d:54: 77:df:f2:52:8c:26:7b:7c:9c:bc:b8:96:ef:24:96:c2:f0:02: 04:9f:cd:6c:0a:09:3a:e0:01:23:e0:33:11:4f:bf:ea:01:3a: 14:4f:bd:03:85:7d:5b:5a:64:20:a8:96:ac:34:c9:bd:13:43: fe:83:3a:64:1a:0e:cb:13:cb:5a:f8:fd:75:31:0d:24:14:0b: 7f:68:81:d4:61:68:f1:e3:48:dc:f3:8c:2e:3e:0a:92:71:67: 32:63:e1:b3:6d:1d:85:12:7c:6e:ac:9a:fd:3d:79:75:92:06: c0:d9:a0:7d:88:17:b7:a0:44:d2:98:e0:5d:06:9f:b6:09:a0: e0:b1:70:b4:5c:97:3c:27:db:16:87:77:76:08:c1:d4:a0:81: 56:93:14:35:20:1c:63:72:51:07:f7:5d:0d:df:f7:ae:3d:45: f4:d4:01:cc:06:e7:1a:3f:0b:ea:5c:f3:e6:5b:74:02:35:b4: cb:12:fc:1d -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0N0YxMTAvBgNVBAUTKDM3NjAzREIyRTA3MkMwQThGRDcxMTM4RTI1NDA5OUY0 Q0FEOEMxNkYwHhcNMjQxMDAzMDIzNjMyWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZlMDMyZi04MTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyNBzOxd9K3noqzXynOF6eo4TUa/DNeks2pOumGWD9mfZOjIiN9rp/pSkRDrZ ZLcpHZm1wsbjiXGBFOBkz0+WguJGS736j4Qbp8liVRiJpUrdDSqcGPlPMTG+qtIG 4yMqntY6bdL57iGlFr6u5CJy6mOeFNDiwb+E856nbl4xxdv7heyGeVjQixvGw0xJ B56QWk056tqE3e+2SxAzyyr7zoFuSzYs7uD5K4Zcz/QwrfYqCuF845b3Guo8F5v0 ToOYiFoJBnLZrlgHr3uLZsEFk9i0BpVZbc76ykxUNxf+aYgqPQLNdU2xlFeyPPjq bMTACHvKZGTxUj+GUqvAT/vivwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFIN/TOWr bQZex0mu/NtTDn6qU78sMB8GA1UdIwQYMBaAFDdgPbLgcsCo/XETjiVAmfTK2MFv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDQ3Ri9ENUNFNjI2QTM0 NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdLajljUk9PSlVDWjlNcll3 VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04yQTlzdUJ5d0tqOWNST09KVUNaOU1yWXdXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkQ0N0YvRDVDRTYyNkEzNDYxMTFFRDlERUU4RTdBQzRGOUFFMDIvMTRCMzEyRUMz QUU3MTFFREJGNzAwNDcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABnYwQDBABnYwYDBAJnxIwwDQYJKoZIhvcNAQELBQADggEB AB8VjqtT787lFtu3iQpZKmn+6DdGytjIrU4dNcjb9QGdD33LocXjNpjz/DiEvz2Y TjDbzDYSPKzo70Omryp7GF35ZHqce/w9VHff8lKMJnt8nLy4lu8klsLwAgSfzWwK CTrgASPgMxFPv+oBOhRPvQOFfVtaZCColqw0yb0TQ/6DOmQaDssTy1r4/XUxDSQU C39ogdRhaPHjSNzzjC4+CpJxZzJj4bNtHYUSfG6smv09eXWSBsDZoH2IF7egRNKY 4F0Gn7YJoOCxcLRclzwn2xaHd3YIwdSggVaTFDUgHGNyUQf3XQ3f9649RfTUAcwG 5xo/C+pc8+ZbdAI1tMsS/B0= -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:57 2024 by rpki-client on console-ams.rpki-client.org