$ rpki-client -vvf rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/07332486B1D111EBA956F96AC4F9AE02.roa File: 07332486B1D111EBA956F96AC4F9AE02.roa (raw, json) Hash identifier: QK+G6fNVeQvRNDArbOTnNoOHNeXa2RP5xEy26aJHwS0= Subject key identifier: ED:8D:F5:6E:9A:95:8D:2C:B0:43:25:99:C2:3B:90:12:B7:70:35:3B Certificate issuer: /CN=A91127A2/serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C Certificate serial: 0575 Authority key identifier: A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/07332486B1D111EBA956F96AC4F9AE02.roa Signing time: Fri 04 Oct 2024 23:32:47 +0000 ROA not before: Fri 04 Oct 2024 23:32:47 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 136960 IP address blocks: 103.100.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1397 (0x575) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127A2/serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C Validity Not Before: Oct 4 23:32:47 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67007b1e-3e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9c:95:7d:99:9a:b1:11:c3:75:97:9d:3f:e4: 29:0e:b1:da:f1:5e:97:38:b4:9c:a1:ad:1f:90:90: 01:72:4a:06:cd:06:3b:dc:ee:00:8b:01:63:e5:59: 82:82:5a:27:94:2d:07:0d:33:f2:3e:3c:7a:27:fc: f8:dc:8b:b8:91:dc:cf:11:43:32:67:98:2f:33:f4: 40:a2:17:0a:01:2c:ae:38:ed:d8:58:bf:69:4b:82: 72:a3:1c:97:51:63:73:3d:5c:d6:dc:31:29:09:bf: e8:8f:45:e5:75:ed:24:c4:f0:42:83:80:46:95:09: d4:d4:d1:3b:26:e4:e8:01:42:1e:af:51:c3:10:99: 06:4f:72:be:17:82:73:7b:83:4d:71:70:98:4b:3c: 2e:b6:a1:2a:1e:13:80:2f:61:a2:18:d9:18:12:f8: d3:49:c4:2c:17:a8:13:81:62:6d:9d:ba:de:9d:ba: cd:9f:65:c7:ab:b0:96:52:84:a9:b2:8c:6e:7e:39: 6c:68:39:07:9b:8d:b7:5a:14:9b:1e:85:ab:d5:7d: 4f:d8:6a:87:96:bd:2c:80:6c:df:ea:5f:bc:75:1c: 70:f3:d4:18:2a:e3:cc:a6:4a:54:6e:21:c1:5b:37: 7a:95:d3:c4:58:5a:2b:60:75:0f:db:16:c6:7d:da: 84:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:8D:F5:6E:9A:95:8D:2C:B0:43:25:99:C2:3B:90:12:B7:70:35:3B X509v3 Authority Key Identifier: keyid:A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/07332486B1D111EBA956F96AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.100.86.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:b8:88:6c:52:8b:00:0b:0d:5e:40:6c:a7:5f:c8:c8:f2:17: 9e:cb:3a:ae:36:93:d9:01:4b:58:89:4a:a2:b2:12:56:04:b0: 12:fc:a2:22:a3:af:b6:89:5e:df:b1:9b:2c:8e:14:df:24:8d: d7:71:a2:2e:6a:06:63:2d:28:61:cc:19:a5:d7:e2:56:8e:eb: 66:ca:31:89:e4:22:10:57:5b:6e:67:5c:76:14:90:e5:83:c6: e2:d2:4d:b1:bd:2b:fb:b9:54:48:f6:aa:92:39:38:ea:d5:36: ac:56:1e:ef:9c:c2:66:45:5e:e5:e4:8d:22:a6:8a:ad:8f:2e: 99:0e:24:3f:21:57:1f:f1:6d:d0:80:fb:c0:58:98:f5:dd:53: e6:f7:d6:88:7b:5b:68:2b:51:5f:73:6d:71:04:08:a7:a8:ad: d8:d6:ae:e2:eb:df:0b:ef:d3:fd:2f:e5:20:dd:5c:fc:49:62: ad:0c:ee:a9:b9:b0:3b:6f:26:38:c1:32:5e:aa:7e:46:26:6a: 12:cd:eb:4b:48:10:0a:80:be:e8:dd:68:7d:87:df:a7:7d:d2: e0:bb:c3:a8:a5:ac:ff:08:92:fe:28:92:aa:41:59:8e:01:2d: 1c:cc:2b:4a:5b:57:3a:01:cc:97:07:2f:fe:36:7b:08:ed:c1: c8:63:33:72 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QTIxMTAvBgNVBAUTKEE5MjFDRjg4RDhDODlFMEJBQ0Q0RUUxODUzOEMzM0Iy NzhBOTU5MkMwHhcNMjQxMDA0MjMzMjQ3WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzAwN2IxZS0zZTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpyVfZmasRHDdZedP+QpDrHa8V6XOLScoa0fkJABckoGzQY73O4AiwFj5VmC glonlC0HDTPyPjx6J/z43Iu4kdzPEUMyZ5gvM/RAohcKASyuOO3YWL9pS4JyoxyX UWNzPVzW3DEpCb/oj0Xlde0kxPBCg4BGlQnU1NE7JuToAUIer1HDEJkGT3K+F4Jz e4NNcXCYSzwutqEqHhOAL2GiGNkYEvjTScQsF6gTgWJtnbrenbrNn2XHq7CWUoSp soxufjlsaDkHm423WhSbHoWr1X1P2GqHlr0sgGzf6l+8dRxw89QYKuPMpkpUbiHB Wzd6ldPEWForYHUP2xbGfdqE/wIDAQABo4IClTCCApEwHQYDVR0OBBYEFO2N9W6a lY0ssEMlmcI7kBK3cDU7MB8GA1UdIwQYMBaAFKkhz4jYyJ4LrNTuGFOMM7J4qVks MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdBMi9EMUNENTQ1OEIx Q0UxMUVCOEZGMUMwNjdDNEY5QUUwMi9xU0hQaU5qSW5ndXMxTzRZVTR3enNuaXBX U3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTSFBpTmpJbmd1czFPNFlVNHd6c25pcFdTdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTI3QTIvRDFDRDU0NThCMUNFMTFFQjhGRjFDMDY3QzRGOUFFMDIvMDczMzI0ODZC MUQxMTFFQkE5NTZGOTZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnZFYwDQYJKoZIhvcNAQELBQADggEBAFy4iGxSiwALDV5A bKdfyMjyF57LOq42k9kBS1iJSqKyElYEsBL8oiKjr7aJXt+xmyyOFN8kjddxoi5q BmMtKGHMGaXX4laO62bKMYnkIhBXW25nXHYUkOWDxuLSTbG9K/u5VEj2qpI5OOrV NqxWHu+cwmZFXuXkjSKmiq2PLpkOJD8hVx/xbdCA+8BYmPXdU+b31oh7W2grUV9z bXEECKeordjWruLr3wvv0/0v5SDdXPxJYq0M7qm5sDtvJjjBMl6qfkYmahLN60tI EAqAvujdaH2H36d90uC7w6ilrP8Ikv4okqpBWY4BLRzMK0pbVzoBzJcHL/42ewjt wchjM3I= -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:22 2024 by rpki-client on console-fra.rpki-client.org