$ rpki-client -vvf rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/51408896A3E211EF8DAB713BC4F9AE02.roa File: 51408896A3E211EF8DAB713BC4F9AE02.roa (raw, json) Hash identifier: Hia1kxQCYg8oyQHwZwIXTMQyGra4hQiDpSVRmvXE9k8= Subject key identifier: 76:5D:FE:60:18:ED:BB:93:5C:1E:D9:A4:15:6E:AC:E7:19:03:34:76 Certificate issuer: /CN=A91197BC/serialNumber=DB6250657FEBC164EB821C7652ABE3A85FA9ACD4 Certificate serial: 08CD Authority key identifier: DB:62:50:65:7F:EB:C1:64:EB:82:1C:76:52:AB:E3:A8:5F:A9:AC:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/51408896A3E211EF8DAB713BC4F9AE02.roa Signing time: Sat 16 Nov 2024 06:20:58 +0000 ROA not before: Sat 16 Nov 2024 06:20:58 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 38805 IP address blocks: 103.71.100.0/23 maxlen: 23 124.158.104.0/21 maxlen: 21 124.158.119.0/24 maxlen: 24 124.158.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.crl rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2253 (0x8cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91197BC/serialNumber=DB6250657FEBC164EB821C7652ABE3A85FA9ACD4 Validity Not Before: Nov 16 06:20:58 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=673839ca-5f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:21:41:bd:63:8b:35:c1:d6:9a:77:ad:75:c8: 38:85:45:f5:94:8c:02:e1:db:45:14:86:9f:f0:5e: 73:b9:ee:b9:bc:72:da:15:58:c5:04:f6:60:f5:d5: 12:8c:58:e6:e8:4a:39:20:4c:37:58:35:1f:70:bc: 7e:9f:06:28:07:14:f2:e4:5d:36:38:30:4c:ff:40: 6f:84:56:05:01:d2:72:5a:c6:e1:56:28:f2:d7:cc: af:fb:a0:bf:1d:16:d9:6a:f2:9d:2a:42:19:2f:e9: 9d:e5:e5:be:bb:22:ac:fd:82:2e:b9:0e:c9:5a:af: 9a:f2:37:15:de:da:27:51:d2:6f:f8:b4:24:84:d8: f0:d3:44:84:d4:9a:3c:fc:3b:ae:d0:3b:d0:10:d5: 3d:83:97:d2:2b:ef:06:87:75:1e:d0:ec:b5:54:da: 56:1e:48:9c:a4:e7:f5:45:18:7c:da:58:57:50:32: c0:bc:e7:58:05:2a:a6:ae:2e:62:08:46:6f:63:45: 30:2a:93:ae:17:74:11:6d:07:a8:f8:b3:05:4c:d9: fa:5c:ba:66:09:6d:4d:f1:ac:32:35:97:d1:87:8d: 38:d9:27:02:08:0f:16:74:f1:f8:53:96:88:1b:61: 10:c1:92:9e:92:d5:db:5b:1b:89:74:ff:c5:4d:ba: af:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:5D:FE:60:18:ED:BB:93:5C:1E:D9:A4:15:6E:AC:E7:19:03:34:76 X509v3 Authority Key Identifier: keyid:DB:62:50:65:7F:EB:C1:64:EB:82:1C:76:52:AB:E3:A8:5F:A9:AC:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/51408896A3E211EF8DAB713BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.71.100.0/23 124.158.104.0/21 124.158.119.0-124.158.127.255 Signature Algorithm: sha256WithRSAEncryption b3:50:83:7a:b0:f3:b6:6d:f6:f0:01:19:64:28:4e:a9:58:1f: 13:53:41:10:a3:eb:43:2b:b9:5f:24:1c:8f:7d:7b:55:34:48: bd:e3:1f:7e:b2:9d:21:35:34:62:d8:e9:12:7a:e6:ae:aa:22: 3f:68:d8:b5:01:73:61:b0:60:4d:01:d6:cf:c9:f7:6d:2f:7d: 24:ce:cc:c6:79:b9:95:ce:97:3f:ad:7b:b3:b4:33:e1:da:c9: 99:d4:8b:22:dc:c2:0d:4c:fa:02:b1:da:6c:40:6e:20:c5:39: 00:03:1f:37:f2:5b:c6:37:82:61:28:7b:23:09:64:cd:40:05: 5b:96:48:c5:1f:9f:93:5c:29:e7:5d:7e:b8:f8:7d:70:36:dd: a4:0e:fd:a0:31:77:b5:4f:bb:11:50:25:88:98:e7:e1:6e:f9: b9:3a:01:c1:e0:68:d0:4c:77:60:d2:c2:64:6d:f6:e0:73:13: 45:de:e4:e5:01:9e:2e:22:c0:3d:f3:b0:45:3a:3d:2e:b7:34: 7a:82:b0:4f:6d:3d:d8:2d:29:5d:29:84:f5:0f:85:47:9a:ef: fc:94:4d:55:3f:83:9e:b9:59:68:4e:ca:40:57:81:63:c1:6e: 71:0b:47:59:6b:cf:98:92:2d:3d:50:6c:cf:f0:71:be:fa:13: c7:8a:91:d4 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICCM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk3QkMxMTAvBgNVBAUTKERCNjI1MDY1N0ZFQkMxNjRFQjgyMUM3NjUyQUJFM0E4 NUZBOUFDRDQwHhcNMjQxMTE2MDYyMDU4WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzM4MzljYS01ZjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtiFBvWOLNcHWmnetdcg4hUX1lIwC4dtFFIaf8F5zue65vHLaFVjFBPZg9dUS jFjm6Eo5IEw3WDUfcLx+nwYoBxTy5F02ODBM/0BvhFYFAdJyWsbhVijy18yv+6C/ HRbZavKdKkIZL+md5eW+uyKs/YIuuQ7JWq+a8jcV3tonUdJv+LQkhNjw00SE1Jo8 /Duu0DvQENU9g5fSK+8Gh3Ue0Oy1VNpWHkicpOf1RRh82lhXUDLAvOdYBSqmri5i CEZvY0UwKpOuF3QRbQeo+LMFTNn6XLpmCW1N8awyNZfRh4042ScCCA8WdPH4U5aI G2EQwZKektXbWxuJdP/FTbqvoQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFHZd/mAY 7buTXB7ZpBVurOcZAzR2MB8GA1UdIwQYMBaAFNtiUGV/68Fk64IcdlKr46hfqazU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTdCQy9BOENBRkJDMkFB MjgxMUVBODFCMTk2ODFDNEY5QUUwMi8yMkpRWlhfcndXVHJnaHgyVXF2anFGLXBy TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIySlFaWF9yd1dUcmdoeDJVcXZqcUYtcHJOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTk3QkMvQThDQUZCQzJBQTI4MTFFQTgxQjE5NjgxQzRGOUFFMDIvNTE0MDg4OTZB M0UyMTFFRjhEQUI3MTNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBoDBAFnR2QDBAN8nmgwDAMEAHyedwMEB3yeADANBgkqhkiG9w0B AQsFAAOCAQEAs1CDerDztm328AEZZChOqVgfE1NBEKPrQyu5XyQcj317VTRIveMf frKdITU0YtjpEnrmrqoiP2jYtQFzYbBgTQHWz8n3bS99JM7Mxnm5lc6XP617s7Qz 4drJmdSLItzCDUz6ArHabEBuIMU5AAMfN/JbxjeCYSh7IwlkzUAFW5ZIxR+fk1wp 511+uPh9cDbdpA79oDF3tU+7EVAliJjn4W75uToBweBo0Ex3YNLCZG324HMTRd7k 5QGeLiLAPfOwRTo9Lrc0eoKwT2092C0pXSmE9Q+FR5rv/JRNVT+DnrlZaE7KQFeB Y8FucQtHWWvPmJItPVBsz/BxvvoTx4qR1A== -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:26 2024 by rpki-client on console-fra.rpki-client.org