$ rpki-client -vvf rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/AA5A77C88DB811EBA0613421C4F9AE02.roa File: AA5A77C88DB811EBA0613421C4F9AE02.roa (raw, json) Hash identifier: fNoRTJRcUq+MisSf8jbpZwfIe00iU+V6oUD6yiNy/5Y= Subject key identifier: AA:DB:54:E8:18:3F:44:03:B5:96:19:79:E9:30:AF:29:E1:72:FA:3C Certificate issuer: /CN=A91272F9/serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Certificate serial: 123E Authority key identifier: 21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/AA5A77C88DB811EBA0613421C4F9AE02.roa Signing time: Tue 10 Sep 2024 17:55:23 +0000 ROA not before: Tue 10 Sep 2024 17:55:23 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 33353 IP address blocks: 103.123.138.0/24 maxlen: 24 2403:7940::/33 maxlen: 33 2403:7940:fcc0::/48 maxlen: 48 2403:7940:fcd0::/48 maxlen: 48 2403:7940:fcd1::/48 maxlen: 48 2403:7940:fcd2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4670 (0x123e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91272F9/serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Validity Not Before: Sep 10 17:55:23 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66e0880a-94e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:66:79:4b:49:f2:74:69:a4:c5:12:aa:83:ca: f7:09:10:dd:07:cd:2a:33:35:1c:7c:c8:42:db:13: 2c:69:7d:17:bb:47:f1:4a:61:46:00:68:35:d7:6a: cc:80:2c:78:d2:fd:73:8b:fa:ac:43:93:f0:e0:42: b3:fb:77:5d:00:71:fd:c6:6a:75:d9:ad:bc:01:9b: 05:61:08:89:25:93:6f:54:dc:d0:65:47:f4:70:d3: 19:34:3b:6e:8c:2b:36:50:e7:3b:13:33:89:e2:86: 6e:eb:32:df:1b:d0:95:38:b8:0b:4c:8f:36:2e:f7: a2:a6:5b:8f:d6:70:ce:ea:f5:07:07:dd:14:57:dc: 7e:74:45:93:1c:96:30:3f:e8:6a:40:11:de:20:b8: 2a:7b:2b:f7:f5:c9:41:06:e3:99:e3:d2:ee:b7:5f: 2f:ce:26:e2:a8:49:5a:57:3a:ac:23:53:aa:60:5c: 67:20:aa:5b:66:51:ce:8c:2a:38:9d:97:f3:ca:23: 96:cd:bf:c4:d3:a9:0e:9c:0b:db:71:95:c2:e9:fb: a1:07:45:42:c3:c3:8a:8c:76:a0:88:12:0e:10:e1: 58:2d:a8:98:16:23:1a:64:3f:f3:55:6b:50:43:1b: 84:46:03:ac:66:06:f3:8a:e2:f9:a0:1f:4e:77:72: 21:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DB:54:E8:18:3F:44:03:B5:96:19:79:E9:30:AF:29:E1:72:FA:3C X509v3 Authority Key Identifier: keyid:21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/AA5A77C88DB811EBA0613421C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.123.138.0/24 IPv6: 2403:7940::/33 2403:7940:fcc0::/48 2403:7940:fcd0::-2403:7940:fcd2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 63:4d:a6:e0:41:6b:81:ef:3c:eb:01:0b:cd:64:04:ba:c9:f6: c9:0e:42:78:89:96:80:93:66:5a:1a:d1:88:21:ec:e0:11:a3: cb:7c:64:37:c5:5f:c8:6d:61:c0:68:52:e4:48:b1:39:9e:37: d5:a0:2a:87:14:b6:90:61:94:fd:4f:e7:42:13:b6:2f:dd:a7: d3:4c:3e:d0:91:43:a5:ec:d4:f3:73:65:82:d2:e5:a4:bb:7c: de:e7:5f:d7:f4:d7:f7:46:73:89:03:2c:ca:0b:37:fb:ed:e8: 1c:5e:66:28:f3:57:e5:84:90:cb:3f:b0:bd:1b:66:82:00:9a: 72:79:78:18:a8:c6:cb:05:9c:ec:7f:56:04:fa:60:42:7f:e8: 0e:b2:59:e4:5c:b3:e2:23:62:ef:0d:e0:80:b4:4b:7c:53:04: 52:24:e4:40:3f:23:fb:e3:8c:84:e0:5b:4d:a1:57:f3:db:d4: 25:2d:c6:9a:e3:5e:32:8b:9d:7f:32:8f:95:14:0a:bf:96:0b: 31:4a:be:56:9a:e7:74:ad:05:9c:d4:c6:fe:04:15:97:36:bf: 64:0f:68:d4:35:3f:87:04:c6:37:f3:52:e8:b3:21:b3:9d:53: 04:fc:e0:ef:ee:a2:8b:1d:37:17:a0:52:36:3c:df:64:9d:e7: b3:6b:56:04 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgICEj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcyRjkxMTAvBgNVBAUTKDIxQ0JGRTI5QTk5NEQ4RjlFMDNFNEM0RDQ0RTZDRjVC NjQ4Qjc4RUMwHhcNMjQwOTEwMTc1NTIzWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmUwODgwYS05NGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGZ5S0nydGmkxRKqg8r3CRDdB80qMzUcfMhC2xMsaX0Xu0fxSmFGAGg112rM gCx40v1zi/qsQ5Pw4EKz+3ddAHH9xmp12a28AZsFYQiJJZNvVNzQZUf0cNMZNDtu jCs2UOc7EzOJ4oZu6zLfG9CVOLgLTI82LveipluP1nDO6vUHB90UV9x+dEWTHJYw P+hqQBHeILgqeyv39clBBuOZ49Lut18vzibiqElaVzqsI1OqYFxnIKpbZlHOjCo4 nZfzyiOWzb/E06kOnAvbcZXC6fuhB0VCw8OKjHagiBIOEOFYLaiYFiMaZD/zVWtQ QxuERgOsZgbziuL5oB9Od3IhqwIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFKrbVOgY P0QDtZYZeekwrynhcvo8MB8GA1UdIwQYMBaAFCHL/implNj54D5MTUTmz1tki3js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzJGOS9EMkVENDlDMkMy NkQxMUU4QkFCRTExNjVDNEY5QUUwMi9JY3YtS2FtVTJQbmdQa3hOUk9iUFcyU0xl T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljdi1LYW1VMlBuZ1BreE5ST2JQVzJTTGVPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjcyRjkvRDJFRDQ5QzJDMjZEMTFFOEJBQkUxMTY1QzRGOUFFMDIvQUE1QTc3Qzg4 REI4MTFFQkEwNjEzNDIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTAYIKwYBBQUHAQcBAf8E PTA7MAwEAgABMAYDBABne4owKwQCAAIwJQMGByQDeUAAAwcAJAN5QPzAMBIDBwQk A3lA/NADBwAkA3lA/NIwDQYJKoZIhvcNAQELBQADggEBAGNNpuBBa4HvPOsBC81k BLrJ9skOQniJloCTZloa0Ygh7OARo8t8ZDfFX8htYcBoUuRIsTmeN9WgKocUtpBh lP1P50ITti/dp9NMPtCRQ6Xs1PNzZYLS5aS7fN7nX9f01/dGc4kDLMoLN/vt6Bxe ZijzV+WEkMs/sL0bZoIAmnJ5eBioxssFnOx/VgT6YEJ/6A6yWeRcs+IjYu8N4IC0 S3xTBFIk5EA/I/vjjITgW02hV/Pb1CUtxprjXjKLnX8yj5UUCr+WCzFKvlaa53St BZzUxv4EFZc2v2QPaNQ1P4cExjfzUuizIbOdUwT84O/uoosdNxegUjY832Sd57Nr VgQ= -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:57 2024 by rpki-client on console-ams.rpki-client.org