$ rpki-client -vvf rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/D96FDB32A57111EF9BA85A81C4F9AE02.roa File: D96FDB32A57111EF9BA85A81C4F9AE02.roa (raw, json) Hash identifier: ZpzFBlF6vram5w2RC46GaLw+r2L+pd9IKytshwmhbRc= Subject key identifier: 1A:B0:AB:8E:E5:FB:17:1A:00:83:9A:20:55:18:D2:DF:27:52:5A:91 Certificate issuer: /CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3 Certificate serial: 1311 Authority key identifier: 6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/D96FDB32A57111EF9BA85A81C4F9AE02.roa Signing time: Mon 18 Nov 2024 05:56:27 +0000 ROA not before: Mon 18 Nov 2024 05:56:27 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 138039 IP address blocks: 103.120.119.0/24 maxlen: 24 2407:1840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4881 (0x1311) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3 Validity Not Before: Nov 18 05:56:27 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=673ad70b-862c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5e:d8:fb:e9:2d:18:97:0f:bd:e3:cc:cf:20: cc:fc:91:d2:8d:89:85:56:99:88:e8:b4:4a:24:d9: c8:d2:9e:4e:3c:2d:78:db:98:7c:42:59:e3:b5:79: 07:63:80:b4:3c:27:be:36:31:67:b5:59:4c:0b:5b: 6e:97:28:9c:4e:b0:5c:07:e3:d2:8d:2f:26:67:06: 03:b1:d9:58:21:0a:e3:09:34:32:f6:f1:c0:f4:8e: ca:d1:d0:0b:aa:95:e8:a3:ff:bf:0c:ba:27:a9:45: 95:1a:96:ff:3b:55:0e:4f:60:2f:1b:68:69:38:d8: 2b:82:85:e9:0d:4f:8f:91:0d:06:82:23:e6:72:e4: c6:08:10:93:7b:3c:f1:fe:40:36:50:63:25:80:2d: 31:d0:db:55:9f:2b:4d:6e:e5:29:e5:aa:71:f4:61: 2d:a1:5e:cd:3f:bf:68:7c:15:10:43:a0:9d:88:5b: 9c:ed:ba:83:f5:e9:f7:71:b9:cc:02:07:1c:64:00: fd:83:c6:ee:f0:4f:93:94:42:bb:89:9e:1f:57:e9: 1c:4f:52:3a:d0:2e:ce:80:e5:f2:08:65:e7:1e:8e: 99:62:fd:de:4f:5b:dd:1d:78:5d:db:1d:ab:71:00: fd:e6:1f:2d:ec:85:0a:58:51:68:ba:f9:f3:fb:e5: 4a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B0:AB:8E:E5:FB:17:1A:00:83:9A:20:55:18:D2:DF:27:52:5A:91 X509v3 Authority Key Identifier: keyid:6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/D96FDB32A57111EF9BA85A81C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.120.119.0/24 IPv6: 2407:1840::/32 Signature Algorithm: sha256WithRSAEncryption 42:18:24:02:0a:7b:85:9c:cd:ca:59:06:3b:5f:b0:c9:35:7f: 56:85:45:03:08:10:1c:e1:98:eb:8f:71:cc:44:f7:48:80:d5: ff:58:fc:1a:f5:76:63:c4:52:ef:dd:f6:d9:72:57:ae:4c:3a: a5:92:fe:17:f7:c3:2f:b2:4b:b0:84:ad:9c:4a:e5:4b:3d:77: 85:05:5b:a4:c0:22:80:08:84:df:cc:b4:14:29:c6:0c:db:11: cf:05:ee:0d:a5:97:ca:54:f0:a7:1d:68:18:8b:06:84:94:a7: 46:5b:0e:56:85:32:91:54:6c:ab:09:1b:c9:39:a3:87:fd:d7: 07:e9:8d:60:54:c6:4c:c8:19:9d:71:36:ec:8f:bc:84:ef:dc: 16:ec:f8:ad:c4:73:b0:bf:88:3c:9e:41:d4:5e:0b:56:f6:a8: a0:d5:6a:fa:b7:84:97:c2:24:a7:0d:b9:2a:da:78:ba:0a:39: d4:23:db:bf:2c:b8:78:ba:2c:20:aa:80:da:77:f0:07:68:68: 3e:18:ca:3e:b2:19:9d:a6:26:5e:d2:4e:d4:33:5a:dc:28:64: 66:8b:4d:07:53:66:a1:b2:3b:6f:a5:9e:82:c5:c7:8e:e4:4b: e1:60:86:3a:89:bf:82:1d:98:67:18:6d:ba:27:93:e2:51:4b: 5b:a8:62:9c -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICExEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA5QUQxMTAvBgNVBAUTKDZEN0MyMjZBN0RDQjg1RjJGNDkyMTZCN0VCQjAwRDVG MDNBNjA1QzMwHhcNMjQxMTE4MDU1NjI3WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzNhZDcwYi04NjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvl7Y++ktGJcPvePMzyDM/JHSjYmFVpmI6LRKJNnI0p5OPC1425h8QlnjtXkH Y4C0PCe+NjFntVlMC1tulyicTrBcB+PSjS8mZwYDsdlYIQrjCTQy9vHA9I7K0dAL qpXoo/+/DLonqUWVGpb/O1UOT2AvG2hpONgrgoXpDU+PkQ0GgiPmcuTGCBCTezzx /kA2UGMlgC0x0NtVnytNbuUp5apx9GEtoV7NP79ofBUQQ6CdiFuc7bqD9en3cbnM AgccZAD9g8bu8E+TlEK7iZ4fV+kcT1I60C7OgOXyCGXnHo6ZYv3eT1vdHXhd2x2r cQD95h8t7IUKWFFouvnz++VKvQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFBqwq47l +xcaAIOaIFUY0t8nUlqRMB8GA1UdIwQYMBaAFG18Imp9y4Xy9JIWt+uwDV8DpgXD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDlBRC82NTZERDI2QUE3 NjgxMUU4OTMzM0M3MjVDNEY5QUUwMi9iWHdpYW4zTGhmTDBraGEzNjdBTlh3T21C Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JYd2lhbjNMaGZMMGtoYTM2N0FOWHdPbUJjTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODA5QUQvNjU2REQyNkFBNzY4MTFFODkzMzNDNzI1QzRGOUFFMDIvRDk2RkRCMzJB NTcxMTFFRjlCQTg1QTgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBABneHcwDQQCAAIwBwMFACQHGEAwDQYJKoZIhvcNAQELBQAD ggEBAEIYJAIKe4WczcpZBjtfsMk1f1aFRQMIEBzhmOuPccxE90iA1f9Y/Br1dmPE Uu/d9tlyV65MOqWS/hf3wy+yS7CErZxK5Us9d4UFW6TAIoAIhN/MtBQpxgzbEc8F 7g2ll8pU8KcdaBiLBoSUp0ZbDlaFMpFUbKsJG8k5o4f91wfpjWBUxkzIGZ1xNuyP vITv3Bbs+K3Ec7C/iDyeQdReC1b2qKDVavq3hJfCJKcNuSraeLoKOdQj278suHi6 LCCqgNp38AdoaD4Yyj6yGZ2mJl7STtQzWtwoZGaLTQdTZqGyO2+lnoLFx47kS+Fg hjqJv4IdmGcYbbonk+JRS1uoYpw= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:06 2024 by rpki-client on console-ams.rpki-client.org