$ rpki-client -vvf rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/8C6AAF380AC511EB890DE026C4F9AE02.roa File: 8C6AAF380AC511EB890DE026C4F9AE02.roa (raw, json) Hash identifier: a4ANf8uGuOcHttQZdM48a5efk77lhvSIMBktbozPiW8= Subject key identifier: E3:B3:77:25:EB:AA:D6:7B:02:9F:B3:95:EA:A6:BA:F5:90:57:97:38 Certificate issuer: /CN=A91A532D/serialNumber=875B42F7C62725778F56D951B712EB8879348A45 Certificate serial: 070C Authority key identifier: 87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/8C6AAF380AC511EB890DE026C4F9AE02.roa Signing time: Sat 10 Aug 2024 22:10:19 +0000 ROA not before: Sat 10 Aug 2024 22:10:19 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 134226 IP address blocks: 103.59.176.0/22 maxlen: 22 103.59.176.0/24 maxlen: 24 103.59.177.0/24 maxlen: 24 103.59.178.0/24 maxlen: 24 103.59.179.0/24 maxlen: 24 2404:2d80::/32 maxlen: 32 2404:2d80::/40 maxlen: 40 2404:2d80::/48 maxlen: 48 2404:2d80::/64 maxlen: 64 2404:2d80:10::/48 maxlen: 48 2404:2d80:11::/48 maxlen: 48 2404:2d80:12::/48 maxlen: 48 2404:2d80:13::/48 maxlen: 48 2404:2d80:14::/48 maxlen: 48 2404:2d80:15::/48 maxlen: 48 2404:2d80:16::/48 maxlen: 48 2404:2d80:17::/48 maxlen: 48 2404:2d80:18::/48 maxlen: 48 2404:2d80:19::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1804 (0x70c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A532D/serialNumber=875B42F7C62725778F56D951B712EB8879348A45 Validity Not Before: Aug 10 22:10:19 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66b7e54a-b857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:13:45:f6:ab:52:48:7e:36:4c:0a:d9:dd:c7: 03:45:2f:7e:14:5c:b8:4b:83:2e:89:bf:f7:25:77: a9:1b:fa:e6:63:ff:07:1d:95:f6:86:9c:24:f5:67: 40:ab:b2:57:76:82:b5:34:02:a1:16:c3:45:94:9b: 56:fe:e6:a9:4b:d8:1a:b8:52:42:97:06:7d:8f:91: 6d:f4:67:09:62:da:3f:83:3f:7e:58:a8:ca:32:d4: 63:18:e2:68:e2:5d:d9:48:a0:cc:bd:8a:4a:bc:19: b3:b6:3b:23:f4:5b:1f:4d:87:a8:53:30:5a:3c:30: 60:8a:b9:b8:80:c6:80:a5:50:12:70:0d:7a:07:9f: 65:61:b7:ce:c1:3f:94:00:8b:4e:21:67:5c:9f:98: 56:8a:91:dd:e5:87:53:c4:ac:a1:a0:77:ba:ff:6f: b6:c4:c4:01:c3:4a:89:5c:27:b6:91:16:9e:40:4d: 58:a5:6f:d5:0a:63:12:35:b1:92:57:7f:ad:c9:5f: e0:72:62:85:83:26:08:96:58:f2:5c:de:a6:7b:80: c7:c2:c9:00:6e:a0:34:a1:02:ff:a6:4a:71:80:12: df:3f:42:69:1c:c6:73:a6:31:76:dc:fa:00:7d:7e: db:df:65:e8:2e:1f:34:55:d3:21:a1:50:7e:5b:9c: 9a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B3:77:25:EB:AA:D6:7B:02:9F:B3:95:EA:A6:BA:F5:90:57:97:38 X509v3 Authority Key Identifier: keyid:87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/8C6AAF380AC511EB890DE026C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.59.176.0/22 IPv6: 2404:2d80::/32 Signature Algorithm: sha256WithRSAEncryption 38:a3:0d:e1:2b:14:de:2b:62:d5:6a:3b:1c:98:92:d3:5c:94: 2e:72:93:66:ea:fc:66:02:8d:ed:66:80:be:f6:7d:99:3f:80: 73:4d:24:ff:07:62:f3:1b:e4:d8:e8:49:6f:92:ca:ab:b1:20: ad:35:67:97:0c:11:87:7f:de:78:52:73:1d:92:66:48:14:5e: 85:3a:fc:54:65:8b:c2:2c:b2:5c:7e:3d:18:e9:48:ac:45:7a: de:34:98:e9:65:b6:64:2a:8a:db:fc:ef:13:fb:19:15:13:53: 86:10:ff:bd:a5:cc:ee:98:de:9d:d7:bc:b6:9a:3e:3d:8a:34: df:e5:6c:df:28:08:a6:af:a6:73:86:11:bc:dd:35:5d:f4:e0: 92:5c:81:21:9e:df:6e:32:f9:c7:c3:4b:09:c3:f5:e6:47:d5: d5:d5:d7:eb:ec:0e:08:9d:66:c9:b8:76:19:45:b5:1f:65:3b: ea:e3:83:0f:c3:d8:2b:14:b1:c8:e4:2d:1c:00:7e:5a:37:5c: 78:15:ab:ef:c0:85:53:39:3a:ac:a3:7c:f5:e4:a7:8c:3b:ec: 33:83:f3:79:c2:45:8a:52:bf:d1:90:b4:8a:a7:80:a7:98:9f: 2d:de:b3:3b:22:37:7f:a6:f8:17:db:b6:12:23:ed:88:d8:ce: 4d:8b:4b:fd -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUzMkQxMTAvBgNVBAUTKDg3NUI0MkY3QzYyNzI1Nzc4RjU2RDk1MUI3MTJFQjg4 NzkzNDhBNDUwHhcNMjQwODEwMjIxMDE5WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmI3ZTU0YS1iODU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhNF9qtSSH42TArZ3ccDRS9+FFy4S4Muib/3JXepG/rmY/8HHZX2hpwk9WdA q7JXdoK1NAKhFsNFlJtW/uapS9gauFJClwZ9j5Ft9GcJYto/gz9+WKjKMtRjGOJo 4l3ZSKDMvYpKvBmztjsj9FsfTYeoUzBaPDBgirm4gMaApVAScA16B59lYbfOwT+U AItOIWdcn5hWipHd5YdTxKyhoHe6/2+2xMQBw0qJXCe2kRaeQE1YpW/VCmMSNbGS V3+tyV/gcmKFgyYIlljyXN6me4DHwskAbqA0oQL/pkpxgBLfP0JpHMZzpjF23PoA fX7b32XoLh80VdMhoVB+W5yaoQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFOOzdyXr qtZ7Ap+zleqmuvWQV5c4MB8GA1UdIwQYMBaAFIdbQvfGJyV3j1bZUbcS64h5NIpF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMyRC9FQUE5NzlGQTBB QzMxMUVCOTY0QTg5MjRDNEY5QUUwMi9oMXRDOThZbkpYZVBWdGxSdHhMcmlIazBp a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gxdEM5OFluSlhlUFZ0bFJ0eExyaUhrMGlrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTUzMkQvRUFBOTc5RkEwQUMzMTFFQjk2NEE4OTI0QzRGOUFFMDIvOEM2QUFGMzgw QUM1MTFFQjg5MERFMDI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnO7AwDQQCAAIwBwMFACQELYAwDQYJKoZIhvcNAQELBQAD ggEBADijDeErFN4rYtVqOxyYktNclC5yk2bq/GYCje1mgL72fZk/gHNNJP8HYvMb 5NjoSW+SyquxIK01Z5cMEYd/3nhScx2SZkgUXoU6/FRli8Isslx+PRjpSKxFet40 mOlltmQqitv87xP7GRUTU4YQ/72lzO6Y3p3XvLaaPj2KNN/lbN8oCKavpnOGEbzd NV304JJcgSGe324y+cfDSwnD9eZH1dXV1+vsDgidZsm4dhlFtR9lO+rjgw/D2CsU scjkLRwAflo3XHgVq+/AhVM5OqyjfPXkp4w77DOD83nCRYpSv9GQtIqngKeYny3e szsiN3+m+BfbthIj7YjYzk2LS/0= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:11 2024 by rpki-client on console-fra.rpki-client.org