$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/2ABC9DCAE70111EE8CBD5443C4F9AE02.roa File: 2ABC9DCAE70111EE8CBD5443C4F9AE02.roa (raw, json) Hash identifier: XqCmEMVbctn80tZMWt9KBtSYiAl81CKhVgV+0CIH65c= Subject key identifier: 15:AE:6F:DE:12:AC:61:7A:A3:2E:63:CC:7B:94:46:BC:3A:B3:77:65 Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Certificate serial: 0977 Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/2ABC9DCAE70111EE8CBD5443C4F9AE02.roa Signing time: Fri 22 Nov 2024 20:10:20 +0000 ROA not before: Fri 22 Nov 2024 20:10:20 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 136030 IP address blocks: 103.235.76.0/24 maxlen: 24 103.235.78.0/24 maxlen: 24 103.235.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:10:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2423 (0x977) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Validity Not Before: Nov 22 20:10:20 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6740e52c-57db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:19:08:5e:99:ad:3b:1d:b5:4b:e8:0b:8a:01: 7c:3a:63:34:ea:e9:96:46:04:a6:a3:fb:73:20:29: 54:80:e7:5e:b8:90:70:6b:7e:fe:14:39:66:d0:d3: 4d:92:44:cf:8d:ce:49:03:af:86:a0:8f:aa:84:7d: c3:4f:b2:fd:21:c6:9c:ef:f5:c5:9c:96:ef:0b:9d: eb:bb:21:f5:63:ff:60:a4:6f:5c:3f:4b:6b:ed:46: 7e:ad:59:cd:cf:cf:46:aa:50:b4:7a:73:6d:e1:b2: 34:53:c5:6c:23:eb:cc:6f:fa:40:6b:fa:33:50:35: 3f:fc:02:28:79:ff:17:52:16:66:c8:5e:ec:85:65: 62:9a:7b:e3:e9:28:24:27:2a:b9:fa:6f:6c:41:2c: c3:c4:f9:76:b2:d6:07:17:12:9a:84:92:35:ff:53: cb:82:12:80:cf:3f:75:5f:7f:b4:98:06:f6:11:6a: be:e7:60:7a:fb:07:c1:f7:d1:b9:1f:9e:ef:e9:c9: 5d:e2:a2:4b:2c:fd:0f:a4:91:b2:53:10:d3:6f:43: 3f:ed:0c:d9:40:88:72:95:da:15:99:ef:7c:d3:b5: 13:39:ed:72:b1:eb:8a:5b:95:e1:cb:cd:87:74:64: 52:d3:ec:c5:1a:30:a7:64:84:33:82:ee:a7:d0:02: 18:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:AE:6F:DE:12:AC:61:7A:A3:2E:63:CC:7B:94:46:BC:3A:B3:77:65 X509v3 Authority Key Identifier: keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/2ABC9DCAE70111EE8CBD5443C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.235.76.0/24 103.235.78.0/23 Signature Algorithm: sha256WithRSAEncryption 03:ae:85:e9:60:be:15:2e:c5:c2:b3:ce:8f:28:73:23:f9:64: 4e:6d:d8:2e:0a:b1:6a:1b:9e:a4:85:d5:c0:5c:93:e2:73:96: 45:87:95:fa:3a:bd:7d:3d:cd:3d:ab:b1:4a:90:c1:0c:c8:07: 33:8d:b7:cf:6e:36:9f:3e:da:8c:eb:b4:f5:ee:d6:93:26:ea: bc:75:22:07:d6:8b:e8:b7:e7:79:fc:84:9a:4a:70:0f:58:92: 7a:fd:e2:98:58:6b:fe:12:6b:8c:f3:02:ff:e5:83:66:b7:17: 74:43:bf:79:81:2d:dd:8d:bb:20:7a:67:e9:73:32:29:65:54: d7:54:44:ce:23:e7:3c:27:02:ca:31:f7:73:ac:ce:36:21:a5: ba:cb:9e:3a:fd:22:74:bc:6b:0a:24:f8:ee:19:30:50:02:91: f3:35:c6:2f:39:57:2f:90:85:ec:7e:d2:31:1f:9d:0f:a2:d1: 0f:54:51:21:cb:1e:b5:b2:f9:25:3e:c4:36:ec:73:9e:40:03: aa:6e:a2:9c:cb:7f:a2:7e:de:0a:d7:1c:a2:27:db:96:5f:68: 58:2b:77:a7:d8:e8:4a:6f:b4:8d:e5:ff:4c:2d:40:5b:3a:48: 95:5a:91:a5:79:55:47:1f:13:53:5c:98:d6:5d:0e:16:0d:70: 9e:6b:d9:c4 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy MzYwRkQwRjUwHhcNMjQxMTIyMjAxMDIwWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQwZTUyYy01N2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6RkIXpmtOx21S+gLigF8OmM06umWRgSmo/tzIClUgOdeuJBwa37+FDlm0NNN kkTPjc5JA6+GoI+qhH3DT7L9Icac7/XFnJbvC53ruyH1Y/9gpG9cP0tr7UZ+rVnN z89GqlC0enNt4bI0U8VsI+vMb/pAa/ozUDU//AIoef8XUhZmyF7shWVimnvj6Sgk Jyq5+m9sQSzDxPl2stYHFxKahJI1/1PLghKAzz91X3+0mAb2EWq+52B6+wfB99G5 H57v6cld4qJLLP0PpJGyUxDTb0M/7QzZQIhyldoVme9807UTOe1yseuKW5Xhy82H dGRS0+zFGjCnZIQzgu6n0AIYCQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFBWub94S rGF6oy5jzHuURrw6s3dlMB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTY5NDMvQjcxODExNjg4RDUxMTFFQUI4QjI2Mzg0QzRGOUFFMDIvMkFCQzlEQ0FF NzAxMTFFRThDQkQ1NDQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABn60wDBAFn604wDQYJKoZIhvcNAQELBQADggEBAAOuhelg vhUuxcKzzo8ocyP5ZE5t2C4KsWobnqSF1cBck+JzlkWHlfo6vX09zT2rsUqQwQzI BzONt89uNp8+2ozrtPXu1pMm6rx1IgfWi+i353n8hJpKcA9Yknr94phYa/4Sa4zz Av/lg2a3F3RDv3mBLd2NuyB6Z+lzMillVNdURM4j5zwnAsox93OszjYhpbrLnjr9 InS8awok+O4ZMFACkfM1xi85Vy+Qhex+0jEfnQ+i0Q9UUSHLHrWy+SU+xDbsc55A A6puopzLf6J+3grXHKIn25ZfaFgrd6fY6EpvtI3l/0wtQFs6SJVakaV5VUcfE1Nc mNZdDhYNcJ5r2cQ= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:37 2024 by rpki-client on console-ams.rpki-client.org