$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/6E7D3C16816811EF99DD7787C4F9AE02.roa File: 6E7D3C16816811EF99DD7787C4F9AE02.roa (raw, json) Hash identifier: leXx7bxy8L09wkMSJ9uvzmOroNyOU5baBfHEIk5BxTw= Subject key identifier: D0:60:5A:7A:B5:85:F2:A0:BB:41:49:00:20:53:85:50:83:10:7F:9C Certificate issuer: /CN=A91AA96A/serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0 Certificate serial: 1E Authority key identifier: 0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/6E7D3C16816811EF99DD7787C4F9AE02.roa Signing time: Thu 03 Oct 2024 09:20:12 +0000 ROA not before: Thu 03 Oct 2024 09:20:12 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 38534 IP address blocks: 202.12.93.0/24 maxlen: 24 203.1.104.0/24 maxlen: 24 203.1.105.0/24 maxlen: 24 203.1.106.0/24 maxlen: 24 203.1.107.0/24 maxlen: 24 203.16.32.0/24 maxlen: 24 203.16.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA96A/serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0 Validity Not Before: Oct 3 09:20:12 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=66fe61cb-9479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f7:94:93:dd:d1:03:9c:1a:08:0f:19:95:04: 69:09:a7:31:73:56:94:b4:69:97:18:19:ce:a6:b5: e7:b1:50:fa:71:49:43:30:8d:18:7e:75:a7:6f:fb: 8c:4a:6a:a5:65:95:7a:a1:1f:24:e6:37:62:4b:ac: 71:cc:41:a5:e0:8b:ae:8c:38:0b:66:18:99:0c:67: f4:60:06:eb:57:59:7d:89:ba:2d:d0:72:13:c3:4a: bc:71:39:13:38:c5:b1:ed:10:99:ee:bf:63:e1:45: 20:04:b3:f4:30:43:c8:85:90:9f:8c:0f:3d:20:c8: 93:ad:0d:6a:f5:ad:31:1c:21:a0:9e:8c:8f:86:8f: 51:db:aa:2b:f8:b3:d1:40:ba:6b:4f:4b:73:67:26: fe:9f:0d:02:04:db:75:f5:ef:b3:11:d5:ee:05:ba: cb:22:3a:16:fa:de:4b:39:55:b5:73:d7:3b:23:50: 66:35:bc:e5:80:90:a3:e5:2b:1b:9d:2f:18:68:2e: 58:42:e6:00:2a:b6:14:1e:f2:e5:cd:d6:23:1b:98: f5:fa:de:f6:99:ee:5d:30:cb:b8:38:68:89:d1:67: 6d:6a:a4:a6:4e:44:97:0e:f2:4f:98:b9:6a:cb:dd: 5d:94:4d:e4:81:51:09:61:56:f2:5a:a4:6e:8f:80: 56:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:60:5A:7A:B5:85:F2:A0:BB:41:49:00:20:53:85:50:83:10:7F:9C X509v3 Authority Key Identifier: keyid:0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/6E7D3C16816811EF99DD7787C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.12.93.0/24 203.1.104.0/22 203.16.32.0/23 Signature Algorithm: sha256WithRSAEncryption bc:25:74:01:2b:b8:4d:44:17:19:13:87:61:3d:93:65:17:a1: 1a:a5:08:20:b4:e2:93:bc:43:70:12:7c:5e:35:ce:12:05:59: dc:ea:46:2e:da:d3:52:05:90:5b:3a:66:a3:8d:58:65:ba:2a: d7:36:39:f1:ea:38:51:f0:92:a9:61:a0:4d:6d:27:43:f2:2b: 9d:5b:bf:59:6b:e5:c5:f4:7a:42:2f:c6:5d:b2:26:84:24:87: 3c:e4:97:f5:1f:d0:ce:86:78:2c:e4:b2:24:7a:7b:85:56:e8: ee:2b:94:b0:35:b6:f2:0a:2f:d7:1b:bb:3e:b6:79:54:c3:f8: 75:db:c6:0a:0e:f1:d9:59:49:3c:3e:2a:ac:f9:ac:b7:56:be: 4f:96:fd:73:74:f6:26:05:5b:69:68:09:f4:17:5a:7a:d2:aa: 0f:6d:a9:57:f2:49:0c:91:96:d0:0f:5f:c8:3e:b9:2d:bb:4b: 13:4c:5a:00:d5:62:f3:ab:96:23:2e:d4:7e:d6:fa:3b:08:d4: 4e:61:e4:e8:90:cc:64:83:2a:77:01:8a:8d:57:b7:e5:19:5d: af:a3:26:f0:37:a0:f6:87:3f:4e:56:cf:0a:a6:ad:e3:cf:7f: d0:db:9b:07:1f:7b:ba:e6:ca:b2:6c:36:86:23:ae:fd:0d:af: e1:18:61:7e -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QTk2QTExMC8GA1UEBRMoMENERDUwNTgzMkVBOEM5QTREMjNCMTA2MzcyMDFENzk0 Mjk1NjRDMDAeFw0yNDEwMDMwOTIwMTJaFw0yNTAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZmU2MWNiLTk0NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCg95ST3dEDnBoIDxmVBGkJpzFzVpS0aZcYGc6mteexUPpxSUMwjRh+dadv+4xK aqVllXqhHyTmN2JLrHHMQaXgi66MOAtmGJkMZ/RgButXWX2Jui3QchPDSrxxORM4 xbHtEJnuv2PhRSAEs/QwQ8iFkJ+MDz0gyJOtDWr1rTEcIaCejI+Gj1Hbqiv4s9FA umtPS3NnJv6fDQIE23X177MR1e4FussiOhb63ks5VbVz1zsjUGY1vOWAkKPlKxud LxhoLlhC5gAqthQe8uXN1iMbmPX63vaZ7l0wy7g4aInRZ21qpKZORJcO8k+YuWrL 3V2UTeSBUQlhVvJapG6PgFZlAgMBAAGjggKhMIICnTAdBgNVHQ4EFgQU0GBaerWF 8qC7QUkAIFOFUIMQf5wwHwYDVR0jBBgwFoAUDN1QWDLqjJpNI7EGNyAdeUKVZMAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBOTZBL0Q0QzE2ODgyNkE2 RTExRUY4NEY5OEUzNUM0RjlBRTAyL0ROMVFXRExxakpwTkk3RUdOeUFkZVVLVlpN QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRE4xUVdETHFqSnBOSTdFR055QWRlVUtWWk1BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTk2QS9ENEMxNjg4MjZBNkUxMUVGODRGOThFMzVDNEY5QUUwMi82RTdEM0MxNjgx NjgxMUVGOTlERDc3ODdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDArBggrBgEFBQcBBwEB/wQc MBowGAQCAAEwEgMEAMoMXQMEAssBaAMEAcsQIDANBgkqhkiG9w0BAQsFAAOCAQEA vCV0ASu4TUQXGROHYT2TZRehGqUIILTik7xDcBJ8XjXOEgVZ3OpGLtrTUgWQWzpm o41YZboq1zY58eo4UfCSqWGgTW0nQ/IrnVu/WWvlxfR6Qi/GXbImhCSHPOSX9R/Q zoZ4LOSyJHp7hVbo7iuUsDW28gov1xu7PrZ5VMP4ddvGCg7x2VlJPD4qrPmst1a+ T5b9c3T2JgVbaWgJ9BdaetKqD22pV/JJDJGW0A9fyD65LbtLE0xaANVi86uWIy7U ftb6OwjUTmHk6JDMZIMqdwGKjVe35Rldr6Mm8Deg9oc/TlbPCqat489/0NubBx97 uubKsmw2hiOu/Q2v4Rhhfg== -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:04 2024 by rpki-client on console-ams.rpki-client.org