$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/121E99A8F21911EE95F21158C4F9AE02.roa File: 121E99A8F21911EE95F21158C4F9AE02.roa (raw, json) Hash identifier: oRCouiUpGQ/m6gpchET77aGzx6bi1ujY4xCm3A9vvYk= Subject key identifier: 29:C8:58:39:2C:4A:69:7F:B7:DF:16:A8:A6:32:2C:D6:65:16:2C:8C Certificate issuer: /CN=A91AAE2E/serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7 Certificate serial: 51 Authority key identifier: DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/121E99A8F21911EE95F21158C4F9AE02.roa Signing time: Tue 03 Sep 2024 07:49:34 +0000 ROA not before: Tue 03 Sep 2024 07:49:34 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 64015 IP address blocks: 103.192.240.0/22 maxlen: 22 103.192.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE2E/serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7 Validity Not Before: Sep 3 07:49:34 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d6bf8e-635d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b2:83:ee:ea:42:80:81:7a:2b:a9:2b:4f:20: 65:38:91:c7:4b:d1:39:9f:29:2a:ce:27:50:17:33: 7f:53:e7:cf:97:1a:5c:c9:df:a6:c8:f6:8f:4e:60: d2:66:84:0d:75:30:35:0e:95:3e:5a:53:a0:a6:c3: 91:d2:c9:cb:f6:59:43:fc:65:85:47:2e:92:08:7e: 18:51:17:30:4f:c4:4f:05:60:70:9c:e8:77:24:4d: d8:5e:19:3c:da:da:19:6d:e2:30:52:93:df:70:17: c1:a7:0e:5a:58:02:2c:81:ca:7f:ed:98:9a:6b:3d: 90:a1:54:27:4c:08:ca:55:89:2c:90:b7:b0:4b:ef: 03:80:e1:bf:55:01:0b:a4:13:f9:d2:4d:09:22:44: fc:ee:8c:f1:ba:a2:0c:b2:07:c0:68:61:68:b5:e5: a3:1a:57:4e:0c:4b:97:be:b0:9c:ba:0a:86:18:de: bd:ae:2f:ee:be:a4:0c:1c:48:93:d5:d6:f8:f4:85: f8:37:e8:42:2e:c1:93:ce:44:ec:7c:df:b0:6b:20: d4:aa:dc:d5:71:e3:0d:66:92:f8:43:33:88:be:63: 80:de:cb:45:20:dd:7a:29:fa:a1:68:26:38:41:50: 7e:26:43:33:1a:8c:8e:f6:26:2a:59:44:eb:a6:08: b1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C8:58:39:2C:4A:69:7F:B7:DF:16:A8:A6:32:2C:D6:65:16:2C:8C X509v3 Authority Key Identifier: keyid:DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/121E99A8F21911EE95F21158C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.192.240.0/22 Signature Algorithm: sha256WithRSAEncryption 15:43:0c:fa:26:e0:54:af:39:24:25:f4:cb:f7:d6:70:c9:ca: 1e:77:ea:94:37:76:ee:87:d0:32:6f:bf:27:c2:ab:3a:b0:21: 3f:c2:84:b6:a8:52:8b:4a:e5:f6:d7:65:0f:88:12:30:1a:df: aa:c2:bc:60:ae:f1:c5:32:b9:94:0a:c0:c3:af:b2:bc:6e:cd: d9:c7:84:17:e9:f9:15:ae:cc:37:b3:76:5d:d8:65:75:7d:c7: cf:1f:1c:c5:81:01:3d:28:8d:a4:16:b7:ec:fe:a6:3b:83:bb: ce:70:6d:28:ff:3c:f8:bd:de:df:4f:a6:3f:f7:d6:6b:c2:4f: b7:73:ad:98:f3:28:f4:19:40:84:80:26:5c:a7:2f:52:8f:10: 39:00:89:09:b3:ea:e0:a0:f1:b1:16:60:30:60:45:2d:54:dc: f5:96:3b:7e:24:f6:bb:4a:9e:5a:e6:c8:3e:22:6c:80:c7:32: 3a:8b:58:51:f8:74:cf:cb:e9:40:e6:39:20:c6:28:d3:93:1b: 5d:94:fd:0f:10:8b:3a:80:d0:4c:f4:62:ea:96:80:de:bd:53: 36:66:91:e8:2a:d3:26:00:b8:fb:ce:4e:18:7a:e1:d1:3c:fb: 2e:cc:f7:b4:fa:7a:d2:e3:a8:42:ec:5b:e9:a0:6c:78:4e:87: 27:06:8c:68 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QUUyRTExMC8GA1UEBRMoREQyNDMyRDhBRDZCQjNFOUU5OTY1NTgwQkJDNkQyMjIx OTA3QjNGNzAeFw0yNDA5MDMwNzQ5MzRaFw0yNTEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZDZiZjhlLTYzNWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDasoPu6kKAgXorqStPIGU4kcdL0TmfKSrOJ1AXM39T58+XGlzJ36bI9o9OYNJm hA11MDUOlT5aU6Cmw5HSycv2WUP8ZYVHLpIIfhhRFzBPxE8FYHCc6HckTdheGTza 2hlt4jBSk99wF8GnDlpYAiyByn/tmJprPZChVCdMCMpViSyQt7BL7wOA4b9VAQuk E/nSTQkiRPzujPG6ogyyB8BoYWi15aMaV04MS5e+sJy6CoYY3r2uL+6+pAwcSJPV 1vj0hfg36EIuwZPOROx837BrINSq3NVx4w1mkvhDM4i+Y4Dey0Ug3Xop+qFoJjhB UH4mQzMajI72JipZROumCLE1AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUKchYOSxK aX+33xaopjIs1mUWLIwwHwYDVR0jBBgwFoAU3SQy2K1rs+npllWAu8bSIhkHs/cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBRTJFL0U3MUEwQkJDRjIx NzExRUVCQ0NDMzEyMEM0RjlBRTAyLzNTUXkySzFycy1ucGxsV0F1OGJTSWhrSHNf Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM1NReTJLMXJzLW5wbGxXQXU4YlNJaGtIc19jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUUyRS9FNzFBMEJCQ0YyMTcxMUVFQkNDQzMxMjBDNEY5QUUwMi8xMjFFOTlBOEYy MTkxMUVFOTVGMjExNThDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmfA8DANBgkqhkiG9w0BAQsFAAOCAQEAFUMM+ibgVK85JCX0 y/fWcMnKHnfqlDd27ofQMm+/J8KrOrAhP8KEtqhSi0rl9tdlD4gSMBrfqsK8YK7x xTK5lArAw6+yvG7N2ceEF+n5Fa7MN7N2XdhldX3Hzx8cxYEBPSiNpBa37P6mO4O7 znBtKP88+L3e30+mP/fWa8JPt3OtmPMo9BlAhIAmXKcvUo8QOQCJCbPq4KDxsRZg MGBFLVTc9ZY7fiT2u0qeWubIPiJsgMcyOotYUfh0z8vpQOY5IMYo05MbXZT9DxCL OoDQTPRi6paA3r1TNmaR6CrTJgC4+85OGHrh0Tz7Lsz3tPp60uOoQuxb6aBseE6H JwaMaA== -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:19 2024 by rpki-client on console-ams.rpki-client.org