$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/B9E2643697CE11EDB7D5B312C4F9AE02.roa File: B9E2643697CE11EDB7D5B312C4F9AE02.roa (raw, json) Hash identifier: Rjv4/h20cgzAYzjAVxolnx21Vnzktjz/DBnMzo2IQ5E= Subject key identifier: 24:71:02:53:A2:D9:7F:D7:C1:57:69:A6:6A:CB:02:75:96:56:42:38 Certificate issuer: /CN=A91AD9BD/serialNumber=56B76801D50A4E63C85E0645770654B7F936C994 Certificate serial: 012A Authority key identifier: 56:B7:68:01:D5:0A:4E:63:C8:5E:06:45:77:06:54:B7:F9:36:C9:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/B9E2643697CE11EDB7D5B312C4F9AE02.roa Signing time: Wed 07 Aug 2024 04:25:41 +0000 ROA not before: Wed 07 Aug 2024 04:25:41 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 137503 IP address blocks: 103.189.186.0/23 maxlen: 24 103.241.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:25:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD9BD/serialNumber=56B76801D50A4E63C85E0645770654B7F936C994 Validity Not Before: Aug 7 04:25:41 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66b2f744-ade5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c3:23:59:58:ec:f7:4b:2a:f2:78:30:f4:c2: de:47:bd:06:90:d7:39:b2:c2:57:41:d8:9a:e5:33: 18:01:de:dd:f3:29:d3:79:7d:73:a0:83:eb:1c:62: bb:b1:0a:86:18:e8:b1:98:00:3e:9a:9d:c9:f8:06: e4:43:f1:e9:e1:d8:ec:7f:b6:ce:e7:c6:07:e8:f0: 6a:37:86:23:60:9d:0a:5f:83:5f:8e:c9:77:5e:9c: 00:4b:ee:87:df:61:d9:58:ed:00:be:8c:f0:ec:58: 2e:3a:d4:21:cb:25:af:35:e4:46:91:e9:61:52:80: dd:35:20:67:f9:4c:89:d4:3b:10:52:a3:75:e9:3c: 79:99:63:33:bf:77:c9:7a:04:00:73:85:2e:80:5f: c3:de:cb:db:bd:49:df:c4:06:84:f0:fc:f6:e4:43: 82:7b:95:82:92:26:db:c2:2f:cf:7c:57:e5:21:75: 8e:18:69:30:97:dd:4e:70:88:79:fd:14:c5:fc:2e: 4b:b7:d6:c2:05:21:35:51:36:5a:ad:f6:46:1f:56: a7:ea:0a:92:69:3b:c4:96:6f:20:0c:f7:14:36:66: f6:25:dc:c5:08:a4:f7:7b:26:93:76:d1:7b:b5:cd: ca:6c:b7:81:db:19:f2:30:15:92:0f:bc:4e:30:e9: c8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:71:02:53:A2:D9:7F:D7:C1:57:69:A6:6A:CB:02:75:96:56:42:38 X509v3 Authority Key Identifier: keyid:56:B7:68:01:D5:0A:4E:63:C8:5E:06:45:77:06:54:B7:F9:36:C9:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/B9E2643697CE11EDB7D5B312C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.189.186.0/23 103.241.100.0/22 Signature Algorithm: sha256WithRSAEncryption 54:35:42:09:dc:21:7f:c1:7f:3c:a8:1c:49:f4:23:2a:0a:f6: 30:c1:85:c2:75:37:1f:6b:af:b9:ca:1a:5a:ba:37:3a:52:9e: f5:c0:d3:6a:8f:28:ff:75:c8:47:4a:0b:90:60:0e:12:9e:92: e1:e8:8a:6f:c1:28:8b:16:38:e4:f9:a2:be:c1:ae:12:94:fd: 9b:71:c8:98:6b:ed:83:fa:55:a7:dd:a3:32:19:42:57:bb:b5: 2c:d9:a8:6d:5d:d3:de:d1:f5:8c:e0:48:5c:7f:bc:17:98:c4: e4:dc:9c:93:4b:86:ba:17:b3:34:81:e1:83:13:8e:a2:8d:dd: 86:e3:d2:07:27:5c:e3:01:bc:15:42:57:ce:f2:8b:d9:a0:3a: e8:c5:1b:e8:7d:4b:28:ad:b2:ad:16:4f:34:be:a2:18:23:ed: 93:85:76:7f:d7:30:90:e0:87:29:3a:93:db:6a:44:48:48:f3: cb:bf:e5:71:56:d6:23:9e:62:02:63:4d:b2:88:d1:97:27:93: 01:65:ff:c7:5a:b4:2d:6a:4f:ac:0f:37:99:90:35:f8:a2:d7: bc:66:4d:e2:a8:7f:a7:ec:6b:66:de:73:8d:be:5b:61:93:a0: 10:96:67:c5:80:45:6c:d3:b9:b2:b7:30:f8:4f:f4:90:0c:53: d4:93:7c:33 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ5QkQxMTAvBgNVBAUTKDU2Qjc2ODAxRDUwQTRFNjNDODVFMDY0NTc3MDY1NEI3 RjkzNkM5OTQwHhcNMjQwODA3MDQyNTQxWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmIyZjc0NC1hZGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sMjWVjs90sq8ngw9MLeR70GkNc5ssJXQdia5TMYAd7d8ynTeX1zoIPrHGK7 sQqGGOixmAA+mp3J+AbkQ/Hp4djsf7bO58YH6PBqN4YjYJ0KX4Nfjsl3XpwAS+6H 32HZWO0Avozw7FguOtQhyyWvNeRGkelhUoDdNSBn+UyJ1DsQUqN16Tx5mWMzv3fJ egQAc4UugF/D3svbvUnfxAaE8Pz25EOCe5WCkibbwi/PfFflIXWOGGkwl91OcIh5 /RTF/C5Lt9bCBSE1UTZarfZGH1an6gqSaTvElm8gDPcUNmb2JdzFCKT3eyaTdtF7 tc3KbLeB2xnyMBWSD7xOMOnIdQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCRxAlOi 2X/XwVdppmrLAnWWVkI4MB8GA1UdIwQYMBaAFFa3aAHVCk5jyF4GRXcGVLf5NsmU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDlCRC8yN0QzRkNBQTk3 Q0MxMUVEQkRCQTEyMTJDNEY5QUUwMi9WcmRvQWRVS1RtUElYZ1pGZHdaVXRfazJ5 WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZyZG9BZFVLVG1QSVhnWkZkd1pVdF9rMnlaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUQ5QkQvMjdEM0ZDQUE5N0NDMTFFREJEQkExMjEyQzRGOUFFMDIvQjlFMjY0MzY5 N0NFMTFFREI3RDVCMzEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnvboDBAJn8WQwDQYJKoZIhvcNAQELBQADggEBAFQ1Qgnc IX/BfzyoHEn0IyoK9jDBhcJ1Nx9rr7nKGlq6NzpSnvXA02qPKP91yEdKC5BgDhKe kuHoim/BKIsWOOT5or7BrhKU/ZtxyJhr7YP6VafdozIZQle7tSzZqG1d097R9Yzg SFx/vBeYxOTcnJNLhroXszSB4YMTjqKN3Ybj0gcnXOMBvBVCV87yi9mgOujFG+h9 Syitsq0WTzS+ohgj7ZOFdn/XMJDghyk6k9tqREhI88u/5XFW1iOeYgJjTbKI0Zcn kwFl/8datC1qT6wPN5mQNfii17xmTeKof6fsa2bec42+W2GToBCWZ8WARWzTubK3 MPhP9JAMU9STfDM= -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:55 2024 by rpki-client on console-fra.rpki-client.org