$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/9EEA3006979411EA8C6FC25AC4F9AE02.roa File: 9EEA3006979411EA8C6FC25AC4F9AE02.roa (raw, json) Hash identifier: S4ZaaJwKZSnUQdUJjzEBewIqlA4hqhU0xKL1nfod00M= Subject key identifier: 37:6D:9D:C7:42:0F:46:47:18:57:32:A8:0F:36:47:EA:19:83:10:0E Certificate issuer: /CN=A91BA4F2/serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347 Certificate serial: 08A9 Authority key identifier: 51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/9EEA3006979411EA8C6FC25AC4F9AE02.roa Signing time: Mon 24 Jun 2024 21:24:01 +0000 ROA not before: Mon 24 Jun 2024 21:24:01 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 140644 IP address blocks: 103.151.104.0/23 maxlen: 23 103.151.104.0/24 maxlen: 24 103.151.105.0/24 maxlen: 24 2001:df3:bb80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:09:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2217 (0x8a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA4F2/serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347 Validity Not Before: Jun 24 21:24:01 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6679e3f1-16f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:64:e1:ec:0f:77:1c:f4:a3:a6:82:20:f6:22: 38:f1:19:11:06:cc:ad:77:66:2a:7c:5d:f4:fb:ca: bc:f8:dc:fa:f5:17:05:17:af:53:9e:7d:0e:b8:d8: 23:bb:74:f9:6c:0c:f2:c0:83:c9:76:d3:78:b3:06: 3c:a1:7e:e0:a1:34:87:78:95:78:d7:c7:c9:1b:6f: e7:71:6c:93:b6:79:c1:c1:e9:76:4a:bd:fb:72:65: 8c:e2:34:de:59:2d:07:72:b1:c0:d1:37:4e:46:66: 82:d5:d0:56:5d:b7:3e:58:ae:f9:1f:5e:7d:0b:ac: f1:49:eb:8c:8c:c4:76:0f:32:db:7d:66:da:23:37: 1e:94:b9:1b:18:7f:78:c5:b6:df:ee:61:a0:8b:5e: 7b:00:87:fb:d9:75:4b:bf:78:65:e3:55:7a:02:82: 25:f0:90:31:2e:49:10:82:3e:cd:c7:05:7b:f8:b6: dd:82:e1:78:1e:e5:47:35:7a:bf:c3:d8:28:9c:20: 5d:66:0a:ef:10:b0:14:e0:fc:27:ec:be:14:94:21: f1:cc:75:36:14:77:6e:f1:71:ad:65:69:b6:8f:4a: 1d:0e:1c:2f:71:68:34:49:96:f3:6a:11:83:40:81: 38:e5:de:12:c4:24:fd:b3:a4:9a:11:ab:a5:f2:4f: bb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:6D:9D:C7:42:0F:46:47:18:57:32:A8:0F:36:47:EA:19:83:10:0E X509v3 Authority Key Identifier: keyid:51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/9EEA3006979411EA8C6FC25AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.104.0/23 IPv6: 2001:df3:bb80::/48 Signature Algorithm: sha256WithRSAEncryption 70:7c:22:8a:dc:a9:cb:72:8b:0b:f8:88:83:dc:bc:5b:31:e8: c1:00:27:b5:4f:a8:3b:b1:75:cd:bc:e1:a1:87:d8:dc:5f:a0: c2:66:b3:31:83:d4:0e:81:7a:87:4b:a6:77:cd:72:ca:75:a3: 97:01:14:5c:f6:a5:25:e8:28:91:a2:9f:54:58:12:e5:f8:ad: ff:df:4f:e6:76:b7:9e:51:6f:d8:f8:84:ad:8b:4a:7f:2f:a5: 70:6a:a6:27:52:f2:bd:05:03:4c:07:a6:56:32:52:e7:ec:3e: d7:4d:74:d2:97:04:c1:8e:78:e9:17:0f:43:6e:e8:5e:5a:c5: e9:10:07:e1:fe:cf:55:c8:6a:40:8c:2d:c6:b6:57:43:11:b4: 9f:76:dc:83:37:ea:3b:a1:28:df:6e:7b:61:dc:1f:ff:9f:61: c2:a1:61:55:c8:81:b1:1d:b6:d1:e2:9f:6e:d4:43:30:17:38: d0:80:23:7a:38:38:49:3f:33:51:94:b7:b5:0b:c0:3f:1a:b9: dc:fc:6c:fe:2e:05:ac:fe:70:87:f7:c5:ee:3b:e0:43:c7:b5: 6a:3a:69:ef:cc:80:a1:72:9e:65:ea:8f:f5:15:c3:e7:c0:d9: 21:77:f4:66:83:ce:e6:ce:f7:bc:a4:6d:97:2a:de:1b:48:04: 5f:c1:09:dd -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE0RjIxMTAvBgNVBAUTKDUxMkRDMDZFNDFDMDg5OUEyNEExRkM4ODVFQjM0NkU0 NTMwN0YzNDcwHhcNMjQwNjI0MjEyNDAxWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njc5ZTNmMS0xNmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWTh7A93HPSjpoIg9iI48RkRBsytd2YqfF30+8q8+Nz69RcFF69Tnn0OuNgj u3T5bAzywIPJdtN4swY8oX7goTSHeJV418fJG2/ncWyTtnnBwel2Sr37cmWM4jTe WS0HcrHA0TdORmaC1dBWXbc+WK75H159C6zxSeuMjMR2DzLbfWbaIzcelLkbGH94 xbbf7mGgi157AIf72XVLv3hl41V6AoIl8JAxLkkQgj7NxwV7+LbdguF4HuVHNXq/ w9gonCBdZgrvELAU4Pwn7L4UlCHxzHU2FHdu8XGtZWm2j0odDhwvcWg0SZbzahGD QIE45d4SxCT9s6SaEaul8k+7/QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDdtncdC D0ZHGFcyqA82R+oZgxAOMB8GA1UdIwQYMBaAFFEtwG5BwImaJKH8iF6zRuRTB/NH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTRGMi8yQUVERUY5QTk3 OTMxMUVBQjJBRDI5NTZDNEY5QUUwMi9VUzNBYmtIQWlab2tvZnlJWHJORzVGTUg4 MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VTM0Fia0hBaVpva29meUlYck5HNUZNSDgwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkE0RjIvMkFFREVGOUE5NzkzMTFFQUIyQUQyOTU2QzRGOUFFMDIvOUVFQTMwMDY5 Nzk0MTFFQThDNkZDMjVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnl2gwDwQCAAIwCQMHACABDfO7gDANBgkqhkiG9w0BAQsF AAOCAQEAcHwiitypy3KLC/iIg9y8WzHowQAntU+oO7F1zbzhoYfY3F+gwmazMYPU DoF6h0umd81yynWjlwEUXPalJegokaKfVFgS5fit/99P5na3nlFv2PiErYtKfy+l cGqmJ1LyvQUDTAemVjJS5+w+10100pcEwY546RcPQ27oXlrF6RAH4f7PVchqQIwt xrZXQxG0n3bcgzfqO6Eo3257Ydwf/59hwqFhVciBsR220eKfbtRDMBc40IAjejg4 ST8zUZS3tQvAPxq53Pxs/i4FrP5wh/fF7jvgQ8e1ajpp78yAoXKeZeqP9RXD58DZ IXf0ZoPO5s73vKRtlyreG0gEX8EJ3Q== -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:39 2024 by rpki-client on console-ams.rpki-client.org