$ rpki-client -vvf rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/A84FB264FD7011EAA1DF3534C4F9AE02.roa File: A84FB264FD7011EAA1DF3534C4F9AE02.roa (raw, json) Hash identifier: ipH52NvI6j7Qm3VJ3UEcq9yvGVo2LC48K1opbVhCFvU= Subject key identifier: 83:0A:46:CA:94:B2:A0:3E:96:84:4F:9B:59:4E:F6:DD:D4:7A:DD:9C Certificate issuer: /CN=A91C609A/serialNumber=3FD3895952FD849A97BC112474950284C6868645 Certificate serial: 0757 Authority key identifier: 3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/A84FB264FD7011EAA1DF3534C4F9AE02.roa Signing time: Sat 26 Oct 2024 21:32:22 +0000 ROA not before: Sat 26 Oct 2024 21:32:22 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 141184 IP address blocks: 103.155.218.0/23 maxlen: 24 2407:f640::/32 maxlen: 32 2407:f640:600::/48 maxlen: 48 2407:f640:601::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1879 (0x757) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C609A/serialNumber=3FD3895952FD849A97BC112474950284C6868645 Validity Not Before: Oct 26 21:32:22 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=671d5fe5-9b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ce:5a:7d:d1:7b:eb:55:90:13:8d:ed:ea:db: 6a:37:ab:b6:ef:5c:5b:93:4a:16:a0:54:17:a7:92: 88:25:70:32:90:8a:c4:5a:7b:02:95:49:ab:67:3b: e8:a2:33:e7:c4:e5:e3:69:57:b5:8e:64:69:35:8d: fc:bf:57:54:3d:c2:ee:ab:a2:cd:37:1b:a9:42:cc: 60:5f:18:24:9b:7e:57:1b:4a:bd:39:d3:46:bc:b4: 8d:f5:e0:d2:5a:42:a5:38:4c:17:05:60:96:a3:bd: 21:6e:a2:a9:a7:d9:e0:59:96:1e:e0:58:39:d0:39: c0:2e:c7:0f:21:c5:71:4c:04:8e:27:dc:8e:bc:46: 41:26:81:a7:dd:00:a0:a8:49:5a:f7:92:33:88:90: 0f:99:21:d7:f1:16:5f:26:9e:b8:19:8b:5c:81:cd: f8:be:57:a9:e4:ea:52:c0:2b:99:17:4e:4d:e1:c8: ad:5a:cf:30:bc:ac:4a:db:5b:03:0e:2e:96:ad:0c: 66:f4:93:b2:00:14:25:6e:17:62:12:a0:66:a7:b0: f2:56:f8:16:b8:35:2c:2c:47:f5:ab:8a:40:ba:14: b7:9e:e8:20:83:d2:ac:27:a4:74:92:b7:d6:7e:4d: 88:61:70:8d:2c:91:5f:f5:52:9f:d7:5f:09:0c:f6: 3f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0A:46:CA:94:B2:A0:3E:96:84:4F:9B:59:4E:F6:DD:D4:7A:DD:9C X509v3 Authority Key Identifier: keyid:3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/A84FB264FD7011EAA1DF3534C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.155.218.0/23 IPv6: 2407:f640::/32 Signature Algorithm: sha256WithRSAEncryption c6:c1:6d:9d:c2:07:8d:cd:14:ba:af:b5:5a:c6:50:ac:63:70: 7f:86:91:95:c4:a6:3a:bd:28:7f:d1:db:5c:32:06:3b:ba:f5: 90:12:c3:5f:b8:55:cf:2e:06:98:d6:54:17:de:74:8f:b4:ab: 51:75:17:a5:a6:d1:11:a3:f0:95:a8:ec:22:40:7a:31:10:01: 72:79:81:dc:f6:64:b5:26:50:fe:b2:cd:29:2f:51:ea:54:64: bc:04:b1:5d:5e:02:61:9a:bf:51:0c:8a:a8:07:f0:b2:a5:74: 70:59:79:10:49:01:7b:b8:3c:b7:35:17:51:32:07:83:f1:51: ab:f1:01:a5:e2:5c:c2:c5:f1:b1:c2:2f:af:19:31:a8:47:6b: ec:e4:01:33:2c:43:cb:93:6e:a5:fd:56:c9:e1:98:b0:2f:5c: 4e:6b:c3:cc:b6:79:25:fa:dc:7f:6a:c2:92:24:a7:42:29:91: 86:55:b0:c4:ad:67:2c:a2:76:49:ac:06:3a:c4:60:fe:e6:5a: 01:88:13:0c:75:24:07:d5:6a:63:e2:99:f7:21:6c:15:35:c0: c4:30:61:85:88:5a:6d:69:af:34:95:72:a2:03:ab:f9:ed:e4: a8:68:79:5f:fe:cd:11:af:87:f5:3a:0b:db:33:99:f7:77:21: 70:67:f5:d5 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICB1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwOUExMTAvBgNVBAUTKDNGRDM4OTU5NTJGRDg0OUE5N0JDMTEyNDc0OTUwMjg0 QzY4Njg2NDUwHhcNMjQxMDI2MjEzMjIyWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFkNWZlNS05YjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA185afdF761WQE43t6ttqN6u271xbk0oWoFQXp5KIJXAykIrEWnsClUmrZzvo ojPnxOXjaVe1jmRpNY38v1dUPcLuq6LNNxupQsxgXxgkm35XG0q9OdNGvLSN9eDS WkKlOEwXBWCWo70hbqKpp9ngWZYe4Fg50DnALscPIcVxTASOJ9yOvEZBJoGn3QCg qEla95IziJAPmSHX8RZfJp64GYtcgc34vlep5OpSwCuZF05N4citWs8wvKxK21sD Di6WrQxm9JOyABQlbhdiEqBmp7DyVvgWuDUsLEf1q4pAuhS3nuggg9KsJ6R0krfW fk2IYXCNLJFf9VKf118JDPY//QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFIMKRsqU sqA+loRPm1lO9t3Uet2cMB8GA1UdIwQYMBaAFD/TiVlS/YSal7wRJHSVAoTGhoZF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA5QS9BMzdBRTkyNkZE NkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhKcVh2QkVrZEpVQ2hNYUdo a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A5T0pXVkw5aEpxWHZCRWtkSlVDaE1hR2hrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzYwOUEvQTM3QUU5MjZGRDZGMTFFQThFODE1RTMzQzRGOUFFMDIvQTg0RkIyNjRG RDcwMTFFQUExREYzNTM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnm9owDQQCAAIwBwMFACQH9kAwDQYJKoZIhvcNAQELBQAD ggEBAMbBbZ3CB43NFLqvtVrGUKxjcH+GkZXEpjq9KH/R21wyBju69ZASw1+4Vc8u BpjWVBfedI+0q1F1F6Wm0RGj8JWo7CJAejEQAXJ5gdz2ZLUmUP6yzSkvUepUZLwE sV1eAmGav1EMiqgH8LKldHBZeRBJAXu4PLc1F1EyB4PxUavxAaXiXMLF8bHCL68Z MahHa+zkATMsQ8uTbqX9VsnhmLAvXE5rw8y2eSX63H9qwpIkp0IpkYZVsMStZyyi dkmsBjrEYP7mWgGIEwx1JAfVamPimfchbBU1wMQwYYWIWm1przSVcqIDq/nt5Kho eV/+zRGvh/U6C9szmfd3IXBn9dU= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:39 2024 by rpki-client on console-ams.rpki-client.org