$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/6714424C3C9111EA9416CA78C4F9AE02.roa File: 6714424C3C9111EA9416CA78C4F9AE02.roa (raw, json) Hash identifier: YQKzakVZRwkEoSkOxzmifYwaHBBE1uM/hdsf+7QDJq4= Subject key identifier: 3B:E6:94:54:D5:A9:0C:94:D3:F4:C6:50:E7:47:BC:57:70:57:3D:79 Certificate issuer: /CN=A91C72B1/serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Certificate serial: 0CAA Authority key identifier: EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/6714424C3C9111EA9416CA78C4F9AE02.roa Signing time: Sat 02 Nov 2024 18:27:18 +0000 ROA not before: Sat 02 Nov 2024 18:27:18 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 139675 IP address blocks: 103.143.126.0/23 maxlen: 23 103.143.126.0/24 maxlen: 24 103.143.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3242 (0xcaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C72B1/serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Validity Not Before: Nov 2 18:27:18 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67266f06-cc5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:db:ee:64:9f:36:ae:8d:db:b7:87:42:f3:f7: 13:57:b9:24:c0:e8:e7:9e:1b:e4:69:df:87:c3:fb: 77:50:43:f5:1c:49:ad:b1:52:6a:fb:65:eb:34:7e: ad:70:63:cd:91:f7:21:bf:71:46:c4:c2:dc:2a:ba: 40:42:c9:36:4c:45:ad:0b:6b:ca:3f:d8:15:ee:d3: 56:45:7c:e8:aa:bd:ec:64:ed:fd:9c:58:d5:2d:0f: 5d:22:0d:f8:ae:cc:2c:4b:df:b2:1d:8c:a5:2a:81: 37:ae:18:ad:af:a1:db:4c:5b:8a:d7:6b:81:1f:9f: a3:67:42:f0:6b:58:99:23:b9:b4:9e:f1:3a:f1:8e: f5:65:74:12:25:f3:2e:00:9a:be:c6:54:ac:d1:c4: e5:eb:83:9b:c7:92:c5:86:8d:f7:54:a2:90:7c:5b: c5:7e:2c:16:e9:c1:6b:d8:85:e2:d3:60:03:28:ea: 7d:dd:a7:32:05:02:99:32:b9:2f:bc:5c:cd:13:f5: 91:c7:66:ba:75:de:81:a2:8c:ed:21:ab:3e:5a:07: 6f:e9:a0:b5:d6:74:a7:ea:33:e1:74:e0:86:88:19: 92:1f:79:66:be:92:8f:87:94:ba:02:e2:8f:1c:bb: d7:33:ce:d9:cb:1e:a4:a4:ab:6e:3c:00:6f:2e:df: 2e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E6:94:54:D5:A9:0C:94:D3:F4:C6:50:E7:47:BC:57:70:57:3D:79 X509v3 Authority Key Identifier: keyid:EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/6714424C3C9111EA9416CA78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.143.126.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:d3:7a:f1:f5:04:21:30:cd:3b:2a:f8:ad:9f:11:2b:c2:b4: 4c:4c:3a:d0:9c:5a:42:aa:60:4e:2c:21:25:15:c4:bb:8a:df: ad:6c:18:a7:dd:ba:cc:52:3e:80:26:cc:5f:76:f8:51:e9:0f: aa:74:4f:cb:51:cb:57:b9:ac:db:da:1a:a8:d3:b9:88:1f:cd: 7b:44:a6:4a:8d:be:13:37:7a:71:47:c5:96:91:2c:5a:65:66: fa:8c:db:4c:b3:8c:39:e1:7d:af:93:82:62:cf:52:c1:21:36: 72:ba:e8:76:1d:9d:0e:9f:c3:2a:c7:fd:33:97:e7:a4:89:78: c0:c4:62:87:b5:e0:e4:0b:58:5c:16:4e:6d:e1:02:c8:d7:dc: 9e:70:21:5e:d9:cb:f2:49:67:1b:73:2e:ea:f2:35:08:f3:93: 79:9c:d2:a6:85:1e:c5:ce:d5:ac:8e:8e:34:67:fd:a8:9a:12: a4:cd:f7:54:ed:9f:a1:6d:d0:f2:ce:6e:01:7d:bd:0d:ee:85: 77:0a:1b:78:5a:7d:ee:28:fa:73:4d:35:e2:97:af:43:04:1e: b3:23:c7:8f:79:1d:6c:08:93:36:99:1e:01:de:c3:76:44:a2: a8:0c:7c:25:90:0e:8c:e2:23:17:5a:f3:f6:8c:0a:bc:66:a1: 61:20:fb:1d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyQjExMTAvBgNVBAUTKEVCOEIwQUQyQzA3NjYyMDg1MkNCQzM3ODkwRTY0QUQ0 MDZCNDg5RTgwHhcNMjQxMTAyMTgyNzE4WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzI2NmYwNi1jYzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1tvuZJ82ro3bt4dC8/cTV7kkwOjnnhvkad+Hw/t3UEP1HEmtsVJq+2XrNH6t cGPNkfchv3FGxMLcKrpAQsk2TEWtC2vKP9gV7tNWRXzoqr3sZO39nFjVLQ9dIg34 rswsS9+yHYylKoE3rhitr6HbTFuK12uBH5+jZ0Lwa1iZI7m0nvE68Y71ZXQSJfMu AJq+xlSs0cTl64Obx5LFho33VKKQfFvFfiwW6cFr2IXi02ADKOp93acyBQKZMrkv vFzNE/WRx2a6dd6BooztIas+Wgdv6aC11nSn6jPhdOCGiBmSH3lmvpKPh5S6AuKP HLvXM87Zyx6kpKtuPABvLt8uRwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDvmlFTV qQyU0/TGUOdHvFdwVz15MB8GA1UdIwQYMBaAFOuLCtLAdmIIUsvDeJDmStQGtIno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJCMS8yQTQ1Rjk4MERF QzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMllnaFN5OE40a09aSzFBYTBp ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0c0swc0IyWWdoU3k4TjRrT1pLMUFhMGllZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzcyQjEvMkE0NUY5ODBERUM5MTFFOUFBQTdFQzMzQzRGOUFFMDIvNjcxNDQyNEMz QzkxMTFFQTk0MTZDQTc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnj34wDQYJKoZIhvcNAQELBQADggEBAIvTevH1BCEwzTsq +K2fESvCtExMOtCcWkKqYE4sISUVxLuK361sGKfdusxSPoAmzF92+FHpD6p0T8tR y1e5rNvaGqjTuYgfzXtEpkqNvhM3enFHxZaRLFplZvqM20yzjDnhfa+TgmLPUsEh NnK66HYdnQ6fwyrH/TOX56SJeMDEYoe14OQLWFwWTm3hAsjX3J5wIV7Zy/JJZxtz LuryNQjzk3mc0qaFHsXO1ayOjjRn/aiaEqTN91Ttn6Ft0PLObgF9vQ3uhXcKG3ha fe4o+nNNNeKXr0MEHrMjx495HWwIkzaZHgHew3ZEoqgMfCWQDoziIxda8/aMCrxm oWEg+x0= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:17 2024 by rpki-client on console-ams.rpki-client.org