$ rpki-client -vvf rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/1752A952B44711EDB021F350C4F9AE02.roa File: 1752A952B44711EDB021F350C4F9AE02.roa (raw, json) Hash identifier: gqGRbTS2iSh442924+yMqkcDFGOlblXuMkvDc/ZJRwc= Subject key identifier: 5C:27:98:0A:00:94:14:CD:CF:05:D8:86:D3:09:FA:0E:D2:28:28:35 Certificate issuer: /CN=A91D98FC/serialNumber=B399B4ADA07501A829D56F21DA8EB5DC32034A56 Certificate serial: 0C49 Authority key identifier: B3:99:B4:AD:A0:75:01:A8:29:D5:6F:21:DA:8E:B5:DC:32:03:4A:56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5m0raB1Aagp1W8h2o613DIDSlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/1752A952B44711EDB021F350C4F9AE02.roa Signing time: Fri 22 Nov 2024 18:36:59 +0000 ROA not before: Fri 22 Nov 2024 18:36:59 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 137045 IP address blocks: 103.102.246.0/24 maxlen: 24 103.102.247.0/24 maxlen: 24 2001:df1:4d80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.crl rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5m0raB1Aagp1W8h2o613DIDSlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3145 (0xc49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D98FC/serialNumber=B399B4ADA07501A829D56F21DA8EB5DC32034A56 Validity Not Before: Nov 22 18:36:59 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6740cf4a-7124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bb:cc:9b:e6:cc:d3:8a:47:eb:e5:94:3f:b4: 5b:c8:24:69:4a:3d:d3:9b:5a:a7:9e:a5:89:e9:f8: 7d:43:0c:8b:6b:05:6f:68:bf:50:73:0d:75:93:4b: 0f:2c:c7:80:d4:c6:d4:48:ce:92:76:7f:64:1a:57: cc:1b:d7:a8:39:17:91:c8:d0:55:e4:ac:0c:81:d9: 50:96:14:aa:af:8f:99:b5:c8:e9:4b:78:ac:a8:cb: 0a:22:79:95:0e:f7:11:b4:46:bd:b6:52:42:79:eb: 57:58:53:d5:d5:5e:7d:83:a3:0e:42:16:b3:68:e6: 24:e8:9e:9b:db:19:cc:ee:40:48:04:96:5f:c2:3c: 0b:e6:c0:5c:ec:cd:f3:a5:47:9a:50:61:2b:6c:40: 7a:38:7a:00:19:78:59:0a:7b:16:92:be:c3:d6:d3: a0:f1:b0:29:11:5c:7a:27:57:35:94:0a:4b:30:97: 62:e4:53:1a:f1:05:9e:dd:0b:05:da:4e:30:23:a0: e4:d0:26:87:9c:c9:68:9d:04:36:36:6f:3c:9e:4b: c2:c6:35:17:fb:04:84:3b:77:02:cd:e6:11:33:16: 80:a9:33:bf:e1:a1:37:60:bc:59:f2:de:b0:30:93: cb:c5:6b:64:f5:a4:a7:51:3f:22:fb:1d:f0:22:c4: c9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:27:98:0A:00:94:14:CD:CF:05:D8:86:D3:09:FA:0E:D2:28:28:35 X509v3 Authority Key Identifier: keyid:B3:99:B4:AD:A0:75:01:A8:29:D5:6F:21:DA:8E:B5:DC:32:03:4A:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5m0raB1Aagp1W8h2o613DIDSlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/1752A952B44711EDB021F350C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.102.246.0/23 IPv6: 2001:df1:4d80::/48 Signature Algorithm: sha256WithRSAEncryption 32:8d:f3:1b:c5:60:34:bb:81:93:fa:9c:ca:9d:cc:84:5d:92: b4:0b:fa:46:6e:4e:39:d1:ca:df:a6:4a:b1:10:ad:5c:75:cd: 9f:d7:74:a7:01:58:1e:b6:86:0a:f5:59:3a:7d:e6:ae:16:68: c4:18:61:e1:62:7e:22:4b:a5:86:16:85:75:22:d2:91:9a:ad: 24:02:14:c9:d8:08:9f:39:46:2f:fb:fa:79:c4:82:9f:e5:f9: 23:6d:4f:64:45:f6:57:04:fd:68:49:cd:2b:57:bb:2e:38:33: 8c:75:1b:c3:8b:3e:be:27:a2:4c:7e:ca:12:f7:75:a3:a6:9d: 7f:66:fb:f9:ee:bb:5b:a0:ce:16:e2:f9:83:f2:13:90:f3:4c: 11:dc:00:34:96:20:ef:ea:b4:94:10:7e:27:f9:b3:04:3e:ed: 79:be:5a:33:ac:1f:ce:00:5e:a5:fc:98:f1:8d:c8:ce:70:aa: b2:03:e3:8b:f9:4d:4f:6a:b1:96:b8:e7:0c:7f:3c:5c:12:d4: 6f:e8:1f:8d:db:1a:78:7f:7a:db:f5:3b:62:e5:84:77:f0:5e: c9:0d:6b:39:6d:50:63:5c:fe:1c:02:a9:42:39:6a:52:38:94: 3d:96:e3:65:e7:0e:cd:1d:08:23:60:9d:2f:cc:fc:09:12:6a: 7d:19:04:00 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk4RkMxMTAvBgNVBAUTKEIzOTlCNEFEQTA3NTAxQTgyOUQ1NkYyMURBOEVCNURD MzIwMzRBNTYwHhcNMjQxMTIyMTgzNjU5WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQwY2Y0YS03MTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bvMm+bM04pH6+WUP7RbyCRpSj3Tm1qnnqWJ6fh9QwyLawVvaL9Qcw11k0sP LMeA1MbUSM6Sdn9kGlfMG9eoOReRyNBV5KwMgdlQlhSqr4+ZtcjpS3isqMsKInmV DvcRtEa9tlJCeetXWFPV1V59g6MOQhazaOYk6J6b2xnM7kBIBJZfwjwL5sBc7M3z pUeaUGErbEB6OHoAGXhZCnsWkr7D1tOg8bApEVx6J1c1lApLMJdi5FMa8QWe3QsF 2k4wI6Dk0CaHnMlonQQ2Nm88nkvCxjUX+wSEO3cCzeYRMxaAqTO/4aE3YLxZ8t6w MJPLxWtk9aSnUT8i+x3wIsTJAQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFFwnmAoA lBTNzwXYhtMJ+g7SKCg1MB8GA1UdIwQYMBaAFLOZtK2gdQGoKdVvIdqOtdwyA0pW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOThGQy8xQzg5OUUyNkY0 RUMxMUU5OEZCRTlCMEZDNEY5QUUwMi9zNW0wcmFCMUFhZ3AxVzhoMm82MTNESURT bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M1bTByYUIxQWFncDFXOGgybzYxM0RJRFNsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDk4RkMvMUM4OTlFMjZGNEVDMTFFOThGQkU5QjBGQzRGOUFFMDIvMTc1MkE5NTJC NDQ3MTFFREIwMjFGMzUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnZvYwDwQCAAIwCQMHACABDfFNgDANBgkqhkiG9w0BAQsF AAOCAQEAMo3zG8VgNLuBk/qcyp3MhF2StAv6Rm5OOdHK36ZKsRCtXHXNn9d0pwFY HraGCvVZOn3mrhZoxBhh4WJ+IkulhhaFdSLSkZqtJAIUydgInzlGL/v6ecSCn+X5 I21PZEX2VwT9aEnNK1e7LjgzjHUbw4s+vieiTH7KEvd1o6adf2b7+e67W6DOFuL5 g/ITkPNMEdwANJYg7+q0lBB+J/mzBD7teb5aM6wfzgBepfyY8Y3IznCqsgPji/lN T2qxlrjnDH88XBLUb+gfjdsaeH962/U7YuWEd/BeyQ1rOW1QY1z+HAKpQjlqUjiU PZbjZecOzR0II2CdL8z8CRJqfRkEAA== -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:18 2024 by rpki-client on console-ams.rpki-client.org