$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa File: E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa (raw, json) Hash identifier: 0tzqO1CmigPSpz/MhhBtA7Y+BKnfbYyMKy+tv5IkgiA= Subject key identifier: 85:72:83:DC:19:DD:8C:91:4C:23:16:A1:2C:64:E0:DF:7A:41:F7:5F Certificate issuer: /CN=A91DA0AA/serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD Certificate serial: F9 Authority key identifier: ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa Signing time: Sun 01 Sep 2024 12:37:10 +0000 ROA not before: Sun 01 Sep 2024 12:37:10 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 136587 IP address blocks: 103.91.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA0AA/serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD Validity Not Before: Sep 1 12:37:10 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66d45ff5-f15b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:27:e5:86:c5:f1:fc:88:af:9f:be:b7:36:42: 53:ce:26:af:4d:bd:a3:95:7d:89:23:ac:f5:4e:55: ff:3b:d4:12:0c:7a:67:52:9b:34:11:63:78:23:5d: 86:45:6c:f4:54:f4:c5:b5:dc:d6:64:83:2c:83:5e: c1:20:58:52:4a:2d:3a:91:3b:02:02:5a:d8:83:3c: 71:24:d7:ef:11:73:a9:15:3e:6c:9a:e0:28:26:c9: c2:4c:54:8b:e1:45:36:68:3a:17:06:e2:8e:59:6a: da:27:97:a5:01:be:11:8b:70:a0:ff:b7:59:4f:27: ed:b8:58:17:b2:f1:4e:78:df:8c:a8:e9:d5:87:74: 76:f7:97:fe:95:50:5e:42:27:3c:4e:62:39:1e:9a: 5d:f0:66:9b:c1:4e:34:91:55:a5:ab:4e:72:e2:75: ca:08:03:e4:10:4e:78:4e:04:b7:17:28:d1:25:a9: fe:6a:0b:cc:33:b1:51:80:19:4f:ec:9a:b4:a5:0d: 36:16:50:b1:9c:60:a3:38:62:58:41:7d:e4:84:a4: 7f:77:f6:39:99:ae:74:d6:8a:30:fd:90:28:c1:94: 62:a7:63:bb:e1:a5:a4:5c:ed:07:f0:5c:08:e4:10: 6f:ce:fa:fd:95:0b:f7:73:01:6e:27:57:25:30:c7: 60:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:72:83:DC:19:DD:8C:91:4C:23:16:A1:2C:64:E0:DF:7A:41:F7:5F X509v3 Authority Key Identifier: keyid:ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.91.115.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:3b:3e:52:b2:db:e3:83:bf:5a:0a:cf:c9:3c:64:ab:6f:3a: 0c:22:e6:47:38:cf:2e:7f:45:c0:70:bd:63:9d:5e:d6:c6:4d: 11:dd:51:95:08:51:59:97:ad:74:2f:17:9e:6c:85:6c:af:26: 4b:b2:97:d6:35:95:e9:7a:ac:ed:f1:c2:0a:0a:a1:a1:8b:33: 29:2e:13:4d:6b:c7:f4:40:95:d7:7e:cd:a1:f7:4d:20:70:ca: ac:27:c7:00:b4:01:79:dc:47:f2:57:94:75:3b:e2:2a:51:b4: c9:fa:ad:8b:00:2c:f5:9a:72:4d:3d:1d:36:81:15:2b:0c:c9: 01:54:ea:de:09:28:c7:fc:99:17:70:6b:4b:e7:5f:c4:9d:cf: 15:c9:5e:b9:06:c8:d4:32:dc:97:d8:88:f4:3a:0c:c9:53:c4: 8e:3f:41:15:98:7e:0d:60:fa:13:1c:0d:03:76:06:25:28:96: f8:4b:5c:20:36:b2:d2:5e:a9:d8:f3:f9:0b:a1:58:e3:84:00: ef:2e:3f:c1:4a:70:30:e2:b3:5d:35:76:a0:ca:fc:12:5a:a3: 6e:c1:fe:c5:76:c1:1c:cb:25:e0:b5:f0:71:27:33:10:64:c0: 58:5d:9a:2d:aa:5d:04:3d:08:0f:25:a2:64:f7:ee:b0:b6:3a: ac:1e:9c:1b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEwQUExMTAvBgNVBAUTKEVEOEY1RDZDOUJGQzE0OEY3QUJCNzA4QzUyOTFEMzg0 NzgxQzYxRkQwHhcNMjQwOTAxMTIzNzEwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ0NWZmNS1mMTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAliflhsXx/Iivn763NkJTziavTb2jlX2JI6z1TlX/O9QSDHpnUps0EWN4I12G RWz0VPTFtdzWZIMsg17BIFhSSi06kTsCAlrYgzxxJNfvEXOpFT5smuAoJsnCTFSL 4UU2aDoXBuKOWWraJ5elAb4Ri3Cg/7dZTyftuFgXsvFOeN+MqOnVh3R295f+lVBe Qic8TmI5Hppd8GabwU40kVWlq05y4nXKCAPkEE54TgS3FyjRJan+agvMM7FRgBlP 7Jq0pQ02FlCxnGCjOGJYQX3khKR/d/Y5ma501oow/ZAowZRip2O74aWkXO0H8FwI 5BBvzvr9lQv3cwFuJ1clMMdgvQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIVyg9wZ 3YyRTCMWoSxk4N96QfdfMB8GA1UdIwQYMBaAFO2PXWyb/BSPertwjFKR04R4HGH9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTBBQS84MkJCQjU1MjAw M0QxMUVFOTYwOEYxNDdDNEY5QUUwMi83WTlkYkp2OEZJOTZ1M0NNVXBIVGhIZ2NZ ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZOWRiSnY4Rkk5NnUzQ01VcEhUaEhnY1lmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REEwQUEvODJCQkI1NTIwMDNEMTFFRTk2MDhGMTQ3QzRGOUFFMDIvRTdCNkM0REE2 ODVFMTFFRkI3N0JERTBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnW3MwDQYJKoZIhvcNAQELBQADggEBABw7PlKy2+ODv1oK z8k8ZKtvOgwi5kc4zy5/RcBwvWOdXtbGTRHdUZUIUVmXrXQvF55shWyvJkuyl9Y1 lel6rO3xwgoKoaGLMykuE01rx/RAldd+zaH3TSBwyqwnxwC0AXncR/JXlHU74ipR tMn6rYsALPWack09HTaBFSsMyQFU6t4JKMf8mRdwa0vnX8SdzxXJXrkGyNQy3JfY iPQ6DMlTxI4/QRWYfg1g+hMcDQN2BiUolvhLXCA2stJeqdjz+QuhWOOEAO8uP8FK cDDis101dqDK/BJao27B/sV2wRzLJeC18HEnMxBkwFhdmi2qXQQ9CA8lomT37rC2 OqwenBs= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:53 2024 by rpki-client on console-ams.rpki-client.org