$ rpki-client -vvf rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/46F57CF8137B11EBA3B47E37C4F9AE02.roa File: 46F57CF8137B11EBA3B47E37C4F9AE02.roa (raw, json) Hash identifier: 2qnnF6MVOAPWKTwVx6xcANvt7+ipRsuxDi1zcVsoM90= Subject key identifier: 9B:21:00:84:C3:44:A2:63:FF:1F:1A:BA:2B:DE:D1:3D:3E:78:13:1F Certificate issuer: /CN=A91E39B4/serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12 Certificate serial: 0AD4 Authority key identifier: 97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/46F57CF8137B11EBA3B47E37C4F9AE02.roa Signing time: Sat 02 Nov 2024 19:28:13 +0000 ROA not before: Sat 02 Nov 2024 19:28:13 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 138320 IP address blocks: 103.122.252.0/22 maxlen: 22 103.122.252.0/23 maxlen: 23 103.122.252.0/24 maxlen: 24 103.122.253.0/24 maxlen: 24 103.122.254.0/23 maxlen: 23 103.122.254.0/24 maxlen: 24 103.122.255.0/24 maxlen: 24 2403:98c0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2772 (0xad4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E39B4/serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12 Validity Not Before: Nov 2 19:28:13 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67267d4d-a9bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7e:98:f2:49:7d:f0:dc:03:99:c9:51:4c:95: 8d:37:86:ee:7e:09:43:ad:28:4f:31:76:e7:be:4e: 2d:37:5b:08:b3:b5:df:19:fb:83:e8:fc:aa:ac:43: 9d:d9:3a:99:1e:4f:00:57:ca:7d:4f:f5:2d:91:9f: e2:c5:dd:c2:a7:ae:de:0c:3c:aa:3e:bb:3d:b0:27: 2a:23:3c:66:f1:4b:f9:a0:23:a6:c5:ab:c7:c0:00: 15:9c:ab:81:d9:f1:09:ca:4d:ee:cb:f7:80:8d:66: 79:9c:ea:55:86:47:1c:cf:f2:6f:a3:1e:86:9e:01: 62:45:7f:52:a0:18:ab:c0:d5:e7:d0:1a:7a:c1:0a: 05:30:57:d1:c7:76:c9:ce:fa:b2:d4:c6:ab:62:12: 61:6c:52:a8:71:23:dd:66:21:59:cd:a1:49:7b:9c: 0c:12:f2:5b:5b:58:27:3f:6b:64:5e:42:af:06:e0: d3:2e:31:c0:6e:1b:70:47:71:ac:6e:ab:7c:60:8a: bb:07:e9:a3:db:bd:72:3b:bc:d3:5e:9b:40:48:d6: a3:53:c8:ee:f1:06:3e:8e:20:86:d0:dd:36:0d:7b: 2f:27:70:50:8a:fd:34:e7:e3:e3:8d:dd:f6:4b:df: 2c:59:1b:dc:35:80:73:4b:2d:b5:48:b9:87:61:ab: 9b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:21:00:84:C3:44:A2:63:FF:1F:1A:BA:2B:DE:D1:3D:3E:78:13:1F X509v3 Authority Key Identifier: keyid:97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/46F57CF8137B11EBA3B47E37C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.122.252.0/22 IPv6: 2403:98c0::/32 Signature Algorithm: sha256WithRSAEncryption 98:de:b5:8f:60:51:f1:26:4a:1f:58:06:b9:39:da:48:53:18: d9:81:e9:bc:73:c3:ec:aa:6f:14:6d:fc:25:57:6a:c9:19:a0: 2d:8e:38:db:9a:b6:77:29:b5:3c:79:02:a6:97:0a:94:17:bd: 74:00:29:9c:72:46:67:7d:a7:67:32:1a:dc:d3:ce:1c:74:c3: 78:8d:a3:f5:f4:a9:98:b4:3e:bc:4c:ba:b4:29:dc:fb:6b:60: ff:ee:62:96:08:f7:74:5e:4f:39:3f:10:36:35:a8:6a:74:90: 3d:2e:ac:89:3c:49:13:82:28:35:b9:94:f0:43:da:fb:65:e2: 64:c1:4b:d5:57:ea:63:02:c4:fe:70:c6:da:8d:1a:70:09:4e: ed:79:ef:3d:6a:e8:b3:4f:a0:10:02:10:3f:43:80:e6:e6:0d: 9f:f8:1a:8a:62:9f:c8:1e:95:4e:02:a8:a4:85:aa:60:32:7a: 6b:29:2c:6b:26:91:b2:3c:59:75:ba:a8:2a:49:d9:aa:4f:e6: 59:6e:74:1e:f4:7f:e5:48:b6:02:cf:89:12:5c:0a:37:63:92: e9:e8:e9:ad:02:c3:50:c6:b8:ae:d8:c1:4d:16:1f:2b:89:54: 11:9e:19:e8:a7:de:15:45:8a:5e:11:fd:ea:0a:73:26:1c:8f: dc:3d:05:74 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM5QjQxMTAvBgNVBAUTKDk3QjNERDJBQjNDODlCQzhBMkJCQzFEQjgwM0JDRTY4 RUFBNUFBMTIwHhcNMjQxMTAyMTkyODEzWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzI2N2Q0ZC1hOWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnH6Y8kl98NwDmclRTJWNN4bufglDrShPMXbnvk4tN1sIs7XfGfuD6PyqrEOd 2TqZHk8AV8p9T/UtkZ/ixd3Cp67eDDyqPrs9sCcqIzxm8Uv5oCOmxavHwAAVnKuB 2fEJyk3uy/eAjWZ5nOpVhkccz/Jvox6GngFiRX9SoBirwNXn0Bp6wQoFMFfRx3bJ zvqy1MarYhJhbFKocSPdZiFZzaFJe5wMEvJbW1gnP2tkXkKvBuDTLjHAbhtwR3Gs bqt8YIq7B+mj271yO7zTXptASNajU8ju8QY+jiCG0N02DXsvJ3BQiv005+Pjjd32 S98sWRvcNYBzSy21SLmHYaubSQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJshAITD RKJj/x8auive0T0+eBMfMB8GA1UdIwQYMBaAFJez3SqzyJvIorvB24A7zmjqpaoS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzlCNC8xRUUxODI5RTNE QTExMUVBOEI2N0U5NEZDNEY5QUUwMi9sN1BkS3JQSW04aWl1OEhiZ0R2T2FPcWxx aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w3UGRLclBJbThpaXU4SGJnRHZPYU9xbHFoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTM5QjQvMUVFMTgyOUUzREExMTFFQThCNjdFOTRGQzRGOUFFMDIvNDZGNTdDRjgx MzdCMTFFQkEzQjQ3RTM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnevwwDQQCAAIwBwMFACQDmMAwDQYJKoZIhvcNAQELBQAD ggEBAJjetY9gUfEmSh9YBrk52khTGNmB6bxzw+yqbxRt/CVXaskZoC2OONuatncp tTx5AqaXCpQXvXQAKZxyRmd9p2cyGtzTzhx0w3iNo/X0qZi0PrxMurQp3PtrYP/u YpYI93ReTzk/EDY1qGp0kD0urIk8SROCKDW5lPBD2vtl4mTBS9VX6mMCxP5wxtqN GnAJTu157z1q6LNPoBACED9DgObmDZ/4Gopin8gelU4CqKSFqmAyemspLGsmkbI8 WXW6qCpJ2apP5lludB70f+VItgLPiRJcCjdjkuno6a0Cw1DGuK7YwU0WHyuJVBGe Gein3hVFil4R/eoKcyYcj9w9BXQ= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:48 2024 by rpki-client on console-ams.rpki-client.org