$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/7ABCBB70AFFE11ECA52DBA5DC4F9AE02.roa File: 7ABCBB70AFFE11ECA52DBA5DC4F9AE02.roa (raw, json) Hash identifier: lDraqThqAp2VTAeBcGzfKiHZ4mgdJ9Pve9y5JAjucic= Subject key identifier: 99:75:CB:73:74:EC:1D:9F:66:28:BB:1B:8F:97:2B:E4:7D:26:CF:97 Certificate issuer: /CN=A91E6038/serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Certificate serial: 0308 Authority key identifier: 7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/7ABCBB70AFFE11ECA52DBA5DC4F9AE02.roa Signing time: Fri 15 Nov 2024 00:43:41 +0000 ROA not before: Fri 15 Nov 2024 00:43:41 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 137034 IP address blocks: 103.102.204.0/22 maxlen: 22 103.102.204.0/24 maxlen: 24 103.102.205.0/24 maxlen: 24 103.102.206.0/24 maxlen: 24 103.102.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 00:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 776 (0x308) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6038/serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Validity Not Before: Nov 15 00:43:41 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6736993d-4763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:84:04:9d:63:c4:62:b3:a4:95:bc:fd:dc:45: 70:b5:ed:4f:ee:8f:cc:5b:b8:67:0c:7a:75:77:af: 5d:31:16:6e:91:05:31:40:3a:63:7d:99:fd:ce:2a: 95:88:67:32:98:2e:85:c5:79:e0:36:a4:09:85:8c: a1:aa:79:2a:9c:c6:c1:2b:38:97:e2:0a:3e:f2:46: ff:c1:07:73:a7:29:61:34:ce:d5:3b:71:a7:18:bc: 58:8e:7b:4a:44:97:ec:8d:d2:b6:fa:0f:cd:47:1d: 5e:58:c2:80:a9:3c:ca:e1:b5:8d:3e:43:b4:4f:d9: 9c:97:80:f1:48:ab:5b:d5:d5:d8:21:bc:f6:ed:c5: 01:76:bb:6c:d1:0b:c7:86:aa:56:e1:ac:79:59:87: 08:dd:2a:c2:6d:92:31:08:20:f9:be:f4:e1:ee:9b: 4c:f5:18:81:87:a5:48:11:0a:1b:a9:d1:74:19:59: e5:d6:13:99:cf:08:2f:5a:e3:79:ca:b5:ad:a8:3b: b3:a8:a1:3f:82:da:8f:22:dc:d5:89:30:8b:35:7e: 75:b8:51:5f:53:df:ba:84:9d:5f:9d:eb:cc:90:2a: 35:99:e0:68:13:fd:68:99:03:6e:bc:d3:ef:5c:45: 0d:ec:24:27:9d:f5:18:f6:0b:f9:d2:4c:50:c0:80: d9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:75:CB:73:74:EC:1D:9F:66:28:BB:1B:8F:97:2B:E4:7D:26:CF:97 X509v3 Authority Key Identifier: keyid:7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/7ABCBB70AFFE11ECA52DBA5DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.102.204.0/22 Signature Algorithm: sha256WithRSAEncryption 43:bc:da:b8:ea:59:f3:89:71:c7:07:d1:fa:d5:48:cb:b9:0b: 60:a6:6f:5f:26:7d:f8:f7:8c:46:40:35:96:17:40:a9:87:81: bf:4c:80:f1:bd:62:fc:a4:c5:b2:e0:66:45:ff:6c:e3:cc:76: 4c:92:55:b6:f1:26:ce:68:4d:d1:17:ef:55:50:c7:b0:0b:f8: e9:65:81:ec:df:d4:02:f0:5e:b9:57:ec:c5:a6:6d:7f:1e:43: 10:68:f3:40:56:9b:63:6b:4b:ee:40:5e:1f:f7:d7:e0:36:24: d4:e9:d7:36:39:fd:2e:0f:95:26:db:b3:d7:6a:ba:42:1f:22: d6:49:23:e3:67:8c:72:28:b3:fc:cc:cd:4a:97:70:34:6e:32: 6a:f9:c0:69:ff:34:61:cd:2a:b5:11:08:6d:1e:ad:06:48:cb: ee:d1:a9:29:50:4b:de:51:d9:d7:29:6c:c8:62:03:5e:26:19: 4a:a2:50:af:fa:9d:d2:b4:2d:dd:cc:a8:40:08:af:34:7d:74: 4f:f7:6f:17:4a:ef:5b:23:f9:51:0c:09:5e:b7:90:b8:ca:9c: ef:8a:46:ba:73:d6:50:50:72:19:09:2b:e6:0b:e1:17:59:9e: 93:a1:05:e3:30:ae:4f:0b:52:84:f0:19:ff:05:f5:ea:d1:11: a6:1d:a9:fa -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYwMzgxMTAvBgNVBAUTKDdBOThBQjY5QjcyQkFBQzY2NjBFNTRERDFDNkQ4QTA2 MkUyQ0QyRkUwHhcNMjQxMTE1MDA0MzQxWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzM2OTkzZC00NzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1IQEnWPEYrOklbz93EVwte1P7o/MW7hnDHp1d69dMRZukQUxQDpjfZn9ziqV iGcymC6FxXngNqQJhYyhqnkqnMbBKziX4go+8kb/wQdzpylhNM7VO3GnGLxYjntK RJfsjdK2+g/NRx1eWMKAqTzK4bWNPkO0T9mcl4DxSKtb1dXYIbz27cUBdrts0QvH hqpW4ax5WYcI3SrCbZIxCCD5vvTh7ptM9RiBh6VIEQobqdF0GVnl1hOZzwgvWuN5 yrWtqDuzqKE/gtqPItzViTCLNX51uFFfU9+6hJ1fnevMkCo1meBoE/1omQNuvNPv XEUN7CQnnfUY9gv50kxQwIDZjwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJl1y3N0 7B2fZii7G4+XK+R9Js+XMB8GA1UdIwQYMBaAFHqYq2m3K6rGZg5U3RxtigYuLNL+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjAzOC85MUUwQzg1MkFG RkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFzWm1EbFRkSEcyS0JpNHMw djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwaXJhYmNycXNabURsVGRIRzJLQmk0czB2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYwMzgvOTFFMEM4NTJBRkZDMTFFQ0IwQzM4ODVEQzRGOUFFMDIvN0FCQ0JCNzBB RkZFMTFFQ0E1MkRCQTVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnZswwDQYJKoZIhvcNAQELBQADggEBAEO82rjqWfOJcccH 0frVSMu5C2Cmb18mffj3jEZANZYXQKmHgb9MgPG9YvykxbLgZkX/bOPMdkySVbbx Js5oTdEX71VQx7AL+Ollgezf1ALwXrlX7MWmbX8eQxBo80BWm2NrS+5AXh/31+A2 JNTp1zY5/S4PlSbbs9dqukIfItZJI+NnjHIos/zMzUqXcDRuMmr5wGn/NGHNKrUR CG0erQZIy+7RqSlQS95R2dcpbMhiA14mGUqiUK/6ndK0Ld3MqEAIrzR9dE/3bxdK 71sj+VEMCV63kLjKnO+KRrpz1lBQchkJK+YL4RdZnpOhBeMwrk8LUoTwGf8F9erR EaYdqfo= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:56 2024 by rpki-client on console-ams.rpki-client.org