$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/A8086732B6DA11EBB7B67954C4F9AE02.roa File: A8086732B6DA11EBB7B67954C4F9AE02.roa (raw, json) Hash identifier: ldWjzJ4l8BsIeHREFrvU51ElQcTYEq5MkB9HbZsC/bI= Subject key identifier: 48:A0:79:D6:77:74:BC:68:A9:A6:1F:18:C7:A7:81:37:EE:54:09:90 Certificate issuer: /CN=A91E9DF8/serialNumber=95068BB30ABC7E007FD8387E4DE0A83EFAADD472 Certificate serial: 057C Authority key identifier: 95:06:8B:B3:0A:BC:7E:00:7F:D8:38:7E:4D:E0:A8:3E:FA:AD:D4:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/A8086732B6DA11EBB7B67954C4F9AE02.roa Signing time: Wed 06 Nov 2024 23:02:14 +0000 ROA not before: Wed 06 Nov 2024 23:02:14 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 136975 IP address blocks: 103.101.16.0/22 maxlen: 22 103.101.16.0/24 maxlen: 24 103.101.17.0/24 maxlen: 24 103.101.18.0/24 maxlen: 24 103.101.19.0/24 maxlen: 24 2403:3240::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1404 (0x57c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9DF8/serialNumber=95068BB30ABC7E007FD8387E4DE0A83EFAADD472 Validity Not Before: Nov 6 23:02:14 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=672bf575-ac8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:dd:92:ac:26:c8:b5:ba:d1:d2:18:a3:80:4c: 2d:c3:dd:a2:41:de:3b:1d:c7:f1:d9:16:fe:16:63: 55:d6:bf:4f:1c:34:5f:51:0e:ea:42:88:bf:14:33: 93:7f:35:5b:c6:33:9e:60:87:25:e8:3d:23:27:59: c6:e9:c6:75:a5:81:c1:79:84:37:d6:b9:2f:82:38: 03:cb:e6:4d:f7:6c:4d:51:dd:d0:cc:da:a9:8e:aa: 8b:a0:c3:49:50:ce:7c:9b:c0:f1:f4:6b:fd:84:d4: 17:1a:26:18:1c:9b:a2:4a:de:40:a3:1b:a5:df:a6: b6:2d:6f:e0:a9:4f:dc:a3:9e:ab:5d:73:a7:ff:64: 78:de:7f:8c:89:2b:aa:66:89:00:39:69:bc:11:68: e6:ed:83:11:37:dd:dc:d9:11:37:a3:e1:95:f6:4f: 12:2b:f5:ed:29:be:e6:91:60:fa:d4:9e:bc:a2:97: 9a:cb:29:f0:20:f0:5b:99:a4:63:2c:b2:5e:45:dc: c0:05:a7:16:be:43:83:09:02:57:6c:9f:f3:dd:06: e5:ec:08:4b:1c:f8:fc:ee:88:f0:c7:3d:ae:58:6e: 5b:c6:1e:23:d5:f2:83:69:3d:8b:ea:fe:bd:fe:b4: b9:bb:0b:8d:e1:4a:c2:94:ac:82:45:05:47:86:0c: d6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A0:79:D6:77:74:BC:68:A9:A6:1F:18:C7:A7:81:37:EE:54:09:90 X509v3 Authority Key Identifier: keyid:95:06:8B:B3:0A:BC:7E:00:7F:D8:38:7E:4D:E0:A8:3E:FA:AD:D4:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/A8086732B6DA11EBB7B67954C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.101.16.0/22 IPv6: 2403:3240::/32 Signature Algorithm: sha256WithRSAEncryption 67:6b:5e:18:f4:5b:30:0a:e3:f2:9e:01:b3:af:16:76:8a:37: 54:b5:f2:a7:fa:3a:6f:5e:1d:ea:e5:4f:13:2f:fc:50:f7:73: ee:ad:dd:04:91:35:2b:a3:02:0a:8b:7c:a2:52:bf:e5:17:f1: 7f:fb:1e:91:f0:45:88:d4:94:5e:00:bf:ee:65:59:4a:87:6d: ea:53:15:6e:23:08:3e:e3:43:4d:0d:fe:b7:ba:ca:5d:20:21: 96:ba:c0:a4:53:66:93:98:33:50:17:72:bf:cf:ff:09:d0:ed: 7c:80:72:15:b0:88:1a:df:56:ae:64:cc:bd:e9:bf:08:d6:ed: 11:98:1c:30:8d:da:10:45:3b:41:a7:bd:44:51:b1:5b:9d:81: 6a:af:14:1a:05:50:29:1d:53:34:fc:14:a0:ae:bc:e4:26:33: 6f:22:ff:02:2a:f5:33:93:ca:28:18:49:87:01:60:39:08:39: c4:f0:62:86:e9:22:54:c9:c7:66:92:6f:c0:c9:d8:d6:1c:bb: 5e:c7:78:c6:14:33:31:ef:20:9a:32:2e:29:36:f5:84:30:ce: 79:6e:6f:9f:87:81:4f:29:8d:4c:71:c5:fb:09:e4:a1:be:a5: 75:d1:86:1d:ce:f9:38:9e:7a:0e:b2:f3:2c:43:fe:d4:16:fe: c3:b1:3c:cb -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlERjgxMTAvBgNVBAUTKDk1MDY4QkIzMEFCQzdFMDA3RkQ4Mzg3RTRERTBBODNF RkFBREQ0NzIwHhcNMjQxMTA2MjMwMjE0WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJiZjU3NS1hYzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4t2SrCbItbrR0hijgEwtw92iQd47Hcfx2Rb+FmNV1r9PHDRfUQ7qQoi/FDOT fzVbxjOeYIcl6D0jJ1nG6cZ1pYHBeYQ31rkvgjgDy+ZN92xNUd3QzNqpjqqLoMNJ UM58m8Dx9Gv9hNQXGiYYHJuiSt5Aoxul36a2LW/gqU/co56rXXOn/2R43n+MiSuq ZokAOWm8EWjm7YMRN93c2RE3o+GV9k8SK/XtKb7mkWD61J68opeayynwIPBbmaRj LLJeRdzABacWvkODCQJXbJ/z3Qbl7AhLHPj87ojwxz2uWG5bxh4j1fKDaT2L6v69 /rS5uwuN4UrClKyCRQVHhgzWkQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFEigedZ3 dLxoqaYfGMengTfuVAmQMB8GA1UdIwQYMBaAFJUGi7MKvH4Af9g4fk3gqD76rdRy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOURGOC80QjNCODgxRUI2 RDkxMUVCOEY4NjU1NTRDNEY5QUUwMi9sUWFMc3dxOGZnQl8yRGgtVGVDb1B2cXQx SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xRYUxzd3E4ZmdCXzJEaC1UZUNvUHZxdDFISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTlERjgvNEIzQjg4MUVCNkQ5MTFFQjhGODY1NTU0QzRGOUFFMDIvQTgwODY3MzJC NkRBMTFFQkI3QjY3OTU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnZRAwDQQCAAIwBwMFACQDMkAwDQYJKoZIhvcNAQELBQAD ggEBAGdrXhj0WzAK4/KeAbOvFnaKN1S18qf6Om9eHerlTxMv/FD3c+6t3QSRNSuj AgqLfKJSv+UX8X/7HpHwRYjUlF4Av+5lWUqHbepTFW4jCD7jQ00N/re6yl0gIZa6 wKRTZpOYM1AXcr/P/wnQ7XyAchWwiBrfVq5kzL3pvwjW7RGYHDCN2hBFO0GnvURR sVudgWqvFBoFUCkdUzT8FKCuvOQmM28i/wIq9TOTyigYSYcBYDkIOcTwYobpIlTJ x2aSb8DJ2NYcu17HeMYUMzHvIJoyLik29YQwznlub5+HgU8pjUxxxfsJ5KG+pXXR hh3O+Tieeg6y8yxD/tQW/sOxPMs= -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:52 2024 by rpki-client on console-ams.rpki-client.org