$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/84121C245CE111E9824BCF76C4F9AE02.roa File: 84121C245CE111E9824BCF76C4F9AE02.roa (raw, json) Hash identifier: leXjljNrFgUPywu1Fh/An2qOclMc2UjOvRA+isA8p/I= Subject key identifier: 7B:C4:5F:32:E9:A0:CE:6C:63:59:47:A4:45:4C:05:60:54:CB:90:EC Certificate issuer: /CN=A91EB7BD/serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3 Certificate serial: 10AE Authority key identifier: 66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/84121C245CE111E9824BCF76C4F9AE02.roa Signing time: Sat 06 Apr 2024 18:26:14 +0000 ROA not before: Sat 06 Apr 2024 18:26:14 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 38447 IP address blocks: 103.134.64.0/24 maxlen: 24 203.84.132.0/24 maxlen: 24 2404:5f40::/48 maxlen: 48 2404:5f40:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4270 (0x10ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB7BD/serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3 Validity Not Before: Apr 6 18:26:14 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=661193c6-6204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:11:5d:e7:6c:08:7d:15:ca:e9:47:e9:5c:ae: 9c:60:c4:ad:03:e0:a7:8e:4e:33:3c:2e:40:03:88: 65:6e:3a:da:55:25:b6:bd:7b:fa:f5:5a:d5:63:89: df:8c:48:5d:13:d4:e5:59:39:32:32:75:5d:a3:43: 99:63:45:e8:e1:ce:da:0e:12:f5:6d:3b:2e:1d:cb: 9e:c2:ab:24:fe:01:79:41:c3:81:65:24:94:98:fa: 82:5d:95:78:50:35:71:07:c0:d2:a9:bf:50:ab:93: 10:7e:c3:a5:b9:23:db:d7:77:97:ed:5e:ca:e0:96: 59:7d:bc:c6:49:28:8b:eb:f8:57:dc:77:01:c2:9d: 7c:69:de:b0:30:2e:18:f3:34:9a:c7:43:0a:b2:2c: e8:e4:3e:64:56:a6:f3:02:fa:b5:f9:c6:41:43:f2: e0:35:d8:12:cd:b0:e8:79:13:15:43:2e:ed:da:c6: 24:07:b1:6f:c0:24:d3:c1:ca:59:3b:a7:da:be:10: 3e:d6:ae:d2:2e:f1:16:5c:7c:8a:3e:8e:14:20:0d: 10:05:5f:ad:4b:8a:ff:8f:45:ba:2c:27:57:1d:2d: 79:53:b9:c1:81:54:e0:8b:43:87:f9:27:e9:43:e0: 1e:77:40:61:7e:4b:cc:6a:95:45:58:47:7a:4d:94: 4e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C4:5F:32:E9:A0:CE:6C:63:59:47:A4:45:4C:05:60:54:CB:90:EC X509v3 Authority Key Identifier: keyid:66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/84121C245CE111E9824BCF76C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.134.64.0/24 203.84.132.0/24 IPv6: 2404:5f40::/48 2404:5f40:2::/48 Signature Algorithm: sha256WithRSAEncryption 55:59:d7:10:c4:4d:1e:6a:f4:f9:92:49:ea:09:ed:92:44:44: ce:09:69:54:69:c6:e5:3f:ab:e8:c3:b1:e1:40:3a:4a:2a:bf: 5c:0d:95:5a:50:08:2e:45:b2:d6:ec:e0:01:f1:8d:b3:ec:c2: a1:5e:15:ff:4d:71:a3:ee:aa:a2:c3:88:d6:1b:53:47:28:27: ae:1b:bc:fc:57:38:1f:90:c1:43:27:d7:8f:be:fb:0d:0d:5b: 85:5b:55:49:ec:27:54:5c:98:18:70:cc:53:42:04:64:d3:56: ed:7f:a8:9d:b8:4f:74:e7:2e:1f:d5:ef:e9:b8:37:c4:54:e1: 84:d5:2f:7e:ff:b6:28:96:21:27:83:f2:be:6c:6d:16:ae:87: 9e:77:7f:1a:20:35:bf:27:dd:f9:6a:7c:84:61:66:35:f8:92: dd:81:a6:80:6a:d7:d6:eb:fd:00:6a:ee:4b:d9:ae:88:95:1e: f0:cb:af:a6:0f:b2:7e:91:4e:20:96:32:7a:db:1b:d4:7b:00: 2b:70:d8:c4:01:ae:ef:ed:7c:d3:98:2b:62:6b:11:2e:5c:84: 9c:fd:83:22:87:95:a3:09:91:6c:5d:f2:7c:91:9b:dd:eb:fd: e7:b2:d7:6e:69:f7:26:44:de:be:d2:2f:54:5b:a0:a9:d9:89: ee:22:43:1c -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICEK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI3QkQxMTAvBgNVBAUTKDY2MDM0RDIxMzZDNDNCMTQzODIxNTdFMTJCQjc0QjJD QkE5RDk3QTMwHhcNMjQwNDA2MTgyNjE0WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjExOTNjNi02MjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hFd52wIfRXK6UfpXK6cYMStA+Cnjk4zPC5AA4hlbjraVSW2vXv69VrVY4nf jEhdE9TlWTkyMnVdo0OZY0Xo4c7aDhL1bTsuHcuewqsk/gF5QcOBZSSUmPqCXZV4 UDVxB8DSqb9Qq5MQfsOluSPb13eX7V7K4JZZfbzGSSiL6/hX3HcBwp18ad6wMC4Y 8zSax0MKsizo5D5kVqbzAvq1+cZBQ/LgNdgSzbDoeRMVQy7t2sYkB7FvwCTTwcpZ O6favhA+1q7SLvEWXHyKPo4UIA0QBV+tS4r/j0W6LCdXHS15U7nBgVTgi0OH+Sfp Q+Aed0BhfkvMapVFWEd6TZROEQIDAQABo4ICtTCCArEwHQYDVR0OBBYEFHvEXzLp oM5sY1lHpEVMBWBUy5DsMB8GA1UdIwQYMBaAFGYDTSE2xDsUOCFX4Su3Syy6nZej MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjdCRC80MzE3Mjc4Q0ZF OTAxMUU4QkJCOTVBMTRDNEY5QUUwMi9aZ05OSVRiRU94UTRJVmZoSzdkTExMcWRs Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnTk5JVGJFT3hRNElWZmhLN2RMTExxZGw2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUI3QkQvNDMxNzI3OENGRTkwMTFFOEJCQjk1QTE0QzRGOUFFMDIvODQxMjFDMjQ1 Q0UxMTFFOTgyNEJDRjc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E MDAuMBIEAgABMAwDBABnhkADBADLVIQwGAQCAAIwEgMHACQEX0AAAAMHACQEX0AA AjANBgkqhkiG9w0BAQsFAAOCAQEAVVnXEMRNHmr0+ZJJ6gntkkREzglpVGnG5T+r 6MOx4UA6Siq/XA2VWlAILkWy1uzgAfGNs+zCoV4V/01xo+6qosOI1htTRygnrhu8 /Fc4H5DBQyfXj777DQ1bhVtVSewnVFyYGHDMU0IEZNNW7X+onbhPdOcuH9Xv6bg3 xFThhNUvfv+2KJYhJ4PyvmxtFq6Hnnd/GiA1vyfd+Wp8hGFmNfiS3YGmgGrX1uv9 AGruS9muiJUe8Muvpg+yfpFOIJYyetsb1HsAK3DYxAGu7+1805grYmsRLlyEnP2D IoeVowmRbF3yfJGb3ev957LXbmn3JkTevtIvVFugqdmJ7iJDHA== -----END CERTIFICATE-----Generated at Fri May 31 20:34:19 2024 by rpki-client on console-ams.rpki-client.org