$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/C82A0778680811EE88B5527CC4F9AE02.roa File: C82A0778680811EE88B5527CC4F9AE02.roa (raw, json) Hash identifier: XFCdp8DNBDbwoHKirPz1q3ccOTUpcT1rXY4JK9cysJg= Subject key identifier: 64:82:0C:87:B1:E9:F3:11:D3:AF:37:56:3C:E4:F1:66:AE:65:2B:12 Certificate issuer: /CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75 Certificate serial: 0152 Authority key identifier: F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/C82A0778680811EE88B5527CC4F9AE02.roa Signing time: Wed 31 Jul 2024 09:24:32 +0000 ROA not before: Wed 31 Jul 2024 09:24:32 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 149021 IP address blocks: 103.176.204.0/23 maxlen: 23 103.176.204.0/24 maxlen: 24 103.176.205.0/24 maxlen: 24 2401:43e0::/48 maxlen: 48 2401:43e0:1::/48 maxlen: 48 2401:43e0:2::/47 maxlen: 47 2401:43e0:4::/46 maxlen: 46 2401:43e0:8::/45 maxlen: 45 2401:43e0:10::/44 maxlen: 44 2401:43e0:20::/43 maxlen: 43 2401:43e0:40::/42 maxlen: 42 2401:43e0:80::/41 maxlen: 41 2401:43e0:100::/40 maxlen: 40 2401:43e0:200::/39 maxlen: 39 2401:43e0:400::/38 maxlen: 38 2401:43e0:800::/37 maxlen: 37 2401:43e0:1000::/36 maxlen: 36 2401:43e0:2000::/35 maxlen: 35 2401:43e0:4000::/34 maxlen: 34 2401:43e0:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:06:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75 Validity Not Before: Jul 31 09:24:32 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=66aa02d0-d31d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:41:f6:6e:a2:c3:f2:9d:bc:96:72:99:1f:c2: 99:ea:71:97:3d:2e:6c:cd:5a:1f:aa:3e:39:07:31: 23:7d:70:99:46:a8:54:4c:47:71:9b:24:63:3a:5b: 4d:e6:9d:f8:b1:04:51:f3:0c:95:75:2e:92:0a:a1: 33:3d:64:c3:4b:b3:76:9f:46:8d:b0:d1:0f:ca:27: 6b:c5:b4:0a:85:d9:53:18:6b:af:9e:67:06:cf:24: 19:18:81:8a:ee:36:b0:82:7e:43:86:dd:8b:65:79: 41:0a:1a:15:b2:81:88:d7:b1:ad:4d:26:07:0e:d2: 40:c2:1d:34:5c:9c:69:a6:3b:57:f8:eb:af:4b:b2: b6:e8:c8:f9:17:22:df:aa:54:fd:4e:1c:e8:88:8b: 1e:46:4c:55:78:9f:cb:ce:cf:d9:92:55:a8:4c:ea: 7b:c9:71:90:9d:e2:78:dc:db:65:6a:df:f3:27:6f: 50:43:82:b6:d4:a5:02:34:2b:5b:85:15:b9:b6:f8: f9:41:68:1b:7a:3e:57:98:bc:5e:b3:09:da:9e:ae: 01:81:7b:39:a3:6a:65:a7:11:f6:46:3b:75:d9:5e: aa:af:31:7e:54:04:d6:a8:69:75:c3:5d:e8:3e:29: 40:1d:11:f8:e5:16:e3:8f:8f:00:c3:68:e6:1d:ff: 65:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:82:0C:87:B1:E9:F3:11:D3:AF:37:56:3C:E4:F1:66:AE:65:2B:12 X509v3 Authority Key Identifier: keyid:F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/C82A0778680811EE88B5527CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.176.204.0/23 IPv6: 2401:43e0::/32 Signature Algorithm: sha256WithRSAEncryption 88:a3:c4:4b:58:ba:d0:e5:75:1c:0e:c1:1d:d5:ad:e8:19:8e: ce:d7:7d:bb:bc:f1:13:48:2f:85:4c:3b:1c:77:7f:b6:d8:5e: 76:50:46:d2:95:6e:de:54:07:ad:6c:ce:c6:43:fa:5d:1c:e9: e4:64:d5:b2:3f:a1:a4:a7:f8:4c:b2:8d:fe:f1:a6:f4:e6:d9: e2:5c:9c:4f:00:7e:3d:d7:5b:a4:85:ff:7c:1e:bf:2d:ca:35: 86:62:2d:eb:50:c9:e3:7c:97:6e:92:ed:15:a8:4d:16:7f:7b: e6:cd:69:86:92:af:84:ac:2b:5b:48:2a:27:fb:91:a8:4c:2c: 48:df:28:5f:f2:3e:0d:1e:63:d9:ae:ae:bc:b0:1d:61:0f:8c: 85:0b:5a:8b:52:90:60:07:5a:e1:e6:83:7c:14:2b:c4:c4:80: 7e:d0:ce:4f:99:bb:93:42:70:bf:c3:d7:8f:5e:f2:80:07:95: 9e:23:2f:52:2c:12:d9:f3:8b:5c:b9:5e:0e:f6:44:ab:31:54: 69:52:40:16:a9:09:d9:86:da:3e:86:1d:14:d1:b0:80:59:ab: 38:67:07:41:97:b7:17:a4:38:8b:03:08:19:bc:2b:75:db:39: 3a:1f:51:ee:3f:b1:9e:3f:e9:4a:28:f6:b5:b1:5d:0f:44:4e: 16:7f:ba:56 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNDMjQxMTAvBgNVBAUTKEY0OTdEMTcxNjkyNzZENDNDNTg1MjE1QzE5ODMzMUMz M0MyMjVBNzUwHhcNMjQwNzMxMDkyNDMyWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmFhMDJkMC1kMzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1kH2bqLD8p28lnKZH8KZ6nGXPS5szVofqj45BzEjfXCZRqhUTEdxmyRjOltN 5p34sQRR8wyVdS6SCqEzPWTDS7N2n0aNsNEPyidrxbQKhdlTGGuvnmcGzyQZGIGK 7jawgn5Dht2LZXlBChoVsoGI17GtTSYHDtJAwh00XJxppjtX+OuvS7K26Mj5FyLf qlT9ThzoiIseRkxVeJ/Lzs/ZklWoTOp7yXGQneJ43Ntlat/zJ29QQ4K21KUCNCtb hRW5tvj5QWgbej5XmLxeswnanq4BgXs5o2plpxH2Rjt12V6qrzF+VATWqGl1w13o PilAHRH45Rbjj48Aw2jmHf9lQwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFGSCDIex 6fMR0683Vjzk8WauZSsSMB8GA1UdIwQYMBaAFPSX0XFpJ21DxYUhXBmDMcM8Ilp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0MyNC8xNkM2MTMxNjZB RkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJVUEZoU0ZjR1lNeHd6d2lX blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlKZlJjV2tuYlVQRmhTRmNHWU14d3p3aVduVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUNDMjQvMTZDNjEzMTY2QUZBMTFFREI3MDZGRjNDQzRGOUFFMDIvQzgyQTA3Nzg2 ODA4MTFFRTg4QjU1MjdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnsMwwDQQCAAIwBwMFACQBQ+AwDQYJKoZIhvcNAQELBQAD ggEBAIijxEtYutDldRwOwR3VregZjs7Xfbu88RNIL4VMOxx3f7bYXnZQRtKVbt5U B61szsZD+l0c6eRk1bI/oaSn+Eyyjf7xpvTm2eJcnE8Afj3XW6SF/3wevy3KNYZi LetQyeN8l26S7RWoTRZ/e+bNaYaSr4SsK1tIKif7kahMLEjfKF/yPg0eY9murryw HWEPjIULWotSkGAHWuHmg3wUK8TEgH7Qzk+Zu5NCcL/D149e8oAHlZ4jL1IsEtnz i1y5Xg72RKsxVGlSQBapCdmG2j6GHRTRsIBZqzhnB0GXtxekOIsDCBm8K3XbOTof Ue4/sZ4/6Uoo9rWxXQ9EThZ/ulY= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:58 2024 by rpki-client on console-ams.rpki-client.org