$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/DDFEB10C385E11EB8E85F467C4F9AE02.roa File: DDFEB10C385E11EB8E85F467C4F9AE02.roa (raw, json) Hash identifier: vYc0h4qvjuE88FDf7yqk3rmrIjWt9VABoOzgwIDoM5I= Subject key identifier: DF:8A:A5:A6:E1:27:F4:CC:BF:E1:91:AC:57:27:11:03:B2:39:0D:40 Certificate issuer: /CN=A91F1AF5/serialNumber=81433A63C2D75D0032552C426C43533ECAC83515 Certificate serial: 06B9 Authority key identifier: 81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/DDFEB10C385E11EB8E85F467C4F9AE02.roa Signing time: Wed 06 Nov 2024 21:40:49 +0000 ROA not before: Wed 06 Nov 2024 21:40:49 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 139818 IP address blocks: 103.159.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1721 (0x6b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1AF5/serialNumber=81433A63C2D75D0032552C426C43533ECAC83515 Validity Not Before: Nov 6 21:40:49 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=672be261-707e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:bc:d3:00:7b:f7:4d:53:2f:d9:30:13:c0:55: 1e:6b:7a:b8:02:d3:a1:07:3f:95:ee:ea:91:fc:79: 18:2c:9a:85:ae:30:47:0e:ee:34:8b:b2:c3:58:cf: b8:12:4d:1f:59:a6:20:83:45:e8:a5:2c:f4:1c:27: 64:37:f0:ce:5f:c8:f1:e1:fe:cf:81:1d:dd:e0:f0: 87:a5:9d:dc:61:31:22:5e:15:ab:da:d6:ad:0e:07: 62:ca:7b:b8:29:61:56:71:e8:93:ca:a1:9f:af:70: be:8a:29:c5:7e:1b:ff:e0:a6:c9:c8:1e:f1:cb:b5: 11:dc:81:3b:ea:de:26:81:c3:40:d0:da:88:eb:f9: e5:77:54:7d:71:9a:ee:d9:51:5d:90:e4:91:7b:c1: b1:60:68:f5:39:2a:03:4d:46:44:7e:41:85:2d:82: 90:7a:1e:eb:6b:f9:87:6d:cf:9a:4b:19:fe:18:7d: bf:a1:1e:b1:14:95:e1:45:03:fc:bf:6d:eb:b6:ba: cb:42:78:b3:f7:49:35:d6:d0:ac:26:ea:23:c3:a1: 44:ef:68:c4:ba:9a:7b:51:98:f4:d7:df:6e:a6:0c: ce:41:7f:f5:b7:64:e9:92:16:da:11:5c:51:3e:69: 72:d7:1a:08:00:cf:fe:ac:f9:a1:31:c0:de:ab:20: 8c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:8A:A5:A6:E1:27:F4:CC:BF:E1:91:AC:57:27:11:03:B2:39:0D:40 X509v3 Authority Key Identifier: keyid:81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/DDFEB10C385E11EB8E85F467C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.159.110.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:0b:1a:0c:b7:31:9a:42:71:96:18:14:6c:45:1b:9d:56:83: 39:14:f1:62:3f:35:bd:fa:f8:5a:7f:43:67:81:3b:09:81:52: 87:b2:5b:f5:cb:35:90:92:40:5f:60:fa:ad:dc:c6:c2:4f:75: 07:f7:7a:c1:da:53:32:4c:60:83:ee:c3:0f:69:7e:e2:cb:b2: 55:4c:59:2b:a5:9e:46:63:90:99:0b:d8:6a:42:c5:a6:c2:68: d9:9a:72:a5:2e:b4:33:73:b2:66:cf:b9:73:83:00:c7:bb:13: 1c:69:5e:c5:0f:23:e2:cc:88:ed:f1:b6:7e:ab:55:d1:cb:b9: ff:7e:bb:40:5e:5d:85:d6:0e:03:44:c4:a3:c4:40:b1:16:cb: 1f:1b:f4:c0:8e:9a:b0:5a:20:ed:f4:2a:cb:7a:f6:3b:32:46: 6b:52:f4:4d:bd:60:1c:41:88:e9:aa:2e:38:96:63:91:76:9c: 52:cc:2f:10:85:25:bc:99:50:7d:67:bb:24:fd:1c:01:b6:1d: ea:99:e5:50:0e:01:58:aa:63:56:45:20:40:9f:b1:11:1a:bc: 34:7f:e7:01:c1:27:a8:0e:28:46:5e:20:8a:52:31:ab:a7:0a: e4:1c:14:00:2d:6c:ba:1a:63:b2:01:2e:3e:84:b5:9f:e9:ed: 48:5d:89:26 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFBRjUxMTAvBgNVBAUTKDgxNDMzQTYzQzJENzVEMDAzMjU1MkM0MjZDNDM1MzNF Q0FDODM1MTUwHhcNMjQxMTA2MjE0MDQ5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJiZTI2MS03MDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5bzTAHv3TVMv2TATwFUea3q4AtOhBz+V7uqR/HkYLJqFrjBHDu40i7LDWM+4 Ek0fWaYgg0XopSz0HCdkN/DOX8jx4f7PgR3d4PCHpZ3cYTEiXhWr2tatDgdiynu4 KWFWceiTyqGfr3C+iinFfhv/4KbJyB7xy7UR3IE76t4mgcNA0NqI6/nld1R9cZru 2VFdkOSRe8GxYGj1OSoDTUZEfkGFLYKQeh7ra/mHbc+aSxn+GH2/oR6xFJXhRQP8 v23rtrrLQniz90k11tCsJuojw6FE72jEupp7UZj0199upgzOQX/1t2TpkhbaEVxR Pmly1xoIAM/+rPmhMcDeqyCMVwIDAQABo4IClTCCApEwHQYDVR0OBBYEFN+Kpabh J/TMv+GRrFcnEQOyOQ1AMB8GA1UdIwQYMBaAFIFDOmPC110AMlUsQmxDUz7KyDUV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUFGNS8xNTEwRkI1QzM4 NUQxMUVCQkNCMjA0NjNDNEY5QUUwMi9nVU02WThMWFhRQXlWU3hDYkVOVFBzcklO UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dVTTZZOExYWFFBeVZTeENiRU5UUHNySU5SVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjFBRjUvMTUxMEZCNUMzODVEMTFFQkJDQjIwNDYzQzRGOUFFMDIvRERGRUIxMEMz ODVFMTFFQjhFODVGNDY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnn24wDQYJKoZIhvcNAQELBQADggEBAA0LGgy3MZpCcZYY FGxFG51WgzkU8WI/Nb36+Fp/Q2eBOwmBUoeyW/XLNZCSQF9g+q3cxsJPdQf3esHa UzJMYIPuww9pfuLLslVMWSulnkZjkJkL2GpCxabCaNmacqUutDNzsmbPuXODAMe7 ExxpXsUPI+LMiO3xtn6rVdHLuf9+u0BeXYXWDgNExKPEQLEWyx8b9MCOmrBaIO30 Kst69jsyRmtS9E29YBxBiOmqLjiWY5F2nFLMLxCFJbyZUH1nuyT9HAG2HeqZ5VAO AViqY1ZFIECfsREavDR/5wHBJ6gOKEZeIIpSMaunCuQcFAAtbLoaY7IBLj6EtZ/p 7UhdiSY= -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:53 2024 by rpki-client on console-ams.rpki-client.org