$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/C7F8C83C217311EA93A29F82C4F9AE02.roa File: C7F8C83C217311EA93A29F82C4F9AE02.roa (raw, json) Hash identifier: r5uWTU+sYs/vGgm5oMxXApeoTDyzrDhvLimJL0rhlzg= Subject key identifier: 5B:C6:F8:AE:4F:F9:0E:AF:5E:20:AF:C0:43:CB:5F:C4:82:E0:01:FD Certificate issuer: /CN=A91F9C95/serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B Certificate serial: 0B50 Authority key identifier: 52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/C7F8C83C217311EA93A29F82C4F9AE02.roa Signing time: Sat 16 Nov 2024 18:57:22 +0000 ROA not before: Sat 16 Nov 2024 18:57:22 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 139834 IP address blocks: 103.145.232.0/23 maxlen: 23 103.145.232.0/24 maxlen: 24 103.145.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2896 (0xb50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9C95/serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B Validity Not Before: Nov 16 18:57:22 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6738eb12-d42c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:dd:34:a5:9a:2e:9a:d6:bd:8b:9b:f4:bd:80: 0c:a0:38:a8:c2:43:52:6a:f2:f1:ce:f3:53:6d:b9: a1:e6:e7:54:b5:e5:4c:e9:35:37:6c:96:55:50:c8: 4a:3d:96:5a:8f:5e:b7:0b:8c:7b:f7:e8:0d:0f:4b: b8:b5:5d:0c:67:e6:76:95:7a:70:9d:66:ef:68:00: 14:d7:1f:e0:c0:d8:e5:33:df:12:4e:9e:b6:f4:4f: 9a:c2:23:72:45:3c:ee:53:fa:4c:e5:e7:7c:69:5c: e0:18:08:b6:87:67:0c:82:81:19:35:4d:ec:c6:ce: 03:e6:2c:e4:5a:ed:ab:03:f1:2f:03:f3:dd:c8:ed: 01:45:54:60:a3:b2:e1:c3:b9:da:24:55:c3:9b:f7: d3:3b:cb:43:11:ce:1c:a9:6a:ff:7e:b4:bf:03:6a: 0f:eb:16:5d:8a:35:00:34:a5:fa:4c:6f:1b:50:8d: dd:9e:79:0c:6c:db:f4:b9:7a:df:b2:c5:aa:4e:12: 66:d2:dd:bb:a0:15:dc:bc:94:2d:ee:7a:7a:b7:06: 77:da:76:d6:b4:8a:9e:b8:89:29:ec:e2:9d:8c:59: 1a:2a:c9:de:b7:4a:17:ec:11:bd:e1:99:bc:65:ea: 5c:76:72:5b:67:07:45:a8:84:ec:96:13:00:bd:4e: 43:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C6:F8:AE:4F:F9:0E:AF:5E:20:AF:C0:43:CB:5F:C4:82:E0:01:FD X509v3 Authority Key Identifier: keyid:52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/C7F8C83C217311EA93A29F82C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.145.232.0/23 Signature Algorithm: sha256WithRSAEncryption ae:65:d5:aa:2a:42:8b:40:66:e3:9a:87:20:43:e8:a6:78:5c: e6:0c:62:2e:df:47:46:50:b7:9b:40:55:c5:34:c6:cd:5c:91: 81:b9:1d:9e:2d:e1:e6:30:c4:fa:37:f3:95:9c:26:4e:e7:2b: 39:7b:5f:c8:2d:c4:a5:7c:39:20:36:62:03:ab:da:04:86:23: cd:b0:6e:67:4e:24:c6:16:be:07:a6:17:95:39:be:40:f4:53: d5:ff:e3:d0:85:b3:0c:8a:79:7f:0f:57:01:0b:80:38:06:83: f0:62:ef:0f:2c:11:3f:e6:0d:e5:c6:b6:a3:34:24:80:41:27: f6:6f:f7:e9:e3:be:da:c6:d2:77:92:22:3c:02:db:2f:cd:a8: 39:5d:12:27:9e:d9:d8:dd:b5:4b:7d:cd:3b:82:fe:aa:86:05: d1:9e:f4:9f:71:60:8d:8f:ce:c3:0b:c7:65:0f:cf:a2:d8:28: da:a7:1c:8a:54:8a:41:8d:1b:8e:1e:39:8f:82:18:0e:2b:5a: a0:9b:4e:ba:87:79:b6:01:b2:fe:e9:76:ff:7a:80:a3:61:17: de:aa:5b:17:8b:47:2d:d2:28:ab:c3:29:71:15:2f:14:a5:93: 9f:f9:4a:07:18:8c:59:05:fe:dd:45:e4:8e:28:ff:f2:5a:6e: 06:67:4e:39 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlDOTUxMTAvBgNVBAUTKDUyQkY2RjYyRUJDQTI2QjFEQzQyN0ZCRUFGRTcyMEZC QjA5N0MyMUIwHhcNMjQxMTE2MTg1NzIyWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzM4ZWIxMi1kNDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuN00pZoumta9i5v0vYAMoDiowkNSavLxzvNTbbmh5udUteVM6TU3bJZVUMhK PZZaj163C4x79+gND0u4tV0MZ+Z2lXpwnWbvaAAU1x/gwNjlM98STp629E+awiNy RTzuU/pM5ed8aVzgGAi2h2cMgoEZNU3sxs4D5izkWu2rA/EvA/PdyO0BRVRgo7Lh w7naJFXDm/fTO8tDEc4cqWr/frS/A2oP6xZdijUANKX6TG8bUI3dnnkMbNv0uXrf ssWqThJm0t27oBXcvJQt7np6twZ32nbWtIqeuIkp7OKdjFkaKsnet0oX7BG94Zm8 ZepcdnJbZwdFqITslhMAvU5D6QIDAQABo4IClTCCApEwHQYDVR0OBBYEFFvG+K5P +Q6vXiCvwEPLX8SC4AH9MB8GA1UdIwQYMBaAFFK/b2Lryiax3EJ/vq/nIPuwl8Ib MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUM5NS9CQTNFQzg2RTIx NzIxMUVBOEI3RUY4ODBDNEY5QUUwMi9Vcjl2WXV2S0pySGNRbi0tci1jZy03Q1h3 aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyOXZZdXZLSnJIY1FuLS1yLWNnLTdDWHdocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjlDOTUvQkEzRUM4NkUyMTcyMTFFQThCN0VGODgwQzRGOUFFMDIvQzdGOEM4M0My MTczMTFFQTkzQTI5RjgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnkegwDQYJKoZIhvcNAQELBQADggEBAK5l1aoqQotAZuOa hyBD6KZ4XOYMYi7fR0ZQt5tAVcU0xs1ckYG5HZ4t4eYwxPo385WcJk7nKzl7X8gt xKV8OSA2YgOr2gSGI82wbmdOJMYWvgemF5U5vkD0U9X/49CFswyKeX8PVwELgDgG g/Bi7w8sET/mDeXGtqM0JIBBJ/Zv9+njvtrG0neSIjwC2y/NqDldEiee2djdtUt9 zTuC/qqGBdGe9J9xYI2PzsMLx2UPz6LYKNqnHIpUikGNG44eOY+CGA4rWqCbTrqH ebYBsv7pdv96gKNhF96qWxeLRy3SKKvDKXEVLxSlk5/5SgcYjFkF/t1F5I4o//Ja bgZnTjk= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:50 2024 by rpki-client on console-ams.rpki-client.org