$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/9E1721445CFB11EAA377D527C4F9AE02.roa File: 9E1721445CFB11EAA377D527C4F9AE02.roa (raw, json) Hash identifier: DDWfC2SDa6mkLERH2fLjEnqKEWrtJ+AhIE6qZcqqt1o= Subject key identifier: EB:31:3D:37:55:84:4B:95:BB:9D:76:F8:91:BE:D7:EA:7C:66:32:24 Certificate issuer: /CN=A91FCA4B/serialNumber=EF9E52BF9F4865CAF8787AD95CE6DE4F6476840D Certificate serial: 0A01 Authority key identifier: EF:9E:52:BF:9F:48:65:CA:F8:78:7A:D9:5C:E6:DE:4F:64:76:84:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/9E1721445CFB11EAA377D527C4F9AE02.roa Signing time: Wed 04 Sep 2024 20:38:43 +0000 ROA not before: Wed 04 Sep 2024 20:38:43 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 138025 IP address blocks: 103.120.69.0/24 maxlen: 24 103.146.75.0/24 maxlen: 24 2001:df6:d00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.crl rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:33:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2561 (0xa01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCA4B/serialNumber=EF9E52BF9F4865CAF8787AD95CE6DE4F6476840D Validity Not Before: Sep 4 20:38:43 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d8c553-75b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d0:e7:48:02:8a:98:78:08:a8:51:d3:7f:c9: 37:fa:c5:a8:3a:7b:2b:7c:ca:2b:75:ec:62:82:68: f9:d3:12:5a:28:dd:3d:d3:b0:8d:d7:ff:dd:83:d5: 1a:ea:f7:eb:6a:df:1f:f0:8d:48:7e:bd:a1:d7:1a: 7d:b8:5f:29:58:13:ae:8f:f3:68:3d:fa:50:33:cd: 6b:8e:ff:5a:37:4e:b8:b1:46:d9:14:24:55:07:87: ac:32:a7:cd:3b:14:70:3d:69:14:a4:e2:80:97:8a: 5d:ae:86:5e:cb:31:c1:dc:d5:7f:5e:b0:eb:e5:5b: 26:28:ee:c6:48:15:52:cb:1d:7a:b0:cd:a3:3c:45: 76:75:01:80:24:da:fe:4d:f4:e3:8a:6f:90:46:66: 9e:02:95:53:18:41:04:79:63:91:eb:d6:76:e2:8a: 24:9e:84:7a:43:f2:5a:21:3b:60:58:97:7f:f5:4e: a3:28:e8:e6:6a:e6:fe:fe:f5:23:ef:98:b2:d6:cc: ff:52:0c:d4:45:70:3f:32:4c:b6:63:e6:db:52:04: 7c:64:3c:91:4e:dc:cb:e3:3a:03:a7:93:67:69:6f: 06:7f:cb:ac:cf:e8:d5:7c:65:49:5a:47:ca:23:b9: 64:1b:40:c2:36:2d:b5:e5:23:a2:9f:11:8c:ab:20: ee:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:31:3D:37:55:84:4B:95:BB:9D:76:F8:91:BE:D7:EA:7C:66:32:24 X509v3 Authority Key Identifier: keyid:EF:9E:52:BF:9F:48:65:CA:F8:78:7A:D9:5C:E6:DE:4F:64:76:84:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/9E1721445CFB11EAA377D527C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.120.69.0/24 103.146.75.0/24 IPv6: 2001:df6:d00::/48 Signature Algorithm: sha256WithRSAEncryption 3f:71:84:74:12:ca:79:c7:b1:a0:8c:de:db:a7:5e:1f:e6:28: 6d:89:d7:e5:26:53:d3:f7:e5:51:3e:d5:5c:54:16:28:36:88: f6:cd:6d:6f:5e:8e:45:c0:d0:8d:f5:4d:f8:58:3f:c6:3c:db: d1:0f:a3:d6:bc:2b:03:c1:89:ad:29:5e:b3:58:1f:7e:05:29: 7b:29:b0:6a:49:fa:70:42:30:5a:23:af:7d:4d:8a:b5:f0:37: 3b:72:3e:26:a9:eb:16:68:6a:e6:36:8c:6e:0d:3f:af:4f:78: d5:25:a2:90:2e:01:ee:82:3c:d8:57:af:19:e3:51:d6:7c:26: e3:f8:44:76:cd:cf:9f:10:54:bd:08:b3:3f:bd:9d:9b:49:1d: 83:08:6d:16:9f:91:b7:8f:93:f8:2d:fc:e8:1d:94:8a:bf:01: dc:83:25:a6:56:93:c0:70:ef:e9:64:cd:47:b3:cc:02:7c:e9: 17:03:16:74:9d:b7:15:06:2d:b8:11:af:ad:b6:f0:ba:b0:c0: 81:b5:5b:aa:c6:dd:ea:a8:21:8e:b1:8c:65:1e:2e:7c:18:47: 26:f6:d3:5b:0a:fb:40:fb:0a:25:9d:1a:ec:cf:eb:fd:68:2f: 82:8a:17:2a:42:56:a9:db:e2:12:18:49:0c:5c:dd:1d:42:6c: 85:f8:e5:7f -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICCgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBNEIxMTAvBgNVBAUTKEVGOUU1MkJGOUY0ODY1Q0FGODc4N0FEOTVDRTZERTRG NjQ3Njg0MEQwHhcNMjQwOTA0MjAzODQzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ4YzU1My03NWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdDnSAKKmHgIqFHTf8k3+sWoOnsrfMordexigmj50xJaKN0907CN1//dg9Ua 6vfrat8f8I1Ifr2h1xp9uF8pWBOuj/NoPfpQM81rjv9aN064sUbZFCRVB4esMqfN OxRwPWkUpOKAl4pdroZeyzHB3NV/XrDr5VsmKO7GSBVSyx16sM2jPEV2dQGAJNr+ TfTjim+QRmaeApVTGEEEeWOR69Z24ooknoR6Q/JaITtgWJd/9U6jKOjmaub+/vUj 75iy1sz/UgzURXA/Mky2Y+bbUgR8ZDyRTtzL4zoDp5NnaW8Gf8usz+jVfGVJWkfK I7lkG0DCNi215SOinxGMqyDucwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFOsxPTdV hEuVu512+JG+1+p8ZjIkMB8GA1UdIwQYMBaAFO+eUr+fSGXK+Hh62Vzm3k9kdoQN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0E0Qi82RTY0QzQxMDVD RUMxMUVBQTZCNkU4NzhDNEY5QUUwMi83NTVTdjU5SVpjcjRlSHJaWE9iZVQyUjJo QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1NVN2NTlJWmNyNGVIclpYT2JlVDJSMmhBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkNBNEIvNkU2NEM0MTA1Q0VDMTFFQUE2QjZFODc4QzRGOUFFMDIvOUUxNzIxNDQ1 Q0ZCMTFFQUEzNzdENTI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABneEUDBABnkkswDwQCAAIwCQMHACABDfYNADANBgkqhkiG 9w0BAQsFAAOCAQEAP3GEdBLKecexoIze26deH+YobYnX5SZT0/flUT7VXFQWKDaI 9s1tb16ORcDQjfVN+Fg/xjzb0Q+j1rwrA8GJrSles1gffgUpeymwakn6cEIwWiOv fU2KtfA3O3I+JqnrFmhq5jaMbg0/r0941SWikC4B7oI82FevGeNR1nwm4/hEds3P nxBUvQizP72dm0kdgwhtFp+Rt4+T+C386B2Uir8B3IMlplaTwHDv6WTNR7PMAnzp FwMWdJ23FQYtuBGvrbbwurDAgbVbqsbd6qghjrGMZR4ufBhHJvbTWwr7QPsKJZ0a 7M/r/WgvgooXKkJWqdviEhhJDFzdHUJshfjlfw== -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:50 2024 by rpki-client on console-ams.rpki-client.org