$ rpki-client -vvf rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/9F7C20921ADD11EC80226B61C4F9AE02.roa File: 9F7C20921ADD11EC80226B61C4F9AE02.roa (raw, json) Hash identifier: 76Aj2e1/zvO+ptuFoEi5Uq+Ik3Pi+kbiWoL+xAlC1Eg= Subject key identifier: F7:7F:81:32:B7:DB:16:1F:4E:3B:E0:75:65:55:84:5A:2C:9B:9D:27 Certificate issuer: /CN=A91283E7/serialNumber=30F2DC001BD658CD163E23771F41476972E0D14F Certificate serial: 044E Authority key identifier: 30:F2:DC:00:1B:D6:58:CD:16:3E:23:77:1F:41:47:69:72:E0:D1:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/9F7C20921ADD11EC80226B61C4F9AE02.roa Signing time: Tue 13 Aug 2024 01:02:46 +0000 ROA not before: Tue 13 Aug 2024 01:02:46 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 136735 IP address blocks: 103.94.207.0/24 maxlen: 24 103.163.5.0/24 maxlen: 24 2001:df1:8700::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.crl rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1102 (0x44e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91283E7/serialNumber=30F2DC001BD658CD163E23771F41476972E0D14F Validity Not Before: Aug 13 01:02:46 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66bab0b6-6469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e9:50:6a:6a:5f:d6:9d:52:f2:e2:5d:f1:c6: b1:1b:7f:bd:87:e8:1f:56:66:68:da:4b:2d:c3:fb: af:0e:3f:26:c9:33:e1:41:fb:eb:b3:87:7f:6e:b6: 68:22:ff:30:bc:bf:ee:71:49:fe:c9:34:d3:34:50: 61:9f:02:a1:22:c1:91:fa:5a:a7:f0:50:b6:d5:22: 42:97:c0:2f:1e:41:92:05:fd:ea:36:50:9f:56:0a: 07:13:42:dd:8d:30:09:92:55:66:d1:32:31:82:05: c4:d7:5e:ed:88:38:e8:88:6b:bc:94:a7:8f:41:01: 34:90:c6:5d:fc:69:d8:4c:5c:22:aa:af:34:31:e0: be:53:d2:b6:15:92:6f:dd:ed:45:a7:13:f0:2d:01: c4:18:7b:ad:04:08:58:81:26:96:83:1d:59:42:56: 32:9f:1a:04:af:e8:9d:85:ff:58:ef:cc:fe:a2:86: 33:fb:09:99:21:78:7f:2f:b2:ca:6c:ae:e0:34:a3: 48:43:67:f2:32:13:26:3b:5d:16:b6:7a:f7:dc:fa: 7d:e8:10:3f:46:32:02:7c:dd:61:99:7c:a3:42:e5: 00:04:21:e4:55:1f:b0:3e:fa:ff:9a:6a:2a:30:32: dd:66:23:c6:61:cf:5a:84:09:c2:1c:6a:f5:2b:40: 62:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:7F:81:32:B7:DB:16:1F:4E:3B:E0:75:65:55:84:5A:2C:9B:9D:27 X509v3 Authority Key Identifier: keyid:30:F2:DC:00:1B:D6:58:CD:16:3E:23:77:1F:41:47:69:72:E0:D1:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/9F7C20921ADD11EC80226B61C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.94.207.0/24 103.163.5.0/24 IPv6: 2001:df1:8700::/48 Signature Algorithm: sha256WithRSAEncryption 3c:e7:c7:49:c0:f5:e7:30:de:2b:aa:a1:8a:5c:fe:93:a3:57: 62:0d:d3:46:e7:0f:10:da:98:68:07:5a:d8:b0:b3:61:fb:63: 9c:17:b0:df:76:d8:bc:5e:c8:4a:d4:a1:0c:38:e5:36:9f:5c: 69:08:2b:fe:4d:81:f1:e2:76:a9:76:b1:ab:58:cb:db:d3:e8: ef:9e:9a:e0:53:6c:5f:59:ad:35:97:86:15:a2:6b:97:18:b5: f0:8a:bd:88:5a:69:a5:69:34:01:3b:4c:97:28:b4:cf:0b:fe: a8:a1:d5:16:20:55:5e:98:28:71:19:a8:f0:c5:5f:70:21:7d: 86:60:75:94:f8:85:f1:80:8c:c8:e4:b8:78:9e:ab:fe:c5:a5: 38:72:fa:e9:bd:ba:bb:34:14:8f:4d:a8:57:d1:0f:52:f8:40: bb:e0:56:97:86:a6:24:42:14:03:7e:72:5f:44:fa:a4:0f:89: cc:c3:52:97:ec:28:8e:8a:06:15:cf:d6:58:99:23:fd:4b:82: 62:42:50:66:52:53:f8:5c:bd:1d:fd:4c:47:60:d5:62:24:15: 84:20:ac:a9:7d:94:08:b3:ec:4a:97:c4:11:76:2a:3e:ea:15: 80:31:aa:fa:2d:cb:a4:05:d6:6b:ed:90:5a:f5:49:b6:1c:67: 89:da:23:90 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICBE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgzRTcxMTAvBgNVBAUTKDMwRjJEQzAwMUJENjU4Q0QxNjNFMjM3NzFGNDE0NzY5 NzJFMEQxNEYwHhcNMjQwODEzMDEwMjQ2WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmJhYjBiNi02NDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7elQampf1p1S8uJd8caxG3+9h+gfVmZo2kstw/uvDj8myTPhQfvrs4d/brZo Iv8wvL/ucUn+yTTTNFBhnwKhIsGR+lqn8FC21SJCl8AvHkGSBf3qNlCfVgoHE0Ld jTAJklVm0TIxggXE117tiDjoiGu8lKePQQE0kMZd/GnYTFwiqq80MeC+U9K2FZJv 3e1FpxPwLQHEGHutBAhYgSaWgx1ZQlYynxoEr+idhf9Y78z+ooYz+wmZIXh/L7LK bK7gNKNIQ2fyMhMmO10Wtnr33Pp96BA/RjICfN1hmXyjQuUABCHkVR+wPvr/mmoq MDLdZiPGYc9ahAnCHGr1K0BiaQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFPd/gTK3 2xYfTjvgdWVVhFosm50nMB8GA1UdIwQYMBaAFDDy3AAb1ljNFj4jdx9BR2ly4NFP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODNFNy83Mzk2MENDNDFB REIxMUVDOTNEMDZDNjBDNEY5QUUwMi9NUExjQUJ2V1dNMFdQaU4zSDBGSGFYTGcw VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01QTGNBQnZXV00wV1BpTjNIMEZIYVhMZzBVOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjgzRTcvNzM5NjBDQzQxQURCMTFFQzkzRDA2QzYwQzRGOUFFMDIvOUY3QzIwOTIx QUREMTFFQzgwMjI2QjYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnXs8DBABnowUwDwQCAAIwCQMHACABDfGHADANBgkqhkiG 9w0BAQsFAAOCAQEAPOfHScD15zDeK6qhilz+k6NXYg3TRucPENqYaAda2LCzYftj nBew33bYvF7IStShDDjlNp9caQgr/k2B8eJ2qXaxq1jL29Po756a4FNsX1mtNZeG FaJrlxi18Iq9iFpppWk0ATtMlyi0zwv+qKHVFiBVXpgocRmo8MVfcCF9hmB1lPiF 8YCMyOS4eJ6r/sWlOHL66b26uzQUj02oV9EPUvhAu+BWl4amJEIUA35yX0T6pA+J zMNSl+wojooGFc/WWJkj/UuCYkJQZlJT+Fy9Hf1MR2DVYiQVhCCsqX2UCLPsSpfE EXYqPuoVgDGq+i3LpAXWa+2QWvVJthxnidojkA== -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:20 2024 by rpki-client on console-ams.rpki-client.org