$ rpki-client -vvf rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/A81815BE31B711EF8F3D5F6BC4F9AE02.roa File: A81815BE31B711EF8F3D5F6BC4F9AE02.roa (raw, json) Hash identifier: GayQFIjNRG0i4Xav60C+tvTYkjjCA22TmJl4oiKb6AY= Subject key identifier: 36:24:AE:CF:CE:19:67:BF:61:04:4C:B2:B2:26:41:8D:38:BF:B9:EC Certificate issuer: /CN=A91504D6/serialNumber=FF1FD5C94F12F35FAD13ADF2799A898FDE06CAC9 Certificate serial: 4E Authority key identifier: FF:1F:D5:C9:4F:12:F3:5F:AD:13:AD:F2:79:9A:89:8F:DE:06:CA:C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_x_VyU8S81-tE63yeZqJj94Gysk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/A81815BE31B711EF8F3D5F6BC4F9AE02.roa Signing time: Thu 07 Nov 2024 05:18:53 +0000 ROA not before: Thu 07 Nov 2024 05:18:53 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 7575 IP address blocks: 103.36.12.0/23 maxlen: 23 103.36.12.0/24 maxlen: 24 2402:ec00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.crl rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_x_VyU8S81-tE63yeZqJj94Gysk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91504D6/serialNumber=FF1FD5C94F12F35FAD13ADF2799A898FDE06CAC9 Validity Not Before: Nov 7 05:18:53 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=672c4dbd-08f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bf:e5:60:e0:39:c9:73:ed:e6:e8:33:27:19: 9b:87:4f:df:e9:3d:8e:38:5d:6c:3f:c8:3f:5f:d2: 97:5f:82:cf:51:07:e1:22:e6:8d:0c:a6:85:6f:54: e3:23:57:0d:a4:e4:f7:da:f8:7e:33:81:11:44:7d: 30:4c:b3:7d:b2:8f:4e:81:1b:bb:aa:fb:b7:78:1a: 35:b9:0f:ae:ff:d4:3d:99:cb:02:19:8f:dc:2f:30: f6:e5:d9:3c:0c:3e:93:df:53:05:7b:a5:a3:cf:0c: 72:3b:0b:43:f2:58:e9:26:9e:f4:a3:0e:af:6c:5c: 2e:d0:7d:9c:3a:78:f2:49:f4:96:30:91:f0:2d:6e: 5f:ec:33:83:a9:6b:23:a0:7a:94:77:0a:10:c6:1a: b0:eb:f5:17:93:c8:ee:83:ae:77:18:37:04:12:a8: 95:3d:79:50:50:a5:54:85:ac:48:9c:57:96:bb:fc: 90:17:95:72:db:16:e6:1a:92:ab:8f:0e:92:de:71: 00:91:d5:b6:0b:60:b3:08:c7:6a:f7:86:27:66:eb: 70:fd:56:29:e9:31:59:43:9d:5e:56:bd:cf:17:c1: 4f:79:f4:70:04:ce:d9:31:7f:89:91:5d:4b:20:46: 0c:30:7c:f7:6e:99:dd:ec:96:af:af:85:4d:41:57: a4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:24:AE:CF:CE:19:67:BF:61:04:4C:B2:B2:26:41:8D:38:BF:B9:EC X509v3 Authority Key Identifier: keyid:FF:1F:D5:C9:4F:12:F3:5F:AD:13:AD:F2:79:9A:89:8F:DE:06:CA:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_x_VyU8S81-tE63yeZqJj94Gysk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/A81815BE31B711EF8F3D5F6BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.36.12.0/23 IPv6: 2402:ec00::/32 Signature Algorithm: sha256WithRSAEncryption 40:ab:8a:68:8a:7c:cf:b6:a2:24:ca:fb:21:d2:9b:3f:73:ff: 49:8f:fc:e4:39:be:b5:d1:86:21:00:83:b4:8e:c3:a3:31:8b: 27:0e:6b:0d:56:d0:5a:15:d5:7d:17:4c:5d:11:a2:98:b9:07: 04:0d:e1:17:95:95:90:9d:b6:f5:53:02:53:07:56:7e:d8:2e: d2:2f:b3:34:e7:cc:b4:a7:0d:40:ae:4f:75:e9:f3:15:8c:87: 9a:1e:db:1d:3e:a7:06:c7:5b:38:2f:67:2a:92:7d:cc:34:75: dd:b4:67:f7:15:a1:e2:ed:7f:7e:f3:ab:3d:1e:86:9a:d9:a0: 95:7b:c7:5f:5c:d9:c9:36:88:a8:51:e9:4c:76:f0:b2:37:10: 62:35:85:0e:3a:ff:34:c6:27:5a:45:c3:41:30:f5:e1:12:2d: d3:71:a8:01:ef:d6:48:dd:04:17:9b:f5:f1:1b:3e:7d:1c:bc: c1:c8:88:e5:5f:d7:f7:92:4c:a8:32:83:67:68:ce:c0:5a:98: 7e:10:e7:f4:53:b9:5f:6d:84:6e:73:ea:dd:3d:73:71:78:ad: 27:03:e7:e1:12:9b:60:c5:54:a1:ba:56:21:20:e4:24:74:b1: 34:80:ad:0d:76:0d:74:f9:5b:e1:5e:a1:fb:58:c4:b1:c4:12: 88:82:f3:c9 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MDRENjExMC8GA1UEBRMoRkYxRkQ1Qzk0RjEyRjM1RkFEMTNBREYyNzk5QTg5OEZE RTA2Q0FDOTAeFw0yNDExMDcwNTE4NTNaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MmM0ZGJkLTA4ZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNv+Vg4DnJc+3m6DMnGZuHT9/pPY44XWw/yD9f0pdfgs9RB+Ei5o0MpoVvVOMj Vw2k5Pfa+H4zgRFEfTBMs32yj06BG7uq+7d4GjW5D67/1D2ZywIZj9wvMPbl2TwM PpPfUwV7paPPDHI7C0PyWOkmnvSjDq9sXC7QfZw6ePJJ9JYwkfAtbl/sM4OpayOg epR3ChDGGrDr9ReTyO6DrncYNwQSqJU9eVBQpVSFrEicV5a7/JAXlXLbFuYakquP DpLecQCR1bYLYLMIx2r3hidm63D9VinpMVlDnV5Wvc8XwU959HAEztkxf4mRXUsg RgwwfPdumd3slq+vhU1BV6QPAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUNiSuz84Z Z79hBEyysiZBjTi/uewwHwYDVR0jBBgwFoAU/x/VyU8S81+tE63yeZqJj94Gyskw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUwNEQ2L0I2QzA5MzRDMzFB OTExRUZCNkZCMUQ2MEM0RjlBRTAyL194X1Z5VThTODEtdEU2M3llWnFKajk0R3lz ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX3hfVnlVOFM4MS10RTYzeWVacUpqOTRHeXNrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDRENi9CNkMwOTM0QzMxQTkxMUVGQjZGQjFENjBDNEY5QUUwMi9BODE4MTVCRTMx QjcxMUVGOEYzRDVGNkJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAWckDDANBAIAAjAHAwUAJALsADANBgkqhkiG9w0BAQsFAAOC AQEAQKuKaIp8z7aiJMr7IdKbP3P/SY/85Dm+tdGGIQCDtI7DozGLJw5rDVbQWhXV fRdMXRGimLkHBA3hF5WVkJ229VMCUwdWftgu0i+zNOfMtKcNQK5PdenzFYyHmh7b HT6nBsdbOC9nKpJ9zDR13bRn9xWh4u1/fvOrPR6GmtmglXvHX1zZyTaIqFHpTHbw sjcQYjWFDjr/NMYnWkXDQTD14RIt03GoAe/WSN0EF5v18Rs+fRy8wciI5V/X95JM qDKDZ2jOwFqYfhDn9FO5X22EbnPq3T1zcXitJwPn4RKbYMVUobpWISDkJHSxNICt DXYNdPlb4V6h+1jEscQSiILzyQ== -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:02 2024 by rpki-client on console-ams.rpki-client.org