$ rpki-client -vvf rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/29B935BCA12F11EF9FAFE232C4F9AE02.roa File: 29B935BCA12F11EF9FAFE232C4F9AE02.roa (raw, json) Hash identifier: 4sCWosi04+mX6UgThDV67gITfBwNJgZVQpoDMNX2bQ0= Subject key identifier: A5:AE:40:6E:A4:6A:80:FA:72:EA:13:42:92:0B:C2:96:49:47:23:39 Certificate issuer: /CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Certificate serial: 0488 Authority key identifier: 98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/29B935BCA12F11EF9FAFE232C4F9AE02.roa Signing time: Tue 12 Nov 2024 19:49:01 +0000 ROA not before: Tue 12 Nov 2024 19:49:01 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 55933 IP address blocks: 103.174.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1160 (0x488) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Validity Not Before: Nov 12 19:49:01 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6733b12c-db71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:28:19:12:1a:11:ae:4b:49:9f:d5:76:ee:bd: 99:f1:17:db:70:07:a5:39:f1:fa:9f:50:f4:b5:ed: 3c:0f:ba:87:11:85:10:dc:56:19:e2:27:4f:c2:f3: fb:ae:13:31:df:81:20:91:45:da:1b:d1:05:e6:7a: e1:39:c9:ce:54:f3:17:fb:41:50:59:a2:89:2b:5c: 30:ef:88:9e:a5:f5:44:7c:95:95:99:eb:15:e8:22: a8:ec:cd:b2:9d:0f:42:74:f9:ae:5a:69:33:f7:8a: de:23:53:64:0c:54:8b:e1:53:73:10:2a:5e:d1:d2: dd:05:5a:f1:16:88:28:bd:85:11:a5:d8:24:5b:5a: 90:ab:56:1c:84:72:18:62:b8:53:0f:fe:a0:08:6c: 9f:34:8a:62:18:7a:59:46:4e:f6:4b:1f:fc:4d:13: 72:ef:f3:e6:93:e5:4b:30:2d:c8:9c:5e:64:04:b4: d2:ba:0e:55:73:74:90:ac:92:25:10:02:84:3a:ed: 74:ee:13:45:cf:28:3a:d6:1e:b4:62:f8:3f:8d:93: a1:c2:e6:f6:ce:08:97:27:07:8b:3c:9d:bf:b0:e5: 3d:5d:3f:65:ea:4e:f2:b2:b1:ac:8e:96:fa:76:31: ee:7a:69:0a:6a:9e:ca:73:34:22:68:c2:fb:bb:d2: 5a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AE:40:6E:A4:6A:80:FA:72:EA:13:42:92:0B:C2:96:49:47:23:39 X509v3 Authority Key Identifier: keyid:98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/29B935BCA12F11EF9FAFE232C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.174.96.0/23 Signature Algorithm: sha256WithRSAEncryption 89:c8:d8:e3:bd:49:ac:e6:a6:dc:b1:6a:62:0b:6d:aa:58:9f: 6c:07:a9:e1:57:5b:6c:bf:43:6c:e5:3d:43:71:be:81:8a:4d: 5d:0a:66:d6:8b:8a:96:f4:e0:a5:85:5f:91:3e:fc:84:0f:2b: 60:e2:d0:c9:0c:26:fb:f3:fa:9c:46:8e:e4:50:83:f3:05:f8: da:4a:81:d6:a7:8d:6e:fb:a3:9a:fa:7e:f4:30:71:ee:a4:0a: 3f:68:32:9f:eb:09:fe:c1:ed:60:3b:f0:6c:c9:a7:d7:af:1c: b5:83:58:66:8a:eb:f8:1e:5b:32:ab:6e:c9:90:d3:41:5c:8f: 4c:de:cd:50:95:49:9a:5b:91:53:53:cd:b8:d6:d0:70:20:e0: 85:1f:cc:f0:9e:09:03:f8:cc:f9:63:36:87:38:00:49:5e:85: 77:d1:a2:cd:0d:f5:13:1d:a8:0c:59:cf:07:f2:06:d3:fe:27: a5:eb:0d:56:b7:99:c2:26:b9:56:67:a1:b2:e5:a5:8e:6a:14: da:08:c6:87:06:f2:84:5d:b5:1f:27:95:ff:27:67:f5:56:27: ba:a7:a5:54:db:7b:bb:b0:d9:35:43:6f:e4:61:f5:cf:ff:ed: dd:f0:59:3d:69:db:b0:a3:8f:72:52:d3:07:90:67:21:a5:ce: 6d:4f:a2:23 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIzQjkxMTAvBgNVBAUTKDk4RTFFQ0JENDVENzg3OUY5QkM5NDM5RjRDNkMyRjI3 MTRBRDM2RjUwHhcNMjQxMTEyMTk0OTAxWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzMzYjEyYy1kYjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCgZEhoRrktJn9V27r2Z8RfbcAelOfH6n1D0te08D7qHEYUQ3FYZ4idPwvP7 rhMx34EgkUXaG9EF5nrhOcnOVPMX+0FQWaKJK1ww74iepfVEfJWVmesV6CKo7M2y nQ9CdPmuWmkz94reI1NkDFSL4VNzECpe0dLdBVrxFogovYURpdgkW1qQq1YchHIY YrhTD/6gCGyfNIpiGHpZRk72Sx/8TRNy7/Pmk+VLMC3InF5kBLTSug5Vc3SQrJIl EAKEOu107hNFzyg61h60Yvg/jZOhwub2zgiXJweLPJ2/sOU9XT9l6k7ysrGsjpb6 djHuemkKap7KczQiaML7u9JaUQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKWuQG6k aoD6cuoTQpILwpZJRyM5MB8GA1UdIwQYMBaAFJjh7L1F14efm8lDn0xsLycUrTb1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjNCOS83OENFQUNCQzJC MzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1LWJ5VU9mVEd3dkp4U3RO dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PSHN2VVhYaDUtYnlVT2ZUR3d2SnhTdE52VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjIzQjkvNzhDRUFDQkMyQjM2MTFFQ0FENTk1QjdDQzRGOUFFMDIvMjlCOTM1QkNB MTJGMTFFRjlGQUZFMjMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnrmAwDQYJKoZIhvcNAQELBQADggEBAInI2OO9Sazmptyx amILbapYn2wHqeFXW2y/Q2zlPUNxvoGKTV0KZtaLipb04KWFX5E+/IQPK2Di0MkM Jvvz+pxGjuRQg/MF+NpKgdanjW77o5r6fvQwce6kCj9oMp/rCf7B7WA78GzJp9ev HLWDWGaK6/geWzKrbsmQ00Fcj0zezVCVSZpbkVNTzbjW0HAg4IUfzPCeCQP4zPlj Noc4AElehXfRos0N9RMdqAxZzwfyBtP+J6XrDVa3mcImuVZnobLlpY5qFNoIxocG 8oRdtR8nlf8nZ/VWJ7qnpVTbe7uw2TVDb+Rh9c//7d3wWT1p27Cjj3JS0weQZyGl zm1PoiM= -----END CERTIFICATE-----Generated at Thu Nov 21 00:21:21 2024 by rpki-client on console-fra.rpki-client.org