$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/9DB6EBB4972E11E9B776A755C4F9AE02.roa File: 9DB6EBB4972E11E9B776A755C4F9AE02.roa (raw, json) Hash identifier: F9o71AH8ui5/aDIyX2EvjpYqZFlu7QiC2robUaKm7Ww= Subject key identifier: 71:D3:A8:EF:C7:08:E7:CF:9B:AC:B3:D0:46:B1:97:54:BA:40:6F:16 Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Certificate serial: 34EA Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/9DB6EBB4972E11E9B776A755C4F9AE02.roa Signing time: Mon 22 Jul 2024 14:40:38 +0000 ROA not before: Mon 22 Jul 2024 14:40:38 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 55407 IP address blocks: 103.19.104.0/24 maxlen: 24 103.19.105.0/24 maxlen: 24 103.19.106.0/24 maxlen: 24 203.209.97.0/24 maxlen: 24 203.209.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13546 (0x34ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Validity Not Before: Jul 22 14:40:38 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=669e6f65-c708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:db:7a:81:70:47:28:be:4d:cc:b8:6e:d4:a3: 03:3f:5a:18:f1:e8:b7:93:c9:db:72:d7:50:97:ec: 9e:9a:18:f2:4e:08:08:f6:3f:25:2d:b5:ba:dc:4d: f5:a7:0e:3f:f8:63:f8:09:2e:59:66:79:45:6e:90: 28:00:37:a2:c4:de:7b:29:f2:cd:b2:72:f2:b7:c4: 77:87:50:a2:9c:23:b1:71:cd:fb:27:e3:11:51:94: 14:87:cb:b4:65:ad:16:a2:82:b3:8d:28:b2:1d:26: e6:52:ad:06:d7:b7:24:a1:23:64:ae:60:a9:7c:e3: 8e:0a:d3:de:cd:17:18:cf:bf:9c:13:d5:5b:de:f8: 75:94:74:9f:5e:06:98:af:89:4a:49:4d:fe:e4:cb: e1:40:b8:1d:98:13:18:b0:79:e0:d7:f2:84:46:64: 26:ca:d0:07:b3:f3:ce:f2:66:63:89:10:11:c2:cd: 2d:4b:55:c7:f2:55:30:b4:ea:81:fc:b0:c6:f5:78: 74:fc:02:b4:42:52:a8:58:fd:ec:cc:f0:ae:52:5d: 36:24:a3:18:80:84:06:90:0e:aa:ea:3b:8e:ac:4c: 39:f9:f0:f8:2c:96:96:1f:dc:f8:c8:33:1c:fc:7b: b5:f9:ae:76:80:e4:8a:3d:b1:63:9a:96:49:fa:a9: 9c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D3:A8:EF:C7:08:E7:CF:9B:AC:B3:D0:46:B1:97:54:BA:40:6F:16 X509v3 Authority Key Identifier: keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/9DB6EBB4972E11E9B776A755C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.19.104.0-103.19.106.255 203.209.97.0-203.209.98.255 Signature Algorithm: sha256WithRSAEncryption 0f:c8:43:0b:40:d9:ec:dd:7e:10:96:52:d4:c9:b3:4b:56:29: 2a:25:5c:a7:ed:e0:76:8f:20:dc:8b:66:f1:fc:0a:67:d3:59: 56:b9:ca:e1:7e:5c:8e:e6:43:8a:e6:cc:72:c2:a9:19:2b:87: 34:4c:4d:41:47:09:fc:cc:5e:bb:88:ab:1d:0b:1a:66:46:f4: bc:fb:3d:dc:76:55:16:e2:93:0c:7a:95:41:7f:af:f1:53:02: 17:51:96:00:ac:38:11:8d:e7:40:52:19:52:a8:29:ca:98:e8: ff:f4:ed:fb:cb:c9:a1:f9:2d:6f:d7:a4:81:6a:10:51:1a:38: 70:fb:be:a9:a8:3c:aa:d1:85:14:48:87:9b:19:18:56:a0:29: 6b:50:33:94:6b:16:d8:8b:b3:1b:2c:71:8c:40:97:29:3d:f8: 78:c1:ad:88:bd:9f:d6:d6:c3:89:fa:6f:b8:8b:8c:35:b4:09: 91:d6:52:89:ba:91:6d:53:c8:4a:35:f8:ed:18:30:14:07:7d: 0f:4f:94:cd:cd:29:fd:c5:7f:24:68:e6:fd:15:42:ca:16:29: 73:0a:97:43:58:31:be:3c:25:ef:60:20:97:fa:65:0a:2c:a4: d3:48:b6:3a:42:05:cc:be:e9:99:6f:12:22:cb:ea:49:2d:34: d1:ba:7a:d3 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICNOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw OTU2QTk4MkEwHhcNMjQwNzIyMTQ0MDM4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjllNmY2NS1jNzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA09t6gXBHKL5NzLhu1KMDP1oY8ei3k8nbctdQl+yemhjyTggI9j8lLbW63E31 pw4/+GP4CS5ZZnlFbpAoADeixN57KfLNsnLyt8R3h1CinCOxcc37J+MRUZQUh8u0 Za0WooKzjSiyHSbmUq0G17ckoSNkrmCpfOOOCtPezRcYz7+cE9Vb3vh1lHSfXgaY r4lKSU3+5MvhQLgdmBMYsHng1/KERmQmytAHs/PO8mZjiRARws0tS1XH8lUwtOqB /LDG9Xh0/AK0QlKoWP3szPCuUl02JKMYgIQGkA6q6juOrEw5+fD4LJaWH9z4yDMc /Hu1+a52gOSKPbFjmpZJ+qmcyQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFHHTqO/H COfPm6yz0Eaxl1S6QG8WMB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvOURCNkVCQjQ5 NzJFMTFFOUI3NzZBNzU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMCIEAgABMBwwDAMEA2cTaAMEAGcTajAMAwQAy9FhAwQAy9FiMA0GCSqGSIb3 DQEBCwUAA4IBAQAPyEMLQNns3X4QllLUybNLVikqJVyn7eB2jyDci2bx/Apn01lW ucrhflyO5kOK5sxywqkZK4c0TE1BRwn8zF67iKsdCxpmRvS8+z3cdlUW4pMMepVB f6/xUwIXUZYArDgRjedAUhlSqCnKmOj/9O37y8mh+S1v16SBahBRGjhw+76pqDyq 0YUUSIebGRhWoClrUDOUaxbYi7MbLHGMQJcpPfh4wa2IvZ/W1sOJ+m+4i4w1tAmR 1lKJupFtU8hKNfjtGDAUB30PT5TNzSn9xX8kaOb9FULKFilzCpdDWDG+PCXvYCCX +mUKLKTTSLY6QgXMvumZbxIiy+pJLTTRunrT -----END CERTIFICATE-----Generated at Sun Nov 24 15:31:15 2024 by rpki-client on console-ams.rpki-client.org