$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/71F97AC0560E11EEA8088470C4F9AE02.roa File: 71F97AC0560E11EEA8088470C4F9AE02.roa (raw, json) Hash identifier: 8kpq6ggiOvPDzABgylcMixzcZMr2vZ4NvVsGkSaMxFA= Subject key identifier: 68:B6:B8:8E:6A:88:66:1E:03:98:98:08:70:FB:15:4D:FA:B4:0A:27 Certificate issuer: /CN=A91886CC/serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5 Certificate serial: 010D Authority key identifier: D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/71F97AC0560E11EEA8088470C4F9AE02.roa Signing time: Mon 23 Sep 2024 12:47:10 +0000 ROA not before: Mon 23 Sep 2024 12:47:10 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 151064 IP address blocks: 103.234.12.0/24 maxlen: 24 2401:c6a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886CC/serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5 Validity Not Before: Sep 23 12:47:10 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66f1634d-9afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c2:33:8c:7c:59:1b:dd:d2:a6:45:b7:7e:22: 59:7a:6b:4f:e9:19:18:49:4a:7c:7d:d3:64:d0:12: d4:41:29:8a:00:0c:5a:9d:25:2d:85:e1:83:4b:63: 57:8d:ba:0b:63:20:5f:c1:05:4e:83:83:e0:78:5e: c4:eb:09:01:91:fd:dd:26:4a:35:12:a6:5e:b9:83: 0b:fe:d6:1e:91:83:0d:14:95:1d:83:a9:a8:1f:21: f7:89:f7:6c:40:07:55:1b:a7:f2:1c:04:af:cf:fd: d5:d0:f2:a1:26:07:70:76:f2:3c:a6:60:c9:66:2d: 9d:f6:2b:d9:88:e7:e9:9d:17:54:5c:7b:86:f7:32: 00:1f:e3:31:53:dc:c7:ea:2b:d5:41:31:19:ec:ef: fb:49:71:1f:f1:31:c0:98:b0:15:b4:bf:03:2c:8c: 6d:9c:1c:70:64:59:36:57:08:fd:d7:03:94:3f:18: fa:b4:5f:08:bd:51:7e:ea:10:ec:42:6e:6b:17:c6: 2b:64:a1:81:f4:97:24:f8:19:3b:45:c3:b6:de:63: cc:30:90:4d:06:f9:f3:9f:94:b3:a2:e4:31:6c:ad: 88:fd:64:39:53:e7:fa:8d:55:53:5e:89:5c:85:72: 55:a0:ec:c1:90:7b:74:26:a7:ab:d2:06:e5:87:fd: 1a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B6:B8:8E:6A:88:66:1E:03:98:98:08:70:FB:15:4D:FA:B4:0A:27 X509v3 Authority Key Identifier: keyid:D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/71F97AC0560E11EEA8088470C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.234.12.0/24 IPv6: 2401:c6a0::/32 Signature Algorithm: sha256WithRSAEncryption 29:07:4f:e4:38:d5:b3:d2:a2:fe:d4:82:fb:57:0a:39:25:c0: 2e:2e:a5:6b:65:84:81:97:12:68:05:79:83:83:1e:57:58:a0: 5b:cf:54:b6:2e:37:47:a7:26:c1:39:70:53:b7:7c:ad:28:6c: b1:63:b3:1e:51:91:e3:f0:76:5e:07:19:ec:15:5b:e3:d6:46: a1:4e:ee:4b:0d:42:2e:6e:38:88:2b:c7:b9:39:21:db:97:87: e4:d1:b7:e3:a2:ca:92:67:7b:c6:11:c9:3b:22:8b:38:b7:e0: bb:03:37:fb:4c:5d:8a:53:a0:a1:ca:7c:2a:18:58:78:c3:33: e4:c6:45:3a:e1:30:14:24:90:8e:51:a1:b2:35:84:74:86:39: 97:09:30:93:2d:39:a8:0d:4f:ea:9c:c7:90:11:f7:b1:e2:ab: ae:dd:bb:94:e8:f3:b9:fc:bb:e0:78:d6:43:6a:87:02:62:7b: 7e:1c:bd:29:2e:21:60:ce:50:b6:09:0c:f2:0d:b4:9a:ed:ad: 4c:d3:a8:b3:43:3b:db:ea:f9:7b:55:f4:fb:6d:c3:e5:3e:79: 31:fc:09:1c:52:6f:2b:47:b9:ab:95:57:40:6d:ed:ea:54:a6: 1a:79:3b:ee:de:50:96:af:38:71:95:50:2a:fc:5b:90:2c:a6: d0:60:93:07 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2Q0MxMTAvBgNVBAUTKEQxRTI5OUY5RTgyQzkzN0NCMkIyQTY5MDYxRTgxNzM0 MUY4NTA4RjUwHhcNMjQwOTIzMTI0NzEwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmYxNjM0ZC05YWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8IzjHxZG93SpkW3fiJZemtP6RkYSUp8fdNk0BLUQSmKAAxanSUtheGDS2NX jboLYyBfwQVOg4PgeF7E6wkBkf3dJko1EqZeuYML/tYekYMNFJUdg6moHyH3ifds QAdVG6fyHASvz/3V0PKhJgdwdvI8pmDJZi2d9ivZiOfpnRdUXHuG9zIAH+MxU9zH 6ivVQTEZ7O/7SXEf8THAmLAVtL8DLIxtnBxwZFk2Vwj91wOUPxj6tF8IvVF+6hDs Qm5rF8YrZKGB9Jck+Bk7RcO23mPMMJBNBvnzn5SzouQxbK2I/WQ5U+f6jVVTXolc hXJVoOzBkHt0Jqer0gblh/0aIwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFGi2uI5q iGYeA5iYCHD7FU36tAonMB8GA1UdIwQYMBaAFNHimfnoLJN8srKmkGHoFzQfhQj1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy80RUE2QzYxOEU4 QkQxMUVEOEI4OTI1MjJDNEY5QUUwMi8wZUtaLWVnc2szeXlzcWFRWWVnWE5CLUZD UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBlS1otZWdzazN5eXNxYVFZZWdYTkItRkNQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODg2Q0MvNEVBNkM2MThFOEJEMTFFRDhCODkyNTIyQzRGOUFFMDIvNzFGOTdBQzA1 NjBFMTFFRUE4MDg4NDcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBABn6gwwDQQCAAIwBwMFACQBxqAwDQYJKoZIhvcNAQELBQAD ggEBACkHT+Q41bPSov7UgvtXCjklwC4upWtlhIGXEmgFeYODHldYoFvPVLYuN0en JsE5cFO3fK0obLFjsx5RkePwdl4HGewVW+PWRqFO7ksNQi5uOIgrx7k5IduXh+TR t+OiypJne8YRyTsiizi34LsDN/tMXYpToKHKfCoYWHjDM+TGRTrhMBQkkI5RobI1 hHSGOZcJMJMtOagNT+qcx5AR97Hiq67du5To87n8u+B41kNqhwJie34cvSkuIWDO ULYJDPINtJrtrUzTqLNDO9vq+XtV9Pttw+U+eTH8CRxSbytHuauVV0Bt7epUphp5 O+7eUJavOHGVUCr8W5AsptBgkwc= -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:52 2024 by rpki-client on console-fra.rpki-client.org