$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/A39B24D2975511EF85448840C4F9AE02.roa File: A39B24D2975511EF85448840C4F9AE02.roa (raw, json) Hash identifier: BIsgdAgqtk3wodS0abcXx+V3UWlTiBSPXxRaU3Y5Enw= Subject key identifier: 72:29:A4:83:0D:35:96:92:1A:A5:6E:AF:D6:43:11:50:62:11:DB:F8 Certificate issuer: /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5 Certificate serial: 0AC8 Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/A39B24D2975511EF85448840C4F9AE02.roa Signing time: Wed 06 Nov 2024 19:38:24 +0000 ROA not before: Wed 06 Nov 2024 19:38:24 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 17408 IP address blocks: 103.11.6.0/24 maxlen: 24 103.11.7.0/24 maxlen: 24 103.14.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2760 (0xac8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2359 Validity Not Before: Nov 6 19:38:24 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=672bc5af-161d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a6:c4:ac:4e:b7:48:41:3d:15:9d:e0:34:cd: 9b:df:68:03:bc:23:92:3d:88:27:89:f0:3b:e1:72: c0:12:85:9d:2a:86:3e:81:76:b0:3a:32:d3:76:eb: af:eb:90:38:44:3e:86:92:84:53:cc:7e:e7:32:d5: 46:82:28:c8:5d:71:3e:c7:75:0f:91:7f:34:ae:89: cb:b9:35:55:bc:5e:3e:9e:37:f3:ab:c9:9d:53:8d: 7f:8e:f2:44:69:88:7a:7f:b1:f7:d4:3a:74:f7:c6: 7e:77:e3:25:11:c5:1c:bf:f1:73:bd:52:f0:52:bb: 23:5a:d8:d2:74:b6:c2:a1:93:12:04:93:08:18:6c: be:77:61:38:cd:ea:46:1c:46:2c:ba:65:d1:08:63: 44:00:55:a2:94:50:20:8d:46:2b:e2:94:f0:31:3f: d7:f4:f6:d4:eb:b7:a9:ca:14:a0:8f:7d:e2:5f:40: 87:d9:d4:fe:9f:21:26:d4:6e:f2:ae:7a:0a:a9:39: 4e:ed:9c:ab:70:89:d5:54:25:7e:87:4d:7b:6d:11: 49:d0:70:83:20:7e:9a:7b:25:50:f7:68:7a:d7:fa: 28:e0:dc:13:3e:da:93:5a:3b:dd:6e:40:26:e0:8a: b2:c8:87:2f:76:e3:ba:2a:2d:8f:fe:9c:d4:a2:83: 17:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:29:A4:83:0D:35:96:92:1A:A5:6E:AF:D6:43:11:50:62:11:DB:F8 X509v3 Authority Key Identifier: keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/A39B24D2975511EF85448840C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.11.6.0/23 103.14.176.0/22 Signature Algorithm: sha256WithRSAEncryption 65:97:02:b1:fa:d2:3e:39:f3:a1:d8:47:a6:b7:78:5a:48:78: 02:6c:90:60:36:46:89:40:01:b6:93:1a:76:3c:8c:e3:83:75: 17:80:e9:80:16:29:2e:e2:6b:ad:74:58:78:b0:ec:d2:e5:a8: 59:a7:0f:b1:fc:6e:21:f0:8c:80:71:46:40:ef:f1:ca:a4:2c: c4:77:d4:2d:61:75:9b:79:8e:82:69:7f:2d:a8:63:1d:a8:11: e4:d7:1d:d8:b6:64:b1:27:73:d5:57:21:1b:88:14:8c:c3:66: f6:11:13:ae:cd:bd:35:8b:78:dd:7b:86:3d:a5:70:1f:3a:de: 4f:bf:4f:04:f1:37:89:b8:50:f1:75:e0:22:59:42:47:22:06: a8:d8:73:00:3d:e7:73:45:0b:42:8a:cb:36:32:6f:8c:21:60: 87:57:85:60:57:98:e2:c1:42:ed:9d:55:22:05:a4:77:f6:8c: b2:e9:9c:dc:83:a5:7e:fd:0a:d9:00:54:e9:d1:b3:1a:93:53: d7:37:02:44:f9:9c:64:11:21:0a:d1:da:50:c0:ba:e1:71:d3: a5:d2:65:61:00:0f:ff:fe:8e:67:cb:9d:7c:57:11:b0:40:37: b5:18:c5:37:6e:4a:ba:e1:1f:4f:ae:81:2a:14:04:d4:13:12: 97:79:06:aa -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIzNTkxMTAvBgNVBAUTKEU5OTFBNUEyREQ5RDFGMkEyNDNERjZBQTI0QjlGNTBF MUNCOEZFRTUwHhcNMjQxMTA2MTkzODI0WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJiYzVhZi0xNjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKbErE63SEE9FZ3gNM2b32gDvCOSPYgnifA74XLAEoWdKoY+gXawOjLTduuv 65A4RD6GkoRTzH7nMtVGgijIXXE+x3UPkX80ronLuTVVvF4+njfzq8mdU41/jvJE aYh6f7H31Dp098Z+d+MlEcUcv/FzvVLwUrsjWtjSdLbCoZMSBJMIGGy+d2E4zepG HEYsumXRCGNEAFWilFAgjUYr4pTwMT/X9PbU67epyhSgj33iX0CH2dT+nyEm1G7y rnoKqTlO7ZyrcInVVCV+h017bRFJ0HCDIH6aeyVQ92h61/oo4NwTPtqTWjvdbkAm 4IqyyIcvduO6Ki2P/pzUooMXgQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHIppIMN NZaSGqVur9ZDEVBiEdv4MB8GA1UdIwQYMBaAFOmRpaLdnR8qJD32qiS59Q4cuP7l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjM1OS9GQzI5OERFQTQx NzAxMUVBOThERTY1NkFDNEY5QUUwMi82Wkdsb3QyZEh5b2tQZmFxSkxuMURoeTRf dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaR2xvdDJkSHlva1BmYXFKTG4xRGh5NF91VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTIzNTkvRkMyOThERUE0MTcwMTFFQTk4REU2NTZBQzRGOUFFMDIvQTM5QjI0RDI5 NzU1MTFFRjg1NDQ4ODQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnCwYDBAJnDrAwDQYJKoZIhvcNAQELBQADggEBAGWXArH6 0j4586HYR6a3eFpIeAJskGA2RolAAbaTGnY8jOODdReA6YAWKS7ia610WHiw7NLl qFmnD7H8biHwjIBxRkDv8cqkLMR31C1hdZt5joJpfy2oYx2oEeTXHdi2ZLEnc9VX IRuIFIzDZvYRE67NvTWLeN17hj2lcB863k+/TwTxN4m4UPF14CJZQkciBqjYcwA9 53NFC0KKyzYyb4whYIdXhWBXmOLBQu2dVSIFpHf2jLLpnNyDpX79CtkAVOnRsxqT U9c3AkT5nGQRIQrR2lDAuuFx06XSZWEAD//+jmfLnXxXEbBAN7UYxTduSrrhH0+u gSoUBNQTEpd5Bqo= -----END CERTIFICATE-----Generated at Sun Feb 16 20:25:33 2025 by rpki-client