$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B8BCF12A7A8C11ED8730C555C4F9AE02.roa File: B8BCF12A7A8C11ED8730C555C4F9AE02.roa (raw, json) Hash identifier: n7TX7gdHbBnIkc5FuIEnnnAbU8+VBYcT2MSEVf8tnEc= Subject key identifier: 79:DD:F7:21:DA:D3:2D:5D:7A:8D:41:B8:DA:56:0F:B6:DB:26:B3:9B Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4685 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B8BCF12A7A8C11ED8730C555C4F9AE02.roa Signing time: Thu 05 Sep 2024 03:36:40 +0000 ROA not before: Thu 05 Sep 2024 03:36:40 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 63752 IP address blocks: 103.211.212.0/22 maxlen: 22 2001:df0:6480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18053 (0x4685) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:36:40 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d92748-c089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d2:b4:2a:d7:0f:3e:bf:95:a1:00:fe:ae:3b: a7:cd:bb:e1:90:e9:5d:54:6d:da:64:ba:c8:66:85: 67:5e:47:27:67:cd:d8:a6:c3:45:97:8c:ee:2f:41: 90:a3:5b:16:15:42:fe:03:71:70:9f:a1:f7:14:e3: ec:b2:ce:5c:d5:3a:3f:ed:c0:48:c3:32:23:7b:61: ad:57:67:0a:6d:71:ff:aa:b8:bf:82:8f:9c:01:d3: 25:1d:b8:17:8c:1b:45:5a:20:29:b7:61:1e:a9:ce: 98:55:9c:4b:9e:97:cf:36:b2:ed:7c:94:e7:a3:95: f7:dc:55:bd:76:09:89:0b:44:c2:c7:87:18:e9:f9: df:85:b9:e6:8c:c4:57:09:86:51:0d:08:e6:12:aa: ce:77:fa:29:55:f9:c3:c5:45:63:fc:5d:79:98:02: 1c:94:46:ca:80:ff:2a:ff:4c:8a:fe:8f:50:27:55: f7:47:82:e3:2f:af:53:29:82:6c:12:65:6b:11:0d: c2:e3:e7:84:6b:16:c3:e0:97:ac:c7:18:7a:0b:4b: bf:1e:b2:67:a8:5a:68:b0:4a:5d:6c:58:cf:eb:17: ab:ba:73:ac:0b:db:97:b8:01:3c:9c:95:b8:57:ca: 72:5b:05:21:ad:ff:cf:44:a7:0e:4f:d8:1b:1c:26: 72:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DD:F7:21:DA:D3:2D:5D:7A:8D:41:B8:DA:56:0F:B6:DB:26:B3:9B X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B8BCF12A7A8C11ED8730C555C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.211.212.0/22 IPv6: 2001:df0:6480::/48 Signature Algorithm: sha256WithRSAEncryption 69:2b:81:80:29:a0:c9:15:f8:7c:51:04:5c:61:9e:92:ab:31: 39:6a:12:b5:a1:e7:83:9c:60:8b:e9:f6:c2:e6:c7:39:e4:9f: 2c:84:6b:bd:83:24:75:d0:68:76:c4:c7:a5:66:8e:86:5c:5c: 30:68:8f:21:b9:70:24:0e:e4:4b:ce:8e:1c:f6:f5:8e:a0:0d: 78:8f:fa:e7:33:55:49:b9:26:b3:25:46:4a:7b:7f:ef:2d:c3: 18:77:9d:5f:ff:f9:03:1c:e2:3f:a7:bc:cf:db:b4:a1:8e:96: 24:10:bf:96:74:b7:8f:c6:8a:56:2b:81:64:f6:bf:88:75:d8: fd:9c:8b:d0:48:14:5d:8a:67:da:70:e7:a6:b3:78:bd:f2:17: 13:1d:b2:33:e3:d0:98:1d:c9:61:a6:3f:3f:5f:42:e5:85:59: cd:68:0d:fa:ab:26:42:b1:b1:be:e8:6d:4c:e1:8e:0a:33:02: f1:d5:fd:21:9d:de:06:d9:68:e9:ac:18:96:12:1c:cc:c9:bb: 60:9b:1d:17:4c:57:b4:d8:55:f3:d4:81:0f:a7:13:56:26:6b: f0:19:06:4f:4b:6f:64:0a:56:f4:a3:5f:af:a2:fe:34:61:70: de:6b:fe:dc:4c:67:11:df:60:ba:e0:b8:b0:7e:87:ce:c6:55: ef:de:d4:e3 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICRoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzNjQwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5Mjc0OC1jMDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtK0KtcPPr+VoQD+rjunzbvhkOldVG3aZLrIZoVnXkcnZ83YpsNFl4zuL0GQ o1sWFUL+A3Fwn6H3FOPsss5c1To/7cBIwzIje2GtV2cKbXH/qri/go+cAdMlHbgX jBtFWiApt2Eeqc6YVZxLnpfPNrLtfJTno5X33FW9dgmJC0TCx4cY6fnfhbnmjMRX CYZRDQjmEqrOd/opVfnDxUVj/F15mAIclEbKgP8q/0yK/o9QJ1X3R4LjL69TKYJs EmVrEQ3C4+eEaxbD4Jesxxh6C0u/HrJnqFposEpdbFjP6xerunOsC9uXuAE8nJW4 V8pyWwUhrf/PRKcOT9gbHCZyhwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHnd9yHa 0y1deo1BuNpWD7bbJrObMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQjhCQ0YxMkE3 QThDMTFFRDg3MzBDNTU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJn09QwDwQCAAIwCQMHACABDfBkgDANBgkqhkiG9w0BAQsF AAOCAQEAaSuBgCmgyRX4fFEEXGGekqsxOWoStaHng5xgi+n2wubHOeSfLIRrvYMk ddBodsTHpWaOhlxcMGiPIblwJA7kS86OHPb1jqANeI/65zNVSbkmsyVGSnt/7y3D GHedX//5AxziP6e8z9u0oY6WJBC/lnS3j8aKViuBZPa/iHXY/ZyL0EgUXYpn2nDn prN4vfIXEx2yM+PQmB3JYaY/P19C5YVZzWgN+qsmQrGxvuhtTOGOCjMC8dX9IZ3e Btlo6awYlhIczMm7YJsdF0xXtNhV89SBD6cTViZr8BkGT0tvZApW9KNfr6L+NGFw 3mv+3ExnEd9guuC4sH6HzsZV797U4w== -----END CERTIFICATE-----Generated at Mon Nov 25 13:05:16 2024 by rpki-client on console-fra.rpki-client.org