$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BF8C64F87EA311EC84297E7CC4F9AE02.roa File: BF8C64F87EA311EC84297E7CC4F9AE02.roa (raw, json) Hash identifier: 2yvYduP8kHc3cYAFgGuAo4v8sjf3sAQpW3TNt5ACQGs= Subject key identifier: 5F:F5:7B:DD:11:AF:30:3C:4C:C2:65:D5:9A:A3:45:38:E4:8D:6A:68 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4688 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BF8C64F87EA311EC84297E7CC4F9AE02.roa Signing time: Thu 05 Sep 2024 03:36:43 +0000 ROA not before: Thu 05 Sep 2024 03:36:43 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 63756 IP address blocks: 103.199.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18056 (0x4688) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:36:43 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d9274a-a149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b0:57:31:9c:f3:02:4f:ba:e9:07:26:ff:20: 35:92:cb:9d:da:67:2c:b3:da:7a:35:8e:ef:b1:00: c7:95:fc:7a:0d:6a:a4:6d:8f:08:65:51:93:3d:65: cb:da:ae:60:06:68:e0:49:4d:c4:66:84:e4:03:84: 88:dd:e8:16:18:0f:d2:b8:cb:20:6e:91:2d:9c:f9: 2c:3b:e0:02:3d:0f:eb:f8:51:c8:69:04:cd:07:66: a5:3c:1f:ff:bc:b5:63:00:e0:87:90:14:97:57:6b: 79:cc:2c:29:24:09:f0:3b:97:78:47:a1:1f:ba:2d: 51:47:e2:eb:6c:a5:ca:50:f7:2d:f5:34:18:33:41: 47:35:e4:27:02:27:fd:9d:64:0e:7b:91:7e:27:58: 1c:02:db:bf:e4:0f:03:d6:c6:aa:ed:53:9d:66:ed: ef:4e:f3:91:eb:18:c2:93:29:bd:6f:75:ea:19:17: 1d:ee:01:f5:4f:f7:6b:17:53:06:2e:af:94:2f:1f: e9:48:71:02:88:3c:31:68:85:9e:0a:b2:42:1c:36: 96:d3:f5:23:c8:8b:8b:69:97:64:54:9f:65:e0:ed: fc:25:5a:2e:75:51:38:4c:d8:7f:fa:52:d4:d6:b4: 4c:19:fe:38:0b:29:cb:41:f9:7e:d7:ac:be:73:63: 2c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F5:7B:DD:11:AF:30:3C:4C:C2:65:D5:9A:A3:45:38:E4:8D:6A:68 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BF8C64F87EA311EC84297E7CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.199.12.0/22 Signature Algorithm: sha256WithRSAEncryption 11:36:95:5a:79:6d:f4:1b:ee:da:98:21:70:fa:1b:fb:b8:7b: 5d:de:d8:fe:84:ef:30:ab:1e:ad:4d:6a:31:be:e6:cd:1b:cc: 3b:1e:ab:df:85:dd:24:01:bb:04:c1:21:b9:2c:5b:76:26:c6: 2e:7b:49:75:36:34:b6:54:79:99:81:b6:2e:f8:48:46:81:d8: ed:99:84:3a:35:9a:4c:91:e8:bd:04:ce:83:a1:3e:24:22:b3: 11:0c:3d:01:90:47:c7:4c:39:fb:4e:05:e5:f3:c8:ba:10:c8: 37:18:03:c1:e5:42:52:06:9a:2e:da:e9:53:a9:d7:31:50:40: 87:f3:a3:2e:1b:62:cf:22:4a:f8:c2:58:db:be:02:7e:c2:da: 9f:e9:d5:94:91:28:5e:23:67:2c:bd:12:57:29:96:c8:ce:f7: b3:9d:73:02:e7:15:fb:20:32:07:94:cd:63:01:ba:dd:a2:2b: bd:3c:e7:14:9c:74:99:b6:9c:ef:c8:21:21:d8:49:47:52:1e: 37:2d:bd:3f:e2:d1:6f:94:2a:b0:44:01:71:af:66:b9:84:b1: 8a:66:87:07:b9:68:4b:59:5f:65:82:60:ab:dc:5f:45:7c:14: 89:5b:db:fd:95:c0:a6:2b:06:72:53:85:9f:4f:1b:df:7e:2d: 77:24:36:d4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICRogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzNjQzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5Mjc0YS1hMTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7BXMZzzAk+66Qcm/yA1ksud2mcss9p6NY7vsQDHlfx6DWqkbY8IZVGTPWXL 2q5gBmjgSU3EZoTkA4SI3egWGA/SuMsgbpEtnPksO+ACPQ/r+FHIaQTNB2alPB// vLVjAOCHkBSXV2t5zCwpJAnwO5d4R6Efui1RR+LrbKXKUPct9TQYM0FHNeQnAif9 nWQOe5F+J1gcAtu/5A8D1saq7VOdZu3vTvOR6xjCkym9b3XqGRcd7gH1T/drF1MG Lq+ULx/pSHECiDwxaIWeCrJCHDaW0/UjyIuLaZdkVJ9l4O38JVoudVE4TNh/+lLU 1rRMGf44CynLQfl+16y+c2MsDQIDAQABo4IClTCCApEwHQYDVR0OBBYEFF/1e90R rzA8TMJl1ZqjRTjkjWpoMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQkY4QzY0Rjg3 RUEzMTFFQzg0Mjk3RTdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnxwwwDQYJKoZIhvcNAQELBQADggEBABE2lVp5bfQb7tqY IXD6G/u4e13e2P6E7zCrHq1NajG+5s0bzDseq9+F3SQBuwTBIbksW3Ymxi57SXU2 NLZUeZmBti74SEaB2O2ZhDo1mkyR6L0EzoOhPiQisxEMPQGQR8dMOftOBeXzyLoQ yDcYA8HlQlIGmi7a6VOp1zFQQIfzoy4bYs8iSvjCWNu+An7C2p/p1ZSRKF4jZyy9 ElcplsjO97OdcwLnFfsgMgeUzWMBut2iK7085xScdJm2nO/IISHYSUdSHjctvT/i 0W+UKrBEAXGvZrmEsYpmhwe5aEtZX2WCYKvcX0V8FIlb2/2VwKYrBnJThZ9PG99+ LXckNtQ= -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:33 2024 by rpki-client on console-ams.rpki-client.org