$ rpki-client -vvf rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/7564FD08603311EFA997483AC4F9AE02.roa File: 7564FD08603311EFA997483AC4F9AE02.roa (raw, json) Hash identifier: Dc1NXks3vzqcETcvDhdAZ2EqSwot8aXshk2HbstcbVQ= Subject key identifier: CC:25:9D:2C:B2:57:F9:B2:7B:AA:EB:E7:B8:66:F4:9A:36:57:E1:E7 Certificate issuer: /CN=A91A657F/serialNumber=47FAE6322C51B1DD0224976F7A1D2B9226D090EA Certificate serial: 1B Authority key identifier: 47:FA:E6:32:2C:51:B1:DD:02:24:97:6F:7A:1D:2B:92:26:D0:90:EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_rmMixRsd0CJJdveh0rkibQkOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/7564FD08603311EFA997483AC4F9AE02.roa Signing time: Thu 03 Oct 2024 06:40:56 +0000 ROA not before: Thu 03 Oct 2024 06:40:56 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 138174 IP address blocks: 103.121.248.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.crl rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_rmMixRsd0CJJdveh0rkibQkOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A657F/serialNumber=47FAE6322C51B1DD0224976F7A1D2B9226D090EA Validity Not Before: Oct 3 06:40:56 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66fe3c78-3834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:91:18:ce:ef:c3:f5:b3:59:4d:15:9a:b3:c8: 58:cf:62:df:c4:36:9c:c7:b1:56:fd:9e:ee:eb:cf: ee:64:e7:0e:99:c1:da:4d:7b:42:28:37:8a:df:f6: 77:12:48:e0:43:a2:eb:62:fc:3f:88:f0:b9:79:7e: bd:2d:ee:b8:16:d0:10:6a:7b:bf:aa:07:a9:c1:96: d3:5b:2f:7d:96:54:88:14:79:6b:73:90:46:d5:8b: 65:3a:bd:76:fa:59:8e:2a:a9:0c:2a:21:f3:ae:72: 87:d5:f1:e9:e4:d1:24:2d:d1:78:bf:22:7e:a9:40: 84:c2:84:c9:6b:b7:37:db:35:76:09:e2:3f:ee:85: 58:9c:62:6f:83:6b:54:85:c4:3e:c7:dc:43:05:0d: 17:75:1f:7e:91:e9:2f:60:3a:3e:8a:6e:5d:c6:5a: 16:97:7e:31:43:21:b0:21:ad:a4:5b:56:64:9f:8c: 3c:b4:f5:0a:86:68:05:58:17:12:1e:8f:c6:60:28: f3:63:be:96:77:0b:3b:df:dc:c7:45:e2:c4:7d:0a: 89:b7:dd:48:af:b4:6c:88:b7:07:d1:cd:09:4b:3e: f4:b2:39:41:e6:c0:38:10:f6:f4:dc:90:55:c6:a4: 07:66:64:45:7f:4c:a3:7e:18:bc:09:3b:88:9d:9e: bf:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:25:9D:2C:B2:57:F9:B2:7B:AA:EB:E7:B8:66:F4:9A:36:57:E1:E7 X509v3 Authority Key Identifier: keyid:47:FA:E6:32:2C:51:B1:DD:02:24:97:6F:7A:1D:2B:92:26:D0:90:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_rmMixRsd0CJJdveh0rkibQkOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/7564FD08603311EFA997483AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.121.248.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:01:2b:c7:14:72:b3:18:de:67:50:d8:64:84:84:d7:a0:f9: f5:40:49:0e:13:b3:9d:a5:03:1f:b3:f1:93:96:1c:fe:0b:cb: 5d:c0:8d:12:6d:c9:6b:23:f3:30:07:74:b3:e9:2a:35:5b:c4: 58:ac:b3:af:e7:f9:b9:d3:60:dc:5a:ab:fc:87:23:18:55:15: 47:f7:e3:0b:bf:ec:e8:a6:e2:b4:5a:f9:70:2a:97:0b:64:91: 42:e4:1d:c2:78:e9:38:32:f0:d8:64:51:2a:0f:c6:1e:e8:a3: 3a:22:31:c1:02:7d:cb:f9:7e:ff:74:ba:d0:d2:72:1a:51:a3: ed:e9:50:16:ac:a6:c0:1f:57:fb:be:b7:b1:9d:5a:58:96:2e: 3f:b8:8e:1c:30:11:b9:4e:23:c1:56:eb:4c:25:c2:52:7a:ca: 73:37:93:cb:e6:6f:bb:3c:21:17:e4:55:77:1a:e0:0f:ca:77: e7:37:b6:bc:6f:2d:c7:5b:36:31:37:4b:a1:66:3f:b4:ae:c4: 80:f3:4d:e3:c0:92:6c:fd:54:7a:ea:e1:18:ff:e3:68:e8:db: e0:fa:f6:2d:a3:f8:50:32:7e:0d:3f:6c:44:11:f0:12:1b:4c: d0:a4:78:b3:a8:f5:84:75:1e:30:21:7b:64:f2:cf:50:eb:f8: 47:fc:d5:50 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NjU3RjExMC8GA1UEBRMoNDdGQUU2MzIyQzUxQjFERDAyMjQ5NzZGN0ExRDJCOTIy NkQwOTBFQTAeFw0yNDEwMDMwNjQwNTZaFw0yNTEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZmUzYzc4LTM4MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPkRjO78P1s1lNFZqzyFjPYt/ENpzHsVb9nu7rz+5k5w6ZwdpNe0IoN4rf9ncS SOBDouti/D+I8Ll5fr0t7rgW0BBqe7+qB6nBltNbL32WVIgUeWtzkEbVi2U6vXb6 WY4qqQwqIfOucofV8enk0SQt0Xi/In6pQITChMlrtzfbNXYJ4j/uhVicYm+Da1SF xD7H3EMFDRd1H36R6S9gOj6Kbl3GWhaXfjFDIbAhraRbVmSfjDy09QqGaAVYFxIe j8ZgKPNjvpZ3Czvf3MdF4sR9Com33UivtGyItwfRzQlLPvSyOUHmwDgQ9vTckFXG pAdmZEV/TKN+GLwJO4idnr/DAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUzCWdLLJX +bJ7quvnuGb0mjZX4ecwHwYDVR0jBBgwFoAUR/rmMixRsd0CJJdveh0rkibQkOow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2NTdGL0U5NEJDQzQ4NjAz MjExRUZBNUY4RUU3RUM0RjlBRTAyL1Jfcm1NaXhSc2QwQ0pKZHZlaDBya2liUWtP by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUl9ybU1peFJzZDBDSkpkdmVoMHJraWJRa09vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjU3Ri9FOTRCQ0M0ODYwMzIxMUVGQTVGOEVFN0VDNEY5QUUwMi83NTY0RkQwODYw MzMxMUVGQTk5NzQ4M0FDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGd5+DANBgkqhkiG9w0BAQsFAAOCAQEAHgErxxRysxjeZ1DY ZISE16D59UBJDhOznaUDH7Pxk5Yc/gvLXcCNEm3JayPzMAd0s+kqNVvEWKyzr+f5 udNg3Fqr/IcjGFUVR/fjC7/s6KbitFr5cCqXC2SRQuQdwnjpODLw2GRRKg/GHuij OiIxwQJ9y/l+/3S60NJyGlGj7elQFqymwB9X+763sZ1aWJYuP7iOHDARuU4jwVbr TCXCUnrKczeTy+ZvuzwhF+RVdxrgD8p35ze2vG8tx1s2MTdLoWY/tK7EgPNN48CS bP1UeurhGP/jaOjb4Pr2LaP4UDJ+DT9sRBHwEhtM0KR4s6j1hHUeMCF7ZPLPUOv4 R/zVUA== -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:04 2024 by rpki-client on console-ams.rpki-client.org