$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/D8EA816A3EEE11EF98924D60C4F9AE02.roa File: D8EA816A3EEE11EF98924D60C4F9AE02.roa (raw, json) Hash identifier: 5hNv554rReK06N20/FH9rDWPnZEfKsGbqYpiIu4Udbg= Subject key identifier: 12:E8:4C:26:0D:7A:01:35:26:12:BE:6D:05:5B:28:7C:17:19:05:EC Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Certificate serial: 0978 Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/D8EA816A3EEE11EF98924D60C4F9AE02.roa Signing time: Fri 22 Nov 2024 20:10:21 +0000 ROA not before: Fri 22 Nov 2024 20:10:21 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 139879 IP address blocks: 103.74.20.0/24 maxlen: 24 103.74.21.0/24 maxlen: 24 103.74.22.0/24 maxlen: 24 103.74.23.0/24 maxlen: 24 103.235.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:10:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2424 (0x978) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Validity Not Before: Nov 22 20:10:21 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6740e52d-e1f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:24:fc:82:7d:23:5d:9a:5d:c3:c1:4f:ad:5a: 4a:fe:d5:c7:22:e8:de:ec:68:70:7e:51:94:59:de: ae:61:d9:96:0a:b3:fa:8c:ff:0e:55:83:a6:e6:91: a2:97:c7:cd:fe:9f:1f:3c:2b:59:42:38:8e:5d:ed: 1c:e3:05:cc:5f:7c:ba:e2:c7:4a:62:c8:d7:24:a2: 60:fc:16:08:ef:52:e6:0d:49:17:75:67:18:87:54: 4a:54:0d:90:8e:23:68:e1:ec:04:61:82:97:4b:6a: da:ec:8d:7b:52:75:67:39:75:8a:43:63:33:12:ab: a6:b0:98:1b:6a:f2:41:91:b0:29:95:93:ea:a7:83: 85:da:49:f9:d6:5a:37:7a:e0:c2:0b:f2:60:16:e5: 5f:94:90:a2:95:b5:ec:34:fb:3a:e9:23:99:17:ef: 30:15:47:69:95:91:ea:5f:22:25:a7:df:bc:28:f5: 1f:52:6d:35:e0:26:3e:6e:9c:8c:05:49:5f:92:58: 0f:b6:2e:2a:9a:c0:3e:a2:7b:5b:f7:5d:18:7b:bb: dd:4e:61:19:f7:84:da:56:73:44:7f:a0:72:e0:2b: ae:70:94:5e:75:34:7a:22:8d:4e:9f:d2:f9:50:4a: 8a:d4:08:fb:8f:e0:e7:5e:8f:08:cc:79:a0:f5:a2: 94:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E8:4C:26:0D:7A:01:35:26:12:BE:6D:05:5B:28:7C:17:19:05:EC X509v3 Authority Key Identifier: keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/D8EA816A3EEE11EF98924D60C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.74.20.0/22 103.235.77.0/24 Signature Algorithm: sha256WithRSAEncryption 48:cb:39:e8:0e:64:f7:70:cd:cb:80:e4:6d:80:5c:b2:32:fe: d1:46:13:d1:02:5a:43:6e:c0:e3:3b:da:b9:7d:5f:a8:c1:30: fc:75:1d:3f:1f:ba:c0:b1:ee:4a:d9:20:1f:b3:a6:9d:50:bf: 1c:82:06:49:74:82:8e:a4:8f:2e:bb:cc:5f:ea:65:b9:e4:00: f3:f1:bb:92:97:40:29:89:95:0a:0c:59:2a:6e:f8:43:0d:e6: 33:a5:54:9a:d6:f3:4e:7b:be:23:ca:3d:75:95:3a:15:c2:34: a4:bb:c7:39:fd:f5:ea:d9:b9:63:1a:aa:29:a0:53:41:42:14: cc:1d:e3:ec:79:96:2c:c2:ee:73:fc:7c:f8:66:49:3f:b4:0f: 5d:86:a4:e7:14:c3:e1:fe:2f:3b:72:a1:fc:32:ac:d3:90:83: 56:45:8f:82:57:14:a1:1b:61:e2:c3:4d:e5:5b:a4:2f:ad:57: c4:0c:57:56:73:12:ab:83:71:66:45:d0:9b:d1:e7:0c:97:e8: a9:81:3b:9e:84:6c:89:a7:26:b2:47:fb:f9:3f:2f:f4:5c:62: 38:00:3a:74:cf:56:84:11:53:d9:f3:21:38:78:ab:09:af:f6: 42:78:d1:19:09:f0:1f:3e:3c:42:b2:86:2e:15:34:c0:0c:07: 7e:69:d2:b2 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy MzYwRkQwRjUwHhcNMjQxMTIyMjAxMDIxWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQwZTUyZC1lMWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviT8gn0jXZpdw8FPrVpK/tXHIuje7GhwflGUWd6uYdmWCrP6jP8OVYOm5pGi l8fN/p8fPCtZQjiOXe0c4wXMX3y64sdKYsjXJKJg/BYI71LmDUkXdWcYh1RKVA2Q jiNo4ewEYYKXS2ra7I17UnVnOXWKQ2MzEqumsJgbavJBkbAplZPqp4OF2kn51lo3 euDCC/JgFuVflJCilbXsNPs66SOZF+8wFUdplZHqXyIlp9+8KPUfUm014CY+bpyM BUlfklgPti4qmsA+ontb910Ye7vdTmEZ94TaVnNEf6By4CuucJRedTR6Io1On9L5 UEqK1Aj7j+DnXo8IzHmg9aKUtQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFBLoTCYN egE1JhK+bQVbKHwXGQXsMB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTY5NDMvQjcxODExNjg4RDUxMTFFQUI4QjI2Mzg0QzRGOUFFMDIvRDhFQTgxNkEz RUVFMTFFRjk4OTI0RDYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnShQDBABn600wDQYJKoZIhvcNAQELBQADggEBAEjLOegO ZPdwzcuA5G2AXLIy/tFGE9ECWkNuwOM72rl9X6jBMPx1HT8fusCx7krZIB+zpp1Q vxyCBkl0go6kjy67zF/qZbnkAPPxu5KXQCmJlQoMWSpu+EMN5jOlVJrW8057viPK PXWVOhXCNKS7xzn99erZuWMaqimgU0FCFMwd4+x5lizC7nP8fPhmST+0D12GpOcU w+H+LztyofwyrNOQg1ZFj4JXFKEbYeLDTeVbpC+tV8QMV1ZzEquDcWZF0JvR5wyX 6KmBO56EbImnJrJH+/k/L/RcYjgAOnTPVoQRU9nzITh4qwmv9kJ40RkJ8B8+PEKy hi4VNMAMB35p0rI= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:37 2024 by rpki-client on console-ams.rpki-client.org