$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/D29109C4EC6E11EEAEF9610BC4F9AE02.roa File: D29109C4EC6E11EEAEF9610BC4F9AE02.roa (raw, json) Hash identifier: D8dAG/9CmCMBEAtiY945ZqCN3MyX7EsagCsHQSrxDDU= Subject key identifier: 32:D8:5E:34:18:D0:99:4D:AC:B6:64:8A:C4:CF:81:64:15:71:15:B5 Certificate issuer: /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Certificate serial: BD Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/D29109C4EC6E11EEAEF9610BC4F9AE02.roa Signing time: Wed 03 Jul 2024 06:07:32 +0000 ROA not before: Wed 03 Jul 2024 06:07:32 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 140224 IP address blocks: 103.112.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Validity Not Before: Jul 3 06:07:32 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6684eaa4-d936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d5:ec:7a:3d:b7:47:41:e3:ac:1f:de:60:92: b4:5a:4c:43:20:e7:d8:88:dd:4e:70:26:09:61:30: 99:e5:c2:f2:ba:5a:f4:d6:ab:f5:6d:d3:4c:a7:9c: a4:05:68:66:4b:53:ad:ce:91:4f:6f:f8:b4:86:bb: 75:4e:9c:c4:75:ad:4b:93:2f:82:4c:65:4c:df:32: 4b:1b:5a:bf:2a:75:48:c6:50:63:5a:6b:a7:43:b1: 8e:46:22:41:90:3e:8b:ad:5b:42:4c:db:c5:60:b9: 17:3b:44:8a:30:94:b2:de:b4:95:62:f7:c6:22:51: 46:e4:aa:e3:e4:a2:4c:32:15:d0:e6:8e:e4:57:12: 59:cc:19:78:11:82:ee:aa:1e:e9:71:9b:87:9e:04: 4f:29:94:01:4c:fd:c2:7f:f8:32:2e:1d:5c:2c:d0: 80:77:6e:b8:76:33:77:c8:06:6a:50:cb:3e:79:23: 73:86:65:53:ef:1e:21:a3:ab:59:81:38:2f:f9:da: 1b:bb:05:6e:f9:32:c5:ec:dc:be:eb:fb:48:5f:61: 14:a7:e6:e7:9d:b3:30:c4:3f:ad:86:d8:9f:c5:de: 25:28:b1:26:77:ed:e3:8b:5e:56:b5:83:bd:0e:71: 22:3d:29:97:4f:3b:70:fb:3f:a5:e7:da:89:5d:62: be:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D8:5E:34:18:D0:99:4D:AC:B6:64:8A:C4:CF:81:64:15:71:15:B5 X509v3 Authority Key Identifier: keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/D29109C4EC6E11EEAEF9610BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.112.96.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:f5:e0:d2:b1:9c:99:e4:84:9d:8b:d3:6f:46:10:06:52:2b: 61:95:79:d8:83:e9:60:65:45:5a:87:30:57:79:3a:d7:a2:91: bb:26:83:65:da:ec:5c:6f:97:f8:87:ef:10:0c:35:b1:19:fa: a8:47:6a:35:a6:a7:4b:80:0b:c4:e0:bd:a7:5f:41:80:f6:b1: 25:b0:fc:3d:98:de:89:53:16:13:6f:9e:63:1c:6b:a6:79:34: ac:3d:06:b6:f3:bd:6c:53:9b:03:30:cd:50:91:f8:58:a9:f1: dc:d2:bb:41:93:78:8e:96:97:74:4c:ad:65:87:10:cd:fd:b3: 54:fc:3f:da:57:af:67:cf:88:29:e0:44:70:f6:42:bc:b1:e2: 09:9e:f5:d2:6b:51:c6:c7:80:0f:4e:de:ce:8d:19:a7:80:3b: d5:9e:d3:a5:fb:e0:6d:ca:7f:68:b9:3e:8c:91:ba:0d:5d:8f: 4d:13:a2:9d:4c:16:6e:4b:bc:ca:e4:19:26:c8:a4:8a:3a:8c: ed:1f:18:f0:38:fc:44:b5:74:8f:4e:ed:f5:2c:14:fa:6d:6b: c1:6c:c3:1e:0f:76:61:0a:57:1f:57:48:b3:77:58:c8:c9:4e: 8d:d4:fc:ab:d2:e5:d9:45:58:7c:78:d1:43:d7:b0:69:a5:bc: d6:08:f9:69 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdCOTQxMTAvBgNVBAUTKDMxMjZGNEVGMDVFM0FFNzVBMDkxNDRCNjY3RDM5MzQ3 RDREQUE4OTAwHhcNMjQwNzAzMDYwNzMyWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njg0ZWFhNC1kOTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytXsej23R0HjrB/eYJK0WkxDIOfYiN1OcCYJYTCZ5cLyulr01qv1bdNMp5yk BWhmS1OtzpFPb/i0hrt1TpzEda1Lky+CTGVM3zJLG1q/KnVIxlBjWmunQ7GORiJB kD6LrVtCTNvFYLkXO0SKMJSy3rSVYvfGIlFG5Krj5KJMMhXQ5o7kVxJZzBl4EYLu qh7pcZuHngRPKZQBTP3Cf/gyLh1cLNCAd264djN3yAZqUMs+eSNzhmVT7x4ho6tZ gTgv+dobuwVu+TLF7Ny+6/tIX2EUp+bnnbMwxD+thtifxd4lKLEmd+3ji15WtYO9 DnEiPSmXTztw+z+l59qJXWK+HwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDLYXjQY 0JlNrLZkisTPgWQVcRW1MB8GA1UdIwQYMBaAFDEm9O8F4651oJFEtmfTk0fU2qiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0I5NC9DQzc0MUJCNjM3 NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJuV2drVVMyWjlPVFI5VGFx SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01TYjA3d1hqcm5XZ2tVUzJaOU9UUjlUYXFKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTdCOTQvQ0M3NDFCQjYzNzcwMTFFRThEQzhCQjM0QzRGOUFFMDIvRDI5MTA5QzRF QzZFMTFFRUFFRjk2MTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJncGAwDQYJKoZIhvcNAQELBQADggEBAJ/14NKxnJnkhJ2L 029GEAZSK2GVediD6WBlRVqHMFd5Oteikbsmg2Xa7Fxvl/iH7xAMNbEZ+qhHajWm p0uAC8TgvadfQYD2sSWw/D2Y3olTFhNvnmMca6Z5NKw9BrbzvWxTmwMwzVCR+Fip 8dzSu0GTeI6Wl3RMrWWHEM39s1T8P9pXr2fPiCngRHD2Qryx4gme9dJrUcbHgA9O 3s6NGaeAO9We06X74G3Kf2i5PoyRug1dj00Top1MFm5LvMrkGSbIpIo6jO0fGPA4 /ES1dI9O7fUsFPpta8Fswx4PdmEKVx9XSLN3WMjJTo3U/KvS5dlFWHx40UPXsGml vNYI+Wk= -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:14 2024 by rpki-client on console-ams.rpki-client.org