$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/5D10DEF0D8E811EB8ACD3C66C4F9AE02.roa File: 5D10DEF0D8E811EB8ACD3C66C4F9AE02.roa (raw, json) Hash identifier: l/rvxQeqO+VdRHgLRLz7RrPQYKHzDkdt1MLwmoA9TZg= Subject key identifier: A3:0A:E1:C3:46:43:2B:06:A5:CD:DE:5F:DC:B8:62:EE:38:C0:24:94 Certificate issuer: /CN=A91A8CD2/serialNumber=6E33D5139925C3DB4D085937CE69ACD37BEA794D Certificate serial: 04DB Authority key identifier: 6E:33:D5:13:99:25:C3:DB:4D:08:59:37:CE:69:AC:D3:7B:EA:79:4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/5D10DEF0D8E811EB8ACD3C66C4F9AE02.roa Signing time: Thu 27 Jun 2024 01:00:10 +0000 ROA not before: Thu 27 Jun 2024 01:00:10 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 136573 IP address blocks: 103.92.204.0/22 maxlen: 22 103.92.204.0/23 maxlen: 23 103.92.204.0/24 maxlen: 24 103.92.205.0/24 maxlen: 24 103.92.206.0/23 maxlen: 23 103.92.206.0/24 maxlen: 24 103.92.207.0/24 maxlen: 24 2401:20c0::/32 maxlen: 35 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.crl rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1243 (0x4db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CD2/serialNumber=6E33D5139925C3DB4D085937CE69ACD37BEA794D Validity Not Before: Jun 27 01:00:10 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=667cb99a-bb13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f2:d7:50:33:d7:51:3f:4c:4d:6d:3a:1a:21: 20:09:95:7d:2a:40:0c:bd:f7:8d:fa:98:ee:ae:55: 92:c9:ca:d8:e0:dc:92:5b:e5:02:ae:0e:c9:29:3e: b4:11:71:92:2f:66:3a:0c:51:cf:3f:a6:81:70:6e: 14:02:c2:20:7c:1f:74:f4:0e:58:dc:41:23:f6:39: e4:28:8a:b3:93:9c:90:ec:bc:ec:c4:e4:2f:f0:d5: 3d:35:ea:d9:f4:ff:64:5e:95:ca:87:51:80:d8:fd: 25:f3:e8:df:9e:53:6c:3a:fc:e6:09:61:10:b7:d0: 99:0c:cc:a4:be:f9:47:b5:11:9e:a7:43:82:39:fa: 37:e7:86:6a:7f:1f:35:45:c8:73:0e:81:9d:f3:bd: f1:ff:fe:39:6e:11:df:14:51:dc:b0:02:6a:2e:01: 5c:10:91:9a:0c:dc:f8:8a:de:f1:f4:6a:dc:e6:a7: 21:89:20:0e:ca:cc:df:a7:ea:19:ba:04:fb:a8:f0: 83:e0:bf:df:c9:11:ae:66:6b:75:77:33:7d:85:be: 6a:f1:6f:48:e0:77:fc:2a:a1:8c:5a:db:cf:c7:b5: a4:53:b6:18:64:35:e1:d4:71:45:14:e0:f2:80:b8: ab:07:b3:7d:91:2e:5f:f8:2f:f6:1b:56:13:a2:9b: 14:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:0A:E1:C3:46:43:2B:06:A5:CD:DE:5F:DC:B8:62:EE:38:C0:24:94 X509v3 Authority Key Identifier: keyid:6E:33:D5:13:99:25:C3:DB:4D:08:59:37:CE:69:AC:D3:7B:EA:79:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/5D10DEF0D8E811EB8ACD3C66C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.92.204.0/22 IPv6: 2401:20c0::/32 Signature Algorithm: sha256WithRSAEncryption 30:2e:45:ea:55:bd:d0:8f:9f:1e:ff:d2:91:62:cb:67:bb:ea: 50:86:73:d5:7d:2e:b2:4d:b0:3c:57:e0:65:05:4c:15:14:c4: cb:43:9b:5d:b8:74:d4:15:be:6e:c9:51:6f:eb:16:ab:dd:a8: 14:89:01:11:38:ed:de:77:80:5d:e2:db:a3:58:f5:36:fe:74: 96:a5:a6:82:97:6b:47:c9:ab:ec:00:b9:56:31:c0:d7:af:a3: d5:cf:1c:9b:a5:07:0a:6d:1d:c3:c6:ad:95:ec:b2:23:cf:02: 3a:e8:4a:c8:bb:43:20:2d:04:29:fe:0e:37:74:19:56:4d:62: 74:ae:75:58:c3:ae:18:3a:13:0c:7c:1a:65:75:e2:3f:c5:a2: 4b:04:46:57:d3:e6:5e:97:8c:92:55:3d:72:12:2c:79:ab:ab: fb:e2:f7:d3:f3:4f:58:1c:75:4d:88:3e:33:ac:b6:c4:8b:32: f0:28:71:44:df:fe:0d:25:a0:a8:ca:42:06:ee:36:c7:4b:99: b4:72:15:d9:d9:43:79:c5:c1:41:64:bf:ed:d7:29:9f:c9:1c: df:18:a9:b6:41:b3:70:3d:c3:32:35:ab:c9:d1:61:a7:26:9c: 54:cc:11:f4:bc:5e:ff:28:e8:c5:96:a5:5e:db:23:a6:26:f8: 97:00:5e:5c -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDRDIxMTAvBgNVBAUTKDZFMzNENTEzOTkyNUMzREI0RDA4NTkzN0NFNjlBQ0Qz N0JFQTc5NEQwHhcNMjQwNjI3MDEwMDEwWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjdjYjk5YS1iYjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/LXUDPXUT9MTW06GiEgCZV9KkAMvfeN+pjurlWSycrY4NySW+UCrg7JKT60 EXGSL2Y6DFHPP6aBcG4UAsIgfB909A5Y3EEj9jnkKIqzk5yQ7LzsxOQv8NU9NerZ 9P9kXpXKh1GA2P0l8+jfnlNsOvzmCWEQt9CZDMykvvlHtRGep0OCOfo354Zqfx81 RchzDoGd873x//45bhHfFFHcsAJqLgFcEJGaDNz4it7x9Grc5qchiSAOyszfp+oZ ugT7qPCD4L/fyRGuZmt1dzN9hb5q8W9I4Hf8KqGMWtvPx7WkU7YYZDXh1HFFFODy gLirB7N9kS5f+C/2G1YTopsU1QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFKMK4cNG QysGpc3eX9y4Yu44wCSUMB8GA1UdIwQYMBaAFG4z1ROZJcPbTQhZN85prNN76nlN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENEMi8wNDNDNkFGNEQ4 RTUxMUVCODA2ODVENUZDNEY5QUUwMi9ialBWRTVrbHc5dE5DRmszem1tczAzdnFl VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JqUFZFNWtsdzl0TkNGazN6bW1zMDN2cWVVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QThDRDIvMDQzQzZBRjREOEU1MTFFQjgwNjg1RDVGQzRGOUFFMDIvNUQxMERFRjBE OEU4MTFFQjhBQ0QzQzY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnXMwwDQQCAAIwBwMFACQBIMAwDQYJKoZIhvcNAQELBQAD ggEBADAuRepVvdCPnx7/0pFiy2e76lCGc9V9LrJNsDxX4GUFTBUUxMtDm124dNQV vm7JUW/rFqvdqBSJARE47d53gF3i26NY9Tb+dJalpoKXa0fJq+wAuVYxwNevo9XP HJulBwptHcPGrZXssiPPAjroSsi7QyAtBCn+Djd0GVZNYnSudVjDrhg6Ewx8GmV1 4j/FoksERlfT5l6XjJJVPXISLHmrq/vi99PzT1gcdU2IPjOstsSLMvAocUTf/g0l oKjKQgbuNsdLmbRyFdnZQ3nFwUFkv+3XKZ/JHN8YqbZBs3A9wzI1q8nRYacmnFTM EfS8Xv8o6MWWpV7bI6Ym+JcAXlw= -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:47 2024 by rpki-client on console-ams.rpki-client.org