$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/29B6EA80F2C411EC97A42B73C4F9AE02.roa File: 29B6EA80F2C411EC97A42B73C4F9AE02.roa (raw, json) Hash identifier: Pa7vqRKigQw32QoaSxD2//r2hGXyXC5XuQ+F6F/tmPc= Subject key identifier: 61:0B:6C:85:D0:3A:AA:05:C9:7B:C0:C0:27:B2:2A:06:6A:1F:03:67 Certificate issuer: /CN=A91AC100/serialNumber=309A2A364334A9DDBA4A6D44041D79A5D32BAFAB Certificate serial: 01A3 Authority key identifier: 30:9A:2A:36:43:34:A9:DD:BA:4A:6D:44:04:1D:79:A5:D3:2B:AF:AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/29B6EA80F2C411EC97A42B73C4F9AE02.roa Signing time: Thu 23 Nov 2023 03:34:11 +0000 ROA not before: Thu 23 Nov 2023 03:34:11 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 138388 IP address blocks: 103.124.96.0/22 maxlen: 22 103.124.96.0/24 maxlen: 24 103.124.97.0/24 maxlen: 24 103.124.98.0/24 maxlen: 24 103.124.99.0/24 maxlen: 24 2403:ddc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.crl rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 04:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC100/serialNumber=309A2A364334A9DDBA4A6D44041D79A5D32BAFAB Validity Not Before: Nov 23 03:34:11 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=655ec832-4de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8c:cb:7b:04:8e:61:16:77:33:84:8c:22:c6: af:f4:16:bc:b6:30:ec:54:52:31:1a:d4:e5:5a:c9: 11:d3:41:27:90:d2:dd:6e:a1:b7:75:0b:42:8a:0a: 41:ec:9d:cf:bb:a6:c3:85:99:27:0c:c5:e2:8e:2b: 2b:5a:40:d4:75:04:c4:71:b6:19:b9:48:ae:6b:08: 3c:83:3b:ed:18:7b:b2:6f:c3:82:db:17:d1:3a:30: 3f:ea:49:4c:7b:de:2d:cc:02:47:e1:c9:a2:23:89: e8:4d:62:bb:92:2e:0f:c3:a7:e2:86:26:10:04:96: e1:00:d5:1a:a6:9e:df:b7:ef:40:a6:00:cb:77:f8: 33:22:ec:b2:88:c0:4a:7a:d2:a1:8a:51:23:9c:d3: 56:ac:1c:2b:22:39:1d:53:8c:d3:e5:43:4b:ee:73: 38:ba:6f:da:ed:50:5d:c1:93:ab:77:2b:2a:67:72: 8d:fa:06:71:88:08:f2:49:ad:aa:43:a4:0a:17:b8: 39:64:6c:63:f4:75:56:b2:ad:d2:fe:42:a8:8d:b7: 9d:4c:ff:90:12:d4:f7:a4:e2:eb:4c:b8:89:bc:1c: 7f:bf:d2:16:bf:eb:ae:fd:a8:f5:00:16:61:41:54: 11:cf:b3:a0:ad:97:3c:7f:cf:73:4f:35:30:17:54: 9b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:0B:6C:85:D0:3A:AA:05:C9:7B:C0:C0:27:B2:2A:06:6A:1F:03:67 X509v3 Authority Key Identifier: keyid:30:9A:2A:36:43:34:A9:DD:BA:4A:6D:44:04:1D:79:A5:D3:2B:AF:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/29B6EA80F2C411EC97A42B73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.124.96.0/22 IPv6: 2403:ddc0::/32 Signature Algorithm: sha256WithRSAEncryption 02:14:62:f6:97:e8:95:9c:2c:fa:d9:af:78:40:9f:18:50:0e: 8e:52:dd:b9:f4:87:84:aa:08:80:d9:46:c3:4c:cd:db:7b:14: 42:ec:5b:c7:73:3a:a3:16:80:e7:47:b1:f3:36:87:6a:6c:2e: 52:45:44:eb:a8:23:b2:30:6f:84:65:64:45:69:45:54:0e:2c: 55:55:57:de:6a:13:51:11:65:8f:07:a1:5e:16:aa:bf:95:be: e5:92:38:41:8c:26:b9:0e:db:46:59:b7:12:41:76:6f:e2:3b: b3:8a:f9:2f:45:08:3d:3a:85:07:13:a8:5d:cf:89:c6:ae:00: 00:63:61:59:2d:7b:cf:26:db:22:b4:e2:35:fa:69:fd:0e:27: 34:cf:4a:39:d8:62:f7:02:f9:22:37:a5:80:21:13:f0:39:0e: cd:71:5f:4b:64:70:3e:6d:1c:2d:2e:14:46:9f:7b:12:b7:95: db:1f:67:96:a1:d4:f8:be:ef:0e:fe:cf:6f:b1:07:6e:76:8b: 6d:00:a7:76:a0:d8:5f:7e:f2:17:18:9a:cc:e8:32:d5:22:7c: 06:96:07:aa:aa:e6:e8:36:ff:4c:e4:74:d4:95:55:68:4a:23: d9:e9:bb:a0:f6:e7:d4:1d:5b:ce:cd:75:f5:74:0f:65:71:24: 8d:57:0a:83 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUMxMDAxMTAvBgNVBAUTKDMwOUEyQTM2NDMzNEE5RERCQTRBNkQ0NDA0MUQ3OUE1 RDMyQkFGQUIwHhcNMjMxMTIzMDMzNDExWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTVlYzgzMi00ZGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvozLewSOYRZ3M4SMIsav9Ba8tjDsVFIxGtTlWskR00EnkNLdbqG3dQtCigpB 7J3Pu6bDhZknDMXijisrWkDUdQTEcbYZuUiuawg8gzvtGHuyb8OC2xfROjA/6klM e94tzAJH4cmiI4noTWK7ki4Pw6fihiYQBJbhANUapp7ft+9ApgDLd/gzIuyyiMBK etKhilEjnNNWrBwrIjkdU4zT5UNL7nM4um/a7VBdwZOrdysqZ3KN+gZxiAjySa2q Q6QKF7g5ZGxj9HVWsq3S/kKojbedTP+QEtT3pOLrTLiJvBx/v9IWv+uu/aj1ABZh QVQRz7OgrZc8f89zTzUwF1SbLQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFGELbIXQ OqoFyXvAwCeyKgZqHwNnMB8GA1UdIwQYMBaAFDCaKjZDNKndukptRAQdeaXTK6+r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzEwMC9FNDNEQzVDQUYy QkMxMUVDODhBQzk0NTJDNEY5QUUwMi9NSm9xTmtNMHFkMjZTbTFFQkIxNXBkTXJy NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01Kb3FOa00wcWQyNlNtMUVCQjE1cGRNcnI2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUMxMDAvRTQzREM1Q0FGMkJDMTFFQzg4QUM5NDUyQzRGOUFFMDIvMjlCNkVBODBG MkM0MTFFQzk3QTQyQjczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnfGAwDQQCAAIwBwMFACQD3cAwDQYJKoZIhvcNAQELBQAD ggEBAAIUYvaX6JWcLPrZr3hAnxhQDo5S3bn0h4SqCIDZRsNMzdt7FELsW8dzOqMW gOdHsfM2h2psLlJFROuoI7Iwb4RlZEVpRVQOLFVVV95qE1ERZY8HoV4Wqr+VvuWS OEGMJrkO20ZZtxJBdm/iO7OK+S9FCD06hQcTqF3PicauAABjYVkte88m2yK04jX6 af0OJzTPSjnYYvcC+SI3pYAhE/A5Ds1xX0tkcD5tHC0uFEafexK3ldsfZ5ah1Pi+ 7w7+z2+xB252i20Ap3ag2F9+8hcYmszoMtUifAaWB6qq5ug2/0zkdNSVVWhKI9np u6D259QdW87NdfV0D2VxJI1XCoM= -----END CERTIFICATE-----Generated at Tue May 7 05:40:30 2024 by rpki-client on console-fra.rpki-client.org