$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/81E9653E5B8A11EB857A3F77C4F9AE02.roa File: 81E9653E5B8A11EB857A3F77C4F9AE02.roa (raw, json) Hash identifier: hFkz2Rxz8bjHa9W5ewxpkxAw84TOeg9mnyL9BGUNw+E= Subject key identifier: EA:9B:F5:99:FB:5C:8E:F6:86:75:90:C9:62:89:EE:59:8E:8E:A3:92 Certificate issuer: /CN=A91AD643/serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F Certificate serial: 0649 Authority key identifier: 39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/81E9653E5B8A11EB857A3F77C4F9AE02.roa Signing time: Sat 31 Aug 2024 00:01:47 +0000 ROA not before: Sat 31 Aug 2024 00:01:47 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 140220 IP address blocks: 103.192.152.0/22 maxlen: 24 103.196.80.0/22 maxlen: 24 202.182.80.0/20 maxlen: 24 2405:da40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1609 (0x649) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD643/serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F Validity Not Before: Aug 31 00:01:47 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66d25d6b-ad3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5a:5f:d7:f0:87:5a:d9:24:fa:79:b8:71:c1: d6:77:57:04:64:1f:c8:62:5e:00:76:8d:84:f4:d6: 5c:bd:84:50:0e:23:c0:a6:06:9b:41:90:92:9a:dc: aa:9d:12:e7:f0:07:2f:88:9c:2e:23:f5:71:fc:04: 19:0f:e3:14:78:91:4d:e3:28:bb:02:1f:4f:72:52: 6c:df:40:65:6e:d1:df:80:78:fd:ac:37:16:8f:69: 2a:eb:e5:27:9b:a0:51:67:33:95:39:c7:55:ee:c9: 3d:44:5f:42:fd:e8:07:6a:b9:68:fb:1e:1e:e8:c6: fa:ad:89:27:c0:ec:c3:ca:62:7d:61:72:8a:b6:82: a2:12:57:6c:24:ea:7b:e3:2f:10:36:ee:32:77:3a: 25:a9:e6:d5:0a:a2:02:30:20:15:f3:7a:96:2b:15: 01:e5:0d:0f:c4:fa:3a:dc:b3:67:f0:f3:31:b0:9b: 10:7e:36:bd:11:7c:5d:db:9b:84:75:20:c7:30:6b: c7:81:4c:9e:df:28:36:e8:ee:ee:ed:3a:66:c7:1d: d2:ad:60:59:c8:27:b5:5a:33:07:1a:7d:d6:83:4c: 93:be:f9:cd:e0:42:9b:0a:c6:e2:c9:47:5a:63:f6: 15:88:74:08:36:80:d6:32:e4:5f:f7:b4:79:59:8d: 80:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9B:F5:99:FB:5C:8E:F6:86:75:90:C9:62:89:EE:59:8E:8E:A3:92 X509v3 Authority Key Identifier: keyid:39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/81E9653E5B8A11EB857A3F77C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.192.152.0/22 103.196.80.0/22 202.182.80.0/20 IPv6: 2405:da40::/32 Signature Algorithm: sha256WithRSAEncryption 5a:24:6e:7e:29:fa:40:8b:de:c2:b9:b2:56:52:fc:d6:0e:92: 2f:7e:34:c2:f3:5e:a4:8a:4b:88:b2:79:07:bb:ef:93:40:6d: 66:73:23:da:bc:c1:c7:df:89:22:63:57:82:12:e6:7c:88:c0: 8d:0b:8a:e2:d0:51:07:89:bd:21:6a:d5:11:3d:32:5a:78:16: 0f:6c:e3:92:a0:57:08:ba:42:72:0d:0c:da:db:e2:ce:33:75: 01:36:d2:fd:f7:f6:f6:ab:17:b4:84:aa:86:2c:1f:ea:1a:31: 73:5c:e6:38:9c:77:38:c3:f1:61:ff:7e:41:ca:c7:95:1f:ec: d5:d6:02:31:af:44:c0:cd:5a:48:9b:a1:10:ce:87:79:c5:05: e2:82:08:98:2d:c3:8c:bc:8c:b6:b8:02:e2:ee:75:e7:53:ee: 96:75:e2:9f:7e:03:51:a1:4d:b5:85:03:da:11:29:94:6c:b7: 3a:80:3d:0f:4d:da:59:d9:8d:ed:73:ea:81:d3:9f:d9:d9:5f: 62:6c:35:30:f6:47:78:3d:41:c0:e6:f6:3a:f6:7c:f8:95:18: 72:af:88:4f:d5:42:2e:7f:e5:c9:ed:51:f2:d3:6d:e0:ba:64: 05:38:d7:8e:d8:a5:85:d3:6a:07:ed:bd:48:06:31:1f:a2:70: 71:0e:43:f9 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICBkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ2NDMxMTAvBgNVBAUTKDM5RDc0NjhDRjgwQzUwNTVFOUQwNEM5QjRGQUQzMTE3 NUMxNEQ2NUYwHhcNMjQwODMxMDAwMTQ3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQyNWQ2Yi1hZDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlpf1/CHWtkk+nm4ccHWd1cEZB/IYl4Ado2E9NZcvYRQDiPApgabQZCSmtyq nRLn8AcviJwuI/Vx/AQZD+MUeJFN4yi7Ah9PclJs30BlbtHfgHj9rDcWj2kq6+Un m6BRZzOVOcdV7sk9RF9C/egHarlo+x4e6Mb6rYknwOzDymJ9YXKKtoKiEldsJOp7 4y8QNu4ydzolqebVCqICMCAV83qWKxUB5Q0PxPo63LNn8PMxsJsQfja9EXxd25uE dSDHMGvHgUye3yg26O7u7Tpmxx3SrWBZyCe1WjMHGn3Wg0yTvvnN4EKbCsbiyUda Y/YViHQINoDWMuRf97R5WY2ALQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFOqb9Zn7 XI72hnWQyWKJ7lmOjqOSMB8GA1UdIwQYMBaAFDnXRoz4DFBV6dBMm0+tMRdcFNZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDY0My9FRkJFNkVCMjVC ODgxMUVCQkQ1RjMwNzZDNEY5QUUwMi9PZGRHalBnTVVGWHAwRXliVDYweEYxd1Ux bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kZEdqUGdNVUZYcDBFeWJUNjB4RjF3VTFsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUQ2NDMvRUZCRTZFQjI1Qjg4MTFFQkJENUYzMDc2QzRGOUFFMDIvODFFOTY1M0U1 QjhBMTFFQjg1N0EzRjc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAJnwJgDBAJnxFADBATKtlAwDQQCAAIwBwMFACQF2kAwDQYJ KoZIhvcNAQELBQADggEBAFokbn4p+kCL3sK5slZS/NYOki9+NMLzXqSKS4iyeQe7 75NAbWZzI9q8wcffiSJjV4IS5nyIwI0LiuLQUQeJvSFq1RE9Mlp4Fg9s45KgVwi6 QnINDNrb4s4zdQE20v339varF7SEqoYsH+oaMXNc5jicdzjD8WH/fkHKx5Uf7NXW AjGvRMDNWkiboRDOh3nFBeKCCJgtw4y8jLa4AuLudedT7pZ14p9+A1GhTbWFA9oR KZRstzqAPQ9N2lnZje1z6oHTn9nZX2JsNTD2R3g9QcDm9jr2fPiVGHKviE/VQi5/ 5cntUfLTbeC6ZAU4147YpYXTagftvUgGMR+icHEOQ/k= -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:47 2024 by rpki-client on console-ams.rpki-client.org