$ rpki-client -vvf rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/4A7F092A776811EFB6FA747DC4F9AE02.roa File: 4A7F092A776811EFB6FA747DC4F9AE02.roa (raw, json) Hash identifier: eXJjjkwH5jRXforBrF78HYiKBo92Atf+IpNaNde3A4I= Subject key identifier: 1D:BA:36:9B:9C:5C:75:C7:9B:0B:A9:06:F0:EC:6A:46:6D:17:1B:54 Certificate issuer: /CN=A91B08F7/serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045 Certificate serial: 038B Authority key identifier: C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/4A7F092A776811EFB6FA747DC4F9AE02.roa Signing time: Fri 20 Sep 2024 15:52:08 +0000 ROA not before: Fri 20 Sep 2024 15:52:08 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 132376 IP address blocks: 103.15.136.0/24 maxlen: 24 103.15.137.0/24 maxlen: 24 103.15.138.0/24 maxlen: 24 103.15.139.0/24 maxlen: 24 2001:df1:5900::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:38:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 907 (0x38b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B08F7/serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045 Validity Not Before: Sep 20 15:52:08 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66ed9a28-f7dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:69:da:9b:a5:f0:00:64:d4:c7:63:37:ad:d7: ed:e0:86:e1:9e:ed:6d:f3:d4:f4:31:85:38:1c:44: d3:20:f6:1a:e9:79:a4:68:6c:85:d9:45:6d:ab:92: f3:05:e3:d9:24:e6:30:30:03:43:81:8c:e7:60:0c: 70:cc:f8:f8:ef:fb:38:de:51:ed:75:aa:9a:a5:5a: 30:e1:6b:2b:9b:50:4b:ea:f6:40:76:e0:28:f2:b4: d4:d7:15:01:d5:07:ac:b0:2e:8b:a3:a8:76:d8:d8: c9:9b:43:e7:88:2a:e7:a2:bd:f6:ab:6f:2d:26:fc: d1:df:a1:83:d0:43:b0:fa:2a:6f:94:3c:82:df:57: 74:2a:8f:3e:eb:2b:70:63:33:0f:e9:4f:e2:71:c1: 57:0d:91:5e:e0:0f:43:70:11:76:27:d8:36:9f:ea: ca:69:32:37:15:98:a7:7c:10:13:84:84:0f:a1:60: 7b:f1:61:25:9c:c0:75:d2:15:9d:46:17:10:04:65: d2:02:7b:9a:91:b4:74:bf:1b:01:ae:78:2d:a0:c6: 94:e7:90:17:4a:30:02:7f:f9:bf:93:8a:dd:51:4d: b4:29:c4:69:2f:47:b6:96:a7:c6:3a:2d:83:27:cd: ea:7b:98:8d:4b:6a:93:52:df:29:0b:82:d9:3d:60: 7a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BA:36:9B:9C:5C:75:C7:9B:0B:A9:06:F0:EC:6A:46:6D:17:1B:54 X509v3 Authority Key Identifier: keyid:C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/4A7F092A776811EFB6FA747DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.15.136.0/22 IPv6: 2001:df1:5900::/48 Signature Algorithm: sha256WithRSAEncryption 2f:c9:71:91:4b:86:ba:2b:6b:06:b0:a2:c2:12:05:b8:64:13: ed:53:d4:13:19:5c:1c:d3:1f:52:61:fb:b6:82:93:2d:5c:84: f7:4e:fb:2c:4c:3d:55:2f:ba:08:1d:5a:4f:c5:7c:9a:e8:3c: 75:ae:eb:c7:17:dd:eb:73:d5:50:ab:39:c6:45:40:19:52:a9: f6:91:19:27:d6:21:f1:d9:d8:b4:af:db:0a:02:a2:24:97:47: be:cd:47:db:09:69:09:20:94:4e:00:40:a4:e2:b0:76:02:8c: 01:b7:04:6f:94:a7:51:44:5a:ba:1e:9d:52:38:42:85:67:49: 1b:4f:b1:7b:1f:6f:f6:4f:3e:c0:4a:2c:76:ee:49:f3:e9:83: fa:ad:f4:38:49:5a:d4:e0:92:cf:7a:b6:7a:cb:a2:80:8f:12: 7f:0d:f3:d7:93:c4:71:be:a1:2c:5c:a2:a5:4e:29:0f:b8:c3: a0:8c:00:84:90:68:64:af:85:34:e6:62:0b:64:4f:42:ad:79: fd:5a:75:08:94:ff:57:4a:52:c0:80:bf:b8:f8:76:12:66:6f: 10:c0:a6:ea:f2:a5:3d:42:09:bc:b0:26:20:6c:22:cd:08:a5: 3a:16:c7:0b:5b:f1:d6:a6:75:cd:9a:b1:5f:81:a3:46:1d:74: 4a:3e:3b:a9 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICA4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA4RjcxMTAvBgNVBAUTKEMyMEREMUUwNTYxODY1QzA1MjJDN0UyNzRCQ0VEMjQ5 MzBCQkYwNDUwHhcNMjQwOTIwMTU1MjA4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmVkOWEyOC1mN2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymnam6XwAGTUx2M3rdft4Ibhnu1t89T0MYU4HETTIPYa6XmkaGyF2UVtq5Lz BePZJOYwMANDgYznYAxwzPj47/s43lHtdaqapVow4Wsrm1BL6vZAduAo8rTU1xUB 1QessC6Lo6h22NjJm0PniCrnor32q28tJvzR36GD0EOw+ipvlDyC31d0Ko8+6ytw YzMP6U/iccFXDZFe4A9DcBF2J9g2n+rKaTI3FZinfBAThIQPoWB78WElnMB10hWd RhcQBGXSAnuakbR0vxsBrngtoMaU55AXSjACf/m/k4rdUU20KcRpL0e2lqfGOi2D J83qe5iNS2qTUt8pC4LZPWB6RQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFB26Npuc XHXHmwupBvDsakZtFxtUMB8GA1UdIwQYMBaAFMIN0eBWGGXAUix+J0vO0kkwu/BF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDhGNy80NzE0MzgwQUQ1 OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi93ZzNSNEZZWVpjQlNMSDRuUzg3U1NUQzc4 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dnM1I0RllZWmNCU0xING5TODdTU1RDNzhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjA4RjcvNDcxNDM4MEFENTk0MTFFNzhFN0M5MTQzQzRGOUFFMDIvNEE3RjA5MkE3 NzY4MTFFRkI2RkE3NDdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJnD4gwDwQCAAIwCQMHACABDfFZADANBgkqhkiG9w0BAQsF AAOCAQEAL8lxkUuGuitrBrCiwhIFuGQT7VPUExlcHNMfUmH7toKTLVyE9077LEw9 VS+6CB1aT8V8mug8da7rxxfd63PVUKs5xkVAGVKp9pEZJ9Yh8dnYtK/bCgKiJJdH vs1H2wlpCSCUTgBApOKwdgKMAbcEb5SnUURauh6dUjhChWdJG0+xex9v9k8+wEos du5J8+mD+q30OEla1OCSz3q2esuigI8Sfw3z15PEcb6hLFyipU4pD7jDoIwAhJBo ZK+FNOZiC2RPQq15/Vp1CJT/V0pSwIC/uPh2EmZvEMCm6vKlPUIJvLAmIGwizQil OhbHC1vx1qZ1zZqxX4GjRh10Sj47qQ== -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:15 2024 by rpki-client on console-ams.rpki-client.org