$ rpki-client -vvf rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/E328AA42736E11ECAC882873C4F9AE02.roa File: E328AA42736E11ECAC882873C4F9AE02.roa (raw, json) Hash identifier: f0/n5lVTBxbjhcpmfZ+kSpTBRPepCF6zVmYHNO/9mws= Subject key identifier: 1D:F6:88:E8:B5:7B:56:0B:F9:0E:34:45:E9:4F:3E:BE:95:C3:31:0F Certificate issuer: /CN=A91B08F7/serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045 Certificate serial: 037D Authority key identifier: C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/E328AA42736E11ECAC882873C4F9AE02.roa Signing time: Mon 26 Aug 2024 17:24:37 +0000 ROA not before: Mon 26 Aug 2024 17:24:37 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 132376 IP address blocks: 103.15.136.0/24 maxlen: 24 103.15.137.0/24 maxlen: 24 103.15.138.0/24 maxlen: 24 103.15.139.0/25 maxlen: 25 2001:df1:5900::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Sep 2024 16:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 893 (0x37d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B08F7/serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045 Validity Not Before: Aug 26 17:24:37 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66ccba54-ea84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:56:3c:9f:f4:d8:04:f0:18:d4:db:e0:d8:2d: 19:16:2a:64:7b:01:76:a5:53:db:32:7f:eb:bf:78: b4:b3:5e:ed:f0:39:ac:59:51:ec:41:59:64:3d:8c: e9:90:af:9c:13:e5:82:4f:54:d0:b7:f3:56:ef:77: f3:b0:80:4d:ff:4f:5b:ce:09:4d:f9:29:5d:3a:44: 8f:ed:46:87:03:44:28:0d:4f:8d:d1:63:af:c2:98: e1:e9:a7:f3:f9:1f:20:7d:9c:de:36:8f:a3:b0:94: de:07:78:f1:ac:75:a5:61:fa:77:33:62:4e:5d:54: 65:d4:7b:f4:4e:77:be:fb:86:85:f7:f8:54:6a:53: 10:d3:17:0e:55:39:45:77:77:39:65:ce:8e:92:c5: e3:f0:fc:e2:2c:ff:bb:38:e3:af:b0:eb:cb:92:33: bf:30:d4:ae:66:34:9a:57:09:e4:2c:7c:ed:0d:29: d9:d3:36:bd:4f:e1:2f:6b:53:d3:fd:a2:90:42:d6: 32:0a:b9:4f:44:9c:64:7f:c5:5a:81:b7:7c:8e:1d: 2a:be:55:5b:67:c7:54:4b:86:21:ef:95:71:d8:ec: 85:7f:5a:c5:40:46:34:9f:7a:b8:d3:48:e4:af:f3: e6:17:00:01:a8:cd:27:75:45:c2:e3:69:14:14:79: e2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F6:88:E8:B5:7B:56:0B:F9:0E:34:45:E9:4F:3E:BE:95:C3:31:0F X509v3 Authority Key Identifier: keyid:C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/E328AA42736E11ECAC882873C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.15.136.0-103.15.139.127 IPv6: 2001:df1:5900::/48 Signature Algorithm: sha256WithRSAEncryption 10:51:fe:c9:e0:0a:86:91:78:34:90:ad:ee:d7:42:ed:24:67: 69:57:62:93:9d:e9:eb:83:3c:76:32:d2:57:78:d0:d3:29:b3: ce:87:d8:08:6a:bd:1a:44:f0:66:81:e2:e8:27:cb:a5:7e:ef: f5:11:5a:ed:f1:9a:31:19:bb:51:28:49:18:06:24:77:a7:17: 19:d2:99:6c:b9:91:23:e0:1d:6c:89:0d:7c:e1:69:5f:92:16: 0d:3e:d4:d1:9d:bf:13:0e:c3:d1:59:c3:b5:b5:3d:4c:ac:5f: 1f:11:c6:67:4e:74:3a:39:83:b5:4d:c6:b2:f9:a5:78:e2:08: 34:31:65:dc:9e:f4:51:93:c6:52:05:03:dd:23:c9:3a:15:00: 44:00:f2:51:5f:fb:6a:7f:4e:04:28:ba:ab:92:6e:a4:2a:cd: 9c:e4:8c:6a:f5:d3:59:fe:3c:eb:9c:d3:6e:71:c1:25:a5:ee: e9:11:b7:89:e5:5a:e1:0c:f7:b3:7d:81:85:7d:34:c6:2f:a6: 2f:cd:93:91:32:5d:03:03:e7:0f:91:8f:6a:14:c1:d8:08:bc: 60:21:b2:65:5f:77:4a:bd:cc:8d:a0:26:b9:e4:fb:f4:85:9e: 17:26:f1:cb:b6:22:0a:a0:3a:fd:0c:52:f0:86:0d:fa:f6:d8: 2f:2c:47:68 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICA30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA4RjcxMTAvBgNVBAUTKEMyMEREMUUwNTYxODY1QzA1MjJDN0UyNzRCQ0VEMjQ5 MzBCQkYwNDUwHhcNMjQwODI2MTcyNDM3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmNjYmE1NC1lYTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1Y8n/TYBPAY1Nvg2C0ZFipkewF2pVPbMn/rv3i0s17t8DmsWVHsQVlkPYzp kK+cE+WCT1TQt/NW73fzsIBN/09bzglN+SldOkSP7UaHA0QoDU+N0WOvwpjh6afz +R8gfZzeNo+jsJTeB3jxrHWlYfp3M2JOXVRl1Hv0Tne++4aF9/hUalMQ0xcOVTlF d3c5Zc6OksXj8PziLP+7OOOvsOvLkjO/MNSuZjSaVwnkLHztDSnZ0za9T+Eva1PT /aKQQtYyCrlPRJxkf8Vagbd8jh0qvlVbZ8dUS4Yh75Vx2OyFf1rFQEY0n3q400jk r/PmFwABqM0ndUXC42kUFHniPQIDAQABo4ICrzCCAqswHQYDVR0OBBYEFB32iOi1 e1YL+Q40RelPPr6VwzEPMB8GA1UdIwQYMBaAFMIN0eBWGGXAUix+J0vO0kkwu/BF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDhGNy80NzE0MzgwQUQ1 OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi93ZzNSNEZZWVpjQlNMSDRuUzg3U1NUQzc4 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dnM1I0RllZWmNCU0xING5TODdTU1RDNzhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjA4RjcvNDcxNDM4MEFENTk0MTFFNzhFN0M5MTQzQzRGOUFFMDIvRTMyOEFBNDI3 MzZFMTFFQ0FDODgyODczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMBUEAgABMA8wDQMEA2cPiAMFB2cPiwAwDwQCAAIwCQMHACABDfFZADANBgkq hkiG9w0BAQsFAAOCAQEAEFH+yeAKhpF4NJCt7tdC7SRnaVdik53p64M8djLSV3jQ 0ymzzofYCGq9GkTwZoHi6CfLpX7v9RFa7fGaMRm7UShJGAYkd6cXGdKZbLmRI+Ad bIkNfOFpX5IWDT7U0Z2/Ew7D0VnDtbU9TKxfHxHGZ050OjmDtU3GsvmleOIINDFl 3J70UZPGUgUD3SPJOhUARADyUV/7an9OBCi6q5JupCrNnOSMavXTWf4865zTbnHB JaXu6RG3ieVa4Qz3s32BhX00xi+mL82TkTJdAwPnD5GPahTB2Ai8YCGyZV93Sr3M jaAmueT79IWeFybxy7YiCqA6/QxS8IYN+vbYLyxHaA== -----END CERTIFICATE-----Generated at Fri Sep 20 21:35:09 2024 by rpki-client on console-ams.rpki-client.org