$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/D8CC971846AE11EBA761792FC4F9AE02.roa File: D8CC971846AE11EBA761792FC4F9AE02.roa (raw, json) Hash identifier: lyUehFh7P1Nj8wAaGxO9Xwa9iQVVvDVqALRfc9EBW8o= Subject key identifier: CB:68:D7:6D:91:CB:A4:8E:9A:74:82:19:7D:87:0A:77:1F:99:25:9F Certificate issuer: /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Certificate serial: 0BEE Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/D8CC971846AE11EBA761792FC4F9AE02.roa Signing time: Sat 26 Oct 2024 18:58:25 +0000 ROA not before: Sat 26 Oct 2024 18:58:25 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 139678 IP address blocks: 103.143.138.0/23 maxlen: 23 2001:df1:8e80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3054 (0xbee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Validity Not Before: Oct 26 18:58:25 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=671d3bd1-2d5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3c:f7:8c:27:da:87:97:fc:25:91:77:2e:87: b2:a3:e5:da:12:51:55:28:86:d6:09:f3:33:13:f5: d7:af:4e:c6:97:19:72:fd:81:eb:2e:a2:4b:90:44: a2:47:48:b9:e2:4d:7a:44:4e:1a:7e:1d:87:eb:cb: 4b:63:e5:9e:1d:32:7d:5d:ea:e0:11:d7:d0:2b:79: a8:50:91:a8:7d:26:10:df:e4:30:57:e6:76:90:46: 76:3c:16:ad:43:51:17:f6:46:38:11:f4:37:98:79: 05:06:21:29:d0:94:cb:30:7c:8a:9f:a6:5a:d1:8c: 42:3c:07:6b:77:bd:e7:5b:82:11:4d:a0:61:45:91: 99:2f:dc:02:ea:52:e4:37:8f:3f:e2:41:f7:50:21: 92:10:62:e2:ba:fc:c1:65:75:cb:57:ab:1d:1c:c7: 55:6b:41:19:40:c2:6d:7c:47:02:6e:1c:0f:d1:40: e1:a4:90:5d:df:bb:05:ce:b8:06:ea:71:77:24:e6: 60:b9:84:47:19:d1:e8:c9:0b:a3:35:f3:d6:09:36: 08:2c:e9:b7:a9:c5:93:dd:c2:fd:c3:72:67:17:2d: 7e:65:f5:ab:2a:b3:5c:76:1f:61:e6:d5:63:a3:d4: 57:78:40:2c:0a:b3:39:16:f6:76:87:d4:71:6c:b4: 5d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:68:D7:6D:91:CB:A4:8E:9A:74:82:19:7D:87:0A:77:1F:99:25:9F X509v3 Authority Key Identifier: keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/D8CC971846AE11EBA761792FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.143.138.0/23 IPv6: 2001:df1:8e80::/48 Signature Algorithm: sha256WithRSAEncryption 5b:d8:5e:76:3f:3f:e8:c1:1d:e4:e6:2d:d8:de:02:cf:9c:7b: 9c:c2:27:ca:34:e2:3e:5c:b6:dd:94:87:7a:9c:89:08:fc:c4: fe:2e:47:22:ba:7c:97:53:ce:be:cf:32:8a:49:69:20:59:e2: f5:7f:ff:6f:e2:14:7c:4c:f4:f1:87:86:36:95:d9:b7:19:f6: da:43:f4:14:2f:ff:6a:20:15:df:14:ef:24:29:5b:d2:9d:13: 2c:50:fe:1d:7a:52:c1:c4:1c:c7:dc:24:aa:66:ce:49:03:30: 4e:a5:50:ec:6b:04:36:45:1f:c7:b0:85:c1:9d:0f:cb:6e:9f: 1d:1f:a2:53:6b:ab:f7:f1:cd:88:ef:f7:d4:ed:4e:c0:1d:de: fd:a2:1a:54:51:73:da:31:b2:5f:c1:54:f1:06:10:f9:fd:bf: 6d:c6:3d:87:d9:dd:48:ca:cd:10:78:11:02:78:e1:c6:5a:d9: 8b:af:49:56:01:99:21:f0:98:49:e7:ef:ed:f6:92:de:ca:77: f2:c3:e6:32:f4:9b:b3:ed:8c:df:c3:3e:b7:20:c6:3c:2d:28: 45:49:6d:3b:f7:4a:cf:c6:ad:43:a8:3b:a7:59:f0:b4:ed:7c: c4:d2:86:74:74:69:6c:c6:47:98:9a:0a:9a:23:7e:71:c7:f2: 31:86:29:6d -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICC+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBFM0ExMTAvBgNVBAUTKDg3N0YyNUE0MUZCNkRCM0NGNERCNUFEOTIxNDRFRkI3 MUU5MjY3N0EwHhcNMjQxMDI2MTg1ODI1WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFkM2JkMS0yZDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDz3jCfah5f8JZF3Loeyo+XaElFVKIbWCfMzE/XXr07Glxly/YHrLqJLkESi R0i54k16RE4afh2H68tLY+WeHTJ9XergEdfQK3moUJGofSYQ3+QwV+Z2kEZ2PBat Q1EX9kY4EfQ3mHkFBiEp0JTLMHyKn6Za0YxCPAdrd73nW4IRTaBhRZGZL9wC6lLk N48/4kH3UCGSEGLiuvzBZXXLV6sdHMdVa0EZQMJtfEcCbhwP0UDhpJBd37sFzrgG 6nF3JOZguYRHGdHoyQujNfPWCTYILOm3qcWT3cL9w3JnFy1+ZfWrKrNcdh9h5tVj o9RXeEAsCrM5FvZ2h9RxbLRdGQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFMto122R y6SOmnSCGX2HCncfmSWfMB8GA1UdIwQYMBaAFId/JaQftts89Nta2SFE77cekmd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEUzQS84RTQzRjVENjA2 QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6ejAyMXJaSVVUdnR4NlNa M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gzOGxwQi0yMnp6MDIxclpJVVR2dHg2U1ozby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjBFM0EvOEU0M0Y1RDYwNkM0MTFFQThCRUI0MTE4QzRGOUFFMDIvRDhDQzk3MTg0 NkFFMTFFQkE3NjE3OTJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnj4owDwQCAAIwCQMHACABDfGOgDANBgkqhkiG9w0BAQsF AAOCAQEAW9hedj8/6MEd5OYt2N4Cz5x7nMInyjTiPly23ZSHepyJCPzE/i5HIrp8 l1POvs8yiklpIFni9X//b+IUfEz08YeGNpXZtxn22kP0FC//aiAV3xTvJClb0p0T LFD+HXpSwcQcx9wkqmbOSQMwTqVQ7GsENkUfx7CFwZ0Py26fHR+iU2ur9/HNiO/3 1O1OwB3e/aIaVFFz2jGyX8FU8QYQ+f2/bcY9h9ndSMrNEHgRAnjhxlrZi69JVgGZ IfCYSefv7faS3sp38sPmMvSbs+2M38M+tyDGPC0oRUltO/dKz8atQ6g7p1nwtO18 xNKGdHRpbMZHmJoKmiN+ccfyMYYpbQ== -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:15 2024 by rpki-client on console-ams.rpki-client.org