$ rpki-client -vvf rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/9F9FD574758811EA93AADD3FC4F9AE02.roa File: 9F9FD574758811EA93AADD3FC4F9AE02.roa (raw, json) Hash identifier: 1Gen1/T5J9VcUP7yeBxePtjlwSEPjuywH9LIrIKtzGg= Subject key identifier: 3B:2B:96:51:9A:8B:B1:72:4D:37:DE:7D:6F:A9:73:00:E7:3A:C3:6A Certificate issuer: /CN=A91B171C/serialNumber=3FB6F6D06658386C237B8D140DAD15B2838BB5CA Certificate serial: 0A93 Authority key identifier: 3F:B6:F6:D0:66:58:38:6C:23:7B:8D:14:0D:AD:15:B2:83:8B:B5:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/9F9FD574758811EA93AADD3FC4F9AE02.roa Signing time: Sun 04 Aug 2024 19:58:07 +0000 ROA not before: Sun 04 Aug 2024 19:58:07 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 135312 IP address blocks: 103.116.180.0/22 maxlen: 22 103.116.180.0/23 maxlen: 23 103.116.182.0/23 maxlen: 24 2402:fec0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.crl rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2707 (0xa93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B171C/serialNumber=3FB6F6D06658386C237B8D140DAD15B2838BB5CA Validity Not Before: Aug 4 19:58:07 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66afdd4f-1bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:20:d3:53:ea:88:bd:31:18:1e:13:46:e2:99: c9:aa:b9:1f:be:54:c3:21:7c:92:2f:42:e0:7a:9e: 17:13:4c:3e:2a:ad:74:15:15:b5:7d:9f:78:f8:34: 23:3b:ff:90:2c:4b:44:71:8f:06:93:e6:01:a1:cc: 01:d0:09:67:f9:4d:d9:39:8e:a0:cb:5e:fc:f2:91: 36:88:57:ce:5e:20:de:b5:ab:a0:f9:26:6b:38:db: 70:a1:b3:a2:94:3b:3e:5f:77:6e:7f:fb:44:df:85: a7:2f:dd:c7:e7:b0:91:32:1e:a3:03:75:9d:00:1a: 5a:47:09:ed:5d:65:52:0c:60:98:36:e9:c8:9d:2b: 17:8f:63:37:3f:b7:c1:14:8e:54:8b:72:bd:ff:86: c7:55:37:eb:ce:3d:5f:4f:80:7a:8c:95:59:ca:a6: 9d:ad:91:50:71:cd:2b:4a:98:f0:a9:0a:44:42:ab: 0f:31:dc:d6:65:8a:b2:c7:05:78:c7:40:de:36:09: 92:be:77:63:d0:b6:03:b4:2c:90:37:3d:c5:92:71: db:50:5c:2a:d1:62:8a:88:1a:2e:fc:48:b4:dc:e4: 14:d3:73:53:9a:f5:82:b6:75:bd:30:18:a8:eb:5a: ef:54:5a:60:d6:ac:95:63:cf:08:da:e3:95:84:65: 52:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2B:96:51:9A:8B:B1:72:4D:37:DE:7D:6F:A9:73:00:E7:3A:C3:6A X509v3 Authority Key Identifier: keyid:3F:B6:F6:D0:66:58:38:6C:23:7B:8D:14:0D:AD:15:B2:83:8B:B5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/9F9FD574758811EA93AADD3FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.116.180.0/22 IPv6: 2402:fec0::/32 Signature Algorithm: sha256WithRSAEncryption ad:10:84:15:34:ba:2e:ee:e0:27:2c:66:03:d8:ad:36:e3:9c: e9:95:ae:9b:98:4d:9d:ec:bb:07:9f:01:ae:86:d0:7f:b8:fa: c3:36:d8:a4:b0:b1:84:62:82:d8:54:c3:af:6d:dc:00:17:e9: be:2f:7c:88:5b:de:c3:12:dc:b2:a0:4a:85:ab:5b:29:83:a6: 1f:c5:3a:d4:08:21:bc:59:58:da:1e:e3:08:cd:c1:27:92:a7: b0:b0:fc:cc:a3:34:14:8d:93:62:13:19:99:e6:e7:68:ad:68: b5:a2:03:1c:16:fb:d7:a6:76:80:52:01:5f:3c:bc:88:0d:8c: d7:50:5d:99:87:b9:fd:2d:be:ab:f4:9b:6b:6e:e5:ec:bc:b2: 85:84:7d:a6:2f:f5:cf:a9:b2:42:74:20:8b:62:3a:5d:b1:b8: a3:db:5e:38:74:42:2a:63:c5:07:fd:fc:e7:18:cd:a7:84:f4: 0f:e3:13:56:3c:b0:70:0e:65:ea:12:7c:23:7d:4f:5e:3c:c2: 83:5e:32:b3:d9:3e:77:16:3b:43:ff:61:27:08:a3:70:42:3d: ea:7f:1b:fa:14:40:fc:4d:48:ae:44:c7:7d:b1:e4:4b:3f:2a: 83:ac:b7:eb:d5:b4:7f:1d:82:87:4b:70:ea:85:77:01:c1:23: 2f:d5:63:cf -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE3MUMxMTAvBgNVBAUTKDNGQjZGNkQwNjY1ODM4NkMyMzdCOEQxNDBEQUQxNUIy ODM4QkI1Q0EwHhcNMjQwODA0MTk1ODA3WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmFmZGQ0Zi0xYmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCDTU+qIvTEYHhNG4pnJqrkfvlTDIXySL0Lgep4XE0w+Kq10FRW1fZ94+DQj O/+QLEtEcY8Gk+YBocwB0Aln+U3ZOY6gy1788pE2iFfOXiDetaug+SZrONtwobOi lDs+X3duf/tE34WnL93H57CRMh6jA3WdABpaRwntXWVSDGCYNunInSsXj2M3P7fB FI5Ui3K9/4bHVTfrzj1fT4B6jJVZyqadrZFQcc0rSpjwqQpEQqsPMdzWZYqyxwV4 x0DeNgmSvndj0LYDtCyQNz3FknHbUFwq0WKKiBou/Ei03OQU03NTmvWCtnW9MBio 61rvVFpg1qyVY88I2uOVhGVSuwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFDsrllGa i7FyTTfefW+pcwDnOsNqMB8GA1UdIwQYMBaAFD+29tBmWDhsI3uNFA2tFbKDi7XK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTcxQy9FN0VGMDgzNjNF MTUxMUVBQjM3MUE1NDFDNEY5QUUwMi9QN2IyMEdaWU9Hd2plNDBVRGEwVnNvT0x0 Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A3YjIwR1pZT0d3amU0MFVEYTBWc29PTHRjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjE3MUMvRTdFRjA4MzYzRTE1MTFFQUIzNzFBNTQxQzRGOUFFMDIvOUY5RkQ1NzQ3 NTg4MTFFQTkzQUFERDNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJndLQwDQQCAAIwBwMFACQC/sAwDQYJKoZIhvcNAQELBQAD ggEBAK0QhBU0ui7u4CcsZgPYrTbjnOmVrpuYTZ3suwefAa6G0H+4+sM22KSwsYRi gthUw69t3AAX6b4vfIhb3sMS3LKgSoWrWymDph/FOtQIIbxZWNoe4wjNwSeSp7Cw /MyjNBSNk2ITGZnm52itaLWiAxwW+9emdoBSAV88vIgNjNdQXZmHuf0tvqv0m2tu 5ey8soWEfaYv9c+pskJ0IItiOl2xuKPbXjh0QipjxQf9/OcYzaeE9A/jE1Y8sHAO ZeoSfCN9T148woNeMrPZPncWO0P/YScIo3BCPep/G/oUQPxNSK5Ex32x5Es/KoOs t+vVtH8dgodLcOqFdwHBIy/VY88= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:38 2024 by rpki-client on console-ams.rpki-client.org