$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1F27/F77C109AFBA511ED88D0C96DC4F9AE02/ED31BA0AFBAE11ED977DEA10C4F9AE02.roa File: ED31BA0AFBAE11ED977DEA10C4F9AE02.roa (raw, json) Hash identifier: sZ1Qc0QixkblDQbEZ18gwDagCIypsTqT+SHpNFgumsQ= Subject key identifier: 4A:E0:D8:13:C2:E7:35:E7:CA:DD:6E:CD:C2:D0:4E:39:8D:6F:54:EE Certificate issuer: /CN=A91B1F27/serialNumber=9C2DD1827062DB892E38465A10AFE4916835C027 Certificate serial: D2 Authority key identifier: 9C:2D:D1:82:70:62:DB:89:2E:38:46:5A:10:AF:E4:91:68:35:C0:27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nC3RgnBi24kuOEZaEK_kkWg1wCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1F27/F77C109AFBA511ED88D0C96DC4F9AE02/ED31BA0AFBAE11ED977DEA10C4F9AE02.roa Signing time: Sat 29 Jun 2024 06:07:32 +0000 ROA not before: Sat 29 Jun 2024 06:07:32 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 151356 IP address blocks: 103.209.173.0/24 maxlen: 24 2001:df2:8040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1F27/F77C109AFBA511ED88D0C96DC4F9AE02/nC3RgnBi24kuOEZaEK_kkWg1wCc.crl rsync://rpki.apnic.net/member_repository/A91B1F27/F77C109AFBA511ED88D0C96DC4F9AE02/nC3RgnBi24kuOEZaEK_kkWg1wCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nC3RgnBi24kuOEZaEK_kkWg1wCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1F27/serialNumber=9C2DD1827062DB892E38465A10AFE4916835C027 Validity Not Before: Jun 29 06:07:32 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=667fa4a4-b28f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ae:14:61:2a:13:69:67:b2:e3:97:e3:e2:81: 69:4f:36:0d:97:dc:93:fa:db:08:52:b8:f8:6d:43: b3:80:ec:1c:d0:e3:4f:59:d2:f8:13:1d:1a:27:5b: 71:5e:b5:0e:c8:65:9b:23:bb:63:4e:96:49:cf:94: 74:42:14:c1:ed:18:cb:1d:67:e6:e8:81:1b:27:d0: 2e:75:d0:39:58:88:22:4a:98:a6:e8:46:8b:4b:d0: a2:db:40:dc:8f:20:8f:34:17:13:f1:15:4c:47:d9: 82:8c:47:ea:ab:57:47:a1:ac:aa:86:2a:1a:ab:91: 19:c6:39:4b:bf:62:ed:c1:6e:ef:38:45:65:2e:d1: 16:c1:78:b6:78:dc:ee:a9:3e:1e:50:aa:21:24:fc: 4d:cd:7f:a9:ef:f2:f0:76:3d:b1:32:f0:86:4d:65: 38:cb:d2:c7:e3:d7:ba:99:c0:ac:00:54:15:2c:3b: 8f:fc:dd:89:d7:6f:79:f4:52:e8:18:38:ba:1c:84: c1:bb:44:88:5e:5b:3d:df:b3:4b:fe:2d:97:4c:57: cd:c4:05:61:ae:98:a0:f6:5f:ff:00:45:14:b9:c8: 4d:3b:76:f7:7e:d2:72:87:fc:45:f2:b8:53:61:0f: e1:e7:a2:d3:8f:86:3d:48:80:54:64:98:ec:fe:ab: 4b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E0:D8:13:C2:E7:35:E7:CA:DD:6E:CD:C2:D0:4E:39:8D:6F:54:EE X509v3 Authority Key Identifier: keyid:9C:2D:D1:82:70:62:DB:89:2E:38:46:5A:10:AF:E4:91:68:35:C0:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1F27/F77C109AFBA511ED88D0C96DC4F9AE02/nC3RgnBi24kuOEZaEK_kkWg1wCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nC3RgnBi24kuOEZaEK_kkWg1wCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F27/F77C109AFBA511ED88D0C96DC4F9AE02/ED31BA0AFBAE11ED977DEA10C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.209.173.0/24 IPv6: 2001:df2:8040::/48 Signature Algorithm: sha256WithRSAEncryption b2:37:8c:38:e5:2d:03:cf:07:12:fc:9a:c3:1d:4d:de:1e:66: 8c:9b:40:70:3f:55:5c:26:a6:77:a4:e9:2d:2e:5c:ca:9d:93: 13:cb:e5:6f:df:5d:6b:f3:20:e5:5c:a4:89:25:1c:fb:fe:db: 95:36:9e:09:7f:b8:b3:fe:4a:09:05:a2:60:48:68:04:2c:8e: 07:31:95:1d:73:61:34:f5:9d:29:1e:17:d6:f3:f1:36:f1:c7: 6d:0a:43:4e:20:b0:ad:ff:dd:e9:11:3e:97:3f:52:86:ad:67: d6:60:a8:93:04:b8:6c:a1:43:1f:fa:f6:8e:48:a1:f2:cc:06: c5:32:63:59:94:24:3a:81:d4:77:42:55:b0:6c:e4:3d:b2:b2: 74:44:7c:14:85:5f:79:ce:cb:7f:de:e4:ea:de:2d:4a:55:c2: ec:8e:dd:47:77:33:07:c1:e0:c1:bd:13:a4:c9:c0:d1:39:30: 46:e6:bf:26:31:28:fc:c3:73:1e:1d:f0:01:26:7f:df:8f:bc: 81:85:f5:51:aa:50:5d:cb:78:21:af:d2:22:81:06:53:2d:31: 02:24:ab:08:b1:57:50:5c:3d:67:f3:4e:98:aa:71:34:d5:a8: c3:10:58:b9:b3:90:48:48:01:27:ab:80:b4:b4:d3:d9:00:0c: f2:f6:80:6a -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGMjcxMTAvBgNVBAUTKDlDMkREMTgyNzA2MkRCODkyRTM4NDY1QTEwQUZFNDkx NjgzNUMwMjcwHhcNMjQwNjI5MDYwNzMyWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjdmYTRhNC1iMjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv64UYSoTaWey45fj4oFpTzYNl9yT+tsIUrj4bUOzgOwc0ONPWdL4Ex0aJ1tx XrUOyGWbI7tjTpZJz5R0QhTB7RjLHWfm6IEbJ9AuddA5WIgiSpim6EaLS9Ci20Dc jyCPNBcT8RVMR9mCjEfqq1dHoayqhioaq5EZxjlLv2LtwW7vOEVlLtEWwXi2eNzu qT4eUKohJPxNzX+p7/Lwdj2xMvCGTWU4y9LH49e6mcCsAFQVLDuP/N2J12959FLo GDi6HITBu0SIXls937NL/i2XTFfNxAVhrpig9l//AEUUuchNO3b3ftJyh/xF8rhT YQ/h56LTj4Y9SIBUZJjs/qtL4wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFErg2BPC 5zXnyt1uzcLQTjmNb1TuMB8GA1UdIwQYMBaAFJwt0YJwYtuJLjhGWhCv5JFoNcAn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUYyNy9GNzdDMTA5QUZC QTUxMUVEODhEMEM5NkRDNEY5QUUwMi9uQzNSZ25CaTI0a3VPRVphRUtfa2tXZzF3 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25DM1JnbkJpMjRrdU9FWmFFS19ra1dnMXdDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjFGMjcvRjc3QzEwOUFGQkE1MTFFRDg4RDBDOTZEQzRGOUFFMDIvRUQzMUJBMEFG QkFFMTFFRDk3N0RFQTEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABn0a0wDwQCAAIwCQMHACABDfKAQDANBgkqhkiG9w0BAQsF AAOCAQEAsjeMOOUtA88HEvyawx1N3h5mjJtAcD9VXCamd6TpLS5cyp2TE8vlb99d a/Mg5VykiSUc+/7blTaeCX+4s/5KCQWiYEhoBCyOBzGVHXNhNPWdKR4X1vPxNvHH bQpDTiCwrf/d6RE+lz9Shq1n1mCokwS4bKFDH/r2jkih8swGxTJjWZQkOoHUd0JV sGzkPbKydER8FIVfec7Lf97k6t4tSlXC7I7dR3czB8Hgwb0TpMnA0TkwRua/JjEo /MNzHh3wASZ/34+8gYX1UapQXct4Ia/SIoEGUy0xAiSrCLFXUFw9Z/NOmKpxNNWo wxBYubOQSEgBJ6uAtLTT2QAM8vaAag== -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:48 2024 by rpki-client on console-ams.rpki-client.org