$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/727EECD2678811EF99602F53C4F9AE02.roa File: 727EECD2678811EF99602F53C4F9AE02.roa (raw, json) Hash identifier: WvAkrs/LiVkRHkVog2xW2/ey9F5S8FH9WKoT4JG9/2M= Subject key identifier: 56:7A:8C:57:3B:B7:38:C1:B6:09:F6:97:18:30:4D:79:DA:C5:A0:F5 Certificate issuer: /CN=A91B2252/serialNumber=308A0F042371D744E4CB62AB51E904F70CACD37A Certificate serial: 0769 Authority key identifier: 30:8A:0F:04:23:71:D7:44:E4:CB:62:AB:51:E9:04:F7:0C:AC:D3:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MIoPBCNx10Tky2KrUekE9wys03o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/727EECD2678811EF99602F53C4F9AE02.roa Signing time: Wed 06 Nov 2024 15:29:40 +0000 ROA not before: Wed 06 Nov 2024 15:29:40 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 140948 IP address blocks: 103.153.196.0/23 maxlen: 23 103.153.196.0/24 maxlen: 24 103.153.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.crl rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MIoPBCNx10Tky2KrUekE9wys03o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1897 (0x769) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2252/serialNumber=308A0F042371D744E4CB62AB51E904F70CACD37A Validity Not Before: Nov 6 15:29:40 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=672b8b64-9337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f4:9d:1e:bd:a8:78:78:dd:7d:6e:c5:c5:0b: 97:80:5f:26:5e:30:a0:2c:d3:9e:79:16:94:71:fa: 67:d8:94:59:bc:eb:dd:49:b3:f7:b4:e6:e2:b7:7f: 0a:b9:2c:26:c0:67:b5:80:db:d7:cf:72:20:0e:4b: 22:54:03:dd:e3:b5:60:c3:32:69:c0:06:8d:47:9f: 63:55:e5:d8:94:c8:3d:d6:18:b6:5b:8a:05:96:b7: 84:86:83:81:58:aa:66:2a:5b:45:51:a9:96:14:36: 38:a7:ba:92:65:87:8c:3d:4e:42:b9:5d:03:a1:ef: 84:f6:7a:fc:ec:aa:44:84:be:27:67:e6:ae:85:2f: 91:83:5e:8a:1d:db:9d:b5:f5:7a:c9:2f:93:86:76: c9:69:68:1a:1a:11:7e:dc:f0:7b:32:f8:1c:d7:01: 05:a0:72:32:fd:79:c3:49:8f:28:12:27:eb:eb:17: d8:6e:e9:f9:9d:0c:0c:cd:82:0e:bc:a1:81:4a:26: 80:46:51:ee:c7:e4:4e:99:47:ee:c7:e5:bc:f4:d2: c7:18:15:ca:08:20:7f:6b:fe:b9:a0:57:12:dd:e7: 08:b7:64:53:0a:36:4f:24:f6:8a:3b:62:8d:01:f6: 1b:1b:b3:4f:e9:71:e2:e3:2f:70:f0:77:8d:de:40: a9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:7A:8C:57:3B:B7:38:C1:B6:09:F6:97:18:30:4D:79:DA:C5:A0:F5 X509v3 Authority Key Identifier: keyid:30:8A:0F:04:23:71:D7:44:E4:CB:62:AB:51:E9:04:F7:0C:AC:D3:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MIoPBCNx10Tky2KrUekE9wys03o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/727EECD2678811EF99602F53C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.196.0/23 Signature Algorithm: sha256WithRSAEncryption 39:e8:51:c2:a9:6c:79:6d:59:46:69:f6:0c:42:20:1b:c2:a1: db:03:dc:25:37:f0:6d:fa:32:4a:74:c2:eb:6c:0b:3f:1a:e1: 65:b9:01:55:4e:85:ed:91:26:56:44:00:a2:47:8e:92:1b:11: 8a:4e:41:b6:69:a8:f3:83:3e:2f:e5:b1:01:ac:57:5a:b7:ed: 3c:5c:c2:43:22:ee:45:d2:bf:3a:bc:56:79:01:a6:30:7f:45: 54:26:b0:03:c5:61:95:fa:78:a7:f3:a7:99:0d:a0:51:af:0b: e1:08:0e:91:35:3d:0c:ef:19:52:91:d3:c3:41:6d:41:e7:7a: 4d:1c:cd:2c:86:df:4f:4e:cd:d5:9b:bd:b3:fb:c7:f5:44:d7: b3:15:39:8d:cf:0f:85:98:cb:9c:20:cf:48:e0:29:ff:5e:cf: 10:05:d4:35:a7:44:3d:1f:a9:a2:cd:b9:03:34:d0:e4:3b:d0: 94:7e:c3:d9:32:b1:f5:76:96:cc:71:09:7a:b8:f5:18:27:63: 0b:f8:ad:d4:a8:dd:e1:27:fb:59:0e:ea:23:8b:17:9f:bf:22: c9:1d:a3:3d:f2:c7:e2:31:dd:ba:e9:08:92:4c:43:ce:fe:90: eb:12:11:95:49:25:87:a3:4b:21:f8:13:9f:e1:fe:1f:10:f9: 40:3c:52:fb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjIyNTIxMTAvBgNVBAUTKDMwOEEwRjA0MjM3MUQ3NDRFNENCNjJBQjUxRTkwNEY3 MENBQ0QzN0EwHhcNMjQxMTA2MTUyOTQwWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJiOGI2NC05MzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/SdHr2oeHjdfW7FxQuXgF8mXjCgLNOeeRaUcfpn2JRZvOvdSbP3tObit38K uSwmwGe1gNvXz3IgDksiVAPd47VgwzJpwAaNR59jVeXYlMg91hi2W4oFlreEhoOB WKpmKltFUamWFDY4p7qSZYeMPU5CuV0Doe+E9nr87KpEhL4nZ+auhS+Rg16KHdud tfV6yS+ThnbJaWgaGhF+3PB7Mvgc1wEFoHIy/XnDSY8oEifr6xfYbun5nQwMzYIO vKGBSiaARlHux+ROmUfux+W89NLHGBXKCCB/a/65oFcS3ecIt2RTCjZPJPaKO2KN AfYbG7NP6XHi4y9w8HeN3kCpEwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFZ6jFc7 tzjBtgn2lxgwTXnaxaD1MB8GA1UdIwQYMBaAFDCKDwQjcddE5Mtiq1HpBPcMrNN6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjI1Mi9DNThGOEI3QUY2 M0ExMUVBQjcwQTM2MUZDNEY5QUUwMi9NSW9QQkNOeDEwVGt5MktyVWVrRTl3eXMw M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01Jb1BCQ054MTBUa3kyS3JVZWtFOXd5czAzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjIyNTIvQzU4RjhCN0FGNjNBMTFFQUI3MEEzNjFGQzRGOUFFMDIvNzI3RUVDRDI2 Nzg4MTFFRjk5NjAyRjUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmcQwDQYJKoZIhvcNAQELBQADggEBADnoUcKpbHltWUZp 9gxCIBvCodsD3CU38G36Mkp0wutsCz8a4WW5AVVOhe2RJlZEAKJHjpIbEYpOQbZp qPODPi/lsQGsV1q37TxcwkMi7kXSvzq8VnkBpjB/RVQmsAPFYZX6eKfzp5kNoFGv C+EIDpE1PQzvGVKR08NBbUHnek0czSyG309OzdWbvbP7x/VE17MVOY3PD4WYy5wg z0jgKf9ezxAF1DWnRD0fqaLNuQM00OQ70JR+w9kysfV2lsxxCXq49RgnYwv4rdSo 3eEn+1kO6iOLF5+/Iskdoz3yx+Ix3brpCJJMQ87+kOsSEZVJJYejSyH4E5/h/h8Q +UA8Uvs= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:38 2024 by rpki-client on console-ams.rpki-client.org