$ rpki-client -vvf rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/E6F3687CBCE711EAACD6466CC4F9AE02.roa File: E6F3687CBCE711EAACD6466CC4F9AE02.roa (raw, json) Hash identifier: jrXgAGT3lqn2oPe4fiJJc8FiNv+5i0XvozNfLQNBQxY= Subject key identifier: CF:A6:74:0A:1A:3B:CF:A1:23:26:E9:F1:6E:51:19:CF:2E:A5:67:82 Certificate issuer: /CN=A91B289C/serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Certificate serial: 07E3 Authority key identifier: DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/E6F3687CBCE711EAACD6466CC4F9AE02.roa Signing time: Thu 06 Jun 2024 22:59:58 +0000 ROA not before: Thu 06 Jun 2024 22:59:58 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 139056 IP address blocks: 103.139.16.0/23 maxlen: 24 2400:ffa0::/32 maxlen: 32 2400:ffa0::/34 maxlen: 34 2400:ffa0::/36 maxlen: 36 2400:ffa0:1000::/36 maxlen: 36 2400:ffa0:2000::/36 maxlen: 36 2400:ffa0:3000::/36 maxlen: 36 2400:ffa0:4000::/34 maxlen: 34 2400:ffa0:4000::/36 maxlen: 36 2400:ffa0:5000::/36 maxlen: 36 2400:ffa0:6000::/36 maxlen: 36 2400:ffa0:7000::/36 maxlen: 36 2400:ffa0:8000::/34 maxlen: 34 2400:ffa0:8000::/36 maxlen: 36 2400:ffa0:9000::/36 maxlen: 36 2400:ffa0:a000::/36 maxlen: 36 2400:ffa0:b000::/36 maxlen: 36 2400:ffa0:c000::/34 maxlen: 34 2400:ffa0:c000::/36 maxlen: 36 2400:ffa0:d000::/36 maxlen: 36 2400:ffa0:e000::/36 maxlen: 36 2400:ffa0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2019 (0x7e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B289C/serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Validity Not Before: Jun 6 22:59:58 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66623f6e-bff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0e:ca:98:39:76:82:6d:17:aa:dd:7a:89:bb: ce:52:a8:12:dc:ec:0c:f8:6c:3c:23:af:78:9c:fe: 95:0e:61:bf:10:2c:00:8f:e8:fb:d9:49:ac:9b:71: d1:71:7f:38:7f:4e:b5:1f:e1:b4:87:c7:66:f4:64: 15:2b:62:8e:40:34:5a:d8:f3:71:7f:2e:9c:65:71: fa:91:bf:ee:d8:b5:ce:8f:a9:44:69:52:fb:75:ee: df:02:11:f8:e2:be:40:3d:fd:77:c7:19:7f:4d:ef: a0:ec:0e:40:f3:e9:58:11:d7:0a:d1:b0:15:cf:5f: 23:9f:8f:db:2f:05:5c:4e:5b:6c:00:9c:f3:0a:4a: 8b:d2:b4:1c:1a:ad:f2:e1:67:6c:a5:c4:38:88:1f: b3:df:67:1b:a4:35:0b:d0:e3:0b:60:69:ac:9c:27: 67:de:aa:21:63:f8:75:97:90:30:8d:eb:a9:ce:a2: 30:b3:c7:16:38:6f:ae:bb:f0:a6:94:e7:38:14:3f: 83:65:2a:8e:1f:0c:0d:2d:36:3c:99:f7:3a:54:89: da:7e:a9:9a:e1:f9:96:88:20:03:b9:45:3e:90:75: 32:b7:37:bc:83:12:1e:fc:91:71:a9:b4:e1:ec:4e: c6:56:b5:2d:1b:f4:e3:8c:22:1e:d1:ff:fc:5f:f8: 50:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A6:74:0A:1A:3B:CF:A1:23:26:E9:F1:6E:51:19:CF:2E:A5:67:82 X509v3 Authority Key Identifier: keyid:DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/E6F3687CBCE711EAACD6466CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.139.16.0/23 IPv6: 2400:ffa0::/32 Signature Algorithm: sha256WithRSAEncryption 3f:c6:9b:3a:9f:18:7c:e7:c1:cf:cb:4c:a4:1b:db:f0:60:30: de:64:1e:1c:85:56:e9:a9:7b:3a:19:f4:95:6a:d2:40:53:3e: 0e:1e:23:d7:28:86:13:18:35:5d:11:3e:4a:aa:d7:7e:cd:2a: b8:6d:19:90:a6:09:5f:b8:73:43:ae:7e:49:5b:b2:ea:f6:99: ed:a5:16:0d:13:bd:9d:90:ae:73:59:8c:96:26:36:4d:26:ad: 4c:16:46:72:a2:b0:fa:3f:da:db:31:97:7a:92:58:d6:1a:c9: 38:90:07:b3:69:28:1a:35:93:14:b2:1b:be:b1:03:c5:68:84: e0:74:8f:b6:de:74:10:f5:bb:3e:a0:e4:83:02:13:14:91:a8: 14:0f:2f:3c:ec:b7:da:ea:88:38:94:5d:6c:74:01:69:f4:a2: 5e:ed:21:89:9e:68:32:f6:f6:53:06:9c:a1:fa:ac:e4:90:54: 9e:87:a8:9a:0e:5e:15:46:69:9a:15:33:05:73:cc:6a:77:8d: 79:9f:17:82:85:dc:55:63:9e:27:66:5f:95:31:9f:57:18:48: 98:ec:2c:2c:d4:33:f3:bb:6b:35:72:c8:13:30:af:c9:f2:2d: 41:d5:a5:d8:42:56:25:24:b4:17:e5:fa:cd:06:97:fb:05:fd: 7c:e7:a4:db -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICB+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI4OUMxMTAvBgNVBAUTKERCNzJDOEJBRjFEQUY2OTM5ODE4NTJFRTAzMjIzMDMw NUVDODA5MTAwHhcNMjQwNjA2MjI1OTU4WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjYyM2Y2ZS1iZmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqg7KmDl2gm0Xqt16ibvOUqgS3OwM+Gw8I694nP6VDmG/ECwAj+j72Umsm3HR cX84f061H+G0h8dm9GQVK2KOQDRa2PNxfy6cZXH6kb/u2LXOj6lEaVL7de7fAhH4 4r5APf13xxl/Te+g7A5A8+lYEdcK0bAVz18jn4/bLwVcTltsAJzzCkqL0rQcGq3y 4WdspcQ4iB+z32cbpDUL0OMLYGmsnCdn3qohY/h1l5AwjeupzqIws8cWOG+uu/Cm lOc4FD+DZSqOHwwNLTY8mfc6VInafqma4fmWiCADuUU+kHUytze8gxIe/JFxqbTh 7E7GVrUtG/TjjCIe0f/8X/hQZQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFM+mdAoa O8+hIybp8W5RGc8upWeCMB8GA1UdIwQYMBaAFNtyyLrx2vaTmBhS7gMiMDBeyAkQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjg5Qy8zQUIxRTJEQ0JD RTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlwT1lHRkx1QXlJd01GN0lD UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIzTEl1dkhhOXBPWUdGTHVBeUl3TUY3SUNSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjI4OUMvM0FCMUUyRENCQ0U3MTFFQUJFOTcyQzZDQzRGOUFFMDIvRTZGMzY4N0NC Q0U3MTFFQUFDRDY0NjZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnixAwDQQCAAIwBwMFACQA/6AwDQYJKoZIhvcNAQELBQAD ggEBAD/GmzqfGHznwc/LTKQb2/BgMN5kHhyFVumpezoZ9JVq0kBTPg4eI9cohhMY NV0RPkqq137NKrhtGZCmCV+4c0Oufklbsur2me2lFg0TvZ2QrnNZjJYmNk0mrUwW RnKisPo/2tsxl3qSWNYayTiQB7NpKBo1kxSyG76xA8VohOB0j7bedBD1uz6g5IMC ExSRqBQPLzzst9rqiDiUXWx0AWn0ol7tIYmeaDL29lMGnKH6rOSQVJ6HqJoOXhVG aZoVMwVzzGp3jXmfF4KF3FVjnidmX5Uxn1cYSJjsLCzUM/O7azVyyBMwr8nyLUHV pdhCViUktBfl+s0Gl/sF/XznpNs= -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:57 2024 by rpki-client on console-ams.rpki-client.org