$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/6B096E780B8511EA97C80D52C4F9AE02.roa File: 6B096E780B8511EA97C80D52C4F9AE02.roa (raw, json) Hash identifier: CGLLokfgShSr9P6fBc5/PYvScLDu5ED9TA/KTb1fwgY= Subject key identifier: F8:E3:A1:60:5E:BF:BC:CE:F2:A7:D2:11:71:17:4D:59:36:AF:CC:D1 Certificate issuer: /CN=A91B3AD7/serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876 Certificate serial: 0BE6 Authority key identifier: 9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/6B096E780B8511EA97C80D52C4F9AE02.roa Signing time: Mon 16 Dec 2024 18:56:45 +0000 ROA not before: Mon 16 Dec 2024 18:56:45 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 138346 IP address blocks: 103.123.168.0/22 maxlen: 22 103.123.168.0/23 maxlen: 23 103.123.168.0/24 maxlen: 24 103.123.169.0/24 maxlen: 24 103.123.170.0/24 maxlen: 24 103.123.171.0/24 maxlen: 24 2403:a540::/32 maxlen: 32 2403:a540::/33 maxlen: 33 2403:a540::/34 maxlen: 34 2403:a540::/40 maxlen: 40 2403:a540::/48 maxlen: 48 2403:a540:3::/48 maxlen: 48 2403:a540:4::/48 maxlen: 48 2403:a540:5::/48 maxlen: 48 2403:a540:6::/48 maxlen: 48 2403:a540:7::/48 maxlen: 48 2403:a540:8::/48 maxlen: 48 2403:a540:204::/48 maxlen: 48 2403:a540:20f::/48 maxlen: 48 2403:a540:21f::/48 maxlen: 48 2403:a540:4000::/34 maxlen: 34 2403:a540:8000::/33 maxlen: 33 2403:a540:8000::/34 maxlen: 34 2403:a540:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3046 (0xbe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3AD7 Validity Not Before: Dec 16 18:56:45 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=676077ec-3193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:78:5b:17:b5:ed:4c:ca:3f:c5:76:43:5a:b9: 10:0f:55:d3:a2:dd:78:25:1f:a2:76:50:bb:88:62: 4e:b7:5d:c5:4e:28:ff:67:f9:46:02:be:c2:86:fb: 82:e7:a3:cc:b6:86:e6:d0:52:6d:ea:0f:11:cc:c2: b7:62:af:7e:b2:b2:dc:a5:94:44:58:51:5e:68:0f: 5e:41:d2:b4:80:9b:1f:32:74:ee:3f:b6:54:15:e0: a0:9f:42:f8:f3:d5:ba:6e:7d:b7:ba:a5:ab:86:fb: 83:27:af:d5:63:b4:88:65:af:2a:32:c2:ab:84:07: 4b:40:ae:17:50:1f:16:fb:2f:5b:36:55:3e:64:c6: e7:88:ee:fa:21:ee:45:8b:57:ab:96:66:a7:1c:f5: 5f:c4:37:92:8f:be:3f:c1:6a:bb:a4:d7:03:90:45: c1:e6:a1:cf:0e:e2:83:ae:5e:d2:c5:17:df:fe:07: eb:e9:d3:48:ae:d7:ea:d4:d3:2c:bb:ab:dc:78:7a: 51:8e:88:f9:a5:8c:1d:f1:cf:86:8b:59:66:56:cb: c3:af:71:77:49:f9:69:1b:3f:8f:e0:ca:42:61:56: 0f:39:01:b7:89:fe:02:a2:2e:e7:fc:fd:bf:71:f2: b7:5f:75:8f:a7:bb:0a:cb:12:ad:12:31:f1:9d:62: 53:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E3:A1:60:5E:BF:BC:CE:F2:A7:D2:11:71:17:4D:59:36:AF:CC:D1 X509v3 Authority Key Identifier: keyid:9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/6B096E780B8511EA97C80D52C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.123.168.0/22 IPv6: 2403:a540::/32 Signature Algorithm: sha256WithRSAEncryption 90:4d:f7:01:57:f5:e6:94:5d:19:b1:a7:fa:ca:44:62:e5:8e: 8a:aa:f8:a2:31:eb:f2:c8:4b:34:99:98:49:16:a4:53:5c:3d: 6a:1b:6f:48:fd:bc:32:7c:45:32:47:3e:ee:d5:3d:f8:46:ef: f0:d1:77:c1:b8:d5:24:14:60:40:8b:fd:28:55:a9:6b:9d:69: ab:2b:41:f8:ba:c7:c1:f1:f7:7d:8c:0c:ed:66:07:0c:3d:36: a0:f7:9a:3c:c2:fb:98:fb:f5:33:07:e1:e4:c1:0d:31:49:2c: 23:13:6a:84:7c:83:57:e1:6f:24:87:ac:bd:41:7b:f1:35:b2: e2:0d:1e:27:99:7d:db:db:06:e5:85:4e:ac:63:c5:98:1f:17: 3d:33:13:a3:9e:02:7e:8d:3a:45:66:63:a3:df:eb:1a:ee:cc: 7b:79:58:4c:b0:d2:01:f9:66:46:bf:c8:28:1e:d5:70:e5:26: 14:80:55:06:44:2f:47:68:9e:26:b2:03:a2:05:88:a3:80:82: 24:ab:e9:73:97:97:05:d3:59:65:13:5c:25:2d:71:6d:83:ca: af:8a:06:34:25:6c:7f:3a:85:c8:0f:bd:24:15:64:f8:2a:d9: f6:37:b7:7d:23:77:44:b3:d7:40:a8:05:62:62:e2:2f:36:32: 63:a0:6c:1b -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICC+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNBRDcxMTAvBgNVBAUTKDlERTc4QTA5MEI2RTA4MkM5RkIwMENBQTVFMkM5MTMy NTZDM0M4NzYwHhcNMjQxMjE2MTg1NjQ1WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzYwNzdlYy0zMTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXhbF7XtTMo/xXZDWrkQD1XTot14JR+idlC7iGJOt13FTij/Z/lGAr7ChvuC 56PMtobm0FJt6g8RzMK3Yq9+srLcpZREWFFeaA9eQdK0gJsfMnTuP7ZUFeCgn0L4 89W6bn23uqWrhvuDJ6/VY7SIZa8qMsKrhAdLQK4XUB8W+y9bNlU+ZMbniO76Ie5F i1erlmanHPVfxDeSj74/wWq7pNcDkEXB5qHPDuKDrl7SxRff/gfr6dNIrtfq1NMs u6vceHpRjoj5pYwd8c+Gi1lmVsvDr3F3SflpGz+P4MpCYVYPOQG3if4Coi7n/P2/ cfK3X3WPp7sKyxKtEjHxnWJTPwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFPjjoWBe v7zO8qfSEXEXTVk2r8zRMB8GA1UdIwQYMBaAFJ3nigkLbggsn7AMql4skTJWw8h2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0FENy8wN0NGOEQ3QTBC ODQxMUVBQTIxNjc4NEZDNEY5QUUwMi9uZWVLQ1F0dUNDeWZzQXlxWGl5Uk1sYkR5 SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lZUtDUXR1Q0N5ZnNBeXFYaXlSTWxiRHlIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjNBRDcvMDdDRjhEN0EwQjg0MTFFQUEyMTY3ODRGQzRGOUFFMDIvNkIwOTZFNzgw Qjg1MTFFQTk3QzgwRDUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJne6gwDQQCAAIwBwMFACQDpUAwDQYJKoZIhvcNAQELBQAD ggEBAJBN9wFX9eaUXRmxp/rKRGLljoqq+KIx6/LISzSZmEkWpFNcPWobb0j9vDJ8 RTJHPu7VPfhG7/DRd8G41SQUYECL/ShVqWudaasrQfi6x8Hx932MDO1mBww9NqD3 mjzC+5j79TMH4eTBDTFJLCMTaoR8g1fhbySHrL1Be/E1suINHieZfdvbBuWFTqxj xZgfFz0zE6OeAn6NOkVmY6Pf6xruzHt5WEyw0gH5Zka/yCge1XDlJhSAVQZEL0do niayA6IFiKOAgiSr6XOXlwXTWWUTXCUtcW2Dyq+KBjQlbH86hcgPvSQVZPgq2fY3 t30jd0Sz10CoBWJi4i82MmOgbBs= -----END CERTIFICATE-----Generated at Mon Feb 17 07:51:35 2025 by rpki-client