$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/D82E5F1ADBC211E99D686940C4F9AE02.roa File: D82E5F1ADBC211E99D686940C4F9AE02.roa (raw, json) Hash identifier: At2TYBc2mB9m2KMar1RnpPwLIC3piw2pCnJKYNvU7DI= Subject key identifier: E2:F7:D7:25:2F:27:8D:86:01:38:65:9D:B1:12:42:D5:CA:94:ED:16 Certificate issuer: /CN=A91B6006/serialNumber=12F92E6C72E6CA25C075055B48FE37B65AB6E052 Certificate serial: 125B Authority key identifier: 12:F9:2E:6C:72:E6:CA:25:C0:75:05:5B:48:FE:37:B6:5A:B6:E0:52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/D82E5F1ADBC211E99D686940C4F9AE02.roa Signing time: Tue 24 Sep 2024 17:25:30 +0000 ROA not before: Tue 24 Sep 2024 17:25:30 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 62597 IP address blocks: 103.35.248.0/24 maxlen: 24 103.35.249.0/24 maxlen: 24 103.35.250.0/24 maxlen: 24 2402:cf80::/32 maxlen: 32 2402:cf80::/48 maxlen: 48 2402:cf80:100::/44 maxlen: 48 2402:cf80:1000::/48 maxlen: 48 2402:cf80:1003::/48 maxlen: 48 2402:cf80:1004::/48 maxlen: 48 2402:cf80:1005::/48 maxlen: 48 2402:cf80:1006::/48 maxlen: 48 2402:cf80:6259::/48 maxlen: 48 2402:cf80:7ffe::/48 maxlen: 48 2402:cf80:7fff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.crl rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 16:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4699 (0x125b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6006/serialNumber=12F92E6C72E6CA25C075055B48FE37B65AB6E052 Validity Not Before: Sep 24 17:25:30 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66f2f60a-80c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:52:6e:3a:dc:b8:a2:a3:97:54:b6:c2:84:e6: 3a:8b:ed:7b:6d:1b:92:fe:41:2c:10:ec:a8:94:b1: b1:b8:9d:35:07:c6:40:06:c7:f9:20:23:49:9b:ff: ab:1f:db:92:aa:2b:1c:94:6d:fd:12:dd:15:08:36: 5e:b7:f3:f3:2f:12:a3:0d:3a:5c:82:58:9e:c3:da: 80:de:55:c3:66:c9:a4:58:e3:9f:87:a1:c3:35:4b: 75:06:e3:23:7e:b0:a1:75:b8:fd:e4:4e:35:8c:b2: 71:bf:a1:1a:03:5a:ec:78:2a:d0:4c:f8:72:d6:54: aa:a6:7f:7a:9d:78:d5:9f:04:5f:56:4c:10:7b:12: 8a:49:ee:40:d4:8f:cc:71:51:01:46:86:6c:d1:fa: e8:51:e4:99:29:18:5d:42:1e:c9:17:8c:2c:33:26: 53:bb:fe:a3:9b:59:58:3f:f9:0c:f1:09:81:9a:f5: 4e:c7:4d:12:66:d8:b8:17:4c:a4:0b:97:8c:5f:4f: 50:76:aa:92:05:95:34:5a:58:e3:66:93:86:7c:5e: ca:f5:15:06:44:ec:97:ae:6c:f7:27:6e:74:2c:b3: 0b:b4:05:2e:2e:74:94:80:f9:10:b2:29:4d:24:48: 20:30:57:cc:8c:84:3a:9c:c1:9d:5e:9c:b3:17:cb: a5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F7:D7:25:2F:27:8D:86:01:38:65:9D:B1:12:42:D5:CA:94:ED:16 X509v3 Authority Key Identifier: keyid:12:F9:2E:6C:72:E6:CA:25:C0:75:05:5B:48:FE:37:B6:5A:B6:E0:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/D82E5F1ADBC211E99D686940C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.35.248.0-103.35.250.255 IPv6: 2402:cf80::/32 Signature Algorithm: sha256WithRSAEncryption 40:9c:af:d3:a5:10:15:f6:02:2e:94:9a:c0:f6:f5:ec:62:18: 29:52:34:05:46:f3:24:38:fd:19:42:13:65:3a:c7:b4:53:26: 94:23:93:49:9d:3d:40:83:c5:46:a1:d7:3a:d7:fa:c5:41:54: cf:ff:97:a0:71:50:e9:ac:4f:ac:c6:a5:7f:4d:cd:1d:76:aa: ef:d0:32:21:0a:67:1c:66:18:ff:81:6b:39:e3:71:35:6b:da: 82:b6:d5:01:73:82:9c:3f:75:d8:1d:2b:a7:f1:33:74:47:d8: 19:e6:7c:4d:9d:96:b2:db:97:27:7a:29:09:21:0e:66:75:29: af:87:87:c3:66:88:31:75:2e:a6:6d:d2:f2:08:0d:ff:d0:e7: 9a:b9:62:ba:5b:db:f5:c8:89:31:15:2b:c5:bd:c1:86:3d:87: 36:54:36:99:80:82:72:64:6a:0a:83:74:45:e9:d6:1d:90:8e: 22:4e:85:36:71:e7:0b:cc:48:4b:62:db:74:fc:d9:3b:55:7a: c9:b2:cd:5b:3b:f8:08:40:47:78:5a:7a:6a:7f:0b:13:21:e4: e8:bf:51:b5:84:9c:b6:a3:29:c3:c4:d5:5a:1d:a8:6c:d2:a0: c7:c3:58:12:63:82:60:4c:76:c8:e5:9b:73:b1:9f:55:f9:f0: d0:d8:6d:76 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICElswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYwMDYxMTAvBgNVBAUTKDEyRjkyRTZDNzJFNkNBMjVDMDc1MDU1QjQ4RkUzN0I2 NUFCNkUwNTIwHhcNMjQwOTI0MTcyNTMwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmYyZjYwYS04MGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlJuOty4oqOXVLbChOY6i+17bRuS/kEsEOyolLGxuJ01B8ZABsf5ICNJm/+r H9uSqisclG39Et0VCDZet/PzLxKjDTpcgliew9qA3lXDZsmkWOOfh6HDNUt1BuMj frChdbj95E41jLJxv6EaA1rseCrQTPhy1lSqpn96nXjVnwRfVkwQexKKSe5A1I/M cVEBRoZs0froUeSZKRhdQh7JF4wsMyZTu/6jm1lYP/kM8QmBmvVOx00SZti4F0yk C5eMX09QdqqSBZU0WljjZpOGfF7K9RUGROyXrmz3J250LLMLtAUuLnSUgPkQsilN JEggMFfMjIQ6nMGdXpyzF8ulgwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFOL31yUv J42GAThlnbESQtXKlO0WMB8GA1UdIwQYMBaAFBL5Lmxy5solwHUFW0j+N7ZatuBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjAwNi9FNEZERTQ2QUMz RTgxMUU4QUM3NkVCMTZDNEY5QUUwMi9Fdmt1YkhMbXlpWEFkUVZiU1A0M3RscTI0 RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V2a3ViSExteWlYQWRRVmJTUDQzdGxxMjRGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjYwMDYvRTRGREU0NkFDM0U4MTFFOEFDNzZFQjE2QzRGOUFFMDIvRDgyRTVGMUFE QkMyMTFFOTlENjg2OTQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBQEAgABMA4wDAMEA2cj+AMEAGcj+jANBAIAAjAHAwUAJALPgDANBgkqhkiG 9w0BAQsFAAOCAQEAQJyv06UQFfYCLpSawPb17GIYKVI0BUbzJDj9GUITZTrHtFMm lCOTSZ09QIPFRqHXOtf6xUFUz/+XoHFQ6axPrMalf03NHXaq79AyIQpnHGYY/4Fr OeNxNWvagrbVAXOCnD912B0rp/EzdEfYGeZ8TZ2WstuXJ3opCSEOZnUpr4eHw2aI MXUupm3S8ggN/9Dnmrliulvb9ciJMRUrxb3Bhj2HNlQ2mYCCcmRqCoN0RenWHZCO Ik6FNnHnC8xIS2LbdPzZO1V6ybLNWzv4CEBHeFp6an8LEyHk6L9RtYSctqMpw8TV Wh2obNKgx8NYEmOCYEx2yOWbc7GfVfnw0Nhtdg== -----END CERTIFICATE-----Generated at Sun Nov 24 18:36:24 2024 by rpki-client on console-fra.rpki-client.org