$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/118CC10A1E2D11EFBD391A28C4F9AE02.roa File: 118CC10A1E2D11EFBD391A28C4F9AE02.roa (raw, json) Hash identifier: O7fg9iroArmQam+Zvrb8ErfLlJtOTwquz4VKfNfGfqo= Subject key identifier: A7:BA:BE:40:9B:BD:21:9B:4C:27:8F:B5:F4:C1:4B:85:07:59:1C:7E Certificate issuer: /CN=A91BA867/serialNumber=75A40CED24ACAD62C58AB28EA0E0F7C5E5E1C788 Certificate serial: 0B Authority key identifier: 75:A4:0C:ED:24:AC:AD:62:C5:8A:B2:8E:A0:E0:F7:C5:E5:E1:C7:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/118CC10A1E2D11EFBD391A28C4F9AE02.roa Signing time: Thu 30 May 2024 02:33:59 +0000 ROA not before: Thu 30 May 2024 02:33:59 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 198949 IP address blocks: 103.49.122.0/24 maxlen: 24 103.49.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.crl rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA867/serialNumber=75A40CED24ACAD62C58AB28EA0E0F7C5E5E1C788 Validity Not Before: May 30 02:33:59 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6657e597-afb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:47:ad:7c:6d:54:27:ed:64:9d:90:07:c2:2b: 2e:ab:42:76:67:c6:78:39:ae:b2:c1:e0:41:bf:2a: 08:24:75:5f:ae:d5:9e:dc:13:cd:b8:08:0e:2d:0d: 82:64:86:64:3a:59:73:2e:cc:d2:5f:58:91:af:58: eb:6c:ea:1f:05:56:3c:6d:fe:b1:e7:2f:5a:28:c7: a1:98:c5:9e:a4:4f:c6:89:7b:a6:2d:03:e8:89:1c: 1b:bc:b9:d6:7e:fd:f1:73:09:9b:c1:26:4f:d3:a5: 77:b3:2a:3d:54:0e:0d:e5:fb:97:54:8a:39:9a:96: bc:4d:79:bb:e4:3d:4f:62:e6:97:7f:35:4a:ae:bc: f6:11:33:a6:d4:58:fc:d1:9f:45:67:dc:8c:37:b5: 02:91:ac:78:e4:cc:87:cf:5a:d9:99:cd:1f:c2:2f: b1:62:2a:0b:b6:5f:11:be:3d:23:e5:ad:eb:d9:4e: 58:34:0b:5e:22:f4:a7:5b:f1:8a:9a:32:a3:c2:9b: e1:8b:52:04:9f:36:1d:5c:ec:f4:bd:97:49:49:50: 2a:51:79:e6:4d:89:4a:b7:30:8e:99:8c:f7:db:e7: 83:76:9b:2c:ae:6d:73:ab:97:71:ea:55:8e:56:ba: df:c6:ee:be:0f:8d:99:76:51:f8:5d:f0:76:f6:12: 79:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:BA:BE:40:9B:BD:21:9B:4C:27:8F:B5:F4:C1:4B:85:07:59:1C:7E X509v3 Authority Key Identifier: keyid:75:A4:0C:ED:24:AC:AD:62:C5:8A:B2:8E:A0:E0:F7:C5:E5:E1:C7:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/118CC10A1E2D11EFBD391A28C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.49.122.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:6d:91:d2:d4:80:5c:6a:ec:e9:1a:3e:b7:21:5e:8e:41:b8: 5b:22:4c:05:9c:01:4f:d2:6d:c4:10:69:7e:90:39:4e:a9:03: fb:10:53:c6:52:59:01:c0:e8:60:f9:00:42:f0:13:79:ab:bc: db:d8:64:7a:e9:a7:ca:80:3f:ed:4a:73:12:6e:49:9f:48:32: f6:2a:2d:1a:a7:2e:a1:3c:b4:d2:7e:28:e6:a3:24:d3:8a:e3: 36:dc:f7:52:8e:a2:39:db:82:a3:e8:e4:e5:66:0a:25:4e:8b: 22:62:21:55:8e:e7:c6:c2:90:a5:e0:ef:87:b9:6f:7b:4d:55: 6d:33:c7:3a:c1:d6:4c:6f:aa:e0:37:00:88:56:dc:92:28:a3: 44:1b:b7:53:09:f7:1e:47:1f:2e:f3:5a:47:85:8c:ab:dc:6e: 6f:25:22:ed:15:d8:d8:c4:27:0d:e4:32:5a:6f:f3:29:f1:1f: 04:66:96:c4:bb:dc:b8:c9:8b:b8:22:ac:6e:e1:dd:b6:ca:e7: 6a:6a:62:16:9e:1f:5f:ce:98:90:80:89:96:63:8a:bb:9e:63: e9:20:f8:46:0b:e1:92:5e:6c:eb:d2:7e:a5:38:4d:c0:39:1e: b8:fd:b7:67:da:ef:75:48:c6:60:68:3d:5c:30:69:85:a7:db: fc:6f:96:91 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QTg2NzExMC8GA1UEBRMoNzVBNDBDRUQyNEFDQUQ2MkM1OEFCMjhFQTBFMEY3QzVF NUUxQzc4ODAeFw0yNDA1MzAwMjMzNTlaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NTdlNTk3LWFmYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMR618bVQn7WSdkAfCKy6rQnZnxng5rrLB4EG/KggkdV+u1Z7cE824CA4tDYJk hmQ6WXMuzNJfWJGvWOts6h8FVjxt/rHnL1oox6GYxZ6kT8aJe6YtA+iJHBu8udZ+ /fFzCZvBJk/TpXezKj1UDg3l+5dUijmalrxNebvkPU9i5pd/NUquvPYRM6bUWPzR n0Vn3Iw3tQKRrHjkzIfPWtmZzR/CL7FiKgu2XxG+PSPlrevZTlg0C14i9Kdb8Yqa MqPCm+GLUgSfNh1c7PS9l0lJUCpReeZNiUq3MI6ZjPfb54N2myyubXOrl3HqVY5W ut/G7r4PjZl2Ufhd8Hb2Enl3AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUp7q+QJu9 IZtMJ4+19MFLhQdZHH4wHwYDVR0jBBgwFoAUdaQM7SSsrWLFirKOoOD3xeXhx4gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJBODY3LzgxNkU3NDYyMTk3 RjExRUY4RDE2Njg0RkM0RjlBRTAyL2RhUU03U1NzcldMRmlyS09vT0QzeGVYaHg0 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZGFRTTdTU3NyV0xGaXJLT29PRDN4ZVhoeDRnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTg2Ny84MTZFNzQ2MjE5N0YxMUVGOEQxNjY4NEZDNEY5QUUwMi8xMThDQzEwQTFF MkQxMUVGQkQzOTFBMjhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWcxejANBgkqhkiG9w0BAQsFAAOCAQEAX22R0tSAXGrs6Ro+ tyFejkG4WyJMBZwBT9JtxBBpfpA5TqkD+xBTxlJZAcDoYPkAQvATeau829hkeumn yoA/7UpzEm5Jn0gy9iotGqcuoTy00n4o5qMk04rjNtz3Uo6iOduCo+jk5WYKJU6L ImIhVY7nxsKQpeDvh7lve01VbTPHOsHWTG+q4DcAiFbckiijRBu3Uwn3HkcfLvNa R4WMq9xubyUi7RXY2MQnDeQyWm/zKfEfBGaWxLvcuMmLuCKsbuHdtsrnampiFp4f X86YkICJlmOKu55j6SD4Rgvhkl5s69J+pThNwDkeuP23Z9rvdUjGYGg9XDBphafb /G+WkQ== -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:21 2024 by rpki-client on console-ams.rpki-client.org