$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/AB9480A6BB6811E69E8D1212C4F9AE02.roa File: AB9480A6BB6811E69E8D1212C4F9AE02.roa (raw, json) Hash identifier: XU2BtSx1XPF+OETuBQTO4A3xSlkRLbVqfxk4yTT8ml4= Subject key identifier: 2D:0E:9F:6E:BB:65:65:98:D6:F6:96:09:93:CC:70:F1:5D:C2:37:06 Certificate issuer: /CN=A91BBD5B/serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512 Certificate serial: 1C9C Authority key identifier: DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/AB9480A6BB6811E69E8D1212C4F9AE02.roa Signing time: Thu 10 Oct 2024 16:24:00 +0000 ROA not before: Thu 10 Oct 2024 16:24:00 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 132148 IP address blocks: 103.70.249.0/24 maxlen: 24 103.81.113.0/24 maxlen: 24 103.81.114.0/24 maxlen: 24 103.81.115.0/24 maxlen: 24 2001:df3:ce00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7324 (0x1c9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBD5B/serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512 Validity Not Before: Oct 10 16:24:00 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=6707ffa0-edf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:78:a1:cd:ab:76:6a:68:f9:c1:03:2f:ea:37: 3f:72:fa:1e:25:10:b5:54:98:88:c8:d5:6c:36:2d: fd:39:7c:d6:db:80:4d:16:d3:af:02:bb:ec:06:45: 13:0f:03:a1:74:7e:14:d2:b2:e9:31:39:56:ed:08: 8e:45:05:64:cc:8d:95:d2:14:6d:cf:45:49:be:f0: 57:87:18:49:11:e3:aa:18:6b:88:1a:42:f5:e1:5a: 68:7d:c6:cf:2c:3a:c2:b7:84:0b:77:1b:61:fe:4a: 81:b5:a9:a8:bb:4e:65:a2:c3:f9:15:54:cb:ac:68: 90:79:87:96:1b:10:87:fb:1b:f4:2d:71:3b:2a:71: f1:2f:9e:07:7c:b1:4b:da:4e:5f:93:70:e6:2c:1c: 11:52:46:79:61:24:62:8c:b7:b6:d6:8b:0d:57:a6: ef:59:44:52:ff:ae:0f:9d:fe:a6:0d:71:47:2a:79: 76:a8:ff:f0:b6:01:1d:a6:ff:9c:b4:b9:57:69:c3: 63:10:41:e9:a8:b9:02:0e:58:fa:d5:89:4b:e6:90: b6:07:9b:92:c2:0e:67:9a:cb:0b:57:e7:a5:f7:71: 5c:21:05:e5:1a:75:6e:35:3d:c2:4f:0a:de:03:47: c6:66:a5:a6:7d:76:c2:a0:e6:87:bf:80:b0:4d:2c: 9b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0E:9F:6E:BB:65:65:98:D6:F6:96:09:93:CC:70:F1:5D:C2:37:06 X509v3 Authority Key Identifier: keyid:DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/AB9480A6BB6811E69E8D1212C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.70.249.0/24 103.81.113.0-103.81.115.255 IPv6: 2001:df3:ce00::/48 Signature Algorithm: sha256WithRSAEncryption a4:fe:98:3e:3e:24:6a:f6:81:84:03:d7:3c:cf:60:c9:a9:78: 7d:74:36:a9:18:66:37:87:eb:01:fa:af:4a:24:46:3e:e4:29: 12:e1:7f:a5:c0:06:d0:6c:4a:e1:bd:87:46:8f:cc:89:90:df: dc:0d:83:10:81:ec:e4:2f:fd:68:16:89:d5:bd:6e:4e:13:c8: e8:cc:ef:cf:a5:bc:37:96:b8:41:53:e9:a0:4f:6e:07:82:8f: a4:00:ca:22:de:dd:1c:d7:bc:e6:97:88:16:49:f0:04:2a:1f: 47:26:3c:1b:51:3a:13:aa:11:73:ae:ab:83:0d:9f:ec:bf:e3: 35:09:38:3b:f8:40:7d:d3:08:58:27:37:a2:86:91:24:7c:09: f7:a0:7c:89:8b:09:ad:6b:72:db:89:5c:10:5e:a5:75:39:23: c6:1d:1a:7f:f7:f1:ed:3a:a5:69:48:ff:54:da:31:57:52:73: 41:a6:44:16:6b:85:77:80:88:0d:d9:a9:84:3b:04:64:04:d4: 44:c4:8f:aa:7e:26:87:07:b3:cb:5b:82:a8:aa:8f:09:34:78: e4:17:91:6a:c1:9b:2d:d9:14:a6:e5:8b:86:49:c5:3a:b8:ee: ea:6d:e8:30:aa:a9:d5:e8:2f:d6:0c:ff:89:c6:32:46:03:81: d6:f2:e5:3d -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgICHJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJENUIxMTAvBgNVBAUTKERCOTJCODNGNEMxODc4MzkwRDZBNDRFNkFFRDU3QTc3 NTIyNjM1MTIwHhcNMjQxMDEwMTYyNDAwWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzA3ZmZhMC1lZGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunihzat2amj5wQMv6jc/cvoeJRC1VJiIyNVsNi39OXzW24BNFtOvArvsBkUT DwOhdH4U0rLpMTlW7QiORQVkzI2V0hRtz0VJvvBXhxhJEeOqGGuIGkL14VpofcbP LDrCt4QLdxth/kqBtamou05losP5FVTLrGiQeYeWGxCH+xv0LXE7KnHxL54HfLFL 2k5fk3DmLBwRUkZ5YSRijLe21osNV6bvWURS/64Pnf6mDXFHKnl2qP/wtgEdpv+c tLlXacNjEEHpqLkCDlj61YlL5pC2B5uSwg5nmssLV+el93FcIQXlGnVuNT3CTwre A0fGZqWmfXbCoOaHv4CwTSybWwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFC0On267 ZWWY1vaWCZPMcPFdwjcGMB8GA1UdIwQYMBaAFNuSuD9MGHg5DWpE5q7VendSJjUS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkQ1Qi8xNzAyRkMzRUJC NjcxMUU2QUUyNDA0MEZDNEY5QUUwMi8yNUs0UDB3WWVEa05ha1RtcnRWNmQxSW1O UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI1SzRQMHdZZURrTmFrVG1ydFY2ZDFJbU5SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkJENUIvMTcwMkZDM0VCQjY3MTFFNkFFMjQwNDBGQzRGOUFFMDIvQUI5NDgwQTZC QjY4MTFFNjlFOEQxMjEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPgYIKwYBBQUHAQcBAf8E LzAtMBoEAgABMBQDBABnRvkwDAMEAGdRcQMEAmdRcDAPBAIAAjAJAwcAIAEN884A MA0GCSqGSIb3DQEBCwUAA4IBAQCk/pg+PiRq9oGEA9c8z2DJqXh9dDapGGY3h+sB +q9KJEY+5CkS4X+lwAbQbErhvYdGj8yJkN/cDYMQgezkL/1oFonVvW5OE8jozO/P pbw3lrhBU+mgT24Hgo+kAMoi3t0c17zml4gWSfAEKh9HJjwbUToTqhFzrquDDZ/s v+M1CTg7+EB90whYJzeihpEkfAn3oHyJiwmta3LbiVwQXqV1OSPGHRp/9/HtOqVp SP9U2jFXUnNBpkQWa4V3gIgN2amEOwRkBNRExI+qfiaHB7PLW4Koqo8JNHjkF5Fq wZst2RSm5YuGScU6uO7qbegwqqnV6C/WDP+JxjJGA4HW8uU9 -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:16 2024 by rpki-client on console-ams.rpki-client.org