$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/96A539C2278211EF902D8D85C4F9AE02.roa File: 96A539C2278211EF902D8D85C4F9AE02.roa (raw, json) Hash identifier: pJW1JdeGLLzOt3FmC1xw+P+I/N25ewL6n7IDt7taQwc= Subject key identifier: 35:A2:5B:88:5F:D2:E0:83:81:56:61:3F:B4:E6:30:73:AC:4C:94:C2 Certificate issuer: /CN=A91BC269/serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF Certificate serial: 02FC Authority key identifier: 30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/96A539C2278211EF902D8D85C4F9AE02.roa Signing time: Wed 23 Oct 2024 01:35:31 +0000 ROA not before: Wed 23 Oct 2024 01:35:31 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 9876 IP address blocks: 103.8.140.0/22 maxlen: 23 103.15.126.0/23 maxlen: 23 163.47.236.0/22 maxlen: 23 202.56.32.0/20 maxlen: 20 202.56.32.0/22 maxlen: 22 202.56.36.0/22 maxlen: 22 202.56.40.0/22 maxlen: 22 202.56.44.0/22 maxlen: 22 202.56.48.0/21 maxlen: 22 202.137.240.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 764 (0x2fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC269/serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF Validity Not Before: Oct 23 01:35:31 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=671852e3-0f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:de:11:f7:17:4f:db:65:a7:37:5a:64:67:9d: f7:c6:55:2e:d8:45:00:e0:38:b4:4e:f7:51:e6:99: 01:a6:6f:50:ad:27:b0:8b:25:26:39:1a:2e:60:ad: 35:a1:d9:6f:6f:21:73:b6:d7:c6:29:81:9a:20:a4: ff:61:e6:92:2c:f4:a8:80:5a:3f:23:cc:3e:70:53: 58:95:89:d2:a6:12:40:21:1e:83:0e:18:19:e4:06: 80:ff:9e:ea:3e:eb:e0:16:ff:ee:76:f5:7e:a8:e1: b9:7e:7b:6b:d8:9e:63:1c:c2:42:ad:0b:66:e4:ab: 18:13:c7:2a:61:97:8a:43:88:32:42:7e:a2:42:93: 35:e5:0a:88:87:55:2f:ac:66:d4:aa:ea:01:5a:76: 97:8d:26:a2:9b:ce:24:90:dc:f9:1f:b0:51:8f:a2: 43:03:c3:cb:76:d2:91:d7:ce:9f:1e:b5:f9:77:70: b7:6a:e2:34:30:0e:04:8d:f5:4f:b6:ec:e8:ee:66: c7:60:b1:40:f2:f4:cf:26:89:5f:18:71:0d:91:28: 57:85:07:d8:c3:38:f2:3c:23:0a:a8:ae:9b:6f:24: 91:00:79:79:a7:33:79:df:ef:47:9d:15:6c:ca:72: e6:ec:1f:51:f7:86:21:9b:bc:ea:7b:70:0e:f4:47: 84:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A2:5B:88:5F:D2:E0:83:81:56:61:3F:B4:E6:30:73:AC:4C:94:C2 X509v3 Authority Key Identifier: keyid:30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/96A539C2278211EF902D8D85C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.8.140.0/22 103.15.126.0/23 163.47.236.0/22 202.56.32.0-202.56.55.255 202.137.240.0/21 Signature Algorithm: sha256WithRSAEncryption d2:35:e2:d0:18:b6:39:32:83:22:93:92:d5:84:88:9d:31:10: c0:b3:08:41:8a:22:18:65:d7:39:a3:a9:94:e0:2d:ee:85:1a: 17:60:f5:ab:4c:29:dd:9f:9e:23:8d:b4:dc:a9:1a:a2:ba:35: 0e:22:63:d5:44:a6:d9:71:a8:86:23:90:cd:0d:88:93:ab:9e: f2:ba:df:e2:b7:16:c4:74:7a:5d:03:74:88:1d:ee:ad:ac:99: a7:25:60:e2:26:5a:80:fa:12:f4:4a:eb:30:9c:c7:c9:04:30: e7:22:ef:ba:2d:fe:93:6e:4e:5a:a8:58:b6:fd:60:ca:17:c9: f0:17:c0:d2:90:28:7a:97:7f:97:3e:bc:c9:ba:af:80:00:81: 75:27:17:49:ab:c0:7d:04:96:32:f8:33:11:45:63:fa:a1:a9: 9e:77:8c:3c:4e:d8:f1:51:23:99:3c:c4:c9:19:7f:5f:ae:5f: 51:b8:e1:fd:07:a1:78:ff:d8:fb:a0:87:cc:43:10:8a:c5:b6: 5f:4a:12:c0:c5:d4:60:03:e2:53:d5:d0:6c:16:01:8b:7e:70: 5a:50:dd:62:f6:8f:89:06:56:eb:b4:1e:87:f3:5f:76:f7:c4: 71:e7:b7:ad:f9:4e:a7:8e:7b:60:9c:63:eb:c8:c9:b5:fb:3a: 99:59:67:89 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICAvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyNjkxMTAvBgNVBAUTKDMwRTIwNjFGN0MyMEJEODQzQkVFNTM3MkMxMzIxQzM1 RkJCMUQzRUYwHhcNMjQxMDIzMDEzNTMxWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzE4NTJlMy0wZjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqN4R9xdP22WnN1pkZ533xlUu2EUA4Di0TvdR5pkBpm9QrSewiyUmORouYK01 odlvbyFzttfGKYGaIKT/YeaSLPSogFo/I8w+cFNYlYnSphJAIR6DDhgZ5AaA/57q PuvgFv/udvV+qOG5fntr2J5jHMJCrQtm5KsYE8cqYZeKQ4gyQn6iQpM15QqIh1Uv rGbUquoBWnaXjSaim84kkNz5H7BRj6JDA8PLdtKR186fHrX5d3C3auI0MA4EjfVP tuzo7mbHYLFA8vTPJolfGHENkShXhQfYwzjyPCMKqK6bbySRAHl5pzN53+9HnRVs ynLm7B9R94Yhm7zqe3AO9EeEdwIDAQABo4ICtTCCArEwHQYDVR0OBBYEFDWiW4hf 0uCDgVZhP7TmMHOsTJTCMB8GA1UdIwQYMBaAFDDiBh98IL2EO+5TcsEyHDX7sdPv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzI2OS9CQTY3NkUzMENG RTUxMUVDOTRCQkM3NUFDNEY5QUUwMi9NT0lHSDN3Z3ZZUTc3bE55d1RJY05mdXgw LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PSUdIM3dndllRNzdsTnl3VEljTmZ1eDAtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkMyNjkvQkE2NzZFMzBDRkU1MTFFQzk0QkJDNzVBQzRGOUFFMDIvOTZBNTM5QzIy NzgyMTFFRjkwMkQ4RDg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E MDAuMCwEAgABMCYDBAJnCIwDBAFnD34DBAKjL+wwDAMEBco4IAMEA8o4MAMEA8qJ 8DANBgkqhkiG9w0BAQsFAAOCAQEA0jXi0Bi2OTKDIpOS1YSInTEQwLMIQYoiGGXX OaOplOAt7oUaF2D1q0wp3Z+eI4203Kkaoro1DiJj1USm2XGohiOQzQ2Ik6ue8rrf 4rcWxHR6XQN0iB3urayZpyVg4iZagPoS9ErrMJzHyQQw5yLvui3+k25OWqhYtv1g yhfJ8BfA0pAoepd/lz68ybqvgACBdScXSavAfQSWMvgzEUVj+qGpnneMPE7Y8VEj mTzEyRl/X65fUbjh/QeheP/Y+6CHzEMQisW2X0oSwMXUYAPiU9XQbBYBi35wWlDd YvaPiQZW67Qeh/NfdvfEcee3rflOp457YJxj68jJtfs6mVlniQ== -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:50 2024 by rpki-client on console-ams.rpki-client.org