$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/CC1DFBAC9F0F11EAA4419D2DC4F9AE02.roa File: CC1DFBAC9F0F11EAA4419D2DC4F9AE02.roa (raw, json) Hash identifier: jPD93oq8qztqVjRiofsyP42XOpCIiQV5KYalzchExEU= Subject key identifier: B9:1E:4A:65:2C:67:C1:FF:FB:E5:2B:A8:52:C6:80:0C:C5:E4:CD:E7 Certificate issuer: /CN=A91BC3FD/serialNumber=27DD8BBB8FB5FACDC19F29D3EC2745D5110D8A9F Certificate serial: 0879 Authority key identifier: 27:DD:8B:BB:8F:B5:FA:CD:C1:9F:29:D3:EC:27:45:D5:11:0D:8A:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J92Lu4-1-s3BnynT7CdF1RENip8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/CC1DFBAC9F0F11EAA4419D2DC4F9AE02.roa Signing time: Mon 10 Jun 2024 22:09:11 +0000 ROA not before: Mon 10 Jun 2024 22:09:11 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 140678 IP address blocks: 103.151.174.0/24 maxlen: 24 2001:df3:ce80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.crl rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J92Lu4-1-s3BnynT7CdF1RENip8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2169 (0x879) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC3FD/serialNumber=27DD8BBB8FB5FACDC19F29D3EC2745D5110D8A9F Validity Not Before: Jun 10 22:09:11 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66677987-b464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cd:d0:65:a5:c8:24:f3:1d:b9:8b:de:45:c7: e7:06:82:a4:69:22:ae:27:d2:83:13:5e:69:2d:72: a3:f0:eb:45:91:48:f8:3b:ca:96:ff:ac:bd:f8:07: dd:0c:b3:04:27:1b:c3:2f:67:ad:7a:74:93:c2:dd: 03:70:6d:69:67:31:8c:56:3c:28:8d:2a:5b:30:b1: 55:3f:99:8d:34:9a:ab:f7:15:c0:f2:f6:8e:8f:0a: 50:55:35:e4:92:a1:6a:f5:10:e2:91:d9:77:dc:76: c2:9e:16:16:f7:3c:cc:62:1f:df:47:26:32:b5:f6: f8:22:bd:85:47:49:1d:4d:ca:2b:a3:ca:0a:18:1d: ea:44:4c:44:e9:b5:53:36:a5:82:82:ec:4e:8d:82: 22:39:d0:d1:11:11:60:3f:f0:c4:09:02:29:dc:c4: f2:fb:1f:19:a9:df:81:4b:29:8f:20:0f:4c:2e:0e: 8b:a8:fc:c0:79:eb:fd:7f:98:48:e1:5c:60:bf:b8: 0a:b7:a0:73:cc:7d:61:4f:22:aa:47:b5:39:ee:9d: 7a:d7:8e:ed:59:9b:ce:e2:fc:ec:ae:41:c9:ca:19: 68:42:09:b3:85:00:b3:3e:e4:a3:ef:d8:b2:d3:ce: 6e:1a:5d:87:da:ba:51:53:92:25:9f:4a:95:27:7f: f2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:1E:4A:65:2C:67:C1:FF:FB:E5:2B:A8:52:C6:80:0C:C5:E4:CD:E7 X509v3 Authority Key Identifier: keyid:27:DD:8B:BB:8F:B5:FA:CD:C1:9F:29:D3:EC:27:45:D5:11:0D:8A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J92Lu4-1-s3BnynT7CdF1RENip8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/CC1DFBAC9F0F11EAA4419D2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.174.0/24 IPv6: 2001:df3:ce80::/48 Signature Algorithm: sha256WithRSAEncryption 04:d8:e6:6d:bc:f3:df:21:72:ae:7b:e4:d2:39:6d:d1:67:f3: 00:e0:2e:f2:e1:9d:d7:4a:4d:d3:fb:71:a9:05:5f:7d:c2:49: b7:47:3b:5f:db:24:31:16:e8:af:0d:9c:0a:2d:5a:2b:6a:d4: 58:cc:5e:3b:1e:52:90:96:90:3c:26:ab:28:a6:25:42:78:cd: 8b:d1:61:25:e9:1c:e1:7c:26:a0:62:9e:8d:ea:e0:c2:9e:ef: 70:3f:fb:d5:da:df:2d:09:ed:dc:8d:1a:26:8f:1c:66:3d:8d: 48:32:d6:11:0e:b6:f4:d6:69:28:14:8c:ca:ef:2d:88:43:20: 31:7f:91:22:64:89:09:19:26:73:f2:68:af:29:24:26:1f:45: e2:7f:df:62:d5:be:6b:ff:35:22:82:e5:9a:e1:2e:b0:a9:15: 61:f4:96:a8:7f:b7:23:55:6b:97:64:ee:91:41:25:71:5e:09: 0f:d2:c1:93:cf:94:19:58:52:03:33:c8:c5:2e:c5:ac:49:0b: e7:b2:3d:c8:29:3b:d8:8d:24:fe:dd:63:ec:40:85:c6:aa:fc: 4c:1f:7e:9d:f7:90:6b:d4:54:ac:48:b1:9c:36:66:40:bb:a6: d2:b5:a3:53:75:06:ac:25:61:8a:b1:fd:ad:1c:b6:bd:3d:b9: 8a:61:61:6a -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMzRkQxMTAvBgNVBAUTKDI3REQ4QkJCOEZCNUZBQ0RDMTlGMjlEM0VDMjc0NUQ1 MTEwRDhBOUYwHhcNMjQwNjEwMjIwOTExWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjY3Nzk4Ny1iNDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz83QZaXIJPMduYveRcfnBoKkaSKuJ9KDE15pLXKj8OtFkUj4O8qW/6y9+Afd DLMEJxvDL2etenSTwt0DcG1pZzGMVjwojSpbMLFVP5mNNJqr9xXA8vaOjwpQVTXk kqFq9RDikdl33HbCnhYW9zzMYh/fRyYytfb4Ir2FR0kdTcoro8oKGB3qRExE6bVT NqWCguxOjYIiOdDRERFgP/DECQIp3MTy+x8Zqd+BSymPIA9MLg6LqPzAeev9f5hI 4Vxgv7gKt6BzzH1hTyKqR7U57p16147tWZvO4vzsrkHJyhloQgmzhQCzPuSj79iy 085uGl2H2rpRU5Iln0qVJ3/y2wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLkeSmUs Z8H/++UrqFLGgAzF5M3nMB8GA1UdIwQYMBaAFCfdi7uPtfrNwZ8p0+wnRdURDYqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzNGRC9BNkIzRDQ3ODlG MEUxMUVBODBCNzVCMkNDNEY5QUUwMi9KOTJMdTQtMS1zM0JueW5UN0NkRjFSRU5p cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o5Mkx1NC0xLXMzQm55blQ3Q2RGMVJFTmlwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkMzRkQvQTZCM0Q0Nzg5RjBFMTFFQTgwQjc1QjJDQzRGOUFFMDIvQ0MxREZCQUM5 RjBGMTFFQUE0NDE5RDJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnl64wDwQCAAIwCQMHACABDfPOgDANBgkqhkiG9w0BAQsF AAOCAQEABNjmbbzz3yFyrnvk0jlt0WfzAOAu8uGd10pN0/txqQVffcJJt0c7X9sk MRborw2cCi1aK2rUWMxeOx5SkJaQPCarKKYlQnjNi9FhJekc4XwmoGKejergwp7v cD/71drfLQnt3I0aJo8cZj2NSDLWEQ629NZpKBSMyu8tiEMgMX+RImSJCRkmc/Jo rykkJh9F4n/fYtW+a/81IoLlmuEusKkVYfSWqH+3I1Vrl2TukUElcV4JD9LBk8+U GVhSAzPIxS7FrEkL57I9yCk72I0k/t1j7ECFxqr8TB9+nfeQa9RUrEixnDZmQLum 0rWjU3UGrCVhirH9rRy2vT25imFhag== -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:39 2024 by rpki-client on console-ams.rpki-client.org