$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/9E5AF612533C11EAA9A27E3BC4F9AE02.roa File: 9E5AF612533C11EAA9A27E3BC4F9AE02.roa (raw, json) Hash identifier: 89nx6FtRGafpjrrGSCdK+2mjcNeSm3JlU4e4pH3725o= Subject key identifier: 3F:82:3F:0E:1A:38:98:15:30:46:88:B9:4B:08:88:82:82:B0:2A:70 Certificate issuer: /CN=A91BCB3A/serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96 Certificate serial: 0A88 Authority key identifier: EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/9E5AF612533C11EAA9A27E3BC4F9AE02.roa Signing time: Thu 05 Sep 2024 07:36:37 +0000 ROA not before: Thu 05 Sep 2024 07:36:37 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 140072 IP address blocks: 103.52.28.0/22 maxlen: 24 103.117.92.0/22 maxlen: 22 103.117.92.0/23 maxlen: 23 103.117.92.0/24 maxlen: 24 103.117.93.0/24 maxlen: 24 103.117.94.0/23 maxlen: 23 103.117.94.0/24 maxlen: 24 103.117.95.0/24 maxlen: 24 103.148.22.0/23 maxlen: 23 103.148.22.0/24 maxlen: 24 103.148.23.0/24 maxlen: 24 2405:c840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:18:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2696 (0xa88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCB3A/serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96 Validity Not Before: Sep 5 07:36:37 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=66d95f84-1b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:03:2d:bc:70:93:46:83:3f:07:16:48:68:48: 71:88:4c:b5:c2:75:99:a9:2e:4c:bf:7b:f8:b3:fe: 81:8c:73:2a:03:43:27:d6:ee:12:f8:5d:66:09:d4: 36:fb:77:56:df:db:c1:af:e3:6a:32:79:ff:7e:d6: a8:d8:5f:18:67:19:b1:ba:41:91:44:60:11:51:58: 92:5a:9b:0c:53:90:65:c7:d0:92:c5:9d:69:8a:42: da:e6:f7:36:11:fe:50:2c:e4:d1:a7:56:a4:ac:b5: ae:dd:65:5b:b7:11:f1:ab:a4:35:e2:41:1e:74:bb: 45:0e:bf:5e:3d:4c:03:ba:9a:ff:20:94:fa:f4:30: 5d:c3:d0:f5:b6:f7:1d:5e:e7:bb:5e:e5:f9:2b:2f: dd:52:bd:06:bf:d8:c5:0b:ff:99:7e:fd:d3:eb:91: 20:e7:1c:ce:83:b8:bb:0b:51:19:99:6e:c4:80:f2: ba:80:5b:49:fb:84:50:63:1a:c3:08:44:8a:80:d4: 0d:5d:36:ea:0c:df:89:a3:02:be:f2:b8:92:7a:7a: 54:e3:11:e4:cf:2e:e7:40:eb:76:67:b7:4a:07:db: 0b:db:0a:8b:68:58:53:d2:c6:e1:eb:7b:9f:da:e7: 00:f9:4f:c8:b8:f5:95:b2:f4:ce:d3:83:04:1f:27: 21:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:82:3F:0E:1A:38:98:15:30:46:88:B9:4B:08:88:82:82:B0:2A:70 X509v3 Authority Key Identifier: keyid:EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/9E5AF612533C11EAA9A27E3BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.52.28.0/22 103.117.92.0/22 103.148.22.0/23 IPv6: 2405:c840::/32 Signature Algorithm: sha256WithRSAEncryption bb:a1:bc:a3:a8:1d:ec:d3:0f:d7:2d:ce:7a:6e:01:61:f6:d9: a4:a0:d3:59:75:b2:80:2a:43:a1:66:b3:97:5e:e0:c0:ae:41: 06:26:c3:21:ae:b5:07:5e:19:db:b7:64:4c:b4:36:6c:54:14: 1e:d5:a8:f2:1d:bd:4c:1d:3b:63:17:a3:ff:c5:46:12:71:65: f4:52:6d:86:11:fe:89:bc:1f:23:5f:75:05:7e:85:84:31:4a: 3d:4f:b9:34:4a:e2:81:8e:9a:eb:02:b6:a3:b2:db:34:da:48: 4e:66:38:b3:c2:74:07:2a:cd:b0:26:f8:e3:70:d0:3a:88:42: b4:7c:eb:c6:f5:9a:9e:5d:0f:60:3c:9c:63:23:7a:8e:0b:e9: 35:57:69:aa:2d:69:be:37:55:c0:63:53:35:a6:93:34:3e:e5: d2:45:87:87:51:5e:69:4a:95:4d:d5:28:4f:31:a6:33:82:42: fe:9a:ff:f7:35:f0:6c:02:61:80:d3:12:c3:99:de:14:54:a0: 53:95:49:c2:e1:e9:04:a5:e1:99:b3:27:a0:3f:86:4d:39:ea: 75:e0:c9:9c:96:01:f0:e0:bf:75:bf:42:e6:f6:1e:96:fa:5c: fa:65:e3:f6:9e:b1:8c:3f:65:a2:04:bc:97:38:b7:ed:87:db: d6:35:17:47 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICCogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNCM0ExMTAvBgNVBAUTKEVFNUVDMzdGM0QzQkM1NzU5OUYzQzczQzUyMjI2RTdF RTA1MEJGOTYwHhcNMjQwOTA1MDczNjM3WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5NWY4NC0xYjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAMtvHCTRoM/BxZIaEhxiEy1wnWZqS5Mv3v4s/6BjHMqA0Mn1u4S+F1mCdQ2 +3dW39vBr+NqMnn/ftao2F8YZxmxukGRRGARUViSWpsMU5Blx9CSxZ1pikLa5vc2 Ef5QLOTRp1akrLWu3WVbtxHxq6Q14kEedLtFDr9ePUwDupr/IJT69DBdw9D1tvcd Xue7XuX5Ky/dUr0Gv9jFC/+Zfv3T65Eg5xzOg7i7C1EZmW7EgPK6gFtJ+4RQYxrD CESKgNQNXTbqDN+JowK+8riSenpU4xHkzy7nQOt2Z7dKB9sL2wqLaFhT0sbh63uf 2ucA+U/IuPWVsvTO04MEHychGwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFD+CPw4a OJgVMEaIuUsIiIKCsCpwMB8GA1UdIwQYMBaAFO5ew389O8V1mfPHPFIibn7gUL+W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0IzQS85QUQ2QzVCODQ1 ODQxMUVBQTQ2RTc1NzFDNEY5QUUwMi83bDdEZnowN3hYV1o4OGM4VWlKdWZ1QlF2 NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdsN0RmejA3eFhXWjg4YzhVaUp1ZnVCUXY1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkNCM0EvOUFENkM1Qjg0NTg0MTFFQUE0NkU3NTcxQzRGOUFFMDIvOUU1QUY2MTI1 MzNDMTFFQUE5QTI3RTNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAJnNBwDBAJndVwDBAFnlBYwDQQCAAIwBwMFACQFyEAwDQYJ KoZIhvcNAQELBQADggEBALuhvKOoHezTD9ctznpuAWH22aSg01l1soAqQ6Fms5de 4MCuQQYmwyGutQdeGdu3ZEy0NmxUFB7VqPIdvUwdO2MXo//FRhJxZfRSbYYR/om8 HyNfdQV+hYQxSj1PuTRK4oGOmusCtqOy2zTaSE5mOLPCdAcqzbAm+ONw0DqIQrR8 68b1mp5dD2A8nGMjeo4L6TVXaaotab43VcBjUzWmkzQ+5dJFh4dRXmlKlU3VKE8x pjOCQv6a//c18GwCYYDTEsOZ3hRUoFOVScLh6QSl4ZmzJ6A/hk056nXgyZyWAfDg v3W/Qub2Hpb6XPpl4/aesYw/ZaIEvJc4t+2H29Y1F0c= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:39 2024 by rpki-client on console-ams.rpki-client.org