$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/E1B834D0F5D911EE878F7B7CC4F9AE02.roa File: E1B834D0F5D911EE878F7B7CC4F9AE02.roa (raw, json) Hash identifier: AY+8DTHkr2vJtlLXSQfHDYYi6BNU94WVzll8RISRiyA= Subject key identifier: C8:33:CF:33:27:E5:B4:18:8A:77:65:5F:E3:4F:8D:18:A9:A9:7D:3B Certificate issuer: /CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED Certificate serial: 0461 Authority key identifier: 49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/E1B834D0F5D911EE878F7B7CC4F9AE02.roa Signing time: Wed 23 Oct 2024 00:34:14 +0000 ROA not before: Wed 23 Oct 2024 00:34:14 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 174 IP address blocks: 103.120.129.0/24 maxlen: 24 103.134.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1121 (0x461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED Validity Not Before: Oct 23 00:34:14 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=67184486-deaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:32:48:02:e2:ac:54:fc:3d:0a:1d:08:29:e9: fe:34:3a:4d:38:c7:b9:59:fd:f9:35:39:30:9c:3c: 0f:df:f6:55:0b:13:9e:bb:97:e9:e5:1b:82:0d:24: 6e:70:67:08:20:e3:0f:57:8e:8c:4b:12:9d:03:90: 6a:d9:7d:4e:50:33:c5:a4:ba:8c:f1:58:43:2f:dd: 3c:87:da:c8:c3:8f:ad:70:85:ca:dc:71:07:d8:b1: 29:d7:e5:f8:cf:c5:e3:2d:bf:6f:8f:99:a0:96:2a: 40:4a:82:4f:7b:a7:ab:6f:4c:67:d6:56:55:87:4b: 86:41:67:2a:32:21:2c:4e:fa:17:f5:9b:bc:15:77: 3a:1b:2b:21:bd:3a:53:30:a8:74:fa:05:a1:72:f1: a9:ec:7b:9f:ee:5b:54:91:82:70:a5:14:4d:4d:9a: 8e:4a:3e:e7:3f:58:3b:71:a3:6c:b9:6e:8f:39:dc: 93:a7:00:8e:9d:c8:38:0e:80:f0:ef:14:f9:83:bb: 20:0f:9a:95:3a:28:f6:0a:29:af:e4:d0:32:98:19: 1b:99:ff:b4:7d:25:95:54:d4:99:4a:19:aa:45:ff: 3a:d3:f6:41:f6:26:66:56:51:2f:7a:04:02:59:de: 5b:bd:8f:4d:24:5d:67:a8:e1:6d:61:4f:49:38:4b: d4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:33:CF:33:27:E5:B4:18:8A:77:65:5F:E3:4F:8D:18:A9:A9:7D:3B X509v3 Authority Key Identifier: keyid:49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/E1B834D0F5D911EE878F7B7CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.120.129.0/24 103.134.74.0/24 Signature Algorithm: sha256WithRSAEncryption a0:12:bf:71:e4:19:af:a5:be:6d:7a:39:ad:12:0b:45:2b:f7: 26:fd:05:0c:21:7f:1d:7b:0c:9d:ea:8e:2b:b5:5a:cb:1d:3e: dc:ea:bb:73:fa:1e:3d:bf:ec:9a:d6:7b:ce:8a:4b:8c:5c:6e: fc:42:b9:35:97:21:d1:f0:bc:ef:be:e1:bd:92:d4:14:8e:a8: 33:1f:41:e2:94:0b:3e:87:8c:ca:93:ae:75:2e:31:26:8c:4a: 1c:52:8d:be:35:de:07:48:1c:52:17:2f:00:ab:26:77:d2:9e: 00:48:0b:e9:9f:51:33:36:23:c9:f2:22:0b:85:c2:4c:dd:70: fe:0a:36:3d:b2:ae:1f:97:d1:f6:d0:eb:8d:54:2e:3d:aa:e8: 5c:2a:2d:54:c8:da:90:59:8b:1e:31:78:6b:a9:8a:7c:1f:d4: 30:2e:ec:8c:bc:ee:a7:7d:af:49:6c:43:55:2c:09:de:dd:61: 6a:65:a1:ff:e1:73:a2:7f:52:f5:43:6e:6e:5c:19:7d:5f:25: d6:1e:9e:32:32:3a:95:52:c7:1d:ee:58:9b:c6:1a:99:c3:e6: 31:f6:f7:ec:e9:2c:06:be:de:12:ab:32:0d:e6:1a:ee:15:77: 8a:ff:21:a2:ac:fc:22:d9:e4:1a:5c:42:fb:46:20:f7:c1:18: 08:59:e1:b8 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDOUIxMTAvBgNVBAUTKDQ5NDIwMkIwMzFFOUY0Mjc2NDMxNTdBMDZFRkFBNEMw NzBDN0YzRUQwHhcNMjQxMDIzMDAzNDE0WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzE4NDQ4Ni1kZWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DJIAuKsVPw9Ch0IKen+NDpNOMe5Wf35NTkwnDwP3/ZVCxOeu5fp5RuCDSRu cGcIIOMPV46MSxKdA5Bq2X1OUDPFpLqM8VhDL908h9rIw4+tcIXK3HEH2LEp1+X4 z8XjLb9vj5mglipASoJPe6erb0xn1lZVh0uGQWcqMiEsTvoX9Zu8FXc6GyshvTpT MKh0+gWhcvGp7Huf7ltUkYJwpRRNTZqOSj7nP1g7caNsuW6POdyTpwCOncg4DoDw 7xT5g7sgD5qVOij2Cimv5NAymBkbmf+0fSWVVNSZShmqRf860/ZB9iZmVlEvegQC Wd5bvY9NJF1nqOFtYU9JOEvUTwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMgzzzMn 5bQYindlX+NPjRipqX07MB8GA1UdIwQYMBaAFElCArAx6fQnZDFXoG76pMBwx/Pt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEM5Qi9BNDZFOTg5QTMy MkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlDZGtNVmVnYnZxa3dIREg4 LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVSUNzREhwOUNka01WZWdidnFrd0hESDgtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzBDOUIvQTQ2RTk4OUEzMjJCMTFFQzk3RjhDRjdDQzRGOUFFMDIvRTFCODM0RDBG NUQ5MTFFRTg3OEY3QjdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABneIEDBABnhkowDQYJKoZIhvcNAQELBQADggEBAKASv3Hk Ga+lvm16Oa0SC0Ur9yb9BQwhfx17DJ3qjiu1WssdPtzqu3P6Hj2/7JrWe86KS4xc bvxCuTWXIdHwvO++4b2S1BSOqDMfQeKUCz6HjMqTrnUuMSaMShxSjb413gdIHFIX LwCrJnfSngBIC+mfUTM2I8nyIguFwkzdcP4KNj2yrh+X0fbQ641ULj2q6FwqLVTI 2pBZix4xeGupinwf1DAu7Iy87qd9r0lsQ1UsCd7dYWplof/hc6J/UvVDbm5cGX1f JdYenjIyOpVSxx3uWJvGGpnD5jH29+zpLAa+3hKrMg3mGu4Vd4r/IaKs/CLZ5Bpc QvtGIPfBGAhZ4bg= -----END CERTIFICATE-----Generated at Thu Nov 21 01:26:04 2024 by rpki-client on console-ams.rpki-client.org