$ rpki-client -vvf rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/9BB673AA479111ECA77ED34DC4F9AE02.roa File: 9BB673AA479111ECA77ED34DC4F9AE02.roa (raw, json) Hash identifier: /DuM5c/5hK0oho9BwTuJNF7dRpHoa2sPJXkyJddg5oQ= Subject key identifier: 84:C0:8D:4F:CA:64:F2:BB:1F:A6:17:69:32:04:10:F3:7D:40:8B:5C Certificate issuer: /CN=A91C278B/serialNumber=3C433B64E64C46DFD58E63C115284485815231FF Certificate serial: 049A Authority key identifier: 3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/9BB673AA479111ECA77ED34DC4F9AE02.roa Signing time: Sat 07 Sep 2024 01:13:56 +0000 ROA not before: Sat 07 Sep 2024 01:13:56 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 14618 IP address blocks: 103.196.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1178 (0x49a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C278B/serialNumber=3C433B64E64C46DFD58E63C115284485815231FF Validity Not Before: Sep 7 01:13:56 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66dba8d4-14d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:72:a1:21:2d:f2:64:f9:5b:b0:e9:45:08:84: 66:e4:5a:ce:12:35:b2:b0:db:45:40:46:b2:12:9e: d0:cd:f8:df:d1:bd:26:9b:92:1c:4d:f0:9c:2d:c9: d9:e9:4c:13:84:20:93:34:75:c0:51:1a:f6:26:67: a6:43:19:23:2e:2e:f8:b7:f4:79:29:84:60:32:af: 0c:55:66:ba:3c:91:e6:d1:84:00:3b:3c:c6:21:e7: 7b:64:e0:b3:8c:c0:53:d0:8e:05:d8:8f:8e:2a:ad: fd:f4:92:d8:10:e8:34:c0:dd:36:23:73:f3:85:9c: 31:65:c1:ce:d5:fb:c5:ed:92:b8:50:6b:a5:de:7f: 07:61:db:59:9a:4d:25:03:e1:2b:70:d5:6a:78:26: ce:ab:aa:55:3c:f2:ba:06:ac:ec:72:a5:c2:a8:c0: b6:9a:17:5f:0b:7a:1e:96:0f:21:2a:51:5e:87:37: 8c:e4:fd:59:8a:a6:a7:2b:e6:de:80:47:c7:76:ab: 71:95:e1:ff:cb:31:f5:f5:53:a5:3a:c5:4f:1b:88: fd:08:6f:8b:ff:a6:c6:82:cc:4a:87:c8:ea:7f:5c: 4d:7f:73:bb:33:2e:f8:8b:ac:21:26:d8:19:63:38: 92:14:00:28:f0:40:8b:43:35:ef:10:cb:34:97:64: 4f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C0:8D:4F:CA:64:F2:BB:1F:A6:17:69:32:04:10:F3:7D:40:8B:5C X509v3 Authority Key Identifier: keyid:3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/9BB673AA479111ECA77ED34DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.196.32.0/24 Signature Algorithm: sha256WithRSAEncryption 56:97:1a:b0:8b:5e:d9:06:28:9a:54:e2:ac:7f:da:42:79:40: ff:b2:4a:b7:09:2a:42:0b:d0:df:e3:38:f6:47:e4:56:27:11: dd:00:d2:a7:1c:e7:05:a7:f5:38:db:b4:ec:38:b4:f4:ad:f0: 87:b3:96:15:5b:b0:17:af:ef:b8:9f:1d:ef:8f:3d:bf:bc:98: 18:8b:6b:57:45:d9:a5:73:0d:90:4b:35:7e:e1:07:e5:bd:b4: 2a:97:56:04:e2:82:42:6f:ef:61:0a:14:6f:d4:54:8f:9c:28: 67:59:15:34:8d:41:6a:27:1d:07:6e:ca:2c:59:3f:87:e1:d9: 27:c4:8e:c4:62:19:45:18:03:eb:fa:42:b9:1d:fa:53:ec:a3: 20:90:57:6d:10:0c:14:ef:84:07:f8:06:84:22:b6:bd:94:c0: 45:f4:19:ba:7a:cf:45:a5:d1:b6:73:3a:e4:53:46:c9:4a:df: cb:5b:45:15:1f:aa:e1:ba:7b:5e:89:21:e2:39:bc:11:7a:96: d5:03:4f:1b:13:a9:9c:d7:cc:58:23:35:c2:3e:db:df:f8:d6: 7d:bd:70:8b:11:6a:1a:69:9a:27:e2:67:82:b4:13:fe:e7:0c: 2c:58:d6:c8:f3:26:df:8c:e4:62:fc:f6:ae:8c:26:3d:d2:17: 76:2c:36:af -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI3OEIxMTAvBgNVBAUTKDNDNDMzQjY0RTY0QzQ2REZENThFNjNDMTE1Mjg0NDg1 ODE1MjMxRkYwHhcNMjQwOTA3MDExMzU2WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmRiYThkNC0xNGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunKhIS3yZPlbsOlFCIRm5FrOEjWysNtFQEayEp7Qzfjf0b0mm5IcTfCcLcnZ 6UwThCCTNHXAURr2JmemQxkjLi74t/R5KYRgMq8MVWa6PJHm0YQAOzzGIed7ZOCz jMBT0I4F2I+OKq399JLYEOg0wN02I3PzhZwxZcHO1fvF7ZK4UGul3n8HYdtZmk0l A+ErcNVqeCbOq6pVPPK6BqzscqXCqMC2mhdfC3oelg8hKlFehzeM5P1ZiqanK+be gEfHdqtxleH/yzH19VOlOsVPG4j9CG+L/6bGgsxKh8jqf1xNf3O7My74i6whJtgZ YziSFAAo8ECLQzXvEMs0l2RPiwIDAQABo4IClTCCApEwHQYDVR0OBBYEFITAjU/K ZPK7H6YXaTIEEPN9QItcMB8GA1UdIwQYMBaAFDxDO2TmTEbf1Y5jwRUoRIWBUjH/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjc4Qi8wNkIwQjYyQTBB NDgxMUVDQkM1NzNENUZDNEY5QUUwMi9QRU03Wk9aTVJ0X1ZqbVBCRlNoRWhZRlNN ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BFTTdaT1pNUnRfVmptUEJGU2hFaFlGU01mOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzI3OEIvMDZCMEI2MkEwQTQ4MTFFQ0JDNTczRDVGQzRGOUFFMDIvOUJCNjczQUE0 NzkxMTFFQ0E3N0VEMzREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnxCAwDQYJKoZIhvcNAQELBQADggEBAFaXGrCLXtkGKJpU 4qx/2kJ5QP+ySrcJKkIL0N/jOPZH5FYnEd0A0qcc5wWn9TjbtOw4tPSt8IezlhVb sBev77ifHe+PPb+8mBiLa1dF2aVzDZBLNX7hB+W9tCqXVgTigkJv72EKFG/UVI+c KGdZFTSNQWonHQduyixZP4fh2SfEjsRiGUUYA+v6Qrkd+lPsoyCQV20QDBTvhAf4 BoQitr2UwEX0Gbp6z0Wl0bZzOuRTRslK38tbRRUfquG6e16JIeI5vBF6ltUDTxsT qZzXzFgjNcI+29/41n29cIsRahppmifiZ4K0E/7nDCxY1sjzJt+M5GL89q6MJj3S F3YsNq8= -----END CERTIFICATE-----Generated at Thu Nov 21 00:21:24 2024 by rpki-client on console-fra.rpki-client.org