$ rpki-client -vvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/BCC1E04E33C011EE83E9A61BC4F9AE02.roa File: BCC1E04E33C011EE83E9A61BC4F9AE02.roa (raw, json) Hash identifier: gEcFdCTf52NARTThJUnsykol1LheMWgXpMpHapO3A8E= Subject key identifier: 10:5B:4F:7B:BD:06:10:B2:09:C6:0A:1F:BC:6C:F6:5C:92:B6:74:6A Certificate issuer: /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6 Certificate serial: 0654 Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/BCC1E04E33C011EE83E9A61BC4F9AE02.roa Signing time: Sat 31 Aug 2024 00:02:00 +0000 ROA not before: Sat 31 Aug 2024 00:02:00 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 137443 IP address blocks: 103.68.192.0/24 maxlen: 24 103.68.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1620 (0x654) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6 Validity Not Before: Aug 31 00:02:00 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d25d78-11c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7a:c3:f3:bd:1a:51:35:9d:85:68:d0:4b:42: 92:27:ed:7f:5a:92:dd:d5:6f:45:89:51:0d:34:4d: b3:18:ca:a9:2f:ec:03:5e:8c:66:45:db:32:8a:f3: 5c:b8:b4:6b:6c:89:de:f6:be:fa:d9:45:43:8e:35: 36:02:88:8e:70:d1:82:fa:f3:74:e1:0c:dd:cf:5a: 3b:c7:cb:ba:56:05:32:6a:ea:e8:00:6f:0c:34:68: 3c:a6:8d:56:07:a8:4e:57:d1:28:e8:c8:43:e6:5b: 2e:fe:30:4c:d4:d5:49:16:c1:af:30:7a:b8:c2:41: 00:19:46:00:2a:54:9a:ba:f7:b5:0a:02:52:fe:39: 4e:22:8a:dc:7e:1a:b2:f1:1d:50:18:1a:c0:5d:28: 12:a6:44:72:74:5e:9b:54:7f:d3:1f:de:74:74:44: 20:b5:7c:78:76:27:37:47:90:58:f8:25:fa:1a:96: 7a:28:84:3a:1b:bb:5f:9a:70:d5:53:ef:e2:32:96: 20:b1:ca:52:3a:04:a4:a7:d1:0d:3d:dc:74:5a:1f: e3:c8:df:5b:6b:68:3f:6a:3b:eb:53:5a:25:0d:07: 62:64:e0:4b:f7:36:16:ab:64:a4:97:a0:ae:d7:7b: 6f:7e:48:97:0b:48:95:5b:eb:42:1e:90:4a:71:11: 0c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5B:4F:7B:BD:06:10:B2:09:C6:0A:1F:BC:6C:F6:5C:92:B6:74:6A X509v3 Authority Key Identifier: keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/BCC1E04E33C011EE83E9A61BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.68.192.0/23 Signature Algorithm: sha256WithRSAEncryption 53:9f:7a:9c:8c:46:98:0b:de:d4:80:7e:5f:63:87:3f:a5:db: e9:18:a9:b5:02:b9:96:d6:da:34:8d:70:8c:2b:87:33:9c:53: ad:76:69:84:8c:d9:50:d6:b7:b7:84:cd:f2:7f:63:23:1c:44: e4:09:bf:8b:8e:1f:fd:a3:d2:1c:c0:41:59:81:91:75:d8:66: da:ed:41:f0:55:4f:b7:ac:53:a5:85:46:1d:92:0c:fd:48:60: d8:3e:d9:01:c0:34:e0:94:aa:c9:1b:da:76:f5:43:70:1f:d2: 6e:df:1f:2b:ec:5f:0c:ea:e4:ce:86:79:e5:f0:11:07:86:ef: 84:13:2f:b5:58:d8:e4:a4:fc:df:d5:d2:8f:ad:58:81:8b:52: 3f:45:0c:ad:06:ad:04:43:0a:e0:e2:a0:1e:73:a5:70:35:62: 9f:62:5c:52:66:f7:cc:65:2d:22:53:42:df:4c:a6:7f:0f:b0: e7:c3:83:56:1d:c5:b7:06:1b:48:14:e9:2b:44:60:74:ef:61: 63:04:99:12:27:8f:aa:46:2d:3e:42:86:8e:c4:3c:95:8b:71: dc:82:8d:25:1a:c2:27:cc:9a:b9:c2:bb:37:32:14:f3:be:15: cb:7b:22:01:f8:2d:0b:d0:e2:66:a4:87:f2:01:59:83:45:3f: 7e:2d:bd:c2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMyNkYxMTAvBgNVBAUTKDM5MkYzNkUwQTQ1MDA1M0MzREM2NkQyRTM4OTRFMTBD QTczM0REQTYwHhcNMjQwODMxMDAwMjAwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQyNWQ3OC0xMWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunrD870aUTWdhWjQS0KSJ+1/WpLd1W9FiVENNE2zGMqpL+wDXoxmRdsyivNc uLRrbIne9r762UVDjjU2AoiOcNGC+vN04Qzdz1o7x8u6VgUyauroAG8MNGg8po1W B6hOV9Eo6MhD5lsu/jBM1NVJFsGvMHq4wkEAGUYAKlSauve1CgJS/jlOIorcfhqy 8R1QGBrAXSgSpkRydF6bVH/TH950dEQgtXx4dic3R5BY+CX6GpZ6KIQ6G7tfmnDV U+/iMpYgscpSOgSkp9ENPdx0Wh/jyN9ba2g/ajvrU1olDQdiZOBL9zYWq2Skl6Cu 13tvfkiXC0iVW+tCHpBKcREMjQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBBbT3u9 BhCyCcYKH7xs9lyStnRqMB8GA1UdIwQYMBaAFDkvNuCkUAU8PcZtLjiU4QynM92m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzI2Ri83ODY2RjUzMDVG QzcxMUVCOEE2OTIwMkVDNEY5QUUwMi9PUzgyNEtSUUJUdzl4bTB1T0pUaERLY3oz YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TODI0S1JRQlR3OXhtMHVPSlRoREtjejNhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzMyNkYvNzg2NkY1MzA1RkM3MTFFQjhBNjkyMDJFQzRGOUFFMDIvQkNDMUUwNEUz M0MwMTFFRTgzRTlBNjFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnRMAwDQYJKoZIhvcNAQELBQADggEBAFOfepyMRpgL3tSA fl9jhz+l2+kYqbUCuZbW2jSNcIwrhzOcU612aYSM2VDWt7eEzfJ/YyMcROQJv4uO H/2j0hzAQVmBkXXYZtrtQfBVT7esU6WFRh2SDP1IYNg+2QHANOCUqskb2nb1Q3Af 0m7fHyvsXwzq5M6GeeXwEQeG74QTL7VY2OSk/N/V0o+tWIGLUj9FDK0GrQRDCuDi oB5zpXA1Yp9iXFJm98xlLSJTQt9Mpn8PsOfDg1YdxbcGG0gU6StEYHTvYWMEmRIn j6pGLT5Cho7EPJWLcdyCjSUawifMmrnCuzcyFPO+Fct7IgH4LQvQ4makh/IBWYNF P34tvcI= -----END CERTIFICATE-----Generated at Wed Nov 20 23:11:48 2024 by rpki-client on console-fra.rpki-client.org