$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/4CC9C2C67A4011EF8ECE0718C4F9AE02.roa File: 4CC9C2C67A4011EF8ECE0718C4F9AE02.roa (raw, json) Hash identifier: /r8KvmtJxwcXEht7kIS+bSuNX4wT0OgIXkJCK/QDB60= Subject key identifier: 36:0B:F6:82:CF:A6:C3:84:6E:4E:1C:80:73:75:B5:A2:85:D5:71:B2 Certificate issuer: /CN=A91C612E/serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2 Certificate serial: 062F Authority key identifier: C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/4CC9C2C67A4011EF8ECE0718C4F9AE02.roa Signing time: Tue 24 Sep 2024 06:43:26 +0000 ROA not before: Tue 24 Sep 2024 06:43:26 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 135637 IP address blocks: 103.77.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1583 (0x62f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C612E/serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2 Validity Not Before: Sep 24 06:43:26 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=66f25f8d-44c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e4:23:65:67:6e:10:09:63:cd:34:67:d8:d3: 9d:1b:cc:12:8b:ee:48:83:bc:3e:26:86:54:b2:a4: fc:10:cd:8d:f8:50:a3:d1:b2:40:33:3e:8e:3d:9e: 46:39:c1:1c:6b:90:9b:b0:3e:7a:ed:f5:c5:29:bc: e6:7a:4d:a6:10:40:27:b1:8d:03:e8:68:41:83:79: f1:4a:f9:d6:20:ea:04:dd:6e:21:55:6a:a8:e7:79: c9:48:b5:5a:93:86:7a:82:b0:28:d7:93:9c:8f:0c: 35:11:de:0b:59:09:af:ed:78:3e:c0:ec:06:d3:82: c8:9f:1e:e7:8b:8b:42:6d:fc:ac:b5:b0:b3:1e:88: de:59:40:51:9b:d8:76:7f:1a:df:60:40:26:f5:1b: fc:75:55:4a:26:41:e6:81:c0:1d:f2:d8:58:ea:53: 9a:a4:98:99:32:a0:64:71:38:82:cb:33:55:db:16: 71:f7:87:d1:90:41:ff:62:bd:da:e9:fd:27:64:f1: a4:c2:da:7e:6e:79:a3:9c:88:fb:b5:d5:5d:a1:8f: a9:f6:74:c9:09:9f:02:b9:22:58:95:27:ad:38:09: 17:45:f2:93:f0:e7:b5:ee:dd:45:e9:79:4f:cb:e5: d5:3c:e0:63:96:00:81:9a:18:d7:7b:6b:8a:2b:e0: b6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0B:F6:82:CF:A6:C3:84:6E:4E:1C:80:73:75:B5:A2:85:D5:71:B2 X509v3 Authority Key Identifier: keyid:C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/4CC9C2C67A4011EF8ECE0718C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.77.100.0/23 Signature Algorithm: sha256WithRSAEncryption 26:69:3a:cd:94:0f:cf:a5:0e:02:4b:31:8d:5c:f6:f0:e5:96: f2:58:c0:89:ae:eb:f8:2c:2f:d5:7c:9d:e1:72:80:66:c0:43: 7e:60:a4:f7:bf:6d:d4:f9:16:80:0f:2c:7c:7b:05:f3:9c:55: 00:ad:f3:cd:df:be:fb:11:2d:57:a3:23:d2:21:89:18:15:6c: 67:f8:a6:66:29:ad:b4:77:d7:21:11:9f:bc:cb:ce:cd:2a:d9: 78:6b:89:05:0c:13:2a:6c:ca:0b:ce:fb:e6:14:89:7c:dc:74: d1:15:aa:8a:88:89:e4:38:aa:d3:a5:07:f5:6c:61:40:58:a2: 79:dc:7c:c1:3e:ea:c0:ec:ca:11:83:bc:15:00:7d:54:32:20: 70:1f:6a:bb:92:48:38:2b:be:98:06:e6:9a:1d:19:0b:92:d0: 4c:2b:a4:64:31:68:94:74:1e:6d:96:e3:d1:e3:9d:e6:3a:a6: 93:dc:25:6b:00:f8:2c:62:7b:29:dd:98:32:87:c8:b0:f5:5c: 43:b3:c0:f8:ef:7d:08:b5:c3:0b:cb:d4:81:56:f5:c6:93:38: 97:30:93:d1:db:80:2f:df:98:ab:55:38:a6:bf:f4:7e:14:5f: 72:10:46:95:b8:03:3f:dc:72:13:54:77:d0:53:fc:26:cb:32: 10:1e:4d:6d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYxMkUxMTAvBgNVBAUTKEM3QUVDMEMxMUI2REYxMjk4QjEyNTA5ODMxQTRDQzAy NDREQURDRjIwHhcNMjQwOTI0MDY0MzI2WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmYyNWY4ZC00NGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+QjZWduEAljzTRn2NOdG8wSi+5Ig7w+JoZUsqT8EM2N+FCj0bJAMz6OPZ5G OcEca5CbsD567fXFKbzmek2mEEAnsY0D6GhBg3nxSvnWIOoE3W4hVWqo53nJSLVa k4Z6grAo15Ocjww1Ed4LWQmv7Xg+wOwG04LInx7ni4tCbfystbCzHojeWUBRm9h2 fxrfYEAm9Rv8dVVKJkHmgcAd8thY6lOapJiZMqBkcTiCyzNV2xZx94fRkEH/Yr3a 6f0nZPGkwtp+bnmjnIj7tdVdoY+p9nTJCZ8CuSJYlSetOAkXRfKT8Oe17t1F6XlP y+XVPOBjlgCBmhjXe2uKK+C2NwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDYL9oLP psOEbk4cgHN1taKF1XGyMB8GA1UdIwQYMBaAFMeuwMEbbfEpixJQmDGkzAJE2tzy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjEyRS82NUJDMTdEMjBC NjExMUVBQUYwNDJGNjhDNEY5QUUwMi94NjdBd1J0dDhTbUxFbENZTWFUTUFrVGEz UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g2N0F3UnR0OFNtTEVsQ1lNYVRNQWtUYTNQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzYxMkUvNjVCQzE3RDIwQjYxMTFFQUFGMDQyRjY4QzRGOUFFMDIvNENDOUMyQzY3 QTQwMTFFRjhFQ0UwNzE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnTWQwDQYJKoZIhvcNAQELBQADggEBACZpOs2UD8+lDgJL MY1c9vDllvJYwImu6/gsL9V8neFygGbAQ35gpPe/bdT5FoAPLHx7BfOcVQCt883f vvsRLVejI9IhiRgVbGf4pmYprbR31yERn7zLzs0q2XhriQUMEypsygvO++YUiXzc dNEVqoqIieQ4qtOlB/VsYUBYonncfME+6sDsyhGDvBUAfVQyIHAfaruSSDgrvpgG 5podGQuS0EwrpGQxaJR0Hm2W49HjneY6ppPcJWsA+CxieyndmDKHyLD1XEOzwPjv fQi1wwvL1IFW9caTOJcwk9HbgC/fmKtVOKa/9H4UX3IQRpW4Az/cchNUd9BT/CbL MhAeTW0= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:17 2024 by rpki-client on console-ams.rpki-client.org