$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/471C89308C6511EFAC934F0EC4F9AE02.roa File: 471C89308C6511EFAC934F0EC4F9AE02.roa (raw, json) Hash identifier: 5c9B76+5C6joPYyYP8goTlB4qsKhmpS+f3k7D3rK+D0= Subject key identifier: D4:F9:F1:27:84:98:9B:F9:69:16:36:04:63:70:57:21:E0:01:DB:95 Certificate issuer: /CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Certificate serial: 021F Authority key identifier: 03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/471C89308C6511EFAC934F0EC4F9AE02.roa Signing time: Thu 17 Oct 2024 08:53:29 +0000 ROA not before: Thu 17 Oct 2024 08:53:29 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 134186 IP address blocks: 45.117.60.0/24 maxlen: 24 103.57.120.0/22 maxlen: 22 103.57.120.0/24 maxlen: 24 103.57.121.0/24 maxlen: 24 103.57.122.0/24 maxlen: 24 103.57.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:27:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 543 (0x21f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Validity Not Before: Oct 17 08:53:29 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6710d088-96c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cb:42:aa:e0:96:18:00:72:a4:53:91:ef:57: c4:e7:ee:94:6a:cd:11:36:59:f2:45:f0:fb:3b:5a: bf:dc:8f:6f:75:6d:8c:ae:2d:0e:94:2c:04:ae:2f: 0d:7c:22:54:20:1d:81:96:33:8e:f7:65:72:b4:16: ec:1b:c1:32:68:2e:13:2d:da:62:8d:ae:61:3b:c6: 63:b5:01:0d:12:29:88:3d:c2:83:fd:3e:04:17:2c: d0:8b:b5:35:47:d0:25:21:82:3e:bf:da:71:c8:29: b7:bb:50:4c:a9:28:15:ce:ee:cf:b9:ea:10:ba:16: 46:fa:fe:eb:00:65:46:9c:71:bc:6f:3c:d3:b2:a8: f4:3e:1f:a6:4c:c4:04:b3:4c:59:50:19:c0:a9:f3: b5:fc:19:a8:db:96:3b:e1:8b:65:79:14:35:56:e4: 04:48:f3:75:fe:a3:2f:b0:19:54:f5:a6:ba:4e:91: bb:ae:d1:44:1e:d2:66:7f:e6:e1:51:d9:57:a9:84: d5:cb:60:44:99:82:37:6a:ae:41:2e:76:9a:c5:6b: 80:7c:64:9a:c8:65:a4:f6:92:84:03:25:80:65:a5: f3:40:2f:e1:09:63:dc:6d:10:03:12:a3:84:99:a3: 4c:e2:6a:61:89:da:ce:3a:05:0a:2b:16:72:c9:a3: ce:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F9:F1:27:84:98:9B:F9:69:16:36:04:63:70:57:21:E0:01:DB:95 X509v3 Authority Key Identifier: keyid:03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/471C89308C6511EFAC934F0EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.117.60.0/24 103.57.120.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:42:28:63:dc:22:ea:65:b5:e0:71:14:4f:71:d9:09:b9:95: 7e:78:cc:73:82:d9:0a:93:d8:da:b0:91:41:48:d1:65:2c:18: 53:fb:b0:8f:1c:e3:39:0d:28:68:34:94:73:fc:11:ce:3e:59: 3f:61:49:de:6d:e1:94:a6:f4:4b:79:ea:53:db:74:44:b9:26: 08:63:78:63:d3:9f:b2:b4:03:2b:0d:a6:ac:50:5b:b9:b3:cc: ce:da:7f:00:5b:92:00:69:61:17:85:a5:97:4e:2d:7b:71:7e: d8:0f:83:58:14:cc:77:2f:b4:77:18:d0:4b:21:6a:0f:28:f4: b6:69:7e:29:bd:32:3b:07:52:a4:aa:48:a0:ef:40:d9:39:8d: a7:83:99:dc:0a:87:23:2b:d8:58:f4:bd:66:35:c8:a6:e0:2a: 3d:34:be:82:bd:2e:1c:94:80:9b:bf:38:7c:8b:88:7e:89:62: 84:e6:e4:a7:5c:50:6a:1d:71:36:8b:16:30:57:77:96:34:7d: 4e:8e:15:93:c3:f7:b4:89:0f:dd:16:89:b8:ff:b6:e9:23:0a: 47:7f:99:f4:cc:c2:01:4c:34:f8:b2:b1:69:b8:5c:20:01:3c: 38:3c:ce:a5:9d:0d:be:bb:db:10:c2:26:e6:2f:d6:32:f2:64: d9:ed:e9:8e -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCQjIxMTAvBgNVBAUTKDAzQkM3NDlBQzE2ODJDNEI0NkRBMjU5QUI3RUI2NjJB QTIyNUIwRUUwHhcNMjQxMDE3MDg1MzI5WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzEwZDA4OC05NmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvstCquCWGABypFOR71fE5+6Uas0RNlnyRfD7O1q/3I9vdW2Mri0OlCwEri8N fCJUIB2BljOO92VytBbsG8EyaC4TLdpija5hO8ZjtQENEimIPcKD/T4EFyzQi7U1 R9AlIYI+v9pxyCm3u1BMqSgVzu7PueoQuhZG+v7rAGVGnHG8bzzTsqj0Ph+mTMQE s0xZUBnAqfO1/Bmo25Y74YtleRQ1VuQESPN1/qMvsBlU9aa6TpG7rtFEHtJmf+bh UdlXqYTVy2BEmYI3aq5BLnaaxWuAfGSayGWk9pKEAyWAZaXzQC/hCWPcbRADEqOE maNM4mphidrOOgUKKxZyyaPOIQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNT58SeE mJv5aRY2BGNwVyHgAduVMB8GA1UdIwQYMBaAFAO8dJrBaCxLRtolmrfrZiqiJbDu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJCMi81RDRDQzJGNjA4 QzgxMUVEOTQ0RjI1NjZDNEY5QUUwMi9BN3gwbXNGb0xFdEcyaVdhdC10bUtxSWxz TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E3eDBtc0ZvTEV0RzJpV2F0LXRtS3FJbHNPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzZCQjIvNUQ0Q0MyRjYwOEM4MTFFRDk0NEYyNTY2QzRGOUFFMDIvNDcxQzg5MzA4 QzY1MTFFRkFDOTM0RjBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAAtdTwDBAJnOXgwDQYJKoZIhvcNAQELBQADggEBAJtCKGPc IuplteBxFE9x2Qm5lX54zHOC2QqT2NqwkUFI0WUsGFP7sI8c4zkNKGg0lHP8Ec4+ WT9hSd5t4ZSm9Et56lPbdES5JghjeGPTn7K0AysNpqxQW7mzzM7afwBbkgBpYReF pZdOLXtxftgPg1gUzHcvtHcY0Eshag8o9LZpfim9MjsHUqSqSKDvQNk5jaeDmdwK hyMr2Fj0vWY1yKbgKj00voK9LhyUgJu/OHyLiH6JYoTm5KdcUGodcTaLFjBXd5Y0 fU6OFZPD97SJD90Wibj/tukjCkd/mfTMwgFMNPiysWm4XCABPDg8zqWdDb672xDC JuYv1jLyZNnt6Y4= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:51 2024 by rpki-client on console-ams.rpki-client.org