$ rpki-client -vvf rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/1BB9CAB6578011E99E80631AC4F9AE02.roa File: 1BB9CAB6578011E99E80631AC4F9AE02.roa (raw, json) Hash identifier: ZXqZATdJArBJctrOdjHOaMsx7uV2N+d+PjLUYYLOgsM= Subject key identifier: ED:40:67:4B:FC:E5:8B:29:74:49:C2:CF:18:E0:43:86:AC:F6:D3:28 Certificate issuer: /CN=A91C96A7/serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B Certificate serial: 0F4C Authority key identifier: 7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/1BB9CAB6578011E99E80631AC4F9AE02.roa Signing time: Wed 02 Oct 2024 17:55:55 +0000 ROA not before: Wed 02 Oct 2024 17:55:55 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 134595 IP address blocks: 103.121.12.0/24 maxlen: 24 103.121.13.0/24 maxlen: 24 103.121.14.0/24 maxlen: 24 103.121.15.0/24 maxlen: 24 2403:6240::/32 maxlen: 32 2403:6240::/36 maxlen: 36 2403:6240:1000::/36 maxlen: 36 2403:6240:2000::/36 maxlen: 36 2403:6240:3000::/36 maxlen: 36 2403:6240:4000::/36 maxlen: 36 2403:6240:5000::/36 maxlen: 36 2403:6240:6000::/36 maxlen: 36 2403:6240:7000::/36 maxlen: 36 2403:6240:8000::/36 maxlen: 36 2403:6240:9000::/36 maxlen: 36 2403:6240:a000::/36 maxlen: 36 2403:6240:b000::/36 maxlen: 36 2403:6240:c000::/36 maxlen: 36 2403:6240:d000::/36 maxlen: 36 2403:6240:e000::/36 maxlen: 36 2403:6240:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:33:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3916 (0xf4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C96A7/serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B Validity Not Before: Oct 2 17:55:55 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66fd892a-9605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:15:0d:99:32:d6:1d:f6:bd:56:11:34:ab:d2: 8e:57:36:b2:d5:fc:34:2c:97:8d:c7:d4:48:49:fe: b5:f9:a5:40:98:f5:f6:17:2e:d3:b8:8f:51:4f:e9: 19:0a:72:17:81:7f:25:c7:3a:26:4e:5c:fd:9c:d9: 42:6c:16:8b:84:02:b2:68:c3:4f:fe:b8:98:1d:fa: 4d:cf:c8:13:1a:d5:84:0e:e8:4f:36:48:b3:2f:50: 3c:e2:76:60:d6:e6:a3:d5:63:d1:6d:0f:97:ab:11: 73:b7:e3:21:5a:dd:ba:bf:8e:c7:a3:15:bb:b0:05: 04:25:a9:78:39:8f:51:6f:0e:f2:cc:20:bf:44:45: db:5d:98:b1:86:1c:ee:9a:a9:a9:51:d9:dd:36:44: 31:74:c5:a9:3f:a0:5a:60:b9:ee:db:2c:2c:62:7a: ca:da:ea:89:40:6b:d4:0f:33:0b:b4:2d:be:3a:8e: f2:7f:48:bd:05:ce:ff:e1:f8:fa:b5:24:dc:0a:6f: 4c:29:3c:db:ba:0e:81:ee:50:90:b5:9d:41:10:04: c2:9d:07:6b:ec:16:d1:ab:05:b4:3d:09:d5:44:52: e1:17:4e:77:8c:2d:40:aa:ee:c2:68:10:00:9e:16: c3:84:30:c8:1d:3b:d9:ee:74:c5:66:e5:87:b2:96: d8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:40:67:4B:FC:E5:8B:29:74:49:C2:CF:18:E0:43:86:AC:F6:D3:28 X509v3 Authority Key Identifier: keyid:7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/1BB9CAB6578011E99E80631AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.121.12.0/22 IPv6: 2403:6240::/32 Signature Algorithm: sha256WithRSAEncryption 2e:34:cd:78:3a:ca:cb:3a:db:59:af:ec:24:25:49:57:e0:04: 1c:9d:6c:93:f4:7a:2c:ff:6a:ac:5b:58:d5:62:4d:e6:54:d1: d6:cb:51:08:41:91:bf:b0:47:b6:ca:af:b7:12:d5:e0:5c:12: 4f:7c:97:65:01:ef:45:74:3d:af:ff:17:c8:06:03:39:6a:b8: 38:82:1e:41:a6:22:de:f2:ec:32:17:aa:4a:65:90:9f:55:ae: 7f:35:6a:c7:b1:56:12:0c:4d:92:92:34:c1:5c:f0:f4:c0:06: f9:35:95:cb:52:b5:53:39:76:03:cf:f2:40:b0:a0:f4:1a:a6: e9:af:5c:bf:79:36:9f:56:74:a3:78:45:1b:3b:3b:44:76:10: 9f:81:2d:bf:3a:ec:db:08:38:fc:60:d7:62:a5:37:86:b3:a1: a0:93:72:ec:77:29:dd:5c:be:2f:20:a9:2d:d0:e1:09:fb:69: e0:41:cd:72:7b:39:62:77:05:77:8b:bd:7f:9d:d1:d8:72:a7: 28:1f:7b:a9:c1:fa:36:9f:7f:59:ba:f3:a2:84:31:ca:f9:df: 4b:8c:68:80:0d:2f:32:51:25:8f:d3:02:d0:ba:0e:c8:4d:cb: 53:db:ca:2f:80:ed:39:69:83:95:a2:2c:9a:c0:c9:bc:db:f2: 79:40:3a:b4 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICD0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2QTcxMTAvBgNVBAUTKDdEQzU2ODkzREEzNTQ4M0ZEOTA5NERGMDM1MDRERTIx N0I2RTNCM0IwHhcNMjQxMDAyMTc1NTU1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZkODkyYS05NjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxUNmTLWHfa9VhE0q9KOVzay1fw0LJeNx9RISf61+aVAmPX2Fy7TuI9RT+kZ CnIXgX8lxzomTlz9nNlCbBaLhAKyaMNP/riYHfpNz8gTGtWEDuhPNkizL1A84nZg 1uaj1WPRbQ+XqxFzt+MhWt26v47HoxW7sAUEJal4OY9Rbw7yzCC/REXbXZixhhzu mqmpUdndNkQxdMWpP6BaYLnu2ywsYnrK2uqJQGvUDzMLtC2+Oo7yf0i9Bc7/4fj6 tSTcCm9MKTzbug6B7lCQtZ1BEATCnQdr7BbRqwW0PQnVRFLhF053jC1Aqu7CaBAA nhbDhDDIHTvZ7nTFZuWHspbYDQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFO1AZ0v8 5YspdEnCzxjgQ4as9tMoMB8GA1UdIwQYMBaAFH3FaJPaNUg/2QlN8DUE3iF7bjs7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTZBNy8yNkU3NDk5NjU3 N0YxMUU5OEU5MENBMThDNEY5QUUwMi9mY1ZvazlvMVNEX1pDVTN3TlFUZUlYdHVP enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZjVm9rOW8xU0RfWkNVM3dOUVRlSVh0dU96cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk2QTcvMjZFNzQ5OTY1NzdGMTFFOThFOTBDQTE4QzRGOUFFMDIvMUJCOUNBQjY1 NzgwMTFFOTlFODA2MzFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJneQwwDQQCAAIwBwMFACQDYkAwDQYJKoZIhvcNAQELBQAD ggEBAC40zXg6yss621mv7CQlSVfgBBydbJP0eiz/aqxbWNViTeZU0dbLUQhBkb+w R7bKr7cS1eBcEk98l2UB70V0Pa//F8gGAzlquDiCHkGmIt7y7DIXqkplkJ9Vrn81 asexVhIMTZKSNMFc8PTABvk1lctStVM5dgPP8kCwoPQapumvXL95Np9WdKN4RRs7 O0R2EJ+BLb867NsIOPxg12KlN4azoaCTcux3Kd1cvi8gqS3Q4Qn7aeBBzXJ7OWJ3 BXeLvX+d0dhypygfe6nB+jaff1m686KEMcr530uMaIANLzJRJY/TAtC6DshNy1Pb yi+A7Tlpg5WiLJrAybzb8nlAOrQ= -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:03 2024 by rpki-client on console-fra.rpki-client.org