$ rpki-client -vvf rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/1BB9CAB6578011E99E80631AC4F9AE02.roa File: 1BB9CAB6578011E99E80631AC4F9AE02.roa (raw, json) Hash identifier: DJClFjNtaOvQ/Ujp6J8xeRJYTDwT4UiI5JTW6w5mbHI= Subject key identifier: DA:D5:04:56:20:3F:F0:6A:6A:1B:13:65:2E:C4:C1:E5:ED:7B:DF:F7 Certificate issuer: /CN=A91C96A7/serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B Certificate serial: 0E8E Authority key identifier: 7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/1BB9CAB6578011E99E80631AC4F9AE02.roa Signing time: Mon 02 Oct 2023 18:15:36 +0000 ROA not before: Mon 02 Oct 2023 18:15:36 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 134595 IP address blocks: 103.121.12.0/24 maxlen: 24 103.121.13.0/24 maxlen: 24 103.121.14.0/24 maxlen: 24 103.121.15.0/24 maxlen: 24 2403:6240::/32 maxlen: 32 2403:6240::/36 maxlen: 36 2403:6240:1000::/36 maxlen: 36 2403:6240:2000::/36 maxlen: 36 2403:6240:3000::/36 maxlen: 36 2403:6240:4000::/36 maxlen: 36 2403:6240:5000::/36 maxlen: 36 2403:6240:6000::/36 maxlen: 36 2403:6240:7000::/36 maxlen: 36 2403:6240:8000::/36 maxlen: 36 2403:6240:9000::/36 maxlen: 36 2403:6240:a000::/36 maxlen: 36 2403:6240:b000::/36 maxlen: 36 2403:6240:c000::/36 maxlen: 36 2403:6240:d000::/36 maxlen: 36 2403:6240:e000::/36 maxlen: 36 2403:6240:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3726 (0xe8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C96A7/serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B Validity Not Before: Oct 2 18:15:36 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=651b08c7-a72c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e7:cc:45:f4:59:4e:a3:6c:49:ab:91:fa:86: e5:6e:ee:4d:18:99:fa:42:17:e3:11:dd:65:55:4a: fe:d6:d7:fb:3f:34:13:24:8d:c1:46:49:73:e8:00: 5a:15:6a:b2:e7:72:87:a4:97:2d:10:ff:20:e3:d8: 0f:dc:e2:0a:b0:af:6f:8a:72:10:66:b5:cd:c8:b1: 9f:bb:33:89:eb:d7:59:e8:b9:27:f5:56:36:33:9c: 79:a6:a9:a3:84:f2:1f:c0:44:88:23:2f:8d:1f:38: 31:d3:d9:da:44:b2:ab:ee:bf:c4:0f:97:8f:7c:ae: 2f:92:35:69:d4:3a:4e:6a:e5:b7:24:71:75:21:47: 37:ff:6b:47:83:33:84:54:b2:32:23:af:06:77:48: 94:3b:95:d0:8c:09:bd:5d:85:90:75:12:6a:32:31: 0c:c2:14:f4:97:a6:05:73:04:0e:c7:6a:68:d6:ce: c4:23:28:17:6c:80:89:d4:c4:13:57:bd:bf:31:b1: 98:0a:9c:90:a9:d5:90:cd:74:78:cf:c1:02:4d:38: 61:af:1b:fe:df:98:d6:cf:64:26:97:7c:05:70:90: bd:2e:cc:4c:e6:3e:cd:af:f4:6b:62:9f:a9:0f:4d: 52:be:1c:66:1b:49:85:45:a3:61:cc:c9:fa:42:27: 19:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D5:04:56:20:3F:F0:6A:6A:1B:13:65:2E:C4:C1:E5:ED:7B:DF:F7 X509v3 Authority Key Identifier: keyid:7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/1BB9CAB6578011E99E80631AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.121.12.0/22 IPv6: 2403:6240::/32 Signature Algorithm: sha256WithRSAEncryption 0a:2b:94:4e:3e:e8:5b:53:8e:03:84:04:54:3a:a6:ec:4e:0a: 9c:fd:ed:90:f6:df:46:23:0f:4a:6f:da:d6:7d:41:a4:b6:d2: a9:fb:e7:30:f1:27:4c:bc:01:02:e2:90:46:cb:3a:0c:57:4b: 86:4a:68:40:c8:09:ea:51:ea:14:b8:62:51:46:a2:ba:b1:e6: 63:15:0d:76:14:c8:75:4d:01:23:39:f0:87:96:e1:d6:48:ad: 93:64:11:70:f0:1f:40:88:23:46:9e:04:c0:d8:80:8c:2f:e8: 8b:c8:70:10:61:a5:61:5d:c8:d8:af:ee:bc:9e:0b:9e:3d:a9: f9:0b:4e:08:dd:09:20:8c:3f:72:09:0e:d0:0c:4c:a5:a5:71: ff:3c:5d:6b:56:3b:23:ae:b7:27:f8:7e:43:98:88:11:d1:e0: bf:76:1b:d2:95:6e:43:7e:b2:de:8c:e1:f9:bf:54:3d:5e:53: 2a:2b:a7:d0:c0:9c:fd:5a:55:1d:1b:ab:e5:b7:74:fe:a8:4a: db:a6:e4:5f:93:b1:6a:59:22:9f:b1:68:7a:ab:ca:a6:4a:bd: a4:a3:37:1c:6a:c3:f4:bc:29:72:f4:22:c9:78:5f:94:92:e8: 17:d7:1d:43:65:6b:d3:6c:30:86:38:44:49:f9:fb:a3:f5:e2: 02:51:47:86 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2QTcxMTAvBgNVBAUTKDdEQzU2ODkzREEzNTQ4M0ZEOTA5NERGMDM1MDRERTIx N0I2RTNCM0IwHhcNMjMxMDAyMTgxNTM2WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTFiMDhjNy1hNzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvefMRfRZTqNsSauR+oblbu5NGJn6QhfjEd1lVUr+1tf7PzQTJI3BRklz6ABa FWqy53KHpJctEP8g49gP3OIKsK9vinIQZrXNyLGfuzOJ69dZ6Lkn9VY2M5x5pqmj hPIfwESIIy+NHzgx09naRLKr7r/ED5ePfK4vkjVp1DpOauW3JHF1IUc3/2tHgzOE VLIyI68Gd0iUO5XQjAm9XYWQdRJqMjEMwhT0l6YFcwQOx2po1s7EIygXbICJ1MQT V72/MbGYCpyQqdWQzXR4z8ECTThhrxv+35jWz2Qml3wFcJC9LsxM5j7Nr/RrYp+p D01SvhxmG0mFRaNhzMn6QicZpQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFNrVBFYg P/BqahsTZS7EweXte9/3MB8GA1UdIwQYMBaAFH3FaJPaNUg/2QlN8DUE3iF7bjs7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTZBNy8yNkU3NDk5NjU3 N0YxMUU5OEU5MENBMThDNEY5QUUwMi9mY1ZvazlvMVNEX1pDVTN3TlFUZUlYdHVP enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZjVm9rOW8xU0RfWkNVM3dOUVRlSVh0dU96cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk2QTcvMjZFNzQ5OTY1NzdGMTFFOThFOTBDQTE4QzRGOUFFMDIvMUJCOUNBQjY1 NzgwMTFFOTlFODA2MzFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJneQwwDQQCAAIwBwMFACQDYkAwDQYJKoZIhvcNAQELBQAD ggEBAAorlE4+6FtTjgOEBFQ6puxOCpz97ZD230YjD0pv2tZ9QaS20qn75zDxJ0y8 AQLikEbLOgxXS4ZKaEDICepR6hS4YlFGorqx5mMVDXYUyHVNASM58IeW4dZIrZNk EXDwH0CII0aeBMDYgIwv6IvIcBBhpWFdyNiv7ryeC549qfkLTgjdCSCMP3IJDtAM TKWlcf88XWtWOyOutyf4fkOYiBHR4L92G9KVbkN+st6M4fm/VD1eUyorp9DAnP1a VR0bq+W3dP6oStum5F+TsWpZIp+xaHqryqZKvaSjNxxqw/S8KXL0Isl4X5SS6BfX HUNla9NsMIY4REn5+6P14gJRR4Y= -----END CERTIFICATE-----Generated at Wed May 8 20:36:05 2024 by rpki-client on console-ams.rpki-client.org