$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/5ADC253683EC11ECB7EC3B76C4F9AE02.roa File: 5ADC253683EC11ECB7EC3B76C4F9AE02.roa (raw, json) Hash identifier: l9MCX/ok3k/pBrf5kVJoFs4voysyb/A+G+zc7rR/ENo= Subject key identifier: 2B:C2:1F:CD:8A:AB:E2:5D:22:F4:37:55:5B:79:D7:16:8F:97:6B:C7 Certificate issuer: /CN=A91C9A8D/serialNumber=E18F9E85743ABECAC0462B8FDF43A7DB4A628FF9 Certificate serial: 0352 Authority key identifier: E1:8F:9E:85:74:3A:BE:CA:C0:46:2B:8F:DF:43:A7:DB:4A:62:8F:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y-ehXQ6vsrARiuP30On20pij_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/5ADC253683EC11ECB7EC3B76C4F9AE02.roa Signing time: Sat 31 Aug 2024 02:54:14 +0000 ROA not before: Sat 31 Aug 2024 02:54:14 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 135594 IP address blocks: 103.67.165.0/24 maxlen: 24 103.152.4.0/24 maxlen: 24 2001:df3:4a00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.crl rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y-ehXQ6vsrARiuP30On20pij_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 850 (0x352) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9A8D/serialNumber=E18F9E85743ABECAC0462B8FDF43A7DB4A628FF9 Validity Not Before: Aug 31 02:54:14 2024 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=66d285d6-1850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f4:bd:d3:56:b0:8b:f3:49:e3:46:ff:93:05: 6a:08:f3:24:c2:3e:31:75:65:99:69:57:c0:9d:c7: ca:38:a4:82:2d:ca:39:fb:97:0b:87:fd:c8:43:5d: dc:de:88:d1:fd:fe:5c:ba:f3:36:e3:56:7b:b0:f1: e5:a4:33:4c:d4:3c:da:48:86:89:07:4e:ab:48:5d: c5:74:be:7e:38:d5:3e:e0:70:2c:ce:e9:d9:bb:30: 75:e2:4d:c8:c0:57:26:f1:64:ec:41:2c:66:96:3c: d9:2a:56:0b:89:54:c6:ca:1c:67:55:6c:db:2e:0d: e5:11:fe:7c:52:7c:f5:8c:b9:10:4f:a5:3d:a4:fa: 51:5e:ff:46:54:73:d7:9a:9f:aa:74:d6:76:8f:a3: 2d:96:1b:97:36:76:77:1c:1b:88:59:a6:b6:b7:4a: 05:de:bc:9e:ce:57:df:09:37:94:07:d6:0f:69:c0: d5:cc:6b:0d:04:ca:ff:98:97:a5:40:0a:bd:58:3f: 25:a1:27:0b:60:ff:4a:df:fb:76:d7:2e:96:d7:e5: 80:65:43:0f:96:8b:c3:23:6d:78:29:67:b4:fa:eb: 86:f1:34:cb:6a:35:86:03:15:be:33:e8:36:b4:8a: 73:17:b8:04:6b:e0:d5:d8:e4:4b:17:74:04:e9:f8: ee:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C2:1F:CD:8A:AB:E2:5D:22:F4:37:55:5B:79:D7:16:8F:97:6B:C7 X509v3 Authority Key Identifier: keyid:E1:8F:9E:85:74:3A:BE:CA:C0:46:2B:8F:DF:43:A7:DB:4A:62:8F:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y-ehXQ6vsrARiuP30On20pij_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/5ADC253683EC11ECB7EC3B76C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.67.165.0/24 103.152.4.0/24 IPv6: 2001:df3:4a00::/48 Signature Algorithm: sha256WithRSAEncryption 7f:cc:ae:14:7c:4f:77:af:ad:2d:c4:18:3b:d8:2a:f8:c6:6f: 9b:aa:85:5f:79:76:0f:27:28:58:77:20:0a:83:3e:4e:1c:b7: f7:71:6c:5a:79:4d:5e:0c:11:c6:c5:af:fa:4c:6a:b3:dc:76: f8:3f:41:46:c5:b5:24:c5:79:7e:2e:0f:3c:fc:ac:52:1c:12: 8d:6b:85:03:7e:fb:b3:fd:16:76:46:8d:14:e9:cf:c7:5f:d6: 0d:32:93:bb:57:a9:25:f7:7e:10:13:11:2f:5e:ca:f7:66:ca: 50:3a:c6:a8:df:f8:84:1e:9a:b4:8e:7b:79:39:91:80:51:14: b0:1e:3d:cc:7b:6d:09:20:7f:96:f7:75:47:94:df:a2:3c:d2: 66:e2:d5:18:50:85:ff:ff:ec:33:2f:04:fc:a8:89:29:1f:2f: 2a:7e:f7:c3:17:d2:af:7d:1d:7a:c8:a0:8c:90:b8:3d:7d:98: 80:3d:1f:b6:21:ca:cd:9c:e5:fd:1f:e6:a2:90:9c:5e:b8:8a: 46:b4:d7:f2:93:69:0c:ba:b8:bf:f1:26:85:72:c1:1e:8f:63: ab:10:59:1f:2b:25:05:df:76:59:be:b1:59:f4:42:d8:8d:68: 78:cb:37:eb:d0:fb:75:c3:d9:e1:b4:0f:79:29:df:bb:1f:71: 22:50:c8:1e -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICA1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlBOEQxMTAvBgNVBAUTKEUxOEY5RTg1NzQzQUJFQ0FDMDQ2MkI4RkRGNDNBN0RC NEE2MjhGRjkwHhcNMjQwODMxMDI1NDE0WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQyODVkNi0xODUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoPS901awi/NJ40b/kwVqCPMkwj4xdWWZaVfAncfKOKSCLco5+5cLh/3IQ13c 3ojR/f5cuvM241Z7sPHlpDNM1DzaSIaJB06rSF3FdL5+ONU+4HAszunZuzB14k3I wFcm8WTsQSxmljzZKlYLiVTGyhxnVWzbLg3lEf58Unz1jLkQT6U9pPpRXv9GVHPX mp+qdNZ2j6MtlhuXNnZ3HBuIWaa2t0oF3ryezlffCTeUB9YPacDVzGsNBMr/mJel QAq9WD8loScLYP9K3/t21y6W1+WAZUMPlovDI214KWe0+uuG8TTLajWGAxW+M+g2 tIpzF7gEa+DV2ORLF3QE6fjuOwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFCvCH82K q+JdIvQ3VVt51xaPl2vHMB8GA1UdIwQYMBaAFOGPnoV0Or7KwEYrj99Dp9tKYo/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUE4RC8zMkYxRjRDMjgz RTkxMUVDQjg3M0M4NzFDNEY5QUUwMi80WS1laFhRNnZzckFSaXVQMzBPbjIwcGlq X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRZLWVoWFE2dnNyQVJpdVAzME9uMjBwaWpfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzlBOEQvMzJGMUY0QzI4M0U5MTFFQ0I4NzNDODcxQzRGOUFFMDIvNUFEQzI1MzY4 M0VDMTFFQ0I3RUMzQjc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnQ6UDBABnmAQwDwQCAAIwCQMHACABDfNKADANBgkqhkiG 9w0BAQsFAAOCAQEAf8yuFHxPd6+tLcQYO9gq+MZvm6qFX3l2DycoWHcgCoM+Thy3 93FsWnlNXgwRxsWv+kxqs9x2+D9BRsW1JMV5fi4PPPysUhwSjWuFA377s/0WdkaN FOnPx1/WDTKTu1epJfd+EBMRL17K92bKUDrGqN/4hB6atI57eTmRgFEUsB49zHtt CSB/lvd1R5TfojzSZuLVGFCF///sMy8E/KiJKR8vKn73wxfSr30desigjJC4PX2Y gD0ftiHKzZzl/R/mopCcXriKRrTX8pNpDLq4v/EmhXLBHo9jqxBZHyslBd92Wb6x WfRC2I1oeMs369D7dcPZ4bQPeSnfux9xIlDIHg== -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:28 2024 by rpki-client on console-ams.rpki-client.org