$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/72156EA8155311EDB5B4C084C4F9AE02.roa File: 72156EA8155311EDB5B4C084C4F9AE02.roa (raw, json) Hash identifier: Aze6ozKszibcl8aaLsoQDQAJdJwVjHWKnJlUnAfM2AM= Subject key identifier: 0C:16:21:A6:E2:71:CA:A8:61:49:B7:46:04:C4:24:86:D1:3D:35:72 Certificate issuer: /CN=A91CC1BE/serialNumber=0A37EC91E827E169C862B44CD876B1D376413734 Certificate serial: 0BDB Authority key identifier: 0A:37:EC:91:E8:27:E1:69:C8:62:B4:4C:D8:76:B1:D3:76:41:37:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/72156EA8155311EDB5B4C084C4F9AE02.roa Signing time: Tue 10 Sep 2024 19:27:26 +0000 ROA not before: Tue 10 Sep 2024 19:27:26 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 134732 IP address blocks: 103.119.100.0/23 maxlen: 23 103.119.100.0/24 maxlen: 24 103.119.101.0/24 maxlen: 24 103.119.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3035 (0xbdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC1BE/serialNumber=0A37EC91E827E169C862B44CD876B1D376413734 Validity Not Before: Sep 10 19:27:26 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66e09d9e-502c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:58:18:8a:0c:b2:4e:b2:55:d1:b2:07:8f:9b: b3:47:38:d5:fc:e5:a3:3a:3f:b2:52:22:df:0e:66: b4:63:43:c6:2c:97:7e:0b:c5:18:a4:eb:37:4c:c6: 28:14:38:8b:a4:2c:67:6d:e0:83:36:bd:ea:e7:f7: b1:4e:49:d0:d4:ac:6c:9b:c9:72:1c:27:d7:80:bf: 01:d7:b8:25:71:82:0a:a6:41:92:15:76:c8:96:7f: 86:28:31:29:f6:06:d4:50:89:ae:9e:9f:38:79:d5: 11:ea:d7:26:34:24:dc:0d:de:59:20:dd:5f:48:7c: 3f:d3:df:12:63:bf:38:ec:38:cf:52:76:96:13:b1: 84:08:0c:ab:c7:10:48:15:e5:28:ef:17:0f:13:61: a3:e4:a6:9b:84:27:50:39:64:c3:1a:dc:78:4e:30: 6b:4c:6c:40:b0:6a:ac:fc:de:3a:68:65:26:ce:fa: 7a:a5:63:c8:15:e3:75:6d:01:0a:2d:f8:a3:34:9a: 48:a4:9c:a0:3a:ff:bf:0c:eb:4f:bc:2d:a4:4f:7a: a1:f2:a5:15:00:32:4b:00:13:80:66:d8:5f:b2:20: 92:9b:b8:b0:35:60:a3:7d:93:9b:aa:81:d4:c7:b3: 76:73:ca:9e:90:4f:29:f6:3c:6a:95:51:17:8a:a3: 66:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:16:21:A6:E2:71:CA:A8:61:49:B7:46:04:C4:24:86:D1:3D:35:72 X509v3 Authority Key Identifier: keyid:0A:37:EC:91:E8:27:E1:69:C8:62:B4:4C:D8:76:B1:D3:76:41:37:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/72156EA8155311EDB5B4C084C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.119.100.0-103.119.102.255 Signature Algorithm: sha256WithRSAEncryption 5d:38:2f:de:6a:f4:69:30:4a:8d:d7:03:73:2b:f9:23:4b:48: 68:32:33:b0:05:44:c9:a4:01:32:50:d0:6a:be:c4:77:37:ff: 44:73:91:c4:f9:15:00:36:b0:5f:66:55:08:65:c9:b5:3a:13: 4f:20:11:e9:67:72:14:df:46:7d:38:86:ea:4d:b1:00:59:4c: 99:46:6b:b5:80:74:ca:29:1e:84:1c:c9:14:7c:39:5d:0b:a7: 60:a6:af:95:8b:3a:fc:a6:48:3d:55:57:db:f4:0c:b0:e5:8a: 62:5d:58:7f:46:ae:01:7b:95:de:8b:4b:f7:b9:4d:26:6f:8e: b2:b9:84:f5:d8:96:69:dc:a3:84:10:d3:16:44:61:7d:21:0c: f4:cc:4b:e6:24:f5:2d:7f:ff:ae:74:8d:e9:21:b7:e4:ef:01: 14:e6:cb:13:ec:ec:5c:ed:66:04:e7:d0:e1:e6:c4:f8:7a:0a: 46:b8:34:72:e7:b3:c7:90:5b:fd:1c:3c:82:81:d5:07:58:ac: 55:57:23:80:f8:0f:9f:bd:51:95:c2:10:75:5b:a5:83:0f:1c: 1f:c7:f4:7e:5e:91:05:e5:30:4e:07:43:e1:c5:29:15:75:c5: e2:34:84:95:b1:93:19:4a:ca:12:cd:e6:e6:66:9f:eb:5a:c3: c7:7c:21:c4 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICC9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MxQkUxMTAvBgNVBAUTKDBBMzdFQzkxRTgyN0UxNjlDODYyQjQ0Q0Q4NzZCMUQz NzY0MTM3MzQwHhcNMjQwOTEwMTkyNzI2WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmUwOWQ5ZS01MDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2lgYigyyTrJV0bIHj5uzRzjV/OWjOj+yUiLfDma0Y0PGLJd+C8UYpOs3TMYo FDiLpCxnbeCDNr3q5/exTknQ1Kxsm8lyHCfXgL8B17glcYIKpkGSFXbIln+GKDEp 9gbUUImunp84edUR6tcmNCTcDd5ZIN1fSHw/098SY7847DjPUnaWE7GECAyrxxBI FeUo7xcPE2Gj5KabhCdQOWTDGtx4TjBrTGxAsGqs/N46aGUmzvp6pWPIFeN1bQEK LfijNJpIpJygOv+/DOtPvC2kT3qh8qUVADJLABOAZthfsiCSm7iwNWCjfZObqoHU x7N2c8qekE8p9jxqlVEXiqNmNQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFAwWIabi ccqoYUm3RgTEJIbRPTVyMB8GA1UdIwQYMBaAFAo37JHoJ+FpyGK0TNh2sdN2QTc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzFCRS9FMUVBQkYwQTA0 ODMxMUVBODAyOEJFMkZDNEY5QUUwMi9DamZza2VnbjRXbklZclJNMkhheDAzWkJO elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NqZnNrZWduNFduSVlyUk0ySGF4MDNaQk56US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0MxQkUvRTFFQUJGMEEwNDgzMTFFQTgwMjhCRTJGQzRGOUFFMDIvNzIxNTZFQTgx NTUzMTFFREI1QjRDMDg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAmd3ZAMEAGd3ZjANBgkqhkiG9w0BAQsFAAOCAQEAXTgv 3mr0aTBKjdcDcyv5I0tIaDIzsAVEyaQBMlDQar7Edzf/RHORxPkVADawX2ZVCGXJ tToTTyAR6WdyFN9GfTiG6k2xAFlMmUZrtYB0yikehBzJFHw5XQunYKavlYs6/KZI PVVX2/QMsOWKYl1Yf0auAXuV3otL97lNJm+OsrmE9diWadyjhBDTFkRhfSEM9MxL 5iT1LX//rnSN6SG35O8BFObLE+zsXO1mBOfQ4ebE+HoKRrg0cuezx5Bb/Rw8goHV B1isVVcjgPgPn71RlcIQdVulgw8cH8f0fl6RBeUwTgdD4cUpFXXF4jSElbGTGUrK Es3m5maf61rDx3whxA== -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:17 2024 by rpki-client on console-ams.rpki-client.org