$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/AB731B004B2A11EFAAFCC92CC4F9AE02.roa File: AB731B004B2A11EFAAFCC92CC4F9AE02.roa (raw, json) Hash identifier: Zx75smDZoCLc3BQeMy0zIEYFPQvHS5X5/v68oiFszVU= Subject key identifier: 94:48:38:10:CB:B0:BD:13:AB:95:D3:43:FA:83:6E:E5:F6:CD:6E:83 Certificate issuer: /CN=A91CF285/serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB Certificate serial: 0FE0 Authority key identifier: 3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/AB731B004B2A11EFAAFCC92CC4F9AE02.roa Signing time: Fri 26 Jul 2024 08:40:59 +0000 ROA not before: Fri 26 Jul 2024 08:40:59 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 152676 IP address blocks: 103.24.132.0/23 maxlen: 23 2406:bf00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4064 (0xfe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF285/serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB Validity Not Before: Jul 26 08:40:59 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66a3611a-bbd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c1:56:1d:9d:96:a7:31:e6:82:24:bd:84:ca: 86:56:63:ff:b2:fa:d2:dc:f4:55:83:97:2d:cb:ed: 73:db:ed:9b:c4:94:44:0b:63:b1:3e:b6:cb:78:0d: df:e8:14:0e:41:d7:b9:af:d4:a7:ca:c6:67:5a:de: e9:a8:dd:64:22:5a:f3:90:d8:19:d1:60:2b:6a:9b: 15:e4:78:5e:07:2e:60:5a:69:ac:36:04:b7:74:9a: c4:db:9c:0a:1a:68:c6:b4:b1:73:fc:68:9f:d3:8e: ff:72:8f:87:da:dd:cc:bc:68:d3:36:18:98:d7:87: 82:cc:f7:4e:e9:c1:b4:d7:b6:99:e9:7b:68:d1:b0: 47:cb:fc:88:0b:6b:5c:0c:01:38:84:20:4c:99:92: 82:ec:ca:b0:b4:94:5b:6c:12:14:82:30:ff:da:2e: 33:b2:2f:2c:aa:c3:ef:af:55:88:4a:fd:16:5d:6d: 53:54:d1:4b:15:3b:d6:c3:7d:03:3d:79:84:d3:f9: a3:d1:e0:e5:8a:a5:3e:70:d6:72:11:26:68:ce:bf: 64:e4:01:a3:05:28:19:6e:db:16:5c:8c:26:3b:8a: fd:6b:06:ee:95:8c:66:20:b1:3c:0b:a9:91:4b:81: 83:00:2a:bc:5a:b5:b3:75:bf:56:b7:1b:c9:ee:c6: ed:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:48:38:10:CB:B0:BD:13:AB:95:D3:43:FA:83:6E:E5:F6:CD:6E:83 X509v3 Authority Key Identifier: keyid:3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/AB731B004B2A11EFAAFCC92CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.24.132.0/23 IPv6: 2406:bf00::/48 Signature Algorithm: sha256WithRSAEncryption 34:8f:95:c0:5d:3b:a7:da:02:e8:17:13:d8:de:01:83:14:4a: a9:cc:6a:4b:77:d1:ae:c6:a9:07:ec:c7:2b:b6:58:3f:23:4e: 10:ed:18:ff:b9:0b:b8:5c:09:92:8d:43:93:a8:bc:48:95:0e: ef:80:1c:fd:a6:3a:b7:ff:73:e4:77:7d:9b:87:b7:63:e0:0a: 18:cd:20:14:31:db:a8:3f:7f:00:b2:2b:d6:78:13:92:4b:93: af:50:8b:89:4a:b2:e7:cb:5a:71:1a:f0:57:4e:6e:87:98:68: c4:b4:64:56:6d:fb:59:76:77:32:cd:de:40:a1:78:a1:52:94: c3:59:fb:70:19:94:14:b6:9d:bb:52:41:65:15:21:c4:18:d1: 60:7b:03:bd:c1:21:cf:38:c9:ea:49:4b:35:f7:d1:b4:76:bb: 4b:6d:06:17:9c:d8:93:0d:02:7c:56:9f:68:02:af:49:66:ea: 04:5a:9e:e9:45:86:cb:d5:99:f8:f7:2c:80:d7:58:1a:8c:5a: 6b:13:b5:ce:f9:f2:e6:c8:45:73:e6:66:13:a0:10:a9:33:7e: b3:87:f0:91:6b:b6:0c:27:8b:e5:39:ec:7b:52:a5:af:0a:53: 8b:12:98:03:6a:f3:fb:a4:7c:06:8f:a3:aa:3b:1a:6c:2b:5c: c7:3f:4d:32 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICD+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YyODUxMTAvBgNVBAUTKDNFMjlDRTZGNkE3REI5NEI2RDA5MTMzQjczRkVENTJE REVFMTJEQUIwHhcNMjQwNzI2MDg0MDU5WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmEzNjExYS1iYmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysFWHZ2WpzHmgiS9hMqGVmP/svrS3PRVg5cty+1z2+2bxJREC2OxPrbLeA3f 6BQOQde5r9SnysZnWt7pqN1kIlrzkNgZ0WArapsV5HheBy5gWmmsNgS3dJrE25wK GmjGtLFz/Gif047/co+H2t3MvGjTNhiY14eCzPdO6cG017aZ6Xto0bBHy/yIC2tc DAE4hCBMmZKC7MqwtJRbbBIUgjD/2i4zsi8sqsPvr1WISv0WXW1TVNFLFTvWw30D PXmE0/mj0eDliqU+cNZyESZozr9k5AGjBSgZbtsWXIwmO4r9awbulYxmILE8C6mR S4GDACq8WrWzdb9WtxvJ7sbtRQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJRIOBDL sL0Tq5XTQ/qDbuX2zW6DMB8GA1UdIwQYMBaAFD4pzm9qfblLbQkTO3P+1S3e4S2r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjI4NS9GRDY0RjBCODM0 MEMxMUU5OTY2QzVBNzZDNEY5QUUwMi9QaW5PYjJwOXVVdHRDUk03Y183VkxkN2hM YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Bpbk9iMnA5dVV0dENSTTdjXzdWTGQ3aExhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0YyODUvRkQ2NEYwQjgzNDBDMTFFOTk2NkM1QTc2QzRGOUFFMDIvQUI3MzFCMDA0 QjJBMTFFRkFBRkNDOTJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnGIQwDwQCAAIwCQMHACQGvwAAADANBgkqhkiG9w0BAQsF AAOCAQEANI+VwF07p9oC6BcT2N4BgxRKqcxqS3fRrsapB+zHK7ZYPyNOEO0Y/7kL uFwJko1Dk6i8SJUO74Ac/aY6t/9z5Hd9m4e3Y+AKGM0gFDHbqD9/ALIr1ngTkkuT r1CLiUqy58tacRrwV05uh5hoxLRkVm37WXZ3Ms3eQKF4oVKUw1n7cBmUFLadu1JB ZRUhxBjRYHsDvcEhzzjJ6klLNffRtHa7S20GF5zYkw0CfFafaAKvSWbqBFqe6UWG y9WZ+PcsgNdYGoxaaxO1zvny5shFc+ZmE6AQqTN+s4fwkWu2DCeL5Tnse1KlrwpT ixKYA2rz+6R8Bo+jqjsabCtcxz9NMg== -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:17 2024 by rpki-client on console-ams.rpki-client.org