$ rpki-client -vvf rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/25B713A4FE6B11EBB5DD176BC4F9AE02.roa File: 25B713A4FE6B11EBB5DD176BC4F9AE02.roa (raw, json) Hash identifier: BCW9/j7LqvtItwSSL2eqdZ4QWnNPXXatNAf+sQtgem4= Subject key identifier: EB:79:D4:19:E6:1C:4F:2A:37:CE:E4:F2:C6:7D:62:3C:E6:1C:BD:33 Certificate issuer: /CN=A91D23C7/serialNumber=826B5592AC38B012B7E7C2730DD0607E10DB8102 Certificate serial: 04C0 Authority key identifier: 82:6B:55:92:AC:38:B0:12:B7:E7:C2:73:0D:D0:60:7E:10:DB:81:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/25B713A4FE6B11EBB5DD176BC4F9AE02.roa Signing time: Thu 31 Oct 2024 23:52:46 +0000 ROA not before: Thu 31 Oct 2024 23:52:46 +0000 ROA not after: Sat 01 Mar 2025 00:00:00 +0000 asID: 142628 IP address blocks: 103.171.42.0/24 maxlen: 24 2001:df7:3680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.crl rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1216 (0x4c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D23C7/serialNumber=826B5592AC38B012B7E7C2730DD0607E10DB8102 Validity Not Before: Oct 31 23:52:46 2024 GMT Not After : Mar 1 00:00:00 2025 GMT Subject: CN=6724184e-ad92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a7:e3:26:18:92:24:aa:61:c2:ee:08:8e:67: bf:eb:65:38:9b:56:68:41:a8:e9:2f:c3:b7:5d:c4: dd:74:c8:69:ff:1c:b0:b6:c5:20:67:4c:13:30:af: 79:b7:f3:b7:48:81:4c:24:39:ff:fa:2b:e6:1e:da: 4e:5c:58:44:5c:15:3b:a3:e8:80:0c:53:a1:54:db: 9b:48:85:c5:ff:bd:5a:3f:ec:f2:25:90:37:b0:c8: 5d:a2:59:5f:c3:00:46:01:e3:7a:d1:9c:b0:c6:9e: 42:39:49:4d:c4:e4:b3:e9:12:0e:75:cb:72:e7:25: c1:62:c6:2c:ad:d6:0a:2d:56:e9:56:84:f7:71:da: c3:fc:a9:21:41:a7:5b:dc:d8:21:27:51:2a:8c:0a: 8c:64:76:f9:48:1b:0f:d7:59:ad:bf:6d:1a:ad:1b: 4b:f0:7a:57:47:a7:af:8d:29:bc:24:65:f9:3f:46: 64:a7:5a:56:8f:a2:86:f9:c3:b1:75:3e:5c:4b:01: f3:b9:6c:b1:45:d4:0d:7a:ac:8f:d9:ec:90:37:27: e6:c6:3c:c6:b8:b4:26:18:50:22:4e:3b:7d:41:29: 9a:f2:62:13:47:1b:6c:75:12:60:eb:f6:77:b4:b9: 62:72:cc:68:c4:ce:5b:7e:a3:12:66:ed:0e:4e:91: 50:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:79:D4:19:E6:1C:4F:2A:37:CE:E4:F2:C6:7D:62:3C:E6:1C:BD:33 X509v3 Authority Key Identifier: keyid:82:6B:55:92:AC:38:B0:12:B7:E7:C2:73:0D:D0:60:7E:10:DB:81:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/25B713A4FE6B11EBB5DD176BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.171.42.0/24 IPv6: 2001:df7:3680::/48 Signature Algorithm: sha256WithRSAEncryption 35:89:50:63:e9:7f:47:fb:fa:2e:47:33:3d:49:a3:df:ac:b4: 81:cf:8f:64:e2:dc:c9:f7:d2:b4:31:59:f4:a6:b6:20:8b:8f: 5d:4c:7d:01:28:7f:72:08:98:7e:f6:eb:3f:3c:0c:87:28:67: b9:53:66:cd:01:23:7a:fa:91:b3:e7:6a:06:d2:8f:a4:bd:42: 37:92:60:14:21:db:dd:5c:f5:d9:de:f3:5a:0b:51:fd:4e:9d: 9d:1f:ea:c7:ab:81:80:c5:62:c9:ab:3c:4b:2e:6d:d5:ea:8b: 0d:72:e8:e4:2e:ef:b9:ad:41:1d:04:6b:3e:f0:8b:3e:78:5f: 78:12:b8:b7:31:84:cc:07:36:60:67:93:0f:eb:aa:ba:c3:ac: e4:50:78:57:d2:82:e0:7e:88:da:33:a0:f1:76:90:5c:f2:6a: ce:b2:df:d8:4c:7c:11:b7:47:7a:23:45:6b:d9:cf:04:45:59: ad:0b:db:65:99:43:6b:3d:83:9f:4e:71:b8:70:2f:0b:f4:7b: 19:6a:74:29:93:bc:56:28:5c:2f:1f:c7:ad:49:26:9a:6f:1e: d5:f3:0c:b6:d5:a2:1f:3b:07:af:ca:7b:d8:be:86:48:7b:fd: 86:b1:a8:ea:c3:31:03:f9:90:a8:ff:30:74:c5:d6:e4:d6:6d: ee:bc:dc:16 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIzQzcxMTAvBgNVBAUTKDgyNkI1NTkyQUMzOEIwMTJCN0U3QzI3MzBERDA2MDdF MTBEQjgxMDIwHhcNMjQxMDMxMjM1MjQ2WhcNMjUwMzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzI0MTg0ZS1hZDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApafjJhiSJKphwu4Ijme/62U4m1ZoQajpL8O3XcTddMhp/xywtsUgZ0wTMK95 t/O3SIFMJDn/+ivmHtpOXFhEXBU7o+iADFOhVNubSIXF/71aP+zyJZA3sMhdollf wwBGAeN60Zywxp5COUlNxOSz6RIOdcty5yXBYsYsrdYKLVbpVoT3cdrD/KkhQadb 3NghJ1EqjAqMZHb5SBsP11mtv20arRtL8HpXR6evjSm8JGX5P0Zkp1pWj6KG+cOx dT5cSwHzuWyxRdQNeqyP2eyQNyfmxjzGuLQmGFAiTjt9QSma8mITRxtsdRJg6/Z3 tLlicsxoxM5bfqMSZu0OTpFQ3wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOt51Bnm HE8qN87k8sZ9YjzmHL0zMB8GA1UdIwQYMBaAFIJrVZKsOLASt+fCcw3QYH4Q24EC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjNDNy83QjJGNTM4QUZF NjgxMUVCODhDQzBFNDFDNEY5QUUwMi9nbXRWa3F3NHNCSzM1OEp6RGRCZ2ZoRGJn UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtdFZrcXc0c0JLMzU4SnpEZEJnZmhEYmdRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDIzQzcvN0IyRjUzOEFGRTY4MTFFQjg4Q0MwRTQxQzRGOUFFMDIvMjVCNzEzQTRG RTZCMTFFQkI1REQxNzZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnqyowDwQCAAIwCQMHACABDfc2gDANBgkqhkiG9w0BAQsF AAOCAQEANYlQY+l/R/v6LkczPUmj36y0gc+PZOLcyffStDFZ9Ka2IIuPXUx9ASh/ cgiYfvbrPzwMhyhnuVNmzQEjevqRs+dqBtKPpL1CN5JgFCHb3Vz12d7zWgtR/U6d nR/qx6uBgMViyas8Sy5t1eqLDXLo5C7vua1BHQRrPvCLPnhfeBK4tzGEzAc2YGeT D+uqusOs5FB4V9KC4H6I2jOg8XaQXPJqzrLf2Ex8EbdHeiNFa9nPBEVZrQvbZZlD az2Dn05xuHAvC/R7GWp0KZO8VihcLx/HrUkmmm8e1fMMttWiHzsHr8p72L6GSHv9 hrGo6sMxA/mQqP8wdMXW5NZt7rzcFg== -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:28 2024 by rpki-client on console-ams.rpki-client.org