$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/991F1FE8183A11EBB9F78E80C4F9AE02.roa File: 991F1FE8183A11EBB9F78E80C4F9AE02.roa (raw, json) Hash identifier: rm/0sIDUmWTnf8gFW5xrU/OrvqCguu2H6ZO6gFLbqVU= Subject key identifier: 1C:1D:FF:F1:36:24:F5:C1:39:D1:19:87:A6:6C:ED:FD:A6:D3:EC:CF Certificate issuer: /CN=A91D2779/serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740 Certificate serial: 06ED Authority key identifier: BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/991F1FE8183A11EBB9F78E80C4F9AE02.roa Signing time: Fri 28 Jun 2024 23:27:57 +0000 ROA not before: Fri 28 Jun 2024 23:27:57 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 17439 IP address blocks: 103.225.112.0/23 maxlen: 23 103.225.112.0/24 maxlen: 24 103.225.113.0/24 maxlen: 24 103.225.114.0/24 maxlen: 24 103.225.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1773 (0x6ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2779/serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740 Validity Not Before: Jun 28 23:27:57 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=667f46fd-573d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:28:94:b1:a4:33:71:de:c2:56:4e:b3:20:36: 44:30:c6:77:81:54:78:41:bf:5a:7b:35:7f:49:03: 8b:a5:5b:bc:e4:90:be:2e:c9:bb:9c:ba:ee:fb:8c: 24:14:e4:60:5f:f8:df:bd:ae:a1:33:64:79:69:c3: bd:cd:9f:ec:5d:58:3a:8c:2e:6b:aa:0f:a2:73:c7: 37:0c:22:b9:30:a2:df:8a:0b:80:d5:ea:1c:3a:9d: 10:73:8d:37:5b:93:17:ce:5b:11:cc:94:7d:62:99: 74:b7:f9:04:96:ac:3a:a1:6f:df:58:b2:10:a1:cd: 08:f6:a3:3d:cd:72:44:5c:85:6d:ed:63:52:03:21: 9b:40:cd:64:24:17:3e:68:3d:a5:06:90:15:20:1d: 69:14:08:3c:c1:40:c1:9b:1d:22:0f:de:6a:ef:d2: 79:c4:b6:c0:36:01:dc:c3:bc:a7:46:8d:46:fb:e9: 3c:ea:8b:00:1b:2d:5b:6f:f8:3d:cb:aa:1b:6c:92: b4:74:eb:4b:21:e7:5a:b0:86:8f:80:1a:8e:b0:07: ec:1b:91:ff:ff:47:a7:e7:07:e0:12:30:a7:8f:ad: c1:28:18:12:36:b3:c4:d0:0e:fa:10:ef:78:71:b0: 0e:f5:41:16:f3:fc:52:d9:bc:fc:83:f2:52:cd:b2: 55:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:1D:FF:F1:36:24:F5:C1:39:D1:19:87:A6:6C:ED:FD:A6:D3:EC:CF X509v3 Authority Key Identifier: keyid:BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/991F1FE8183A11EBB9F78E80C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.225.112.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:58:7a:5e:67:ba:87:94:09:16:88:3e:49:1c:90:e7:71:a1: 4a:9f:df:fa:41:16:4e:d5:9e:15:87:f3:e8:47:36:b8:d7:07: f2:b0:33:7b:7e:4d:f5:b9:94:64:24:f8:07:14:2a:72:ef:04: 0b:70:ee:c0:57:38:3c:e5:ba:9e:c4:f5:7f:36:01:e5:bf:3c: 3d:7a:df:39:22:ea:3c:a6:e5:57:84:8c:14:f5:e4:dd:55:9d: 92:1e:7a:a6:1e:80:38:37:c4:d0:1b:67:47:55:13:89:ad:1c: 69:03:c3:9a:79:a4:2a:4c:ef:df:1c:66:a4:53:11:92:43:28: 58:29:7e:4f:6f:22:9d:88:23:61:82:d3:a2:d0:36:e8:d6:7f: 9e:a3:18:c4:69:e5:ab:37:ba:a5:99:3d:01:7e:55:ea:38:3d: 17:c2:83:b9:eb:87:1e:f4:bf:55:26:af:67:0c:1a:a4:7e:43: f2:7d:c4:55:1c:7e:cc:8e:5d:b6:af:98:02:42:1c:0a:46:51: 7e:1f:2e:ac:15:7e:1c:6e:95:08:2d:2d:04:9b:bd:b9:d1:ba: bf:41:27:98:c9:92:42:39:73:e0:8a:70:b6:70:18:b6:e6:44: 27:64:03:c0:62:e1:e8:b8:4b:9d:1d:49:8d:ee:8a:02:3c:0b: 2a:c0:e1:10 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI3NzkxMTAvBgNVBAUTKEJCMDNCOEQyNDQ3RUY4MTNBMzdBOTU4Nzc2NkEwMUY3 MzU5REQ3NDAwHhcNMjQwNjI4MjMyNzU3WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjdmNDZmZC01NzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2yiUsaQzcd7CVk6zIDZEMMZ3gVR4Qb9aezV/SQOLpVu85JC+Lsm7nLru+4wk FORgX/jfva6hM2R5acO9zZ/sXVg6jC5rqg+ic8c3DCK5MKLfiguA1eocOp0Qc403 W5MXzlsRzJR9Ypl0t/kElqw6oW/fWLIQoc0I9qM9zXJEXIVt7WNSAyGbQM1kJBc+ aD2lBpAVIB1pFAg8wUDBmx0iD95q79J5xLbANgHcw7ynRo1G++k86osAGy1bb/g9 y6obbJK0dOtLIedasIaPgBqOsAfsG5H//0en5wfgEjCnj63BKBgSNrPE0A76EO94 cbAO9UEW8/xS2bz8g/JSzbJVhQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBwd//E2 JPXBOdEZh6Zs7f2m0+zPMB8GA1UdIwQYMBaAFLsDuNJEfvgTo3qVh3ZqAfc1nddA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjc3OS84OTAyNDk5NDE4 MzcxMUVCODA2NEIwN0FDNEY5QUUwMi91d080MGtSLS1CT2plcFdIZG1vQjl6V2Qx MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V3TzQwa1ItLUJPamVwV0hkbW9COXpXZDEwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDI3NzkvODkwMjQ5OTQxODM3MTFFQjgwNjRCMDdBQzRGOUFFMDIvOTkxRjFGRTgx ODNBMTFFQkI5Rjc4RTgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn4XAwDQYJKoZIhvcNAQELBQADggEBAF9Yel5nuoeUCRaI PkkckOdxoUqf3/pBFk7VnhWH8+hHNrjXB/KwM3t+TfW5lGQk+AcUKnLvBAtw7sBX ODzlup7E9X82AeW/PD163zki6jym5VeEjBT15N1VnZIeeqYegDg3xNAbZ0dVE4mt HGkDw5p5pCpM798cZqRTEZJDKFgpfk9vIp2II2GC06LQNujWf56jGMRp5as3uqWZ PQF+Veo4PRfCg7nrhx70v1Umr2cMGqR+Q/J9xFUcfsyOXbavmAJCHApGUX4fLqwV fhxulQgtLQSbvbnRur9BJ5jJkkI5c+CKcLZwGLbmRCdkA8Bi4ei4S50dSY3uigI8 CyrA4RA= -----END CERTIFICATE-----Generated at Wed Nov 20 23:56:00 2024 by rpki-client on console-ams.rpki-client.org