$ rpki-client -vvf rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/7C05ACEE75B311EF83EC6F78C4F9AE02.roa File: 7C05ACEE75B311EF83EC6F78C4F9AE02.roa (raw, json) Hash identifier: 4HbuRwfGRyDZiXaifrjrnY5mPijGwg/rzxNxMS6Fugs= Subject key identifier: F8:98:99:5E:5A:C0:A9:2C:EE:B6:BE:13:E9:18:84:F7:C7:49:A0:5C Certificate issuer: /CN=A91D795B/serialNumber=05BEF3B7646356CE409FC563F2A6907867795EF7 Certificate serial: 04A6 Authority key identifier: 05:BE:F3:B7:64:63:56:CE:40:9F:C5:63:F2:A6:90:78:67:79:5E:F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/7C05ACEE75B311EF83EC6F78C4F9AE02.roa Signing time: Wed 25 Sep 2024 00:14:47 +0000 ROA not before: Wed 25 Sep 2024 00:14:47 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 142623 IP address blocks: 103.171.36.0/24 maxlen: 24 103.171.37.0/24 maxlen: 24 2001:df7:3580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1190 (0x4a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D795B/serialNumber=05BEF3B7646356CE409FC563F2A6907867795EF7 Validity Not Before: Sep 25 00:14:47 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66f355f6-ddf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:90:7f:4a:cc:d6:89:e9:e7:d0:93:95:0c:42: 13:98:3a:3f:12:f8:dd:22:e6:61:a6:17:fb:8d:c4: 38:f8:a2:25:a0:90:55:91:05:0d:5d:9b:9d:ce:c2: b2:2e:c4:ac:17:25:2c:50:72:98:79:a0:21:6d:7b: d5:fa:38:b1:c2:47:5d:d8:9a:f7:5e:5c:c9:de:e4: 05:62:b7:ba:d2:c8:4f:fc:6c:5b:9d:d9:eb:89:3b: 2e:85:45:2b:df:8d:c2:e6:e1:f9:a1:95:7a:78:f5: c6:91:a9:1c:3b:b6:b6:ad:41:35:4e:eb:de:48:a8: 7c:2c:da:53:57:71:b3:0b:e4:77:4e:42:b9:e4:1e: 1d:35:be:3d:f2:f8:ae:8d:5d:e2:c6:a1:24:da:ec: cd:b5:52:bf:73:2e:41:8d:b5:c8:35:c4:4a:c4:06: b2:7a:9a:de:a1:de:3e:05:e1:c0:3e:8a:d4:59:10: 45:0b:e7:ac:f8:46:d5:a0:7f:e3:3a:37:20:2f:81: 6b:39:79:2f:e8:6e:09:6f:20:63:f6:65:ed:10:76: f0:5e:3a:d2:0d:ac:4a:25:7f:1c:5e:cd:c8:e2:f5: a3:65:ad:53:78:ec:de:19:c9:3c:e7:a0:62:e0:86: a1:1d:37:01:91:8c:59:98:19:5d:b1:83:e9:35:4d: 4c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:98:99:5E:5A:C0:A9:2C:EE:B6:BE:13:E9:18:84:F7:C7:49:A0:5C X509v3 Authority Key Identifier: keyid:05:BE:F3:B7:64:63:56:CE:40:9F:C5:63:F2:A6:90:78:67:79:5E:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/7C05ACEE75B311EF83EC6F78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.171.36.0/23 IPv6: 2001:df7:3580::/48 Signature Algorithm: sha256WithRSAEncryption 41:ca:fc:b7:9c:e3:18:c3:7e:ed:15:2c:e6:ef:51:64:3d:2f: 70:f2:48:6d:e0:83:97:a1:ec:17:e1:eb:30:e2:13:21:9a:54: 61:c9:4d:82:15:8a:6e:cc:d9:88:d6:a3:ea:38:75:3a:b7:1b: 8b:9a:c2:1e:cf:af:82:88:79:5a:6f:b1:06:23:e4:d5:0e:f0: 6d:3f:5e:22:d3:8e:72:81:c2:2c:e5:61:00:35:30:d9:45:0b: 31:75:2b:ce:38:a5:85:2e:50:08:88:76:d3:c1:88:68:29:c2: 27:f7:38:4c:f8:87:ff:d3:07:28:68:fb:c0:df:cd:31:84:7c: 9c:61:98:a6:b7:23:25:d3:94:9b:ec:a3:00:ec:26:81:c0:46: 54:05:2c:9c:57:1c:55:d3:5a:51:27:5e:47:2c:9d:42:16:c9: f7:47:a3:94:07:cb:48:3e:44:65:25:3c:4d:b4:1b:61:2b:60: 12:2f:17:78:49:2b:8c:a3:c1:df:3a:17:d7:84:11:e6:8f:8c: e0:6c:db:3c:f6:cf:55:92:f3:bb:a7:1a:20:65:e5:16:51:16: c9:ba:3d:ce:6f:10:97:eb:10:4c:57:a2:87:d9:93:e8:c4:fc: 95:fb:a9:39:db:de:9c:53:7c:dc:e8:df:e0:14:a0:d6:9f:34: f3:d4:3f:d7 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc5NUIxMTAvBgNVBAUTKDA1QkVGM0I3NjQ2MzU2Q0U0MDlGQzU2M0YyQTY5MDc4 Njc3OTVFRjcwHhcNMjQwOTI1MDAxNDQ3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmYzNTVmNi1kZGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3pB/SszWienn0JOVDEITmDo/EvjdIuZhphf7jcQ4+KIloJBVkQUNXZudzsKy LsSsFyUsUHKYeaAhbXvV+jixwkdd2Jr3XlzJ3uQFYre60shP/GxbndnriTsuhUUr 343C5uH5oZV6ePXGkakcO7a2rUE1TuveSKh8LNpTV3GzC+R3TkK55B4dNb498viu jV3ixqEk2uzNtVK/cy5BjbXINcRKxAayepreod4+BeHAPorUWRBFC+es+EbVoH/j OjcgL4FrOXkv6G4JbyBj9mXtEHbwXjrSDaxKJX8cXs3I4vWjZa1TeOzeGck856Bi 4IahHTcBkYxZmBldsYPpNU1MaQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPiYmV5a wKks7ra+E+kYhPfHSaBcMB8GA1UdIwQYMBaAFAW+87dkY1bOQJ/FY/KmkHhneV73 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzk1Qi9BODhGQjNFMjAw QzAxMUVDOTZDMkQ1ODNDNEY5QUUwMi9CYjd6dDJSalZzNUFuOFZqOHFhUWVHZDVY dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JiN3p0MlJqVnM1QW44Vmo4cWFRZUdkNVh2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDc5NUIvQTg4RkIzRTIwMEMwMTFFQzk2QzJENTgzQzRGOUFFMDIvN0MwNUFDRUU3 NUIzMTFFRjgzRUM2Rjc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnqyQwDwQCAAIwCQMHACABDfc1gDANBgkqhkiG9w0BAQsF AAOCAQEAQcr8t5zjGMN+7RUs5u9RZD0vcPJIbeCDl6HsF+HrMOITIZpUYclNghWK bszZiNaj6jh1Orcbi5rCHs+vgoh5Wm+xBiPk1Q7wbT9eItOOcoHCLOVhADUw2UUL MXUrzjilhS5QCIh208GIaCnCJ/c4TPiH/9MHKGj7wN/NMYR8nGGYprcjJdOUm+yj AOwmgcBGVAUsnFccVdNaUSdeRyydQhbJ90ejlAfLSD5EZSU8TbQbYStgEi8XeEkr jKPB3zoX14QR5o+M4GzbPPbPVZLzu6caIGXlFlEWybo9zm8Ql+sQTFeih9mT6MT8 lfupOdvenFN83Ojf4BSg1p8089Q/1w== -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:28 2024 by rpki-client on console-ams.rpki-client.org