$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/9A1AEF16A9F511EAAEF63A52C4F9AE02.roa File: 9A1AEF16A9F511EAAEF63A52C4F9AE02.roa (raw, json) Hash identifier: /K6l2Nk5DFl51F71/YofhWzfQ52cGcF53r9oxtYQCag= Subject key identifier: F5:21:F5:B3:76:79:42:A9:6F:BB:87:3F:83:CE:ED:5B:13:F8:32:A5 Certificate issuer: /CN=A91D9611/serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771 Certificate serial: 0853 Authority key identifier: 8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/9A1AEF16A9F511EAAEF63A52C4F9AE02.roa Signing time: Sat 22 Jun 2024 21:15:10 +0000 ROA not before: Sat 22 Jun 2024 21:15:10 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 131316 IP address blocks: 103.4.122.0/24 maxlen: 24 103.4.123.0/24 maxlen: 24 103.50.12.0/24 maxlen: 24 103.114.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:17:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2131 (0x853) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9611/serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771 Validity Not Before: Jun 22 21:15:10 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66773ede-d6bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:5e:e9:a4:47:08:eb:ea:10:ac:c3:9c:69:51: 33:02:44:01:de:bd:3e:db:cd:b1:32:b4:1a:c9:29: 57:b8:02:cd:6f:c0:74:6d:87:c2:29:b5:5b:b3:48: a1:9f:2c:9c:0a:83:e9:23:70:ef:16:53:11:15:fe: f6:73:f5:42:60:f3:bd:fb:ad:b0:e3:d1:68:74:cd: 9c:ae:8c:39:c8:ca:c4:2a:23:09:04:84:e1:7c:6e: 33:7f:79:0f:86:1b:39:8f:2e:6b:84:58:4f:0f:52: c6:c8:b0:e9:05:88:25:00:33:44:1a:08:24:8f:18: a0:c6:22:3b:fa:76:86:76:01:3f:1a:d8:f1:fe:0f: 31:46:a6:07:69:13:e2:c2:a6:37:e2:79:bf:b1:c4: a8:fc:90:86:24:b0:03:45:d6:57:2a:e2:01:54:4c: a3:6d:ca:cd:87:1f:37:de:d0:06:8c:b4:8c:a2:b4: b6:6f:a9:bc:06:6e:90:7e:64:cb:21:f1:7d:92:65: bb:80:7c:28:ad:1d:d6:79:0a:6d:70:3b:27:63:fc: 89:c9:d2:fd:62:e1:6d:60:7c:76:e8:1e:a3:5f:ec: 65:d3:1a:52:eb:a3:68:23:a3:e3:0f:93:82:9c:89: b8:03:0c:50:d4:93:6e:9a:bf:9b:be:60:f7:d3:3e: 17:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:21:F5:B3:76:79:42:A9:6F:BB:87:3F:83:CE:ED:5B:13:F8:32:A5 X509v3 Authority Key Identifier: keyid:8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/9A1AEF16A9F511EAAEF63A52C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.4.122.0/23 103.50.12.0/24 103.114.34.0/24 Signature Algorithm: sha256WithRSAEncryption cd:6c:f7:fa:4d:bd:43:19:3c:85:8d:24:35:d5:c6:db:c2:1b: f2:e7:2b:7e:74:de:1a:a7:4a:fb:3a:8d:1f:7d:06:15:fd:f2: 4f:e2:48:15:94:92:9f:eb:32:d1:a3:9f:ae:9f:f4:e0:c1:21: 8f:50:b2:47:9a:42:76:87:17:4e:cf:59:a5:f2:13:11:c1:a4: ad:8d:5f:4f:ef:7b:51:14:a1:d9:4d:bf:3c:ad:4c:00:5f:c3: 74:a2:7f:15:f9:88:a6:09:37:f8:34:78:19:72:a1:89:00:a9: 65:fa:cb:28:3b:73:08:ec:c0:8f:c1:69:7b:be:a0:d8:21:b5: 23:50:61:8f:66:36:f0:9b:74:75:fb:ae:f0:c2:03:e0:f7:eb: b7:03:5c:de:32:90:6f:0d:ed:de:26:58:b9:dc:21:5e:2d:81: 98:27:e7:4a:a2:10:62:76:a6:6d:5a:af:f0:b9:0c:c9:ea:cd: f2:dc:7b:fc:ae:d7:80:ef:c0:15:b1:5f:a7:d5:6d:af:04:95: e7:f4:c0:a8:1f:41:e3:88:7a:1f:ea:c6:36:54:dc:4f:40:e0: 9d:a5:60:47:4f:11:cd:8e:e8:55:dd:28:62:88:c2:41:df:c7: 4c:07:4b:bf:e8:59:83:81:17:fd:10:2d:c7:e3:76:d4:0f:da: ce:b7:ca:7f -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICCFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk2MTExMTAvBgNVBAUTKDhGMUFGREU5MzYyODAzMTMzRkZCQ0E3MENGN0Y2QUFG QjAzM0Q3NzEwHhcNMjQwNjIyMjExNTEwWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njc3M2VkZS1kNmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6F7ppEcI6+oQrMOcaVEzAkQB3r0+282xMrQaySlXuALNb8B0bYfCKbVbs0ih nyycCoPpI3DvFlMRFf72c/VCYPO9+62w49FodM2crow5yMrEKiMJBIThfG4zf3kP hhs5jy5rhFhPD1LGyLDpBYglADNEGggkjxigxiI7+naGdgE/Gtjx/g8xRqYHaRPi wqY34nm/scSo/JCGJLADRdZXKuIBVEyjbcrNhx833tAGjLSMorS2b6m8Bm6QfmTL IfF9kmW7gHworR3WeQptcDsnY/yJydL9YuFtYHx26B6jX+xl0xpS66NoI6PjD5OC nIm4AwxQ1JNumr+bvmD30z4XIQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFPUh9bN2 eUKpb7uHP4PO7VsT+DKlMB8GA1UdIwQYMBaAFI8a/ek2KAMTP/vKcM9/aq+wM9dx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTYxMS84RUEyNDc1QUE5 RjExMUVBQUREMzg5NDlDNEY5QUUwMi9qeHI5NlRZb0F4TV8tOHB3ejM5cXI3QXox M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p4cjk2VFlvQXhNXy04cHd6MzlxcjdBejEzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDk2MTEvOEVBMjQ3NUFBOUYxMTFFQUFERDM4OTQ5QzRGOUFFMDIvOUExQUVGMTZB OUY1MTFFQUFFRjYzQTUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAFnBHoDBABnMgwDBABnciIwDQYJKoZIhvcNAQELBQADggEB AM1s9/pNvUMZPIWNJDXVxtvCG/LnK3503hqnSvs6jR99BhX98k/iSBWUkp/rMtGj n66f9ODBIY9QskeaQnaHF07PWaXyExHBpK2NX0/ve1EUodlNvzytTABfw3SifxX5 iKYJN/g0eBlyoYkAqWX6yyg7cwjswI/BaXu+oNghtSNQYY9mNvCbdHX7rvDCA+D3 67cDXN4ykG8N7d4mWLncIV4tgZgn50qiEGJ2pm1ar/C5DMnqzfLce/yu14DvwBWx X6fVba8Elef0wKgfQeOIeh/qxjZU3E9A4J2lYEdPEc2O6FXdKGKIwkHfx0wHS7/o WYOBF/0QLcfjdtQP2s63yn8= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:41 2024 by rpki-client on console-ams.rpki-client.org