$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/A4B89C5082B111EEB427125DC4F9AE02.roa File: A4B89C5082B111EEB427125DC4F9AE02.roa (raw, json) Hash identifier: hp0cPGEFV/Gox4VqOM6s1YIVtMXxD5phyzvS1nTNTu8= Subject key identifier: 7E:0F:C0:DB:DE:91:7A:C5:83:64:91:54:F6:43:48:D6:78:74:BE:41 Certificate issuer: /CN=A91DCDB3/serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235 Certificate serial: 8A Authority key identifier: 63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/A4B89C5082B111EEB427125DC4F9AE02.roa Signing time: Thu 25 Jul 2024 06:27:25 +0000 ROA not before: Thu 25 Jul 2024 06:27:25 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 9651 IP address blocks: 103.29.104.0/23 maxlen: 23 103.29.104.0/24 maxlen: 24 103.29.105.0/24 maxlen: 24 103.250.42.0/23 maxlen: 23 103.250.42.0/24 maxlen: 24 103.250.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCDB3/serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235 Validity Not Before: Jul 25 06:27:25 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66a1f04c-2988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:82:da:84:ce:46:86:2e:f5:91:e4:66:39:32: c9:9a:a8:5f:f8:1c:41:8e:22:f9:d2:91:df:9e:8d: 49:9e:16:11:7f:d1:b0:b3:1a:fd:c5:97:6c:69:a7: 89:6f:93:bc:b3:0a:fc:b5:b6:c2:1b:39:33:b5:73: f9:91:34:9e:d0:2c:fc:11:3b:9e:d0:95:9c:41:cf: 16:06:e0:0c:2e:92:6d:ac:ce:67:17:9c:3d:e9:0b: 7b:0d:22:f3:91:9b:9d:6d:50:4e:57:22:68:87:94: ed:54:28:d1:bc:fb:0e:e3:d9:09:47:36:d2:50:c0: 9e:9e:c9:d4:a8:58:87:6c:30:bc:08:c7:c1:cf:08: aa:af:6b:19:f1:e5:a9:7c:41:0f:53:bf:63:23:2f: 17:36:94:68:42:0a:93:17:23:d9:c3:ba:0f:c6:59: 5f:c0:4c:9c:d7:47:79:01:ee:23:ba:db:21:3f:19: 42:f2:35:ae:02:10:b2:e5:6b:7c:02:05:a3:19:99: d9:a8:6f:3c:61:72:92:2d:63:8b:f6:25:ca:7d:6f: b8:82:0d:a2:3c:37:23:d8:3a:d9:a5:80:19:6b:71: 56:5a:fd:fa:18:c9:a9:d2:78:46:1a:19:8b:50:7b: e4:13:83:f7:76:cf:c4:2c:d1:0d:b2:80:56:c7:cf: 07:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:0F:C0:DB:DE:91:7A:C5:83:64:91:54:F6:43:48:D6:78:74:BE:41 X509v3 Authority Key Identifier: keyid:63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/A4B89C5082B111EEB427125DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.29.104.0/23 103.250.42.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:8b:ab:76:3c:4c:46:25:8c:ae:3a:70:20:04:28:f3:db:49: 0f:11:18:da:66:0c:0f:c5:5f:f2:0e:73:cd:57:ae:33:be:fa: 04:c3:78:f7:9c:60:ae:16:c4:50:e4:8c:5d:87:70:4e:be:d3: bd:22:52:c6:cf:6f:6e:db:c1:a9:c3:87:10:d4:ba:cc:de:5c: 28:20:3e:68:ff:e0:7e:dc:07:97:8e:1a:29:93:55:b6:4c:b2: 44:89:2d:51:88:fb:43:bc:68:1b:99:7b:5a:8c:f8:ff:3c:59: 18:1d:7b:01:d1:11:8c:64:8e:f8:a1:37:1f:df:c5:9b:a7:b5: d5:9d:23:04:7e:54:55:60:58:5a:43:e5:46:9b:5b:7a:25:12: 2e:a1:fd:2e:26:78:9f:92:87:9c:44:b2:11:2d:35:d9:aa:37: 68:4c:37:3c:4e:ea:12:e4:48:ec:87:d9:78:51:f4:86:05:58: 95:1e:9e:2d:0b:46:0f:ff:c8:87:d7:67:71:ef:9b:46:92:50: b5:a1:88:67:54:fd:77:43:d1:5d:51:c2:6c:28:15:ef:f7:29: 2d:bb:f3:10:c2:5f:b6:cf:b5:2f:00:0b:4e:ab:81:f0:ec:60: a9:18:ad:d0:92:b9:6e:22:25:f7:28:a5:6a:7f:7e:c7:15:2d: c0:18:1e:2f -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEQjMxMTAvBgNVBAUTKDYzQTI5QUJEODdGNEExRkU1NUNCRjJBMEY0MDk3NTBB QzM0QUMyMzUwHhcNMjQwNzI1MDYyNzI1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmExZjA0Yy0yOTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoYLahM5Ghi71keRmOTLJmqhf+BxBjiL50pHfno1JnhYRf9Gwsxr9xZdsaaeJ b5O8swr8tbbCGzkztXP5kTSe0Cz8ETue0JWcQc8WBuAMLpJtrM5nF5w96Qt7DSLz kZudbVBOVyJoh5TtVCjRvPsO49kJRzbSUMCensnUqFiHbDC8CMfBzwiqr2sZ8eWp fEEPU79jIy8XNpRoQgqTFyPZw7oPxllfwEyc10d5Ae4jutshPxlC8jWuAhCy5Wt8 AgWjGZnZqG88YXKSLWOL9iXKfW+4gg2iPDcj2DrZpYAZa3FWWv36GMmp0nhGGhmL UHvkE4P3ds/ELNENsoBWx88HiQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFH4PwNve kXrFg2SRVPZDSNZ4dL5BMB8GA1UdIwQYMBaAFGOimr2H9KH+VcvyoPQJdQrDSsI1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0RCMy85MzA1RDJFMDgy QUYxMUVFQkVDNTk3NTlDNEY5QUUwMi9ZNkthdllmMG9mNVZ5X0tnOUFsMUNzTkt3 alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k2S2F2WWYwb2Y1VnlfS2c5QWwxQ3NOS3dqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RENEQjMvOTMwNUQyRTA4MkFGMTFFRUJFQzU5NzU5QzRGOUFFMDIvQTRCODlDNTA4 MkIxMTFFRUI0MjcxMjVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnHWgDBAFn+iowDQYJKoZIhvcNAQELBQADggEBAC6Lq3Y8 TEYljK46cCAEKPPbSQ8RGNpmDA/FX/IOc81XrjO++gTDePecYK4WxFDkjF2HcE6+ 070iUsbPb27bwanDhxDUuszeXCggPmj/4H7cB5eOGimTVbZMskSJLVGI+0O8aBuZ e1qM+P88WRgdewHREYxkjvihNx/fxZuntdWdIwR+VFVgWFpD5UabW3olEi6h/S4m eJ+Sh5xEshEtNdmqN2hMNzxO6hLkSOyH2XhR9IYFWJUeni0LRg//yIfXZ3Hvm0aS ULWhiGdU/XdD0V1RwmwoFe/3KS278xDCX7bPtS8AC06rgfDsYKkYrdCSuW4iJfco pWp/fscVLcAYHi8= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:25 2024 by rpki-client on console-ams.rpki-client.org