$ rpki-client -vvf rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/A1021498C53311E7B0B0744BC4F9AE02.roa File: A1021498C53311E7B0B0744BC4F9AE02.roa (raw, json) Hash identifier: Ns6MCGMpSR+zeyD0qeQ8GuU0GoV9G94RijEmcRmZDOc= Subject key identifier: 7B:3E:E5:21:DC:92:80:4E:7C:6D:30:4D:C8:D2:46:FE:77:F6:D5:0E Certificate issuer: /CN=A91E116E/serialNumber=D004CCFAE6F07A44BDEFDE937806ADB9C3329FFA Certificate serial: 171D Authority key identifier: D0:04:CC:FA:E6:F0:7A:44:BD:EF:DE:93:78:06:AD:B9:C3:32:9F:FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ATM-ubwekS9796TeAatucMyn_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/A1021498C53311E7B0B0744BC4F9AE02.roa Signing time: Sun 16 Jun 2024 17:28:10 +0000 ROA not before: Sun 16 Jun 2024 17:28:10 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 135425 IP address blocks: 103.90.58.0/23 maxlen: 24 103.112.200.0/22 maxlen: 24 103.219.120.0/22 maxlen: 24 103.219.144.0/23 maxlen: 24 2405:6480::/32 maxlen: 32 2405:6680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/0ATM-ubwekS9796TeAatucMyn_o.crl rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/0ATM-ubwekS9796TeAatucMyn_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ATM-ubwekS9796TeAatucMyn_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:36:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5917 (0x171d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E116E/serialNumber=D004CCFAE6F07A44BDEFDE937806ADB9C3329FFA Validity Not Before: Jun 16 17:28:10 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=666f20aa-06e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:1d:f4:0d:72:b7:cf:70:43:c3:a4:87:65:1c: f3:de:e2:bc:52:dc:7d:c0:c4:74:de:a1:04:9f:0e: 31:61:e2:04:96:35:62:21:93:4c:94:59:06:8f:94: 88:9f:7b:d1:61:f9:4e:0f:1a:f2:39:5e:ab:d9:2e: bb:79:d6:a8:ed:ba:b9:3f:df:6c:0d:7e:f6:3d:16: 69:e3:68:d7:ac:06:19:8b:b4:e7:d5:92:a5:0f:85: 29:67:7f:68:c2:47:af:63:54:c9:89:05:3f:a4:b0: 28:3f:0c:be:41:a4:7a:49:f7:1d:af:12:18:95:0e: f7:a2:22:3e:51:e4:ff:67:f6:fa:9c:16:5f:a8:3b: 89:eb:5b:8b:72:12:55:53:a3:3f:dd:94:8d:c6:ee: a6:6f:17:aa:8d:2c:47:c0:25:39:66:be:f9:00:5f: f7:d4:13:b6:a7:40:63:2f:3c:f0:a5:5a:52:5d:c4: 45:92:e2:92:19:62:35:69:4c:2c:29:91:ab:6a:eb: dc:04:ae:b2:a5:ed:e7:bc:f0:49:d1:a3:cf:77:2f: 8c:3f:85:69:d2:93:be:78:af:0a:79:16:db:53:2f: f9:4a:73:89:95:db:12:9a:5f:52:79:7d:c1:f3:ce: 27:ee:f6:44:88:af:75:01:90:09:47:cc:57:e5:31: ae:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:3E:E5:21:DC:92:80:4E:7C:6D:30:4D:C8:D2:46:FE:77:F6:D5:0E X509v3 Authority Key Identifier: keyid:D0:04:CC:FA:E6:F0:7A:44:BD:EF:DE:93:78:06:AD:B9:C3:32:9F:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/0ATM-ubwekS9796TeAatucMyn_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ATM-ubwekS9796TeAatucMyn_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/A1021498C53311E7B0B0744BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.90.58.0/23 103.112.200.0/22 103.219.120.0/22 103.219.144.0/23 IPv6: 2405:6480::/32 2405:6680::/32 Signature Algorithm: sha256WithRSAEncryption 34:29:d4:1a:a2:48:f6:14:f3:35:61:ad:de:a7:48:13:61:31: 9b:cc:43:6c:41:fb:20:48:bd:23:0f:88:a2:28:47:64:f1:e1: d4:78:6d:df:d6:80:81:e3:a6:78:09:94:63:e4:08:70:2f:0d: 28:3e:0a:07:7e:ca:ed:43:ba:d8:f4:49:e0:69:57:a5:0f:5c: 2e:c7:98:1e:62:88:2d:5f:c3:71:65:15:e9:5c:54:35:0b:69: bc:98:a6:43:9c:ba:f6:a7:00:b4:ef:d4:37:67:20:9d:50:dc: a9:21:b3:bf:78:1d:99:56:6e:1e:9a:c7:09:7f:c3:d2:25:ac: 9b:74:0c:fe:da:63:4f:cd:85:ea:18:07:e6:e0:7a:cf:5f:3b: 08:ef:8b:9e:60:b6:0f:c5:65:c2:40:07:c0:98:c2:9d:48:bd: 71:51:16:4f:35:7b:db:61:80:9f:c5:48:31:86:ad:b2:d7:92: 2f:40:f4:23:f2:3f:3d:15:a4:a6:3c:de:09:54:80:68:fd:db: f2:9c:6c:52:f1:fd:7a:a4:39:22:01:3d:0d:9d:e4:88:66:64: 48:f5:82:23:a7:1d:d0:ff:7a:09:5f:6a:c1:a5:eb:fc:d8:00: 70:13:9d:64:fd:e5:f8:39:2b:0f:b7:13:58:1d:17:d4:9f:bd: a2:5f:fb:1e -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgICFx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTExNkUxMTAvBgNVBAUTKEQwMDRDQ0ZBRTZGMDdBNDRCREVGREU5Mzc4MDZBREI5 QzMzMjlGRkEwHhcNMjQwNjE2MTcyODEwWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjZmMjBhYS0wNmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6R30DXK3z3BDw6SHZRzz3uK8Utx9wMR03qEEnw4xYeIEljViIZNMlFkGj5SI n3vRYflODxryOV6r2S67edao7bq5P99sDX72PRZp42jXrAYZi7Tn1ZKlD4UpZ39o wkevY1TJiQU/pLAoPwy+QaR6SfcdrxIYlQ73oiI+UeT/Z/b6nBZfqDuJ61uLchJV U6M/3ZSNxu6mbxeqjSxHwCU5Zr75AF/31BO2p0BjLzzwpVpSXcRFkuKSGWI1aUws KZGrauvcBK6ype3nvPBJ0aPPdy+MP4Vp0pO+eK8KeRbbUy/5SnOJldsSml9SeX3B 884n7vZEiK91AZAJR8xX5TGuNwIDAQABo4ICvTCCArkwHQYDVR0OBBYEFHs+5SHc koBOfG0wTcjSRv539tUOMB8GA1UdIwQYMBaAFNAEzPrm8HpEve/ek3gGrbnDMp/6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTE2RS83NDU2Qzc1QUM1 MzIxMUU3OTIxRTNFNDlDNEY5QUUwMi8wQVRNLXVid2VrUzk3OTZUZUFhdHVjTXlu X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBBVE0tdWJ3ZWtTOTc5NlRlQWF0dWNNeW5fby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTExNkUvNzQ1NkM3NUFDNTMyMTFFNzkyMUUzRTQ5QzRGOUFFMDIvQTEwMjE0OThD NTMzMTFFN0IwQjA3NDRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRwYIKwYBBQUHAQcBAf8E ODA2MB4EAgABMBgDBAFnWjoDBAJncMgDBAJn23gDBAFn25AwFAQCAAIwDgMFACQF ZIADBQAkBWaAMA0GCSqGSIb3DQEBCwUAA4IBAQA0KdQaokj2FPM1Ya3ep0gTYTGb zENsQfsgSL0jD4iiKEdk8eHUeG3f1oCB46Z4CZRj5AhwLw0oPgoHfsrtQ7rY9Eng aVelD1wux5geYogtX8NxZRXpXFQ1C2m8mKZDnLr2pwC079Q3ZyCdUNypIbO/eB2Z Vm4emscJf8PSJaybdAz+2mNPzYXqGAfm4HrPXzsI74ueYLYPxWXCQAfAmMKdSL1x URZPNXvbYYCfxUgxhq2y15IvQPQj8j89FaSmPN4JVIBo/dvynGxS8f16pDkiAT0N neSIZmRI9YIjpx3Q/3oJX2rBpev82ABwE51k/eX4OSsPtxNYHRfUn72iX/se -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:19 2024 by rpki-client on console-ams.rpki-client.org