$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/B506FD1C4E3111EFB475160AC4F9AE02.roa File: B506FD1C4E3111EFB475160AC4F9AE02.roa (raw, json) Hash identifier: 3Y8YNTUtM64JjJzdKi/a0v353WDe5LgOOrUSpVRX7eM= Subject key identifier: B6:A2:7F:5E:35:BE:E2:5F:EF:21:EC:B1:C8:82:AB:F7:95:28:B5:56 Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Certificate serial: 0240 Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/B506FD1C4E3111EFB475160AC4F9AE02.roa Signing time: Tue 30 Jul 2024 18:06:52 +0000 ROA not before: Tue 30 Jul 2024 18:06:52 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 14618 IP address blocks: 103.26.8.0/24 maxlen: 24 103.26.9.0/24 maxlen: 24 103.26.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Oct 2024 01:39:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 576 (0x240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Validity Not Before: Jul 30 18:06:52 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66a92bbc-a268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:72:b4:be:42:10:76:f8:b9:67:d4:f0:4a:e6: 5a:76:d9:da:b9:f2:3f:87:50:1a:c8:1f:88:20:f0: 73:ed:46:24:96:c2:7b:8c:20:43:05:8a:26:56:c9: e5:07:f9:c0:1d:66:4b:07:94:ee:26:1e:8d:3d:a8: 6f:41:a4:4e:72:ba:ed:95:41:1d:27:f0:ca:5b:ff: 20:a0:06:d0:b5:95:25:1a:3c:4d:06:1b:00:07:36: 08:13:1c:b6:8e:50:d8:8b:9c:e9:64:15:36:3f:8a: 0c:08:57:2e:0d:10:db:ed:c4:9d:55:98:05:fe:e5: 20:ea:38:7c:3c:8c:fe:87:4f:a7:ba:06:ff:1a:0c: 32:6e:39:22:4a:05:ea:17:6b:d7:20:c9:34:00:ee: b3:f0:c4:ab:74:9a:ec:8a:20:aa:22:a0:bb:20:a0: 98:e3:47:86:5f:32:c7:a7:30:18:25:71:b4:aa:64: 6b:32:a5:ba:da:4b:7f:b0:55:61:40:2a:2d:7b:a7: 6d:86:51:a2:b6:8f:95:57:4d:12:66:65:3c:b2:51: 20:66:94:b9:d8:ae:93:c5:31:05:d7:41:40:1a:e3: fa:06:3c:3a:31:54:32:36:ca:7b:a1:1a:7c:af:d4: 82:42:be:c6:8e:93:1a:4c:c8:5d:0d:56:56:8e:0a: cf:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A2:7F:5E:35:BE:E2:5F:EF:21:EC:B1:C8:82:AB:F7:95:28:B5:56 X509v3 Authority Key Identifier: keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/B506FD1C4E3111EFB475160AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.26.8.0/23 103.26.11.0/24 Signature Algorithm: sha256WithRSAEncryption b1:dd:a1:f5:39:e5:78:46:00:61:ae:db:38:e3:7f:83:26:28: 42:c9:25:e3:f3:d7:14:cb:f5:b0:bc:1e:f0:56:1b:45:d6:7e: 48:3d:3e:e6:fe:12:a7:ff:d2:3b:8f:e9:64:f8:6f:d6:37:97: a6:ab:1c:e8:8a:fb:42:f1:57:31:39:fc:b3:a4:ec:2f:78:8a: d7:c3:39:ab:f5:bf:b3:8a:c3:30:8d:e9:bf:d4:38:18:b3:d5: 63:89:ed:38:5e:7f:23:e0:a9:36:3a:31:a6:de:06:91:9c:8f: 42:d8:a2:14:5b:b2:0d:37:0f:3a:8d:00:fa:7a:2b:00:f3:e9: 89:15:ff:47:fe:8d:83:b2:b0:da:a7:79:72:1d:c8:34:8a:73: 9c:fa:3c:aa:2e:d1:0c:fa:61:61:ed:1f:d5:ed:f2:cc:fd:90: 22:49:5c:d6:d0:f1:da:b4:33:51:27:58:30:c2:9e:d5:5a:8e: 98:38:55:ad:c4:2b:98:f8:18:08:b9:c3:8d:1a:a9:5b:f9:57: 26:6c:aa:e2:e3:8e:42:ec:c5:22:53:80:5f:45:8b:3f:a4:5d: af:d3:fc:c4:f6:93:a2:fc:59:13:b8:42:1f:f6:58:3a:99:ab: ca:a9:37:e4:60:4d:5a:10:b8:ed:47:54:37:17:72:84:b1:09: 25:62:f7:3d -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE QUVGNDEzOTYwHhcNMjQwNzMwMTgwNjUyWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmE5MmJiYy1hMjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3K0vkIQdvi5Z9TwSuZadtnaufI/h1AayB+IIPBz7UYklsJ7jCBDBYomVsnl B/nAHWZLB5TuJh6NPahvQaROcrrtlUEdJ/DKW/8goAbQtZUlGjxNBhsABzYIExy2 jlDYi5zpZBU2P4oMCFcuDRDb7cSdVZgF/uUg6jh8PIz+h0+nugb/GgwybjkiSgXq F2vXIMk0AO6z8MSrdJrsiiCqIqC7IKCY40eGXzLHpzAYJXG0qmRrMqW62kt/sFVh QCote6dthlGito+VV00SZmU8slEgZpS52K6TxTEF10FAGuP6Bjw6MVQyNsp7oRp8 r9SCQr7GjpMaTMhdDVZWjgrPEQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLaif141 vuJf7yHssciCq/eVKLVWMB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTRFMzIvNzIwOTU5RkMwMUMwMTFFREJEN0M2RjU4QzRGOUFFMDIvQjUwNkZEMUM0 RTMxMTFFRkI0NzUxNjBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnGggDBABnGgswDQYJKoZIhvcNAQELBQADggEBALHdofU5 5XhGAGGu2zjjf4MmKELJJePz1xTL9bC8HvBWG0XWfkg9Pub+Eqf/0juP6WT4b9Y3 l6arHOiK+0LxVzE5/LOk7C94itfDOav1v7OKwzCN6b/UOBiz1WOJ7ThefyPgqTY6 MabeBpGcj0LYohRbsg03DzqNAPp6KwDz6YkV/0f+jYOysNqneXIdyDSKc5z6PKou 0Qz6YWHtH9Xt8sz9kCJJXNbQ8dq0M1EnWDDCntVajpg4Va3EK5j4GAi5w40aqVv5 VyZsquLjjkLsxSJTgF9Fiz+kXa/T/MT2k6L8WRO4Qh/2WDqZq8qpN+RgTVoQuO1H VDcXcoSxCSVi9z0= -----END CERTIFICATE-----Generated at Mon Oct 21 04:40:56 2024 by rpki-client on console-ams.rpki-client.org