$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/9F7197668A6B11EF8AEFC222C4F9AE02.roa File: 9F7197668A6B11EF8AEFC222C4F9AE02.roa (raw, json) Hash identifier: R6Lp1fgyPDXkSO/i9acilUL+p3HmjmzVmfYhojSO7HE= Subject key identifier: 05:BC:CA:AD:73:D0:14:11:51:C6:D6:77:EC:DD:0E:E4:26:5B:C9:C8 Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F Certificate serial: 354D Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/9F7197668A6B11EF8AEFC222C4F9AE02.roa Signing time: Mon 14 Oct 2024 20:33:51 +0000 ROA not before: Mon 14 Oct 2024 20:33:51 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 834 IP address blocks: 103.68.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13645 (0x354d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F Validity Not Before: Oct 14 20:33:51 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=670d802f-819b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ba:4a:ec:2e:07:49:a5:e7:12:d7:18:68:10: f0:fb:7a:8b:8c:b0:fd:bb:75:30:29:10:f8:39:5e: 18:e7:3f:16:bd:00:d1:e1:53:fd:15:0a:b8:1b:2e: 01:24:b1:e6:b0:87:3d:7e:ff:9e:5c:90:55:fc:86: 62:f9:8c:26:f1:32:f6:88:c3:b2:53:0c:94:76:58: d3:68:c6:83:29:6d:2e:2b:a7:bf:70:d4:c4:42:ae: 29:81:92:c7:3e:ec:af:d4:d2:df:ee:5f:28:1b:11: e9:f6:c1:ac:80:e8:34:2c:96:87:d9:aa:f3:a3:5e: c1:b0:ed:42:8a:69:3f:2d:a8:d0:22:71:c1:11:48: c5:40:5a:53:b7:b5:9a:ed:ef:a2:51:d9:30:65:c3: 78:0b:59:13:bd:5e:d8:d5:90:26:8f:f6:5b:c5:a9: f9:20:6e:a5:aa:66:2c:c3:94:a9:7a:be:91:83:3e: 41:ce:84:c3:e6:ee:4f:ae:75:82:5b:92:7a:50:d0: df:50:25:4c:da:9f:63:96:8d:71:28:19:a4:81:5a: ea:45:12:ab:e9:93:35:3a:90:07:26:7f:25:19:1b: 53:b1:69:d6:21:50:c2:36:ec:3a:89:2c:b2:ab:4a: be:2c:9d:eb:26:e4:59:b8:59:eb:89:4d:3c:4b:a0: d7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:BC:CA:AD:73:D0:14:11:51:C6:D6:77:EC:DD:0E:E4:26:5B:C9:C8 X509v3 Authority Key Identifier: keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/9F7197668A6B11EF8AEFC222C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.68.120.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:7c:04:4c:e7:32:00:31:72:83:ab:a7:46:23:60:c0:50:83: 8a:b7:a4:c4:8a:10:f4:a5:60:b5:5e:48:52:74:a2:4a:6b:fa: f9:11:46:3e:09:2b:0c:b1:d7:36:d4:3b:5a:b1:00:c3:9b:7a: 09:5a:a3:9c:4a:65:bf:cf:51:27:ec:56:4e:75:41:3c:2b:3a: 55:03:d3:7a:e2:8e:f1:69:19:51:9c:2a:00:af:91:16:9c:f2: b8:ee:04:53:03:7d:a2:26:c8:0b:b9:cf:7b:99:03:ee:34:bb: 24:65:ce:e4:9f:ef:d7:69:fd:fb:d1:7f:b8:e8:28:47:5a:84: 0f:40:89:50:8b:90:31:1f:3b:af:cc:da:03:d5:d5:76:51:dd: f1:95:ff:56:d3:a6:d0:29:37:f2:2c:39:a9:67:a4:2e:42:2d: d3:34:6b:e3:3a:84:57:39:17:88:64:e3:02:3a:e9:8d:a5:ac: dd:9d:bc:bc:f6:b4:12:38:1a:4b:0e:5d:ca:2c:3d:54:b8:14: 74:ab:54:eb:4d:f0:d4:05:9b:fe:a3:d4:26:84:98:31:5e:78: 2a:73:dc:46:1c:66:5a:1d:c8:3f:fb:81:f9:08:ef:b9:0d:80: 62:4d:ca:ed:c9:2d:fa:e6:fe:8d:75:a8:d4:da:70:e5:5a:47: 22:a3:1f:dc -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDOTAxMTAvBgNVBAUTKDU4QTE5NkE3QkYwNkYyRTE2RTkwOUQyNzcxNDFCQTQ0 OTExRjFGNEYwHhcNMjQxMDE0MjAzMzUxWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzBkODAyZi04MTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0rpK7C4HSaXnEtcYaBDw+3qLjLD9u3UwKRD4OV4Y5z8WvQDR4VP9FQq4Gy4B JLHmsIc9fv+eXJBV/IZi+Ywm8TL2iMOyUwyUdljTaMaDKW0uK6e/cNTEQq4pgZLH Puyv1NLf7l8oGxHp9sGsgOg0LJaH2arzo17BsO1Cimk/LajQInHBEUjFQFpTt7Wa 7e+iUdkwZcN4C1kTvV7Y1ZAmj/Zbxan5IG6lqmYsw5Sper6Rgz5BzoTD5u5PrnWC W5J6UNDfUCVM2p9jlo1xKBmkgVrqRRKr6ZM1OpAHJn8lGRtTsWnWIVDCNuw6iSyy q0q+LJ3rJuRZuFnriU08S6DX7wIDAQABo4IClTCCApEwHQYDVR0OBBYEFAW8yq1z 0BQRUcbWd+zdDuQmW8nIMB8GA1UdIwQYMBaAFFihlqe/BvLhbpCdJ3FBukSRHx9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM5MC8yRDFCRUJFNDFE OTUxMUUyODhFNkIzRkEwOEIwMkNEMi9XS0dXcDc4Rzh1RnVrSjBuY1VHNlJKRWZI MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLR1dwNzhHOHVGdWtKMG5jVUc2UkpFZkgwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RThDOTAvMkQxQkVCRTQxRDk1MTFFMjg4RTZCM0ZBMDhCMDJDRDIvOUY3MTk3NjY4 QTZCMTFFRjhBRUZDMjIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnRHgwDQYJKoZIhvcNAQELBQADggEBAJ58BEznMgAxcoOr p0YjYMBQg4q3pMSKEPSlYLVeSFJ0okpr+vkRRj4JKwyx1zbUO1qxAMObeglao5xK Zb/PUSfsVk51QTwrOlUD03rijvFpGVGcKgCvkRac8rjuBFMDfaImyAu5z3uZA+40 uyRlzuSf79dp/fvRf7joKEdahA9AiVCLkDEfO6/M2gPV1XZR3fGV/1bTptApN/Is OalnpC5CLdM0a+M6hFc5F4hk4wI66Y2lrN2dvLz2tBI4GksOXcosPVS4FHSrVOtN 8NQFm/6j1CaEmDFeeCpz3EYcZlodyD/7gfkI77kNgGJNyu3JLfrm/o11qNTacOVa RyKjH9w= -----END CERTIFICATE-----Generated at Wed Nov 20 16:12:04 2024 by rpki-client on console-fra.rpki-client.org