$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/F1E9B236718E11EEAF67DB48C4F9AE02.roa File: F1E9B236718E11EEAF67DB48C4F9AE02.roa (raw, json) Hash identifier: 1MgG7WTwswH0kCn616eOpfwXJOyuod5SbIGbahzjBCY= Subject key identifier: 4F:57:AA:0E:B9:47:3B:D0:2B:C4:30:F2:2E:2E:39:13:22:CF:8B:88 Certificate issuer: /CN=A91E8D07/serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B Certificate serial: CC Authority key identifier: 73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/F1E9B236718E11EEAF67DB48C4F9AE02.roa Signing time: Fri 15 Nov 2024 03:47:37 +0000 ROA not before: Fri 15 Nov 2024 03:47:37 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 151981 IP address blocks: 103.67.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8D07/serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B Validity Not Before: Nov 15 03:47:37 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6736c459-e63d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c5:04:cb:84:0c:f7:61:48:88:99:49:8d:4b: 3e:34:c4:18:6b:c0:ac:f1:65:25:49:d9:9b:81:5b: 39:58:fd:f1:7b:c1:ee:97:f4:5b:bc:aa:6a:cc:80: 7e:99:e1:6a:a3:69:01:c7:8e:27:7a:48:09:2e:5a: 4a:3f:e1:3e:56:62:b8:e0:8e:55:53:14:2d:7b:93: 3a:c6:f2:d6:38:be:a9:a7:e9:b4:08:be:65:be:91: f5:cc:cf:3e:75:7c:07:8e:3c:d7:63:45:21:1f:04: 73:ad:20:71:1a:6e:95:54:0a:6c:5e:b9:26:91:ee: 33:b3:72:2f:4d:5a:81:a7:35:18:31:f3:da:8d:e8: 46:3c:a1:13:ba:f0:7d:a3:1f:99:80:4b:e9:fc:10: 94:fd:85:3b:89:a5:79:31:d0:58:38:d5:ae:4d:25: c9:a9:00:8a:40:f7:db:3e:bd:48:5a:4c:27:b2:33: 22:fc:42:fb:a8:27:f5:74:cd:fe:da:60:03:30:a2: a4:c5:1b:39:90:a3:07:b6:96:30:5a:78:27:57:f1: 9d:45:5d:34:5f:9b:87:8f:ac:4c:f9:91:e0:bc:5d: b4:7e:47:0a:a1:fc:1e:6f:e8:e3:b1:53:97:aa:80: 3d:bc:cd:2e:bf:e6:e8:59:0b:64:5d:86:77:4d:58: 23:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:57:AA:0E:B9:47:3B:D0:2B:C4:30:F2:2E:2E:39:13:22:CF:8B:88 X509v3 Authority Key Identifier: keyid:73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/F1E9B236718E11EEAF67DB48C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.67.66.0/23 Signature Algorithm: sha256WithRSAEncryption d9:a0:33:f4:b9:51:c1:96:1d:ca:f7:f1:a3:af:8a:1d:01:3a: 65:7d:80:63:c8:c9:0c:c4:7b:74:48:2a:6b:9e:89:74:54:1f: 4c:ee:8d:87:31:ea:32:5b:da:eb:37:f6:62:90:e5:9f:49:31: 38:3b:0a:e2:f2:20:a8:83:f4:4b:eb:52:bd:df:46:1f:48:8c: 7b:c6:0a:50:73:c5:0a:6e:0d:67:a6:0e:9c:94:e7:a6:64:f6: cb:2a:3d:33:0b:64:2b:55:6b:bb:da:72:26:5d:68:c2:a6:b9: bf:aa:d8:16:aa:b6:5c:e2:db:99:42:61:2c:21:ba:03:64:39: 43:56:b6:6b:05:ac:3f:7e:09:c5:36:94:65:e9:b4:99:36:c3: ff:d6:c4:65:bf:99:ae:6f:51:53:78:95:b0:fa:2f:43:2c:f8: 0e:4d:d2:c8:05:3f:2e:ef:b0:bb:a6:35:c2:41:39:7a:b0:6b: 25:8a:8c:cc:c8:a8:19:e6:f1:7d:14:6b:99:ce:0a:0b:09:6e: f4:3a:d0:29:8a:93:b2:41:54:81:fc:aa:15:f8:79:60:cf:45: c2:a9:3c:6f:34:5d:09:f6:f9:3e:fb:a9:92:53:30:17:f0:71: 90:7c:64:38:d2:b1:fa:82:a6:30:a2:93:17:92:fc:28:cb:81: 9b:13:d0:74 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThEMDcxMTAvBgNVBAUTKDczODREQzY2N0I0RDQ5QTVBQ0Q1MEE1OEI0ODkxNkEx NUFDMjYxNkIwHhcNMjQxMTE1MDM0NzM3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzM2YzQ1OS1lNjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAosUEy4QM92FIiJlJjUs+NMQYa8Cs8WUlSdmbgVs5WP3xe8Hul/RbvKpqzIB+ meFqo2kBx44nekgJLlpKP+E+VmK44I5VUxQte5M6xvLWOL6pp+m0CL5lvpH1zM8+ dXwHjjzXY0UhHwRzrSBxGm6VVApsXrkmke4zs3IvTVqBpzUYMfPajehGPKETuvB9 ox+ZgEvp/BCU/YU7iaV5MdBYONWuTSXJqQCKQPfbPr1IWkwnsjMi/EL7qCf1dM3+ 2mADMKKkxRs5kKMHtpYwWngnV/GdRV00X5uHj6xM+ZHgvF20fkcKofweb+jjsVOX qoA9vM0uv+boWQtkXYZ3TVgj1QIDAQABo4IClTCCApEwHQYDVR0OBBYEFE9Xqg65 RzvQK8Qw8i4uORMiz4uIMB8GA1UdIwQYMBaAFHOE3GZ7TUmlrNUKWLSJFqFawmFr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQwNy81MDU1NjBCNjZF N0IxMUVFQjdFOTdENUZDNEY5QUUwMi9jNFRjWm50TlNhV3MxUXBZdElrV29WckNZ V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M0VGNabnROU2FXczFRcFl0SWtXb1ZyQ1lXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RThEMDcvNTA1NTYwQjY2RTdCMTFFRUI3RTk3RDVGQzRGOUFFMDIvRjFFOUIyMzY3 MThFMTFFRUFGNjdEQjQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnQ0IwDQYJKoZIhvcNAQELBQADggEBANmgM/S5UcGWHcr3 8aOvih0BOmV9gGPIyQzEe3RIKmueiXRUH0zujYcx6jJb2us39mKQ5Z9JMTg7CuLy IKiD9EvrUr3fRh9IjHvGClBzxQpuDWemDpyU56Zk9ssqPTMLZCtVa7vaciZdaMKm ub+q2Baqtlzi25lCYSwhugNkOUNWtmsFrD9+CcU2lGXptJk2w//WxGW/ma5vUVN4 lbD6L0Ms+A5N0sgFPy7vsLumNcJBOXqwayWKjMzIqBnm8X0Ua5nOCgsJbvQ60CmK k7JBVIH8qhX4eWDPRcKpPG80XQn2+T77qZJTMBfwcZB8ZDjSsfqCpjCikxeS/CjL gZsT0HQ= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:26 2024 by rpki-client on console-ams.rpki-client.org