$ rpki-client -vvf rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/BAA89C8E95DC11EEB90BC245C4F9AE02.roa File: BAA89C8E95DC11EEB90BC245C4F9AE02.roa (raw, json) Hash identifier: iRNgvVF92EWl248e8CqJQ/KNDDZhjsW8jAKZIzC6+60= Subject key identifier: E8:5A:DC:8C:2E:46:3A:28:3C:4A:1B:68:9C:8E:C0:0D:AF:4A:A1:C4 Certificate issuer: /CN=A91E923A/serialNumber=6638A604260FCCF2E9D8B20C1792ECA15DC76D5C Certificate serial: 1C Authority key identifier: 66:38:A6:04:26:0F:CC:F2:E9:D8:B2:0C:17:92:EC:A1:5D:C7:6D:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/BAA89C8E95DC11EEB90BC245C4F9AE02.roa Signing time: Fri 08 Dec 2023 15:28:37 +0000 ROA not before: Fri 08 Dec 2023 15:28:37 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 137871 IP address blocks: 103.139.178.0/24 maxlen: 24 103.139.179.0/24 maxlen: 24 2406:1dc0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.crl rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Dec 2023 07:14:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E923A/serialNumber=6638A604260FCCF2E9D8B20C1792ECA15DC76D5C Validity Not Before: Dec 8 15:28:37 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=65733625-c0b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e4:af:97:fe:c6:6d:d6:b0:83:97:2e:47:50: e6:b0:fa:e1:f2:af:e8:b7:73:82:a5:7b:84:3c:96: 6a:a7:1b:5f:2d:6a:b8:86:40:38:a1:56:a5:77:6d: d6:d8:0c:20:75:21:9e:34:b3:e0:62:ef:80:bc:1c: fa:a4:57:93:ca:b0:39:b2:16:e0:a8:64:0e:41:18: 76:f3:ad:20:6e:fb:14:e9:a9:ba:4a:52:fa:1c:92: d9:e2:a2:ae:72:a6:4e:06:6e:4e:11:de:1e:5f:7e: a0:34:31:20:91:b8:d5:cb:09:fd:45:4d:6d:ba:4d: f6:28:db:44:3c:41:03:04:02:a3:54:17:f3:fd:8f: 7a:1d:d7:77:71:49:63:71:61:82:94:32:63:13:15: 96:b4:26:9d:c0:83:14:77:12:97:f1:de:9f:47:3b: 10:7b:85:45:af:64:9b:71:5c:98:d6:ba:23:0c:83: f1:a9:3a:42:e6:81:09:b8:17:6b:b8:52:41:d7:12: 68:d2:6e:2e:c4:81:4f:90:b4:95:86:d2:6d:62:a2: a8:63:af:2c:cd:36:15:d1:16:dd:ac:a0:38:cb:5b: 70:20:34:15:99:4a:0c:c7:90:d1:96:5d:ef:fc:85: 88:b5:46:7d:a8:89:da:bd:2d:e8:0f:52:0b:3d:d0: 3c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:5A:DC:8C:2E:46:3A:28:3C:4A:1B:68:9C:8E:C0:0D:AF:4A:A1:C4 X509v3 Authority Key Identifier: keyid:66:38:A6:04:26:0F:CC:F2:E9:D8:B2:0C:17:92:EC:A1:5D:C7:6D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/BAA89C8E95DC11EEB90BC245C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.139.178.0/23 IPv6: 2406:1dc0::/32 Signature Algorithm: sha256WithRSAEncryption 53:9b:0b:a7:ac:fb:b8:98:70:47:2a:be:a0:9f:67:3a:0c:30: 91:8f:e0:16:a5:dc:74:0c:58:12:7f:be:d7:f6:ad:66:e6:41: 4e:ca:52:97:7e:58:a4:2a:8e:0b:bc:1c:61:8e:20:58:c6:87: 2b:a9:32:90:ef:06:c2:b3:0b:2c:1c:1e:e4:21:be:06:d1:34: 12:18:be:9e:97:57:61:e0:f3:8f:d3:df:00:85:3c:f5:0e:06: ac:b4:c0:dc:77:cf:93:85:29:60:80:ed:a2:e0:c0:d7:9b:a9: fc:20:b9:d6:dd:5b:df:cf:06:08:d1:f3:86:0b:1b:67:08:3f: 5d:f6:64:e9:d8:09:13:29:7c:9e:e7:2d:62:d5:fa:e8:b7:c5: 8e:d5:56:af:ab:4f:72:29:f3:5c:96:df:6c:54:06:67:a4:7c: 09:e7:e5:6f:d7:37:d8:84:2a:4a:91:37:a8:26:9e:21:64:e8: da:b9:50:65:f9:e1:6e:b3:e0:b8:42:55:35:d2:b0:05:51:d4: 13:da:3d:b0:22:51:b8:03:7d:cf:01:6e:10:da:96:b4:ce:07: cf:57:ac:67:11:92:d9:7f:e1:47:0b:60:98:de:82:6f:b0:8b: cb:af:06:5c:14:31:86:23:b0:6d:c9:64:d1:7a:cb:9e:32:70: e1:d9:6b:8e -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OTIzQTExMC8GA1UEBRMoNjYzOEE2MDQyNjBGQ0NGMkU5RDhCMjBDMTc5MkVDQTE1 REM3NkQ1QzAeFw0yMzEyMDgxNTI4MzdaFw0yNDA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1NzMzNjI1LWMwYjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+5K+X/sZt1rCDly5HUOaw+uHyr+i3c4Kle4Q8lmqnG18tariGQDihVqV3bdbY DCB1IZ40s+Bi74C8HPqkV5PKsDmyFuCoZA5BGHbzrSBu+xTpqbpKUvocktnioq5y pk4Gbk4R3h5ffqA0MSCRuNXLCf1FTW26TfYo20Q8QQMEAqNUF/P9j3od13dxSWNx YYKUMmMTFZa0Jp3AgxR3Epfx3p9HOxB7hUWvZJtxXJjWuiMMg/GpOkLmgQm4F2u4 UkHXEmjSbi7EgU+QtJWG0m1ioqhjryzNNhXRFt2soDjLW3AgNBWZSgzHkNGWXe/8 hYi1Rn2oidq9LegPUgs90DwZAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQU6FrcjC5G Oig8ShtonI7ADa9KocQwHwYDVR0jBBgwFoAUZjimBCYPzPLp2LIMF5LsoV3HbVww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5MjNBL0M5QjNDQzU0RUMx MTExRTk4RTBGODY0N0M0RjlBRTAyL1pqaW1CQ1lQelBMcDJMSU1GNUxzb1YzSGJW dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWmppbUJDWVB6UExwMkxJTUY1THNvVjNIYlZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTIzQS9DOUIzQ0M1NEVDMTExMUU5OEUwRjg2NDdDNEY5QUUwMi9CQUE4OUM4RTk1 REMxMUVFQjkwQkMyNDVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAWeLsjANBAIAAjAHAwUAJAYdwDANBgkqhkiG9w0BAQsFAAOC AQEAU5sLp6z7uJhwRyq+oJ9nOgwwkY/gFqXcdAxYEn++1/atZuZBTspSl35YpCqO C7wcYY4gWMaHK6kykO8GwrMLLBwe5CG+BtE0Ehi+npdXYeDzj9PfAIU89Q4GrLTA 3HfPk4UpYIDtouDA15up/CC51t1b388GCNHzhgsbZwg/XfZk6dgJEyl8nuctYtX6 6LfFjtVWr6tPcinzXJbfbFQGZ6R8Ceflb9c32IQqSpE3qCaeIWTo2rlQZfnhbrPg uEJVNdKwBVHUE9o9sCJRuAN9zwFuENqWtM4Hz1esZxGS2X/hRwtgmN6Cb7CLy68G XBQxhiOwbclk0XrLnjJw4dlrjg== -----END CERTIFICATE-----Generated at Mon Dec 11 08:33:28 2023 by rpki-client on console-ams.rpki-client.org