$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/F76D8A5C170D11EDA7EC2F87C4F9AE02.roa File: F76D8A5C170D11EDA7EC2F87C4F9AE02.roa (raw, json) Hash identifier: bEQWXluQGkjHtzXhhM0LUOXQhLNvUEvMyEXkpICCpAQ= Subject key identifier: C1:83:8E:2C:91:DF:A8:AE:00:56:0A:F2:74:99:A9:D5:79:96:40:6D Certificate issuer: /CN=A91E9406/serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474 Certificate serial: 01F5 Authority key identifier: E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/F76D8A5C170D11EDA7EC2F87C4F9AE02.roa Signing time: Sun 27 Oct 2024 02:07:47 +0000 ROA not before: Sun 27 Oct 2024 02:07:47 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 138213 IP address blocks: 103.122.100.0/23 maxlen: 23 103.122.100.0/24 maxlen: 24 103.122.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:37:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9406/serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474 Validity Not Before: Oct 27 02:07:47 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=671da073-17d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d5:5c:29:6b:61:a9:00:91:8d:8f:e1:27:11: 8c:f9:2f:eb:a9:6d:53:03:7e:93:c8:fb:99:50:8f: 83:8d:df:e6:aa:c9:d3:59:f2:7a:d8:6b:69:e8:08: 25:38:df:a6:b4:96:7e:19:19:ad:78:f7:7d:8b:8d: 59:e0:17:12:2c:76:8b:1f:d7:40:08:fc:10:08:e3: 7f:9b:f8:0f:89:ed:df:66:47:0a:9e:47:2a:87:63: b7:1f:90:1e:cb:25:82:9c:75:b9:f1:a5:58:77:06: 6e:8f:ae:8e:59:d9:55:36:85:65:2a:1b:cd:38:25: 29:4f:1b:30:20:9d:b1:98:6f:4f:a2:1e:ae:f5:40: f5:15:f0:24:9b:68:dc:df:19:3b:3e:29:1f:25:d3: f4:df:a0:e0:bd:23:bb:fd:fa:ae:a8:57:69:42:d4: 9a:b7:8a:33:59:46:83:b4:d8:88:5a:12:5b:83:9c: 49:c3:01:56:df:6c:6b:be:b5:65:b1:18:52:b4:c6: 7f:37:8e:a1:fc:87:80:99:36:1a:c4:0e:b9:3e:2d: 11:b9:ff:a5:1a:47:99:09:48:74:94:2a:5c:23:eb: 8d:2d:bd:bf:5d:bb:11:49:b1:19:f3:9b:07:c8:e7: d9:68:af:f6:88:4b:c9:1a:7c:65:9c:22:67:cf:fe: 52:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:83:8E:2C:91:DF:A8:AE:00:56:0A:F2:74:99:A9:D5:79:96:40:6D X509v3 Authority Key Identifier: keyid:E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/F76D8A5C170D11EDA7EC2F87C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.122.100.0/23 Signature Algorithm: sha256WithRSAEncryption 47:f4:e6:89:ba:e7:13:d0:7f:e7:08:d4:70:08:99:a1:f4:1d: 27:f0:2e:01:7f:7f:92:8b:e9:65:a9:e6:93:6b:99:48:6f:c8: f7:8b:96:be:b3:4a:9f:6a:4a:5b:27:8f:0a:eb:98:6e:c5:d6: ec:70:ca:23:c2:eb:08:b0:72:41:8e:ec:de:ec:fb:50:e0:65: 79:65:86:0a:d0:0e:5a:a7:1b:a1:23:38:6f:bf:37:55:2c:02: c4:0e:d1:7a:c5:43:af:b1:b3:b6:2a:da:52:48:e9:94:db:d5: 4c:12:20:30:f1:6a:29:64:9b:84:c5:33:1b:08:63:5f:38:2b: 53:47:4d:36:c3:75:bb:65:c6:7c:1e:25:14:68:bf:7d:4d:82: b3:e2:0c:f1:d3:6c:fc:9f:0d:b1:97:e8:94:62:0a:11:2d:8f: b4:67:66:fc:aa:bf:b2:65:c3:d3:22:ab:99:27:65:95:a2:bd: 7f:f9:9a:28:0c:ad:ed:df:29:79:91:96:9b:31:8b:f8:fb:cf: 71:af:d0:ee:8c:41:a1:f6:63:00:c0:ee:ca:e8:33:9a:30:83: 3c:66:78:19:05:65:a3:45:59:38:40:d5:01:c7:3b:8c:ec:fc: 21:5f:2a:38:2f:9c:b4:36:3f:3f:9a:35:69:81:9a:18:41:96: 0b:e1:fc:10 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0MDYxMTAvBgNVBAUTKEUzNDM4NDA1NDc2NDAyQTNBQThGOTg3QzNBRkEwNjkw RDk2RUQ0NzQwHhcNMjQxMDI3MDIwNzQ3WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFkYTA3My0xN2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtVcKWthqQCRjY/hJxGM+S/rqW1TA36TyPuZUI+Djd/mqsnTWfJ62Gtp6Agl ON+mtJZ+GRmtePd9i41Z4BcSLHaLH9dACPwQCON/m/gPie3fZkcKnkcqh2O3H5Ae yyWCnHW58aVYdwZuj66OWdlVNoVlKhvNOCUpTxswIJ2xmG9Poh6u9UD1FfAkm2jc 3xk7PikfJdP036DgvSO7/fquqFdpQtSat4ozWUaDtNiIWhJbg5xJwwFW32xrvrVl sRhStMZ/N46h/IeAmTYaxA65Pi0Ruf+lGkeZCUh0lCpcI+uNLb2/XbsRSbEZ85sH yOfZaK/2iEvJGnxlnCJnz/5SHQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMGDjiyR 36iuAFYK8nSZqdV5lkBtMB8GA1UdIwQYMBaAFONDhAVHZAKjqo+YfDr6BpDZbtR0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTQwNi85ODY4QTlGMDE3 MDkxMUVEQjZGODA4NjhDNEY5QUUwMi80ME9FQlVka0FxT3FqNWg4T3ZvR2tObHUx SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwT0VCVWRrQXFPcWo1aDhPdm9Ha05sdTFIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTk0MDYvOTg2OEE5RjAxNzA5MTFFREI2RjgwODY4QzRGOUFFMDIvRjc2RDhBNUMx NzBEMTFFREE3RUMyRjg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnemQwDQYJKoZIhvcNAQELBQADggEBAEf05om65xPQf+cI 1HAImaH0HSfwLgF/f5KL6WWp5pNrmUhvyPeLlr6zSp9qSlsnjwrrmG7F1uxwyiPC 6wiwckGO7N7s+1DgZXllhgrQDlqnG6EjOG+/N1UsAsQO0XrFQ6+xs7Yq2lJI6ZTb 1UwSIDDxailkm4TFMxsIY184K1NHTTbDdbtlxnweJRRov31NgrPiDPHTbPyfDbGX 6JRiChEtj7RnZvyqv7Jlw9Miq5knZZWivX/5migMre3fKXmRlpsxi/j7z3Gv0O6M QaH2YwDA7sroM5owgzxmeBkFZaNFWThA1QHHO4zs/CFfKjgvnLQ2Pz+aNWmBmhhB lgvh/BA= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:57 2024 by rpki-client on console-ams.rpki-client.org